[webkit-changes] [289601] trunk

Title: [289601] trunk Revision 289601 Author fpi...@apple.com Date 2022-02-10 19:58:39 -0800 (Thu, 10 Feb 2022) Log Message Unreviewed, add an alternate email address. * metadata/contributors.json: Modified Paths trunk/ChangeLog trunk/metadata/contributors.json Diff Modified:

[webkit-changes] [289590] trunk/Source

Title: [289590] trunk/Source Revision 289590 Author fpi...@apple.com Date 2022-02-10 15:49:33 -0800 (Thu, 10 Feb 2022) Log Message [libpas] jit_heap should support the segregated heap https://bugs.webkit.org/show_bug.cgi?id=235497 Reviewed by Yusuke Suzuki. Source/bmalloc: One of the

[webkit-changes] [289491] trunk/Source/bmalloc

Title: [289491] trunk/Source/bmalloc Revision 289491 Author fpi...@apple.com Date 2022-02-09 11:31:06 -0800 (Wed, 09 Feb 2022) Log Message [libpas] add documentation https://bugs.webkit.org/show_bug.cgi?id=236385 Rubber stamped by Mark Lam. * libpas/Documentation.md: Added. Modified

[webkit-changes] [288342] trunk/Source/bmalloc

Title: [288342] trunk/Source/bmalloc Revision 288342 Author fpi...@apple.com Date 2022-01-20 18:43:34 -0800 (Thu, 20 Jan 2022) Log Message [libpas] medium directory lookup should bail if begin_index is zero to catch races with expendable memory decommit (cherry pick

[webkit-changes] [287994] trunk/Source/bmalloc

Title: [287994] trunk/Source/bmalloc Revision 287994 Author fpi...@apple.com Date 2022-01-13 14:45:11 -0800 (Thu, 13 Jan 2022) Log Message [libpas] pas_segregated_page_lock_with_mode in try_lock mode should check that the page still uses the lock after the try_lock

[webkit-changes] [287991] trunk/Source/bmalloc

Title: [287991] trunk/Source/bmalloc Revision 287991 Author fpi...@apple.com Date 2022-01-13 13:12:09 -0800 (Thu, 13 Jan 2022) Log Message [libpas] add assertions that we aren't switching to a NULL lock https://bugs.webkit.org/show_bug.cgi?id=235190 Reviewed by Yusuke Suzuki. This adds

[webkit-changes] [287968] trunk/Source/bmalloc

Title: [287968] trunk/Source/bmalloc Revision 287968 Author fpi...@apple.com Date 2022-01-12 18:52:00 -0800 (Wed, 12 Jan 2022) Log Message [libpas] thread_local_cache should not be allocated in the compact heap (cherry pick 11afcedfb5968f6894379ff1a41dd449ba7745f6)

[webkit-changes] [286587] trunk/Source/bmalloc

Title: [286587] trunk/Source/bmalloc Revision 286587 Author fpi...@apple.com Date 2021-12-06 21:52:22 -0800 (Mon, 06 Dec 2021) Log Message [libpas] Clean up what the machine code looks like under LTO https://bugs.webkit.org/show_bug.cgi?id=233909 Reviewed by Yusuke Suzuki. During the

[webkit-changes] [286516] trunk/Source/bmalloc

Title: [286516] trunk/Source/bmalloc Revision 286516 Author fpi...@apple.com Date 2021-12-03 14:48:23 -0800 (Fri, 03 Dec 2021) Log Message [libpas] Bitfit allocator has a wrong assertion when a page's max_free is enough for the size of an allocation, not enough for that allocation's size

[webkit-changes] [284456] trunk/Source/WTF

Title: [284456] trunk/Source/WTF Revision 284456 Author fpi...@apple.com Date 2021-10-19 09:00:19 -0700 (Tue, 19 Oct 2021) Log Message StringBuffer should really know that strings might be 8-bit https://bugs.webkit.org/show_bug.cgi?id=231937 Reviewed by Yusuke Suzuki. We somehow forgot

[webkit-changes] [283371] trunk/Source/bmalloc

Title: [283371] trunk/Source/bmalloc Revision 283371 Author fpi...@apple.com Date 2021-10-01 09:19:16 -0700 (Fri, 01 Oct 2021) Log Message [libpas] Change the names of libpas heap runtime configs to something simpler (intrinsic, primitive, typed, and flex) and add comments describing

[webkit-changes] [283178] trunk/Source/bmalloc

Title: [283178] trunk/Source/bmalloc Revision 283178 Author fpi...@apple.com Date 2021-09-28 09:59:52 -0700 (Tue, 28 Sep 2021) Log Message [libpas] Fix coalescing of the large sharing pool and make it easy to introspect it (update to e4d20851ee9ff00f2962b349a9ff8465695a83d7)

[webkit-changes] [282899] trunk/Source/bmalloc

Title: [282899] trunk/Source/bmalloc Revision 282899 Author fpi...@apple.com Date 2021-09-22 17:52:25 -0700 (Wed, 22 Sep 2021) Log Message [libpas] fix DebugHeap https://bugs.webkit.org/show_bug.cgi?id=230658 Reviewed by Yusuke Suzuki. The previous DebugHeap integration with libpas

[webkit-changes] [282561] trunk/Source/bmalloc

Title: [282561] trunk/Source/bmalloc Revision 282561 Author fpi...@apple.com Date 2021-09-16 11:07:01 -0700 (Thu, 16 Sep 2021) Log Message Stub out the footprint() API when libpas is in use https://bugs.webkit.org/show_bug.cgi?id=230362 Reviewed by Yusuke Suzuki. The Gigacage's

[webkit-changes] [280668] trunk/Source/bmalloc

Title: [280668] trunk/Source/bmalloc Revision 280668 Author fpi...@apple.com Date 2021-08-04 15:53:54 -0700 (Wed, 04 Aug 2021) Log Message [libpas] medium size class lookup needs to correctly fence the counting lock read path https://bugs.webkit.org/show_bug.cgi?id=228799 Reviewed by

[webkit-changes] [280605] trunk/Source/bmalloc

Title: [280605] trunk/Source/bmalloc Revision 280605 Author fpi...@apple.com Date 2021-08-03 12:15:21 -0700 (Tue, 03 Aug 2021) Log Message pas_segmented_vector's iterate functions should handle memory ordering correctly https://bugs.webkit.org/show_bug.cgi?id=228746 Reviewed by Mark

[webkit-changes] [278942] trunk/Source/JavaScriptCore

Title: [278942] trunk/Source/_javascript_Core Revision 278942 Author fpi...@apple.com Date 2021-06-16 11:08:37 -0700 (Wed, 16 Jun 2021) Log Message RegisterSet should be smaller https://bugs.webkit.org/show_bug.cgi?id=227078 Reviewed by Geoff Garen. Previously, every RegisterSet would

[webkit-changes] [278476] trunk/Source/JavaScriptCore

Title: [278476] trunk/Source/_javascript_Core Revision 278476 Author fpi...@apple.com Date 2021-06-04 11:14:46 -0700 (Fri, 04 Jun 2021) Log Message Don't emit the NotDouble checks if we're already NotDouble. Rubber stamped by Saam Barati. * dfg/DFGSpeculativeJIT.cpp:

[webkit-changes] [278465] trunk

Title: [278465] trunk Revision 278465 Author fpi...@apple.com Date 2021-06-04 09:32:57 -0700 (Fri, 04 Jun 2021) Log Message DFG should speculate on CompareStrictEq(@x, @x) https://bugs.webkit.org/show_bug.cgi?id=226621 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [278424] trunk/Source/JavaScriptCore

Title: [278424] trunk/Source/_javascript_Core Revision 278424 Author fpi...@apple.com Date 2021-06-03 15:27:32 -0700 (Thu, 03 Jun 2021) Log Message DFG should eliminate obvious store barriers https://bugs.webkit.org/show_bug.cgi?id=226604 Reviewed by Mark Lam. This has a couple

[webkit-changes] [277326] trunk/Source/JavaScriptCore

Title: [277326] trunk/Source/_javascript_Core Revision 277326 Author fpi...@apple.com Date 2021-05-11 08:52:17 -0700 (Tue, 11 May 2021) Log Message Tune number of threads for AS https://bugs.webkit.org/show_bug.cgi?id=225635 Reviewed by Mark Lam. Using 4 GC markers (which really means

[webkit-changes] [277133] trunk/Source/WTF

Title: [277133] trunk/Source/WTF Revision 277133 Author fpi...@apple.com Date 2021-05-06 15:30:16 -0700 (Thu, 06 May 2021) Log Message Remove old and unused memory barrier abstractions https://bugs.webkit.org/show_bug.cgi?id=225487 Reviewed by Mark Lam. We don't use

[webkit-changes] [277118] trunk/Source/JavaScriptCore

Title: [277118] trunk/Source/_javascript_Core Revision 277118 Author fpi...@apple.com Date 2021-05-06 13:55:29 -0700 (Thu, 06 May 2021) Log Message Make some things easier to dataLog in wasm https://bugs.webkit.org/show_bug.cgi?id=225472 Reviewed by Yusuke Suzuki. *

[webkit-changes] [277117] trunk/Source

Title: [277117] trunk/Source Revision 277117 Author fpi...@apple.com Date 2021-05-06 13:54:16 -0700 (Thu, 06 May 2021) Log Message Reduce use of dmb ish on ARM64 https://bugs.webkit.org/show_bug.cgi?id=225465 Reviewed by Keith Miller. Source/_javascript_Core: We use

[webkit-changes] [277110] trunk/Source/JavaScriptCore

Title: [277110] trunk/Source/_javascript_Core Revision 277110 Author fpi...@apple.com Date 2021-05-06 12:41:15 -0700 (Thu, 06 May 2021) Log Message It should be possible to --logJIT=true https://bugs.webkit.org/show_bug.cgi?id=225464 Reviewed by Mark Lam. This makes it easy to just log

[webkit-changes] [277105] trunk/Tools

Title: [277105] trunk/Tools Revision 277105 Author fpi...@apple.com Date 2021-05-06 11:58:21 -0700 (Thu, 06 May 2021) Log Message Make it easy to pass __XPC variables to run-benchmark https://bugs.webkit.org/show_bug.cgi?id=225473 Reviewed by Stephanie Lewis. *

[webkit-changes] [276858] trunk/Source/JavaScriptCore

Title: [276858] trunk/Source/_javascript_Core Revision 276858 Author fpi...@apple.com Date 2021-04-30 15:48:43 -0700 (Fri, 30 Apr 2021) Log Message Make small JIT pool tests pass on AS https://bugs.webkit.org/show_bug.cgi?id=225256 Reviewed by Mark Lam. If we ask for a JIT pool that is

[webkit-changes] [276855] trunk/Source/JavaScriptCore

Title: [276855] trunk/Source/_javascript_Core Revision 276855 Author fpi...@apple.com Date 2021-04-30 14:50:21 -0700 (Fri, 30 Apr 2021) Log Message Make the JIT pool smaller on AS https://bugs.webkit.org/show_bug.cgi?id=225249 Reviewed by Saam Barati. This adds three related features:

[webkit-changes] [276686] trunk/Source/JavaScriptCore

Title: [276686] trunk/Source/_javascript_Core Revision 276686 Author fpi...@apple.com Date 2021-04-27 18:01:15 -0700 (Tue, 27 Apr 2021) Log Message Get the bytecode profiler working again https://bugs.webkit.org/show_bug.cgi?id=225129 Reviewed by Saam Barati. The bytecode profiler was

[webkit-changes] [260575] trunk/Websites/webkit.org

Title: [260575] trunk/Websites/webkit.org Revision 260575 Author fpi...@apple.com Date 2020-04-23 10:07:56 -0700 (Thu, 23 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/clobberize-dependence-graph.graffle: *

[webkit-changes] [260472] trunk/Websites/webkit.org

Title: [260472] trunk/Websites/webkit.org Revision 260472 Author fpi...@apple.com Date 2020-04-21 16:01:04 -0700 (Tue, 21 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/clobberize-dependence-graph.graffle: *

[webkit-changes] [260470] trunk/Websites/webkit.org

Title: [260470] trunk/Websites/webkit.org Revision 260470 Author fpi...@apple.com Date 2020-04-21 15:55:04 -0700 (Tue, 21 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/clobberize-dependence-graph.graffle: Added. *

[webkit-changes] [260466] trunk/Websites/webkit.org

Title: [260466] trunk/Websites/webkit.org Revision 260466 Author fpi...@apple.com Date 2020-04-21 15:37:18 -0700 (Tue, 21 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/abstract-heaps.graffle: *

[webkit-changes] [260464] trunk/Websites/webkit.org

Title: [260464] trunk/Websites/webkit.org Revision 260464 Author fpi...@apple.com Date 2020-04-21 15:33:08 -0700 (Tue, 21 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/abstract-heaps.graffle: *

[webkit-changes] [260463] trunk/Websites/webkit.org

Title: [260463] trunk/Websites/webkit.org Revision 260463 Author fpi...@apple.com Date 2020-04-21 15:27:16 -0700 (Tue, 21 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/abstract-heaps.graffle: Added. *

[webkit-changes] [260324] trunk/Websites/webkit.org

Title: [260324] trunk/Websites/webkit.org Revision 260324 Author fpi...@apple.com Date 2020-04-18 14:52:57 -0700 (Sat, 18 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/osr-exit-implicit-control-flow.graffle: *

[webkit-changes] [260320] trunk/Websites/webkit.org

Title: [260320] trunk/Websites/webkit.org Revision 260320 Author fpi...@apple.com Date 2020-04-18 14:08:36 -0700 (Sat, 18 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/osr-exit-implicit-control-flow.graffle: Added. *

[webkit-changes] [260109] trunk/Websites/webkit.org

Title: [260109] trunk/Websites/webkit.org Revision 260109 Author fpi...@apple.com Date 2020-04-14 16:59:30 -0700 (Tue, 14 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/full-add-cfg.graffle: *

[webkit-changes] [260107] trunk/Websites/webkit.org

Title: [260107] trunk/Websites/webkit.org Revision 260107 Author fpi...@apple.com Date 2020-04-14 16:57:49 -0700 (Tue, 14 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/full-add-cfg.graffle: *

[webkit-changes] [260105] trunk/Websites/webkit.org

Title: [260105] trunk/Websites/webkit.org Revision 260105 Author fpi...@apple.com Date 2020-04-14 16:54:29 -0700 (Tue, 14 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/full-add-cfg.graffle: Added. *

[webkit-changes] [260103] trunk/Websites/webkit.org

Title: [260103] trunk/Websites/webkit.org Revision 260103 Author fpi...@apple.com Date 2020-04-14 16:33:03 -0700 (Tue, 14 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/dfg-pipeline-dark.graffle: Added. *

[webkit-changes] [260094] trunk/Websites/webkit.org

Title: [260094] trunk/Websites/webkit.org Revision 260094 Author fpi...@apple.com Date 2020-04-14 13:30:48 -0700 (Tue, 14 Apr 2020) Log Message Unreviewed, check in some more files for a blog post. * blog-files/speculation-in-jsc/ftl-pipeline-dark.graffle: Added. *

[webkit-changes] [238326] trunk

Title: [238326] trunk Revision 238326 Author fpi...@apple.com Date 2018-11-16 16:42:44 -0800 (Fri, 16 Nov 2018) Log Message All users of ArrayBuffer should agree on the same max size https://bugs.webkit.org/show_bug.cgi?id=191771 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [238324] trunk/JSTests

Title: [238324] trunk/JSTests Revision 238324 Author fpi...@apple.com Date 2018-11-16 16:22:39 -0800 (Fri, 16 Nov 2018) Log Message Unreviewed, make some more tests not crash my computer by only running on instance of it. These tests do not need to run for each JSC config since they're

[webkit-changes] [238310] trunk/JSTests

Title: [238310] trunk/JSTests Revision 238310 Author fpi...@apple.com Date 2018-11-16 15:17:10 -0800 (Fri, 16 Nov 2018) Log Message Unreviewed, make some tests not crash my computer by only running on instance of it. These tests do not need to run for each JSC config since they're

[webkit-changes] [234097] trunk/Source/JavaScriptCore

Title: [234097] trunk/Source/_javascript_Core Revision 234097 Author fpi...@apple.com Date 2018-07-23 09:13:40 -0700 (Mon, 23 Jul 2018) Log Message Unreviewed, fix no-JIT build. * bytecode/CallLinkStatus.cpp: (JSC::CallLinkStatus::computeFor): * bytecode/CodeBlock.cpp:

[webkit-changes] [233714] trunk/Source/JavaScriptCore

Title: [233714] trunk/Source/_javascript_Core Revision 233714 Author fpi...@apple.com Date 2018-07-10 17:16:07 -0700 (Tue, 10 Jul 2018) Log Message Change the reoptimization backoff base to 1.3 from 2 https://bugs.webkit.org/show_bug.cgi?id=187540 Reviewed by Saam Barati. I

[webkit-changes] [233631] trunk/Tools

Title: [233631] trunk/Tools Revision 233631 Author fpi...@apple.com Date 2018-07-08 16:18:47 -0700 (Sun, 08 Jul 2018) Log Message run-benchmark should run ARES-6 1.0.1 https://bugs.webkit.org/show_bug.cgi?id=187452 Reviewed by Sam Weinig. We forgot to update this when we released

[webkit-changes] [232598] trunk/Source/JavaScriptCore

Title: [232598] trunk/Source/_javascript_Core Revision 232598 Author fpi...@apple.com Date 2018-06-07 14:01:19 -0700 (Thu, 07 Jun 2018) Log Message FunctionRareData::m_objectAllocationProfileWatchpoint is racy https://bugs.webkit.org/show_bug.cgi?id=186237 Reviewed by Saam Barati. We

[webkit-changes] [232227] trunk/Source/WTF

Title: [232227] trunk/Source/WTF Revision 232227 Author fpi...@apple.com Date 2018-05-26 13:59:04 -0700 (Sat, 26 May 2018) Log Message testair sometimes crashes due to races in initialization of ARC4RandomNumberGenerator https://bugs.webkit.org/show_bug.cgi?id=186014 Reviewed by Yusuke

[webkit-changes] [232132] trunk/Source

Title: [232132] trunk/Source Revision 232132 Author fpi...@apple.com Date 2018-05-23 15:34:18 -0700 (Wed, 23 May 2018) Log Message Speed up JetStream/base64 https://bugs.webkit.org/show_bug.cgi?id=185914 Reviewed by Michael Saboff. Source/_javascript_Core: Make allocation fast

[webkit-changes] [232074] trunk/Source

Title: [232074] trunk/Source Revision 232074 Author fpi...@apple.com Date 2018-05-22 12:20:05 -0700 (Tue, 22 May 2018) Log Message Get rid of TLCs https://bugs.webkit.org/show_bug.cgi?id=185846 Rubber stamped by Geoffrey Garen. Source/_javascript_Core: This removes support for

[webkit-changes] [232008] trunk/Source/JavaScriptCore

Title: [232008] trunk/Source/_javascript_Core Revision 232008 Author fpi...@apple.com Date 2018-05-20 17:51:10 -0700 (Sun, 20 May 2018) Log Message Revert the B3 compiler pipeline's treatment of taildup https://bugs.webkit.org/show_bug.cgi?id=185808 Reviewed by Yusuke Suzuki.

[webkit-changes] [232000] trunk/Source

Title: [232000] trunk/Source Revision 232000 Author fpi...@apple.com Date 2018-05-19 15:00:21 -0700 (Sat, 19 May 2018) Log Message DFG should inline InstanceOf ICs https://bugs.webkit.org/show_bug.cgi?id=185695 Reviewed by Yusuke Suzuki. Source/_javascript_Core: This teaches

[webkit-changes] [231871] trunk

Title: [231871] trunk Revision 231871 Author fpi...@apple.com Date 2018-05-16 14:02:49 -0700 (Wed, 16 May 2018) Log Message DFG models InstanceOf incorrectly https://bugs.webkit.org/show_bug.cgi?id=185694 Reviewed by Keith Miller. JSTests: * stress/instanceof-proxy-check-structure.js:

[webkit-changes] [231743] trunk/Source/WTF

Title: [231743] trunk/Source/WTF Revision 231743 Author fpi...@apple.com Date 2018-05-13 11:57:03 -0700 (Sun, 13 May 2018) Log Message Disable pointer poisoning https://bugs.webkit.org/show_bug.cgi?id=185586 Reviewed by Yusuke Suzuki. This seems like a 0.3% speed-up on

[webkit-changes] [231741] trunk/Source/JavaScriptCore

Title: [231741] trunk/Source/_javascript_Core Revision 231741 Author fpi...@apple.com Date 2018-05-13 09:54:55 -0700 (Sun, 13 May 2018) Log Message CachedCall::call() should be faster https://bugs.webkit.org/show_bug.cgi?id=185583 Reviewed by Yusuke Suzuki. CachedCall is an

[webkit-changes] [231665] trunk/Source/JavaScriptCore

Title: [231665] trunk/Source/_javascript_Core Revision 231665 Author fpi...@apple.com Date 2018-05-10 15:23:12 -0700 (Thu, 10 May 2018) Log Message DFG CFA should pick the right time to inject OSR entry data https://bugs.webkit.org/show_bug.cgi?id=185530 Reviewed by Saam Barati.

[webkit-changes] [231660] trunk/Source/JavaScriptCore

Title: [231660] trunk/Source/_javascript_Core Revision 231660 Author fpi...@apple.com Date 2018-05-10 14:31:49 -0700 (Thu, 10 May 2018) Log Message InPlaceAbstractState::beginBasicBlock shouldn't copy all m_variables every time https://bugs.webkit.org/show_bug.cgi?id=185452 Reviewed by

[webkit-changes] [231607] trunk/Source/JavaScriptCore

Title: [231607] trunk/Source/_javascript_Core Revision 231607 Author fpi...@apple.com Date 2018-05-09 16:31:14 -0700 (Wed, 09 May 2018) Log Message Speed up AbstractInterpreter::executeEdges https://bugs.webkit.org/show_bug.cgi?id=185457 Reviewed by Saam Barati. This patch started out

[webkit-changes] [231522] trunk/Source/JavaScriptCore

Title: [231522] trunk/Source/_javascript_Core Revision 231522 Author fpi...@apple.com Date 2018-05-08 16:30:31 -0700 (Tue, 08 May 2018) Log Message DFG::FlowMap::resize() shouldn't resize the shadow map unless we're in SSA https://bugs.webkit.org/show_bug.cgi?id=185453 Reviewed by

[webkit-changes] [231514] trunk

Title: [231514] trunk Revision 231514 Author fpi...@apple.com Date 2018-05-08 14:49:09 -0700 (Tue, 08 May 2018) Log Message InPlaceAbstractState::beginBasicBlock shouldn't have to clear any abstract values https://bugs.webkit.org/show_bug.cgi?id=185365 Reviewed by Saam Barati.

[webkit-changes] [231468] trunk

Title: [231468] trunk Revision 231468 Author fpi...@apple.com Date 2018-05-07 17:07:20 -0700 (Mon, 07 May 2018) Log Message InPlaceAbstractState::beginBasicBlock shouldn't have to clear any abstract values https://bugs.webkit.org/show_bug.cgi?id=185365 Reviewed by Saam Barati.

[webkit-changes] [231467] trunk/Source/JavaScriptCore

Title: [231467] trunk/Source/_javascript_Core Revision 231467 Author fpi...@apple.com Date 2018-05-07 17:05:08 -0700 (Mon, 07 May 2018) Log Message DFG AI doesn't need to merge valuesAtTail - it can just assign them https://bugs.webkit.org/show_bug.cgi?id=185355 Reviewed by Mark Lam.

[webkit-changes] [231399] trunk/Source/JavaScriptCore

Title: [231399] trunk/Source/_javascript_Core Revision 231399 Author fpi...@apple.com Date 2018-05-05 18:06:09 -0700 (Sat, 05 May 2018) Log Message DFG CFA phase should only do clobber asserts in debug https://bugs.webkit.org/show_bug.cgi?id=185354 Reviewed by Saam Barati.

[webkit-changes] [231338] trunk/Source/JavaScriptCore

Title: [231338] trunk/Source/_javascript_Core Revision 231338 Author fpi...@apple.com Date 2018-05-03 17:41:58 -0700 (Thu, 03 May 2018) Log Message Make it easy to log compile times for all optimizing tiers https://bugs.webkit.org/show_bug.cgi?id=185270 Reviewed by Keith Miller.

[webkit-changes] [231283] trunk

Title: [231283] trunk Revision 231283 Author fpi...@apple.com Date 2018-05-02 17:37:30 -0700 (Wed, 02 May 2018) Log Message JSC should know how to cache custom getter accesses on the prototype chain https://bugs.webkit.org/show_bug.cgi?id=185213 Reviewed by Keith Miller. JSTests: *

[webkit-changes] [231250] trunk/Source/JavaScriptCore

Title: [231250] trunk/Source/_javascript_Core Revision 231250 Author fpi...@apple.com Date 2018-05-02 11:51:16 -0700 (Wed, 02 May 2018) Log Message JSC should be able to cache custom setter calls on the prototype chain https://bugs.webkit.org/show_bug.cgi?id=185174 Reviewed by Saam

[webkit-changes] [231204] trunk/Source/JavaScriptCore

Title: [231204] trunk/Source/_javascript_Core Revision 231204 Author fpi...@apple.com Date 2018-05-01 12:55:59 -0700 (Tue, 01 May 2018) Log Message B3::demoteValues should be able to handle patchpoint terminals https://bugs.webkit.org/show_bug.cgi?id=185151 Reviewed by Saam Barati.

[webkit-changes] [231185] trunk

Title: [231185] trunk Revision 231185 Author fpi...@apple.com Date 2018-04-30 17:04:44 -0700 (Mon, 30 Apr 2018) Log Message LICM shouldn't hoist nodes if hoisted nodes exited in that code block https://bugs.webkit.org/show_bug.cgi?id=185126 Reviewed by Saam Barati. JSTests: I

[webkit-changes] [231154] trunk/Source/JavaScriptCore

Title: [231154] trunk/Source/_javascript_Core Revision 231154 Author fpi...@apple.com Date 2018-04-29 16:41:55 -0700 (Sun, 29 Apr 2018) Log Message B3 should run tail duplication at the bitter end https://bugs.webkit.org/show_bug.cgi?id=185123 Reviewed by Geoffrey Garen. Also

[webkit-changes] [231116] trunk/Source/JavaScriptCore

Title: [231116] trunk/Source/_javascript_Core Revision 231116 Author fpi...@apple.com Date 2018-04-27 16:43:30 -0700 (Fri, 27 Apr 2018) Log Message Also run foldPathConstants before mussing up SSA https://bugs.webkit.org/show_bug.cgi?id=185069 Reviewed by Saam Barati. This

[webkit-changes] [230975] trunk/Source/JavaScriptCore

Title: [230975] trunk/Source/_javascript_Core Revision 230975 Author fpi...@apple.com Date 2018-04-24 15:29:39 -0700 (Tue, 24 Apr 2018) Log Message MultiByOffset should emit one fewer branches in the case that the set of structures is proved already

[webkit-changes] [230964] trunk/Source/JavaScriptCore

Title: [230964] trunk/Source/_javascript_Core Revision 230964 Author fpi...@apple.com Date 2018-04-24 11:54:47 -0700 (Tue, 24 Apr 2018) Log Message DFG CSE should know how to decay a MultiGetByOffset https://bugs.webkit.org/show_bug.cgi?id=159859 Reviewed by Keith Miller. This

[webkit-changes] [230956] trunk/Source/JavaScriptCore

Title: [230956] trunk/Source/_javascript_Core Revision 230956 Author fpi...@apple.com Date 2018-04-24 08:53:15 -0700 (Tue, 24 Apr 2018) Log Message $vm.totalGCTime() should be a thing https://bugs.webkit.org/show_bug.cgi?id=184916 Reviewed by Sam Weinig. When debugging

[webkit-changes] [230929] trunk/Source/JavaScriptCore

Title: [230929] trunk/Source/_javascript_Core Revision 230929 Author fpi...@apple.com Date 2018-04-23 15:26:50 -0700 (Mon, 23 Apr 2018) Log Message Unreviewed, revert accidental change to verbose flag. * dfg/DFGByteCodeParser.cpp: Modified Paths trunk/Source/_javascript_Core/ChangeLog

[webkit-changes] [230928] trunk/Source/JavaScriptCore

Title: [230928] trunk/Source/_javascript_Core Revision 230928 Author fpi...@apple.com Date 2018-04-23 15:25:29 -0700 (Mon, 23 Apr 2018) Log Message Roll out r226655 because it broke OSR entry when the pre-header is inadequately profiled. Rubber stamped by Saam Barati. This is a

[webkit-changes] [230813] trunk/Source

Title: [230813] trunk/Source Revision 230813 Author fpi...@apple.com Date 2018-04-19 12:33:03 -0700 (Thu, 19 Apr 2018) Log Message The InternalFunction hierarchy should be in IsoSubspaces https://bugs.webkit.org/show_bug.cgi?id=184721 Reviewed by Saam Barati. Source/_javascript_Core:

[webkit-changes] [230726] trunk/Source/JavaScriptCore

Title: [230726] trunk/Source/_javascript_Core Revision 230726 Author fpi...@apple.com Date 2018-04-17 12:56:33 -0700 (Tue, 17 Apr 2018) Log Message JSGenericTypedArrayView<>::visitChildren has a race condition reading m_mode and m_vector https://bugs.webkit.org/show_bug.cgi?id=184705

[webkit-changes] [230725] trunk

Title: [230725] trunk Revision 230725 Author fpi...@apple.com Date 2018-04-17 12:53:30 -0700 (Tue, 17 Apr 2018) Log Message PutStackSinkingPhase should know that KillStack means ConflictingFlush https://bugs.webkit.org/show_bug.cgi?id=184672 Reviewed by Michael Saboff. JSTests: *

[webkit-changes] [230723] trunk/Source/JavaScriptCore

Title: [230723] trunk/Source/_javascript_Core Revision 230723 Author fpi...@apple.com Date 2018-04-17 11:59:00 -0700 (Tue, 17 Apr 2018) Log Message JSWebAssemblyCodeBlock should be in an IsoSubspace https://bugs.webkit.org/show_bug.cgi?id=184704 Reviewed by Mark Lam. Previously

[webkit-changes] [230695] trunk/Source/WebCore

Title: [230695] trunk/Source/WebCore Revision 230695 Author fpi...@apple.com Date 2018-04-16 18:56:15 -0700 (Mon, 16 Apr 2018) Log Message MutationObserver should be in an IsoHeap https://bugs.webkit.org/show_bug.cgi?id=184671 Reviewed by Sam Weinig. No new tests because no new

[webkit-changes] [230662] trunk

Title: [230662] trunk Revision 230662 Author fpi...@apple.com Date 2018-04-15 10:38:01 -0700 (Sun, 15 Apr 2018) Log Message Function.prototype.caller shouldn't return generator bodies https://bugs.webkit.org/show_bug.cgi?id=184630 Reviewed by Yusuke Suzuki. JSTests: *

[webkit-changes] [230494] trunk/Source/JavaScriptCore

Title: [230494] trunk/Source/_javascript_Core Revision 230494 Author fpi...@apple.com Date 2018-04-10 14:16:21 -0700 (Tue, 10 Apr 2018) Log Message Unreviewed, fix cloop build. * dfg/DFGAbstractInterpreterClobberState.cpp: Modified Paths trunk/Source/_javascript_Core/ChangeLog

[webkit-changes] [230488] trunk

Title: [230488] trunk Revision 230488 Author fpi...@apple.com Date 2018-04-10 12:45:54 -0700 (Tue, 10 Apr 2018) Log Message DFG AI and clobberize should agree with each other https://bugs.webkit.org/show_bug.cgi?id=184440 Reviewed by Saam Barati. JSTests: Add tests for all of

[webkit-changes] [230486] trunk/Source/JavaScriptCore

Title: [230486] trunk/Source/_javascript_Core Revision 230486 Author fpi...@apple.com Date 2018-04-10 11:04:07 -0700 (Tue, 10 Apr 2018) Log Message ExecutableToCodeBlockEdge::visitChildren() should be cool with m_codeBlock being null since we clear it in finalizeUnconditionally()

[webkit-changes] [230485] trunk/Source/JavaScriptCore

Title: [230485] trunk/Source/_javascript_Core Revision 230485 Author fpi...@apple.com Date 2018-04-10 10:57:29 -0700 (Tue, 10 Apr 2018) Log Message REGRESSION(r227341 and r227742): AI and clobberize should be precise and consistent about the effectfulness of CompareEq

[webkit-changes] [230465] trunk/Source/JavaScriptCore

Title: [230465] trunk/Source/_javascript_Core Revision 230465 Author fpi...@apple.com Date 2018-04-09 19:42:27 -0700 (Mon, 09 Apr 2018) Log Message Executing known edge types may reveal a contradiction causing us to emit an exit at a node that is not allowed to exit

[webkit-changes] [230287] trunk

Title: [230287] trunk Revision 230287 Author fpi...@apple.com Date 2018-04-04 17:30:48 -0700 (Wed, 04 Apr 2018) Log Message REGRESSION(r222563): removed DoubleReal type check causes tons of crashes because CSE has never known how to handle SaneChain

[webkit-changes] [230273] trunk/Source/JavaScriptCore

Title: [230273] trunk/Source/_javascript_Core Revision 230273 Author fpi...@apple.com Date 2018-04-04 13:29:43 -0700 (Wed, 04 Apr 2018) Log Message Remove poisoning of typed array vector https://bugs.webkit.org/show_bug.cgi?id=184313 Reviewed by Saam Barati. * dfg/DFGFixupPhase.cpp:

[webkit-changes] [230266] trunk/Source/JavaScriptCore

Title: [230266] trunk/Source/_javascript_Core Revision 230266 Author fpi...@apple.com Date 2018-04-04 10:55:44 -0700 (Wed, 04 Apr 2018) Log Message Don't do index masking or poisoning for DirectArguments https://bugs.webkit.org/show_bug.cgi?id=184280 Reviewed by Saam Barati. *

[webkit-changes] [230264] trunk/Source/JavaScriptCore

Title: [230264] trunk/Source/_javascript_Core Revision 230264 Author fpi...@apple.com Date 2018-04-04 10:42:11 -0700 (Wed, 04 Apr 2018) Log Message JSArray::appendMemcpy seems to be missing a barrier https://bugs.webkit.org/show_bug.cgi?id=184290 Reviewed by Mark Lam. If you

[webkit-changes] [230226] trunk/Source

Title: [230226] trunk/Source Revision 230226 Author fpi...@apple.com Date 2018-04-03 16:52:09 -0700 (Tue, 03 Apr 2018) Log Message GC shouldn't do object distancing https://bugs.webkit.org/show_bug.cgi?id=184195 Reviewed by Saam Barati. Source/_javascript_Core: This rolls out

[webkit-changes] [230145] trunk/Source/JavaScriptCore

Title: [230145] trunk/Source/_javascript_Core Revision 230145 Author fpi...@apple.com Date 2018-04-01 12:46:05 -0700 (Sun, 01 Apr 2018) Log Message Raise the for-call inlining threshold to 190 to fix JetStream/richards regression https://bugs.webkit.org/show_bug.cgi?id=184228 Reviewed

[webkit-changes] [230143] trunk

Title: [230143] trunk Revision 230143 Author fpi...@apple.com Date 2018-04-01 10:08:39 -0700 (Sun, 01 Apr 2018) Log Message JSC crash in JIT code with for-of loop and Array/Set iterators https://bugs.webkit.org/show_bug.cgi?id=183174 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [230130] trunk/Source

Title: [230130] trunk/Source Revision 230130 Author fpi...@apple.com Date 2018-03-31 08:55:38 -0700 (Sat, 31 Mar 2018) Log Message Strings and Vectors shouldn't do index masking https://bugs.webkit.org/show_bug.cgi?id=184193 Reviewed by Mark Lam. Source/_javascript_Core: *

[webkit-changes] [230115] trunk

Title: [230115] trunk Revision 230115 Author fpi...@apple.com Date 2018-03-30 13:31:00 -0700 (Fri, 30 Mar 2018) Log Message Bytecode generator should not get_from_scope something that may be a hole into a variable that is already live https://bugs.webkit.org/show_bug.cgi?id=184189

[webkit-changes] [229987] trunk

Title: [229987] trunk Revision 229987 Author fpi...@apple.com Date 2018-03-26 14:01:16 -0700 (Mon, 26 Mar 2018) Log Message DFG should know that CreateThis can be effectful https://bugs.webkit.org/show_bug.cgi?id=184013 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [229842] trunk

Title: [229842] trunk Revision 229842 Author fpi...@apple.com Date 2018-03-21 19:15:44 -0700 (Wed, 21 Mar 2018) Log Message ScopedArguments should do poisoning and index masking https://bugs.webkit.org/show_bug.cgi?id=183863 Reviewed by Mark Lam. JSTests: Adds another stress

[webkit-changes] [229545] trunk/Source/JavaScriptCore

Title: [229545] trunk/Source/_javascript_Core Revision 229545 Author fpi...@apple.com Date 2018-03-12 13:19:53 -0700 (Mon, 12 Mar 2018) Log Message Unreviewed, fix simple goof that was causing 32-bit DFG crashes. * dfg/DFGSpeculativeJIT.cpp:

  1   2   3   4   5   6   7   8   9   10   >