[webkit-changes] [258078] trunk

6:44 UTC (rev 258078) @@ -1,3 +1,14 @@ +2020-03-07 Mark Lam + +Remove bad assertion in FTLLowerDFGToB3's compileDelBy(). +https://bugs.webkit.org/show_bug.cgi?id=208764 + + +Reviewed by Keith Miller. + +* stress/delete-by-val-with-base-and-subscri

[webkit-changes] [258063] trunk/Source/JavaScriptCore

or.cpp Diff Modified: trunk/Source/_javascript_Core/ChangeLog (258062 => 258063) --- trunk/Source/_javascript_Core/ChangeLog 2020-03-07 05:53:34 UTC (rev 258062) +++ trunk/Source/_javascript_Core/ChangeLog 2020-03-07 06:28:57 UTC (rev 258063) @@ -1,3 +1,116 @@ +2020-03-06 Mark Lam + +

[webkit-changes] [258038] trunk/Source/JavaScriptCore

/assembler/testmasm.cpp Diff Modified: trunk/Source/_javascript_Core/ChangeLog (258037 => 258038) --- trunk/Source/_javascript_Core/ChangeLog 2020-03-07 01:14:23 UTC (rev 258037) +++ trunk/Source/_javascript_Core/ChangeLog 2020-03-07 01:16:14 UTC (rev 258038) @@ -1,3 +1,53 @@ +2020-03-06 M

[webkit-changes] [257907] trunk

-BytecodeGenerator.js Diff Modified: trunk/JSTests/ChangeLog (257906 => 257907) --- trunk/JSTests/ChangeLog 2020-03-05 07:50:47 UTC (rev 257906) +++ trunk/JSTests/ChangeLog 2020-03-05 07:57:21 UTC (rev 257907) @@ -1,3 +1,13 @@ +2020-03-04 Mark Lam + +Handle an out of memory error wh

[webkit-changes] [257746] trunk/Source/WebCore

745) +++ trunk/Source/WebCore/ChangeLog 2020-03-03 00:16:02 UTC (rev 257746) @@ -1,3 +1,20 @@ +2020-03-02 Mark Lam + +ScriptController::executeIfJavaScriptURL() uses wrong JSGlobalObject. +https://bugs.webkit.org/show_bug.cgi?id=208290 + + +Reviewed by Chris Du

[webkit-changes] [257529] trunk/Source/JavaScriptCore

257529) @@ -1,3 +1,14 @@ +2020-02-26 Mark Lam + +Enhance JSObjectGetProperty() to mitigate against null object pointers. +https://bugs.webkit.org/show_bug.cgi?id=208275 + + +Reviewed by Robin Morisset. + +* API/JSObjectRef.cpp: +(JSObjectGetProperty): + 2

[webkit-changes] [257414] trunk/Source/WebCore

/WebCore/bindings/js/JSElementCustom.cpp Diff Modified: trunk/Source/WebCore/ChangeLog (257413 => 257414) --- trunk/Source/WebCore/ChangeLog 2020-02-26 08:38:21 UTC (rev 257413) +++ trunk/Source/WebCore/ChangeLog 2020-02-26 08:47:57 UTC (rev 257414) @@ -1,3 +1,19 @@ +2020-02-26 Mark

[webkit-changes] [257134] trunk/Source/JavaScriptCore

leName, cacheFileName); return YES; } Modified: trunk/Source/_javascript_Core/ChangeLog (257133 => 257134) --- trunk/Source/_javascript_Core/ChangeLog 2020-02-21 12:38:18 UTC (rev 257133) +++ trunk/Source/_javascript_Core/ChangeLog 2020-02-21 16:20:55 UTC (rev 257134) @@ -1,3 +1,46 @@ +2

[webkit-changes] [256791] trunk/Source

WTF/ChangeLog 2020-02-18 01:07:00 UTC (rev 256791) @@ -1,3 +1,14 @@ +2020-02-17 Mark Lam + +getVTablePointer() should return a const void*. +https://bugs.webkit.org/show_bug.cgi?id=207871 + + +Reviewed by Yusuke Suzuki. + +* wtf/PointerPreparation

[webkit-changes] [256500] trunk/Source/JavaScriptCore

rce/_javascript_Core/ChangeLog 2020-02-13 04:11:51 UTC (rev 256500) @@ -1,3 +1,38 @@ +2020-02-12 Mark Lam + +Add options for debugging WASM code. +https://bugs.webkit.org/show_bug.cgi?id=207677 + + +Reviewed by Yusuke Suzuki. + +Specifically ... + +JSC_useBBQ

[webkit-changes] [256202] trunk

202) @@ -1,3 +1,13 @@ +2020-02-10 Mark Lam + +Placate exception check validator in GenericArguments::put(). +https://bugs.webkit.org/show_bug.cgi?id=207485 + + +Reviewed by Robin Morisset. + +* stress/placate-exception-check-validator-in-GenericArguments-put

[webkit-changes] [256198] trunk

Log 2020-02-10 19:47:58 UTC (rev 256198) @@ -1,3 +1,13 @@ +2020-02-10 Mark Lam + +Missing exception check in GenericArguments::deletePropertyByIndex(). +https://bugs.webkit.org/show_bug.cgi?id=207483 + + +Reviewed by Yusuke Suzuki. + +* stress/missing-except

[webkit-changes] [255993] trunk/Source/WTF

gView.cpp Diff Modified: trunk/Source/WTF/ChangeLog (255992 => 255993) --- trunk/Source/WTF/ChangeLog 2020-02-07 00:44:34 UTC (rev 255992) +++ trunk/Source/WTF/ChangeLog 2020-02-07 00:59:59 UTC (rev 255993) @@ -1,3 +1,17 @@ +2020-02-06 Mark Lam + +Add a comment in StringView::setUnde

[webkit-changes] [255482] trunk/Source/JavaScriptCore

cript_Core/dfg/DFGGraph.cpp trunk/Source/_javascript_Core/dfg/DFGNode.cpp trunk/Source/_javascript_Core/ftl/FTLCompile.cpp trunk/Source/_javascript_Core/ftl/FTLCompile.h trunk/Source/_javascript_Core/ftl/FTLState.cpp Diff Modified: trunk/Source/_javascript_Core/ChangeLog (255481 => 2554

[webkit-changes] [255416] trunk

; 255416) --- trunk/JSTests/ChangeLog 2020-01-30 04:47:38 UTC (rev 255415) +++ trunk/JSTests/ChangeLog 2020-01-30 05:51:43 UTC (rev 255416) @@ -1,3 +1,13 @@ +2020-01-29 Mark Lam + +Fix bad assertion in InternalFunctionAllocationProfile::createAllocationStructureFromBase(). +https://bugs.we

[webkit-changes] [255314] trunk/Source/JavaScriptCore

hangeLog 2020-01-28 22:19:03 UTC (rev 255314) @@ -1,3 +1,17 @@ +2020-01-28 Mark Lam + +Some website needs more stack space. +https://bugs.webkit.org/show_bug.cgi?id=206891 + +Reviewed by Saam Barati. + +We're bumping the maximum stack usage limit (JSC_maxPerThr

[webkit-changes] [255139] trunk/Source/WTF

Modified: trunk/Source/WTF/ChangeLog (255138 => 255139) --- trunk/Source/WTF/ChangeLog 2020-01-27 08:10:21 UTC (rev 255138) +++ trunk/Source/WTF/ChangeLog 2020-01-27 08:54:49 UTC (rev 255139) @@ -1,3 +1,16 @@ +2020-01-27 Mark Lam + +Make getVTablePointer() an inline function to

[webkit-changes] [255126] trunk/Source

UTC (rev 255125) +++ trunk/Source/WTF/ChangeLog 2020-01-25 22:34:00 UTC (rev 255126) @@ -1,5 +1,20 @@ 2020-01-25 Mark Lam +Introduce a getVTablePointer() utility function. +https://bugs.webkit.org/show_bug.cgi?id=206804 + + +Reviewed by Yusuke Suzuki and Oliver H

[webkit-changes] [255125] trunk

124) +++ trunk/Source/WTF/ChangeLog 2020-01-25 20:13:34 UTC (rev 255125) @@ -1,3 +1,17 @@ +2020-01-25 Mark Lam + +Add some tests for dynamically allocated StaticStringImpls. +https://bugs.webkit.org/show_bug.cgi?id=206802 + +Reviewed by Darin Adler. + +Removed s

[webkit-changes] [255120] trunk/Source

120) @@ -1,5 +1,64 @@ 2020-01-24 Mark Lam +Move singleton Intl string locales out of JSGlobalObject. +https://bugs.webkit.org/show_bug.cgi?id=206791 + + +Reviewed by Yusuke Suzuki and Andy Wagoner. + +We were creating an instance of these for each

[webkit-changes] [255112] trunk

rrent-access.js Diff Modified: trunk/JSTests/ChangeLog (255111 => 255112) --- trunk/JSTests/ChangeLog 2020-01-25 01:28:03 UTC (rev 255111) +++ trunk/JSTests/ChangeLog 2020-01-25 01:35:58 UTC (rev 255112) @@ -1,3 +1,13 @@ +2020-01-24 Mark Lam + +IntlObject's cached strings shou

[webkit-changes] [254962] trunk/Source/JavaScriptCore

v 254962) @@ -1,3 +1,40 @@ +2020-01-22 Mark Lam + +Restore nullification of DFG::Plan::m_vm when the plan is cancelled. +https://bugs.webkit.org/show_bug.cgi?id=206633 + + +Reviewed by Robin Morisset. + +In r253243, I replaced the nullification of Plan::m_vm

[webkit-changes] [254846] trunk/Source/JavaScriptCore

/DFGClobberize.h Diff Modified: trunk/Source/_javascript_Core/ChangeLog (254845 => 254846) --- trunk/Source/_javascript_Core/ChangeLog 2020-01-21 08:03:40 UTC (rev 254845) +++ trunk/Source/_javascript_Core/ChangeLog 2020-01-21 09:41:03 UTC (rev 254846) @@ -1,3 +1,17 @@ +2020-01-21 Mark

[webkit-changes] [254783] trunk

v 254783) @@ -1,3 +1,13 @@ +2020-01-17 Mark Lam + +JSModuleLoader's printableModuleKey() should never throw. +https://bugs.webkit.org/show_bug.cgi?id=206461 + + +Reviewed by Michael Saboff. + +* stress/printableModuleKey-should-never-throw.js: Added.

[webkit-changes] [254687] trunk

Modified: trunk/JSTests/ChangeLog (254686 => 254687) --- trunk/JSTests/ChangeLog 2020-01-16 17:06:42 UTC (rev 254686) +++ trunk/JSTests/ChangeLog 2020-01-16 17:26:21 UTC (rev 254687) @@ -1,3 +1,13 @@ +2020-01-16 Mark Lam + +operationToObject() should check for a null errorMess

[webkit-changes] [254370] trunk/Source/WebKit

-10 22:48:30 UTC (rev 254369) +++ trunk/Source/WebKit/ChangeLog 2020-01-10 22:52:23 UTC (rev 254370) @@ -1,3 +1,14 @@ +2020-01-10 Mark Lam + +Gardening: simple build fix after r254119. + +Not reviewed. + +We should be using ASSERT_ENABLED instead of ASSERT_DSIAB

[webkit-changes] [254227] trunk

es/Makefile Diff Modified: trunk/ChangeLog (254226 => 254227) --- trunk/ChangeLog 2020-01-08 22:10:17 UTC (rev 254226) +++ trunk/ChangeLog 2020-01-08 22:20:24 UTC (rev 254227) @@ -1,3 +1,17 @@ +2020-01-08 Mark Lam + +Rename testing build configuration to release+assert, and add new test

[webkit-changes] [254080] trunk/Tools

079) +++ trunk/Tools/ChangeLog 2020-01-06 20:58:44 UTC (rev 254080) @@ -1,3 +1,28 @@ +2020-01-06 Mark Lam + +Add --force-optimization-level option to Tools/Scripts/set-webkit-configuration. +https://bugs.webkit.org/show_bug.cgi?id=205787 + +Reviewed by Saam Bar

[webkit-changes] [253969] trunk/Source/JavaScriptCore

3969) @@ -1,3 +1,29 @@ +2020-01-01 Mark Lam + +Declare some classes as final. +https://bugs.webkit.org/show_bug.cgi?id=205670 + +Reviewed by Sam Weinig. + +There are a few "Status" classes, all of whom have static computeFor() methods. +All of th

[webkit-changes] [253613] trunk/Source/JavaScriptCore

cript_Core/ChangeLog (253612 => 253613) --- trunk/Source/_javascript_Core/ChangeLog 2019-12-17 08:14:07 UTC (rev 253612) +++ trunk/Source/_javascript_Core/ChangeLog 2019-12-17 08:50:20 UTC (rev 253613) @@ -1,5 +1,63 @@ 2019-12-16 Mark Lam +Relanding r253581: Changed jsc shell timeou

[webkit-changes] [253609] trunk/Source/JavaScriptCore

UTC (rev 253608) +++ trunk/Source/_javascript_Core/ChangeLog 2019-12-17 03:26:09 UTC (rev 253609) @@ -1,3 +1,41 @@ +2019-12-16 Mark Lam + +Rolling out: r253581 is failing tests on a release build. +https://bugs.webkit.org/show_bug.cgi?id=205279 + + +Not revie

[webkit-changes] [253581] trunk/Source/JavaScriptCore

2019-12-16 22:33:20 UTC (rev 253580) +++ trunk/Source/_javascript_Core/ChangeLog 2019-12-16 22:34:50 UTC (rev 253581) @@ -1,3 +1,54 @@ +2019-12-16 Mark Lam + +Changed jsc shell timeout mechanism to leverage the VMTraps and use CPUTime. +https://bugs.webkit.org

[webkit-changes] [253515] trunk

; 253515) --- trunk/JSTests/ChangeLog 2019-12-14 01:39:45 UTC (rev 253514) +++ trunk/JSTests/ChangeLog 2019-12-14 01:51:00 UTC (rev 253515) @@ -1,3 +1,13 @@ +2019-12-13 Mark Lam + +Fix bad exception assertion in ExceptionHelpers.cpp's createError(). +https://bugs.webkit.org/sh

[webkit-changes] [253458] trunk

-check-in-JSValue-toWTFStringSlowCase.js Diff Modified: trunk/JSTests/ChangeLog (253457 => 253458) --- trunk/JSTests/ChangeLog 2019-12-13 01:09:08 UTC (rev 253457) +++ trunk/JSTests/ChangeLog 2019-12-13 01:11:15 UTC (rev 253458) @@ -1,5 +1,15 @@ 2019-12-12 Mark Lam +Fix miss

[webkit-changes] [253441] trunk

ssing-exception-check-in-json-stringifier-gap.js Diff Modified: trunk/JSTests/ChangeLog (253440 => 253441) --- trunk/JSTests/ChangeLog 2019-12-12 19:09:12 UTC (rev 253440) +++ trunk/JSTests/ChangeLog 2019-12-12 19:19:30 UTC (rev 253441) @@ -1,5 +1,15 @@ 2019-12-12 Mark Lam +Fix

[webkit-changes] [253432] trunk

--- trunk/JSTests/ChangeLog 2019-12-12 17:51:29 UTC (rev 253431) +++ trunk/JSTests/ChangeLog 2019-12-12 18:07:33 UTC (rev 253432) @@ -1,3 +1,13 @@ +2019-12-12 Mark Lam + +DFG and FTL expects String.prototype to not qualify for StringObjectUse. +https://bu

[webkit-changes] [253358] trunk/Source/JavaScriptCore

8) --- trunk/Source/_javascript_Core/ChangeLog 2019-12-11 01:35:14 UTC (rev 253357) +++ trunk/Source/_javascript_Core/ChangeLog 2019-12-11 01:45:00 UTC (rev 253358) @@ -1,3 +1,36 @@ +2019-12-10 Mark Lam + +Worklist::deleteCancelledPlansForVM() should not assume that a cancelled plan

[webkit-changes] [253320] trunk/Source/JavaScriptCore

17 UTC (rev 253319) +++ trunk/Source/_javascript_Core/ChangeLog 2019-12-10 05:02:57 UTC (rev 253320) @@ -1,3 +1,51 @@ +2019-12-09 Mark Lam + +Fix the x86_64 probe so that we can get a full stack trace with libunwind and lldb. +https://bugs.webkit.org/show_bug.cgi?id=205050 + +

[webkit-changes] [253298] trunk/Source/JavaScriptCore

/bytecode/GetByIdVariant.cpp Diff Modified: trunk/Source/_javascript_Core/ChangeLog (253297 => 253298) --- trunk/Source/_javascript_Core/ChangeLog 2019-12-09 20:05:18 UTC (rev 253297) +++ trunk/Source/_javascript_Core/ChangeLog 2019-12-09 20:51:27 UTC (rev 253298) @@ -1,3 +1,22 @@ +2019-12-09 M

[webkit-changes] [253264] trunk

UTC (rev 253263) +++ trunk/JSTests/ChangeLog 2019-12-07 22:57:17 UTC (rev 253264) @@ -1,3 +1,13 @@ +2019-12-07 Mark Lam + +Object.prototype.isPrototypeOf() should check if the passed in value is a non-object first. +https://bugs.webkit.org/show_bug.cgi?id=204

[webkit-changes] [253260] trunk/Source/JavaScriptCore

++ trunk/Source/_javascript_Core/ChangeLog 2019-12-07 20:16:10 UTC (rev 253260) @@ -1,5 +1,21 @@ 2019-12-07 Mark Lam +Remove invalid assertion in FTL's allocateJSArray(). +https://bugs.webkit.org/show_bug.cgi?id=204987 + + +Reviewed by Saam Barati. +

[webkit-changes] [253257] trunk/Source/JavaScriptCore

Log 2019-12-07 18:46:28 UTC (rev 253256) +++ trunk/Source/_javascript_Core/ChangeLog 2019-12-07 18:56:50 UTC (rev 253257) @@ -1,3 +1,14 @@ +2019-12-07 Mark Lam + +Build fix for: The compiler thread should not adjust Identifier refCounts. +https://bugs.webkit.org/show_bug.cgi?id=204

[webkit-changes] [253243] trunk

Object.getOwnPropertySymbols(o); +o[a]; +} +`); +} Modified: trunk/Source/_javascript_Core/ChangeLog (253242 => 253243) --- trunk/Source/_javascript_Core/ChangeLog 2019-12-07 06:06:27 UTC (rev 253242) +++ trunk/Source/_javascript_Core/ChangeLog 2019-12-07 06:07:56 UTC (rev 2

[webkit-changes] [253164] trunk/Source/JavaScriptCore

Diff Modified: trunk/Source/_javascript_Core/ChangeLog (253163 => 253164) --- trunk/Source/_javascript_Core/ChangeLog 2019-12-05 20:20:48 UTC (rev 253163) +++ trunk/Source/_javascript_Core/ChangeLog 2019-12-05 20:23:32 UTC (rev 253164) @@ -1,3 +1,22 @@ +2019-12-05 Mark

[webkit-changes] [253137] trunk

Tests/stress/missing-exception-check-in-array-prototype-fastJoin.js Diff Modified: trunk/JSTests/ChangeLog (253136 => 253137) --- trunk/JSTests/ChangeLog 2019-12-05 01:37:01 UTC (rev 253136) +++ trunk/JSTests/ChangeLog 2019-12-05 03:20:16 UTC (rev 253137) @@ -1,3 +1,13 @@ +2019-12-04

[webkit-changes] [253136] trunk/Source/JavaScriptCore

/_javascript_Core/ChangeLog (253135 => 253136) --- trunk/Source/_javascript_Core/ChangeLog 2019-12-05 01:24:22 UTC (rev 253135) +++ trunk/Source/_javascript_Core/ChangeLog 2019-12-05 01:37:01 UTC (rev 253136) @@ -1,3 +1,19 @@ +2019-12-04 Mark Lam + +Fix a broken assertion in GetBySta

[webkit-changes] [253015] trunk/Source/JavaScriptCore

TC (rev 253015) @@ -1,3 +1,27 @@ +2019-12-02 Mark Lam + +Only check each use...FuzzerAgent() option in VM constructor if any of the options are enabled. +https://bugs.webkit.org/show_bug.cgi?id=204763 + +Reviewed by Keith Miller. + +We know that we'll never use

[webkit-changes] [253008] trunk

/Source/_javascript_Core/tools/JSDollarVM.cpp Diff Modified: trunk/JSTests/ChangeLog (253007 => 253008) --- trunk/JSTests/ChangeLog 2019-12-02 21:51:44 UTC (rev 253007) +++ trunk/JSTests/ChangeLog 2019-12-02 22:16:42 UTC (rev 253008) @@ -1,3 +1,18 @@ +2019-12-02 Mark Lam + +mozi

[webkit-changes] [252767] trunk/Source/JavaScriptCore

; 252767) --- trunk/Source/_javascript_Core/ChangeLog 2019-11-22 09:39:04 UTC (rev 252766) +++ trunk/Source/_javascript_Core/ChangeLog 2019-11-22 11:32:43 UTC (rev 252767) @@ -1,3 +1,20 @@ +2019-11-22 Mark Lam + +Fix missing exception check in replaceUsingStringSearch(). +

[webkit-changes] [252766] trunk

-21 Mark Lam + +replaceUsingStringSearch() should not use CachedCall with host functions. +https://bugs.webkit.org/show_bug.cgi?id=204494 + + +Reviewed by Ross Kirsling. + +* stress/string-replaceAll-2.js: + 2019-11-21 Ross Kirsling Unrevie

[webkit-changes] [252758] trunk

Core/test/Strings/compare.js cmd: runChakra :baseline, "NoException", "compare.baseline", [] - path: ChakraCore/test/Strings/replace.js - cmd: runChakra :baseline, "NoException", "replace.baseline-jsc", [] + cmd: runChakra :baseline, "NoException&q

[webkit-changes] [252694] trunk

k/Source/_javascript_Core/ChangeLog trunk/Source/_javascript_Core/tools/JSDollarVM.cpp Diff Modified: trunk/JSTests/ChangeLog (252693 => 252694) --- trunk/JSTests/ChangeLog 2019-11-20 18:39:21 UTC (rev 252693) +++ trunk/JSTests/ChangeLog 2019-11-20 18:50:53 UTC (rev 252694) @@ -1,3 +1

[webkit-changes] [252618] trunk/Source/JavaScriptCore

1,3 +1,18 @@ +2019-11-18 Mark Lam + +Always enable Optional parse(const char* string) for OS(DARWIN). +https://bugs.webkit.org/show_bug.cgi?id=204333 + + +Reviewed by Yusuke Suzuki. + +On OS(DARWIN), the compiler does not consider size_t and unsigned to be

[webkit-changes] [252558] trunk/Source/JavaScriptCore

-18 Mark Lam +Clarify that OptionRange::operator=() is only used for initializing to 0 (i.e. state Uninitialized). +https://bugs.webkit.org/show_bug.cgi?id=204309 + +Reviewed by Saam Barati. + +Added a RELEASE_ASSERT in OptionRange::operator=() to enforce that it sho

[webkit-changes] [252557] trunk/Source/JavaScriptCore

-11-18 19:34:32 UTC (rev 252556) +++ trunk/Source/_javascript_Core/ChangeLog 2019-11-18 20:06:14 UTC (rev 252557) @@ -1,3 +1,122 @@ +2019-11-18 Mark Lam + +Reduce the amount of memory needed to store Options. +https://bugs.webkit.org/show_bug.cgi?id=202105 + + +

[webkit-changes] [252502] trunk/Source/JavaScriptCore

angeLog (252501 => 252502) --- trunk/Source/_javascript_Core/ChangeLog 2019-11-15 21:57:24 UTC (rev 252501) +++ trunk/Source/_javascript_Core/ChangeLog 2019-11-15 22:10:07 UTC (rev 252502) @@ -1,3 +1,36 @@ +2019-11-15 Mark Lam + +Rename InPlaceAbstractState's m_foundConstant to m_s

[webkit-changes] [252247] trunk/Source/JavaScriptCore

ript_Core/dfg/DFGSpeculativeJIT.cpp Diff Modified: trunk/Source/_javascript_Core/ChangeLog (252246 => 252247) --- trunk/Source/_javascript_Core/ChangeLog 2019-11-08 19:11:14 UTC (rev 252246) +++ trunk/Source/_javascript_Core/ChangeLog 2019-11-08 19:37:54 UTC (rev 252247) @@ -1,3 +1,28 @@ +2019

[webkit-changes] [252239] trunk

2238) +++ trunk/JSTests/ChangeLog 2019-11-08 16:58:49 UTC (rev 252239) @@ -1,3 +1,19 @@ +2019-11-07 Mark Lam + +Add a stack overflow check in Yarr::ByteCompiler::emitDisjunction(). +https://bugs.webkit.org/show_bug.cgi?id=203936 + + +Reviewed by Saam Barati. + +

[webkit-changes] [252177] trunk/Source

7) --- trunk/Source/_javascript_Core/ChangeLog 2019-11-07 07:21:38 UTC (rev 252176) +++ trunk/Source/_javascript_Core/ChangeLog 2019-11-07 07:27:52 UTC (rev 252177) @@ -1,3 +1,22 @@ +2019-11-06 Mark Lam + +Remove remnants of support code for an upwards growing stack. +https://bu

[webkit-changes] [252160] trunk

2019-11-07 00:29:19 UTC (rev 252160) @@ -1,3 +1,13 @@ +2019-11-06 Mark Lam + +JSGlobalObject::fireWatchpointAndMakeAllArrayStructuresSlowPut() should fire its watchpoint as the last step. +https://bugs.webkit.org/show_bug.cgi?id=203867 + + +Reviewed by Saa

[webkit-changes] [252124] trunk/Source

@@ +2019-11-05 Mark Lam + +WTF::RunLoop should not depend on isMainThread() idiom. +https://bugs.webkit.org/show_bug.cgi?id=203873 + + +Reviewed by Saam Barati, Ryosuke Niwa, and Devin Rousso. + +* inspector/JSGlobalObjectScriptDebugServer.cpp: +(I

[webkit-changes] [252006] trunk/Source/JavaScriptCore

k/Source/_javascript_Core/ChangeLog 2019-11-04 19:19:16 UTC (rev 252005) +++ trunk/Source/_javascript_Core/ChangeLog 2019-11-04 19:23:24 UTC (rev 252006) @@ -1,3 +1,14 @@ +2019-11-04 Mark Lam + +Surpress ASAN in SamplingProfiler's FrameWalker::resetAtMachineFrame(). +https://bu

[webkit-changes] [251790] trunk/Tools

rev 251790) @@ -1,3 +1,13 @@ +2019-10-30 Mark Lam + +Gardening: fixing broken build. + +Not reviewed. + +JSON appears to not like commas at the end of the last element in an array. + +* Scripts/webkitpy/common/config/contributors.json: + 2019-10-30 Chris Du

[webkit-changes] [251584] trunk/Source

/ChangeLog 2019-10-25 05:45:03 UTC (rev 251583) +++ trunk/Source/_javascript_Core/ChangeLog 2019-10-25 06:59:36 UTC (rev 251584) @@ -1,3 +1,105 @@ +2019-10-24 Mark Lam + +Move JSC::Register inline methods into RegisterInlines.h. +https://bugs.webkit.org/show_bug.cgi

[webkit-changes] [251456] trunk/Source/JavaScriptCore

ope): +* runtime/ObjectInitializationScope.h: +(JSC::ObjectInitializationScope::~ObjectInitializationScope): +* runtime/RegExpMatchesArray.cpp: +(JSC::createEmptyRegExpMatchesArray): + +2019-10-22 Mark Lam + Fix incorrect assertion in operationRegExpExecNonGlobalOrSti

[webkit-changes] [251447] trunk

sertion-in-operationRegExpExecNonGlobalOrSticky.js Diff Modified: trunk/JSTests/ChangeLog (251446 => 251447) --- trunk/JSTests/ChangeLog 2019-10-22 20:23:24 UTC (rev 251446) +++ trunk/JSTests/ChangeLog 2019-10-22 20:27:53 UTC (rev 251447) @@ -1,3 +1,13 @@ +2019-10-22 Mark Lam + +

[webkit-changes] [251418] trunk

-operationRegExpExecNonGlobalOrSticky.js Diff Modified: trunk/JSTests/ChangeLog (251417 => 251418) --- trunk/JSTests/ChangeLog 2019-10-22 04:58:47 UTC (rev 251417) +++ trunk/JSTests/ChangeLog 2019-10-22 05:44:31 UTC (rev 251418) @@ -1,5 +1,14 @@ 2019-10-21 Mark Lam +Rolling

[webkit-changes] [251411] trunk

251411) --- trunk/JSTests/ChangeLog 2019-10-22 01:48:40 UTC (rev 251410) +++ trunk/JSTests/ChangeLog 2019-10-22 01:55:20 UTC (rev 251411) @@ -1,3 +1,13 @@ +2019-10-21 Mark Lam + +Fix incorrect assertion in operationRegExpExecNonGlobalOrSticky(). +https://bugs.webkit.org/show_bug.

[webkit-changes] [251403] trunk

-exception-check-in-josn-stringifier.js Diff Modified: trunk/JSTests/ChangeLog (251402 => 251403) --- trunk/JSTests/ChangeLog 2019-10-22 00:43:07 UTC (rev 251402) +++ trunk/JSTests/ChangeLog 2019-10-22 00:51:26 UTC (rev 251403) @@ -1,3 +1,13 @@ +2019-10-21 Mark Lam + +Fix miss

[webkit-changes] [251400] trunk/Source/JavaScriptCore

eInt.h Modified: trunk/Source/_javascript_Core/ChangeLog (251399 => 251400) --- trunk/Source/_javascript_Core/ChangeLog 2019-10-22 00:04:27 UTC (rev 251399) +++ trunk/Source/_javascript_Core/ChangeLog 2019-10-22 00:17:50 UTC (rev 251400) @@ -1,5 +1,62 @@ 2019-10-21 Mark Lam +Rolling

[webkit-changes] [251399] trunk/Source/JavaScriptCore

019-10-22 00:04:27 UTC (rev 251399) @@ -1,3 +1,33 @@ +2019-10-21 Mark Lam + +Fix issues when setting public length on ArrayWithContiguous type butterflies. +https://bugs.webkit.org/show_bug.cgi?id=203211 + + +Reviewed by Keith Miller and Saam Barati. + +

[webkit-changes] [251372] trunk/Source

ource/_javascript_Core/ChangeLog (251371 => 251372) --- trunk/Source/_javascript_Core/ChangeLog 2019-10-21 19:06:48 UTC (rev 251371) +++ trunk/Source/_javascript_Core/ChangeLog 2019-10-21 19:15:26 UTC (rev 251372) @@ -1,3 +1,14 @@ +2019-10-21 Mark Lam + +Remove all uses of untagCodePtr in d

[webkit-changes] [251274] trunk

274) @@ -1,3 +1,13 @@ +2019-10-17 Mark Lam + +Add missing checks after calls to the sameValue() JSValue comparator. +https://bugs.webkit.org/show_bug.cgi?id=203126 + + +Reviewed by Saam Barati. + +* stress/validate-exception-check-in-proxy-object-put.js: Ad

[webkit-changes] [251264] trunk/Source/JavaScriptCore

unk/Source/_javascript_Core/ChangeLog 2019-10-17 22:18:57 UTC (rev 251263) +++ trunk/Source/_javascript_Core/ChangeLog 2019-10-17 22:45:35 UTC (rev 251264) @@ -1,5 +1,17 @@ 2019-10-17 Mark Lam +Harden capacity checks in DFG::LocalCSEPhase::SmallMap. +https://bugs.webkit.

[webkit-changes] [251263] trunk

rce/_javascript_Core/ChangeLog (251262 => 251263) --- trunk/Source/_javascript_Core/ChangeLog 2019-10-17 22:15:09 UTC (rev 251262) +++ trunk/Source/_javascript_Core/ChangeLog 2019-10-17 22:18:57 UTC (rev 251263) @@ -1,3 +1,53 @@ +2019-10-17 Mark Lam + +Use constexpr in more places and

[webkit-changes] [251226] trunk/Source/JavaScriptCore

runk/Source/_javascript_Core/ChangeLog 2019-10-17 05:45:58 UTC (rev 251226) @@ -1,3 +1,137 @@ +2019-10-16 Mark Lam + +Reduce the amount of memory needed to store Options. +https://bugs.webkit.org/show_bug.cgi?id=202105 + +Reviewed by Yusuke Suzuki. + +The size of th

[webkit-changes] [251178] trunk

-10-16 02:32:05 UTC (rev 251177) +++ trunk/JSTests/ChangeLog 2019-10-16 04:01:18 UTC (rev 251178) @@ -1,3 +1,17 @@ +2019-10-15 Mark Lam + +operationSwitchCharWithUnknownKeyType failed to handle OOME when resolving rope string. +https://bugs.webkit.org/show_bug.cgi?id=202

[webkit-changes] [250995] trunk/JSTests

-10-10 23:44:01 UTC (rev 250995) @@ -1,3 +1,17 @@ +2019-10-10 Mark Lam + +Modify JSTests/stress/string-overflow-createError-*.js tests to allow an OOME result. +https://bugs.webkit.org/show_bug.cgi?id=202828 + +Reviewed by Yusuke Suzuki. + +The tests intentiona

[webkit-changes] [250695] trunk/Source/JavaScriptCore

01:26:26 UTC (rev 250695) @@ -1,3 +1,19 @@ +2019-10-03 Mark Lam + +Fix testmasm failure on ASan builds. +https://bugs.webkit.org/show_bug.cgi?id=202554 + +Reviewed by Yusuke Suzuki. + +Gigacage is disabled on ASan builds. So testmasm is sad. Make the relevant t

[webkit-changes] [250636] trunk

UTC (rev 250636) @@ -1,3 +1,13 @@ +2019-10-02 Mark Lam + +DoubleToStringConverter::ToExponential() should null terminate its string. +https://bugs.webkit.org/show_bug.cgi?id=202492 + + +Reviewed by Filip Pizlo. + +* stress/dtoa-AddSubstring-should-uses-strn

[webkit-changes] [250520] trunk/Source/WTF

Log 2019-09-30 18:15:27 UTC (rev 250520) @@ -1,3 +1,14 @@ +2019-09-30 Mark Lam + +Add some assertions to convertUTF8ToUTF16(). +https://bugs.webkit.org/show_bug.cgi?id=202356 + + +Reviewed by Filip Pizlo. + +* wtf/unicode/UTF8Conversion.cpp: +(WTF::Unic

[webkit-changes] [250383] trunk/Source/JavaScriptCore

ipt_Core/ChangeLog 2019-09-26 09:48:28 UTC (rev 250382) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-26 15:07:17 UTC (rev 250383) @@ -1,3 +1,24 @@ +2019-09-26 Mark Lam + +We need to initialize the Gigacage first in setJITEnabled() when disabling the JIT. +https://bugs.we

[webkit-changes] [250289] trunk/Source/JavaScriptCore

250288) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-24 07:43:24 UTC (rev 250289) @@ -1,3 +1,23 @@ +2019-09-24 Mark Lam + +Refactor cellSize() out of VMInspector::verifyCellSize(). +https://bugs.webkit.org/show_bug.cgi?id=202132 + +Reviewed by Saam

[webkit-changes] [250285] trunk/Source/JavaScriptCore

250284) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-24 06:02:30 UTC (rev 250285) @@ -1,3 +1,171 @@ +2019-09-23 Mark Lam + +Introducing Integrity audit functions. +https://bugs.webkit.org/show_bug.cgi?id=202085 + +Reviewed by Saam Barati. + +This patch'

[webkit-changes] [250264] trunk

unk/JSTests/ChangeLog 2019-09-23 23:33:36 UTC (rev 250264) @@ -1,3 +1,13 @@ +2019-09-23 Mark Lam + +Lazy JSGlobalObject property materialization should not use putDirectWithoutTransition. +https://bugs.webkit.org/show_bug.cgi?id=202122 + + +Reviewed by Yusuke Suz

[webkit-changes] [250262] trunk/Source/JavaScriptCore

Modified: trunk/Source/_javascript_Core/ChangeLog (250261 => 250262) --- trunk/Source/_javascript_Core/ChangeLog 2019-09-23 22:54:35 UTC (rev 250261) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-23 22:56:26 UTC (rev 250262) @@ -1,3 +1,125 @@ +2019-09-23 Mark Lam + +Reduce th

[webkit-changes] [250189] trunk/Source/JavaScriptCore

/_javascript_Core/ChangeLog (250188 => 250189) --- trunk/Source/_javascript_Core/ChangeLog 2019-09-22 02:40:44 UTC (rev 250188) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-22 04:01:23 UTC (rev 250189) @@ -1,3 +1,20 @@ +2019-09-21 Mark Lam + +Move JSLexicalEnvironment, DirectArgume

[webkit-changes] [250172] trunk/Source/JavaScriptCore

:27 UTC (rev 250171) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-21 00:29:13 UTC (rev 250172) @@ -1,3 +1,14 @@ +2019-09-20 Mark Lam + +Harden assertion in StructureIDTable::get(). +https://bugs.webkit.org/show_bug.cgi?id=202067 + + +Reviewed by Keith Mil

[webkit-changes] [250112] trunk/Source/JavaScriptCore

019-09-20 00:29:56 UTC (rev 250112) @@ -1,5 +1,21 @@ 2019-09-19 Mark Lam +Rename VMInspector::m_list to m_vmList. +https://bugs.webkit.org/show_bug.cgi?id=202015 + +Reviewed by Yusuke Suzuki. + +m_vmList is more descriptive, and this rename helps grep-ability

[webkit-changes] [250107] trunk/Source/JavaScriptCore

script_Core/ChangeLog 2019-09-19 21:46:03 UTC (rev 250106) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-19 22:23:50 UTC (rev 250107) @@ -1,5 +1,101 @@ 2019-09-19 Mark Lam +Reduce the number of required tag bits for the JSValue. +https://bugs.webkit.org/show_bug.cgi?id=201990

[webkit-changes] [250099] trunk/Source/JavaScriptCore

UTC (rev 250098) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-19 19:02:06 UTC (rev 250099) @@ -1,3 +1,19 @@ +2019-09-19 Mark Lam + +Refactoring: fix broken indentation in JSNonDestructibleProxy.h. +https://bugs.webkit.org/show_bug.cgi?id=201989 + +Reviewed by Saam Bar

[webkit-changes] [250097] trunk/Source/JavaScriptCore

ified: trunk/Source/_javascript_Core/ChangeLog (250096 => 250097) --- trunk/Source/_javascript_Core/ChangeLog 2019-09-19 18:04:21 UTC (rev 250096) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-19 18:28:19 UTC (rev 250097) @@ -1,5 +1,18 @@ 2019-09-19 Mark Lam +Remove a now unn

[webkit-changes] [249875] branches/safari-608.2.11.1-branch/Source/JavaScriptCore

Title: [249875] branches/safari-608.2.11.1-branch/Source/_javascript_Core Revision 249875 Author mark@apple.com Date 2019-09-14 08:41:13 -0700 (Sat, 14 Sep 2019) Log Message Cherry-pick r249345. rdar://problem/55362909 2019-08-30 Mark Lam Fix a bug in SlotVisitor

[webkit-changes] [249874] branches/safari-608.2.11.1-branch

resolve a merge conflict for this patch. * heap/MarkedBlock.cpp: (JSC::MarkedBlock::Handle::zap): Deleted. * heap/MarkedBlock.h: (JSC::MarkedBlock::Handle::zap): Deleted. 2019-08-01 Mark Lam Add crash diagnostics for debugging unexpected zapped cells. https://bugs.webkit.org

[webkit-changes] [249868] trunk/Source/JavaScriptCore

Diff Modified: trunk/Source/_javascript_Core/ChangeLog (249867 => 249868) --- trunk/Source/_javascript_Core/ChangeLog 2019-09-14 02:16:00 UTC (rev 249867) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-14 02:22:49 UTC (rev 249868) @@ -1,5 +1,20 @@ 2019-09-13 Mark Lam +jsc

[webkit-changes] [249865] trunk/Source/JavaScriptCore

unk/Source/_javascript_Core/ChangeLog 2019-09-14 01:52:16 UTC (rev 249865) @@ -1,3 +1,13 @@ +2019-09-13 Mark Lam + +watchOS requires PageSize alignment of 16K for JSC::Config. +https://bugs.webkit.org/show_bug.cgi?id=201786 + + +Reviewed by Yusuke Suz

[webkit-changes] [249858] trunk/Source/JavaScriptCore

bin Morisset. +Re-doing previous fix. + * jit/ExecutableAllocator.h: +(JSC::performJITMemcpy): +(JSC::GigacageAssertScope::GigacageAssertScope): Deleted. +(JSC::GigacageAssertScope::~GigacageAssertScope): Deleted. + +2019-09-13 Mark

[webkit-changes] [249857] trunk/Source/JavaScriptCore

/_javascript_Core/ChangeLog (249856 => 249857) --- trunk/Source/_javascript_Core/ChangeLog 2019-09-13 22:06:51 UTC (rev 249856) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-13 23:18:51 UTC (rev 249857) @@ -1,3 +1,16 @@ +2019-09-13 Mark Lam + +performJITMemcpy() should do

[webkit-changes] [249856] trunk/Source/bmalloc

geLog (249855 => 249856) --- trunk/Source/bmalloc/ChangeLog 2019-09-13 21:43:18 UTC (rev 249855) +++ trunk/Source/bmalloc/ChangeLog 2019-09-13 22:06:51 UTC (rev 249856) @@ -1,3 +1,16 @@ +2019-09-13 Mark Lam + +We should never fail to allocate VA for the Gigacage. +https://bugs.we

[webkit-changes] [249841] trunk/Source/JavaScriptCore

/JSDollarVM.h Diff Modified: trunk/Source/_javascript_Core/ChangeLog (249840 => 249841) --- trunk/Source/_javascript_Core/ChangeLog 2019-09-13 17:30:32 UTC (rev 249840) +++ trunk/Source/_javascript_Core/ChangeLog 2019-09-13 17:54:02 UTC (rev 249841) @@ -1,3 +1,205 @@ +2019-09-13 Mark Lam + +

<    1   2   3   4   5   6   7   8   9   10   >