Title: [200387] trunk/Source/_javascript_Core
Revision 200387
Author msab...@apple.com
Date 2016-05-03 14:42:44 -0700 (Tue, 03 May 2016)
Log Message
Crash: Array.prototype.slice() and .splice() can call fastSlice() after an array is truncated
https://bugs.webkit.org/show_bug.cgi?id=157322
Title: [200447] trunk/Source/_javascript_Core
Revision 200447
Author msab...@apple.com
Date 2016-05-04 18:06:59 -0700 (Wed, 04 May 2016)
Log Message
Enable Dwarf2 debug information in offline assembler for clang compiler
https://bugs.webkit.org/show_bug.cgi?id=157364.
Reviewed by Mark La
Title: [200458] trunk/Source/_javascript_Core
Revision 200458
Author msab...@apple.com
Date 2016-05-05 10:14:49 -0700 (Thu, 05 May 2016)
Log Message
Unreviewed build fix after change set r200447.
Made the detection of clang version XCode build specific.
Now shouldEnableDebugAnnotations(
Title: [221769] trunk
Revision 221769
Author msab...@apple.com
Date 2017-09-07 16:13:38 -0700 (Thu, 07 Sep 2017)
Log Message
Add support for RegExp named capture groups
https://bugs.webkit.org/show_bug.cgi?id=176435
Reviewed by Filip Pizlo.
Source/_javascript_Core:
Added parsing for bo
Title: [221949] trunk
Revision 221949
Author msab...@apple.com
Date 2017-09-12 17:20:36 -0700 (Tue, 12 Sep 2017)
Log Message
String.prototype.replace() puts extra '<' in result when a named capture reference is used without named captures in the RegExp
https://bugs.webkit.org/show_bug.cgi
Title: [222135] trunk
Revision 222135
Author msab...@apple.com
Date 2017-09-17 08:39:02 -0700 (Sun, 17 Sep 2017)
Log Message
https://bugs.webkit.org/show_bug.cgi?id=177038
Add an option to run-jsc-stress-tests to limit tests variations to a basic set
Reviewed by JF Bastien.
JSTests:
*
Title: [222600] trunk
Revision 222600
Author msab...@apple.com
Date 2017-09-27 21:48:51 -0700 (Wed, 27 Sep 2017)
Log Message
Heap out of bounds read in JSC::Yarr::Parser::peek()
https://bugs.webkit.org/show_bug.cgi?id=177423
Reviewed by Mark Lam.
JSTests:
Updated regression test.
* st
Title: [222601] trunk
Revision 222601
Author msab...@apple.com
Date 2017-09-27 22:15:50 -0700 (Wed, 27 Sep 2017)
Log Message
REGRESSION(210837): RegExp containing failed non-zero minimum greedy groups incorrectly match
https://bugs.webkit.org/show_bug.cgi?id=177570
Reviewed by Filip Pizl
Title: [222607] trunk/Source/_javascript_Core/ChangeLog
Revision 222607
Author msab...@apple.com
Date 2017-09-28 04:20:24 -0700 (Thu, 28 Sep 2017)
Log Message
Unreviewed fix of description in Changelog.
Modified Paths
trunk/Source/_javascript_Core/ChangeLog
Diff
Modified: trunk/Sou
Title: [218203] trunk
Revision 218203
Author msab...@apple.com
Date 2017-06-13 14:52:04 -0700 (Tue, 13 Jun 2017)
Log Message
DFG doesn't properly handle a property that is change to read only in a prototype
https://bugs.webkit.org/show_bug.cgi?id=173321
Reviewed by Filip Pizlo.
JSTests:
Title: [218218] trunk/Source/_javascript_Core
Revision 218218
Author msab...@apple.com
Date 2017-06-13 15:39:34 -0700 (Tue, 13 Jun 2017)
Log Message
Refactor AbsenceOfSetter to AbsenceOfSetEffects
https://bugs.webkit.org/show_bug.cgi?id=173322
Reviewed by Filip Pizlo.
* bytecode/ObjectP
Title: [218414] trunk/Source/_javascript_Core
Revision 218414
Author msab...@apple.com
Date 2017-06-16 14:12:15 -0700 (Fri, 16 Jun 2017)
Log Message
Intermittent crash running Internal/Tests/InternalJSTests/Regress/radar-24300617.js
https://bugs.webkit.org/show_bug.cgi?id=173488
Reviewed
Title: [219031] trunk
Revision 219031
Author msab...@apple.com
Date 2017-06-30 18:16:59 -0700 (Fri, 30 Jun 2017)
Log Message
RegExp's anchored with .* with \g flag can return wrong match start for strings with multiple matches
https://bugs.webkit.org/show_bug.cgi?id=174044
Reviewed by O
Title: [219032] trunk/JSTests
Revision 219032
Author msab...@apple.com
Date 2017-06-30 18:20:01 -0700 (Fri, 30 Jun 2017)
Log Message
Skip a test on ARM64 platform since we run out of address space.
Rubber stamped by Saam Barati.
* stress/dont-reserve-huge-capacity-lexer.js:
Modified Pa
Title: [223010] trunk/Source/_javascript_Core
Revision 223010
Author msab...@apple.com
Date 2017-10-06 16:21:48 -0700 (Fri, 06 Oct 2017)
Log Message
Enable RegExp JIT for match only Unicode RegExp's
https://bugs.webkit.org/show_bug.cgi?id=178033
Reviewed by JF Bastien.
I forgot to turn
Title: [223142] trunk/Source/_javascript_Core
Revision 223142
Author msab...@apple.com
Date 2017-10-10 14:10:17 -0700 (Tue, 10 Oct 2017)
Log Message
Unreviewed build fix.
Removed unused lambda capture.
* yarr/YarrPattern.cpp:
(JSC::Yarr::CharacterClassConstructor::appendInverted):
Modi
Title: [223197] trunk/Source/_javascript_Core
Revision 223197
Author msab...@apple.com
Date 2017-10-11 12:13:59 -0700 (Wed, 11 Oct 2017)
Log Message
Update _javascript_Core/ucd/CaseFolding.txt to Unicode database 10.0
https://bugs.webkit.org/show_bug.cgi?id=178106
Reviewed by Keith Mille
Title: [223201] trunk/JSTests
Revision 223201
Author msab...@apple.com
Date 2017-10-11 12:24:40 -0700 (Wed, 11 Oct 2017)
Log Message
Disable test262 named capture group tests with direct unicode names and with references before definitions
https://bugs.webkit.org/show_bug.cgi?id=178177
R
Title: [223219] trunk/Source/WTF
Revision 223219
Author msab...@apple.com
Date 2017-10-11 17:33:36 -0700 (Wed, 11 Oct 2017)
Log Message
[JSC] Add ability to build with ARMV8 ILP32 ABI
https://bugs.webkit.org/show_bug.cgi?id=178194
Reviewed by Saam Barati.
For ARMV8 32 bit ABI, use JSVAL
Title: [223724] trunk
Revision 223724
Author msab...@apple.com
Date 2017-10-19 16:26:06 -0700 (Thu, 19 Oct 2017)
Log Message
Test262: RegExp/property-escapes/generated/Emoji_Component.js fails with current RegExp Unicode Properties implementation
https://bugs.webkit.org/show_bug.cgi?id=17
Title: [223923] trunk/Source/_javascript_Core
Revision 223923
Author msab...@apple.com
Date 2017-10-24 14:31:01 -0700 (Tue, 24 Oct 2017)
Log Message
Allow OjbC Weak References when building TestAPI
https://bugs.webkit.org/show_bug.cgi?id=178748
Reviewed by Saam Barati.
Set TestAPI build
Title: [223926] trunk/Source/WTF
Revision 223926
Author msab...@apple.com
Date 2017-10-24 14:48:10 -0700 (Tue, 24 Oct 2017)
Log Message
WTF: Eliminated PLATFORM checks for HAVE_MACH_EXCEPTIONS
https://bugs.webkit.org/show_bug.cgi?id=178747
Reviewed by Saam Barati.
Removed unnecessary PL
Title: [223937] trunk/Source/_javascript_Core
Revision 223937
Author msab...@apple.com
Date 2017-10-24 15:59:51 -0700 (Tue, 24 Oct 2017)
Log Message
Allow OjbC Weak References when building TestAPI
https://bugs.webkit.org/show_bug.cgi?id=178748
Reviewed by Dan Bernstein.
Set TestAPI bui
Title: [223980] trunk/Source/_javascript_Core
Revision 223980
Author msab...@apple.com
Date 2017-10-25 14:12:38 -0700 (Wed, 25 Oct 2017)
Log Message
REGRESSION(r223937): Use of -fobjc-weak causes build failures with older compilers
https://bugs.webkit.org/show_bug.cgi?id=178825
Reviewed
Title: [224072] trunk
Revision 224072
Author msab...@apple.com
Date 2017-10-26 17:31:50 -0700 (Thu, 26 Oct 2017)
Log Message
REGRESSION(r222601): We fail to properly backtrack into a sub pattern of a parenthesis with non-zero minimum
https://bugs.webkit.org/show_bug.cgi?id=178890
Reviewe
Title: [209413] trunk/Source/WTF
Revision 209413
Author msab...@apple.com
Date 2016-12-06 13:03:43 -0800 (Tue, 06 Dec 2016)
Log Message
REGRESSION(r209399): Causes crashes when dumping JIT disassembly
https://bugs.webkit.org/show_bug.cgi?id=165483
Reviewed by Geoffrey Garen.
Fixed the R
Title: [209654] trunk/Source/_javascript_Core
Revision 209654
Author msab...@apple.com
Date 2016-12-09 23:43:50 -0800 (Fri, 09 Dec 2016)
Log Message
Unreviewed build fix for 32 bit builds.
* dfg/DFGMinifiedNode.h:
(JSC::DFG::MinifiedNode::argumentIndex): Added a static_cast().
Modified
Title: [209663] trunk/Source/_javascript_Core
Revision 209663
Author msab...@apple.com
Date 2016-12-10 06:13:10 -0800 (Sat, 10 Dec 2016)
Log Message
Unreviewed build fix for the CLOOP after r209653
* jit/GPRInfo.h:
Provided a definition for NUMBER_OF_JS_FUNCTION_ARGUMENT_REGISTERS when t
Title: [209673] trunk
Revision 209673
Author msab...@apple.com
Date 2016-12-10 13:04:05 -0800 (Sat, 10 Dec 2016)
Log Message
REGRESSION(r209653) Crash in CallFrameShuffler::snapshot()
https://bugs.webkit.org/show_bug.cgi?id=165728
Reviewed by Filip Pizlo.
JSTests:
New regression test.
Title: [209708] trunk/Source/_javascript_Core
Revision 209708
Author msab...@apple.com
Date 2016-12-12 09:10:30 -0800 (Mon, 12 Dec 2016)
Log Message
FTL: Dumping disassembly requires that code origin is set when making polymorphic tail calls.
https://bugs.webkit.org/show_bug.cgi?id=165747
Title: [209847] trunk/Source/_javascript_Core
Revision 209847
Author msab...@apple.com
Date 2016-12-14 17:41:53 -0800 (Wed, 14 Dec 2016)
Log Message
The stress GC bot crashes in _javascript_Core beneath ShadowChicken::update and Inspector::jsToInspectorValue
https://bugs.webkit.org/show_b
Title: [203616] trunk/Tools
Revision 203616
Author msab...@apple.com
Date 2016-07-22 13:53:41 -0700 (Fri, 22 Jul 2016)
Log Message
Don't run FTL related JSC stress tests on non-FTL platforms
https://bugs.webkit.org/show_bug.cgi?id=160033
Reviewed by Mark Lam.
Added check for running tes
Title: [203625] trunk/Tools
Revision 203625
Author msab...@apple.com
Date 2016-07-22 16:17:13 -0700 (Fri, 22 Jul 2016)
Log Message
REGRESSION(203616): no FTL testing was inadvertently removed
https://bugs.webkit.org/show_bug.cgi?id=160100
Rubber-stamped by Filip Pizlo.
Added runNoFTL ba
Title: [203851] trunk/Source/_javascript_Core
Revision 203851
Author msab...@apple.com
Date 2016-07-28 17:30:32 -0700 (Thu, 28 Jul 2016)
Log Message
ARM64: Fused left shift with a right shift can create NaNs from integers
https://bugs.webkit.org/show_bug.cgi?id=160329
Reviewed by Geoffre
Title: [203923] trunk/Source/_javascript_Core
Revision 203923
Author msab...@apple.com
Date 2016-07-29 15:04:02 -0700 (Fri, 29 Jul 2016)
Log Message
Refactor DFG::Node::hasLocal() to accessesStack()
https://bugs.webkit.org/show_bug.cgi?id=160357
Reviewed by Filip Pizlo.
Refactoring in p
Title: [204204] trunk/Source/_javascript_Core
Revision 204204
Author msab...@apple.com
Date 2016-08-05 17:01:45 -0700 (Fri, 05 Aug 2016)
Log Message
compilePutByValForIntTypedArray() has a slow path in the middle of its processing
https://bugs.webkit.org/show_bug.cgi?id=160614
Reviewed b
Title: [204362] trunk
Revision 204362
Author msab...@apple.com
Date 2016-08-10 16:45:05 -0700 (Wed, 10 Aug 2016)
Log Message
Baseline GetByVal and PutByVal for cache ID stubs need to handle exceptions
https://bugs.webkit.org/show_bug.cgi?id=160749
Reviewed by Filip Pizlo.
JSTests:
New
Title: [197862] trunk/Source/_javascript_Core
Revision 197862
Author msab...@apple.com
Date 2016-03-09 10:10:59 -0800 (Wed, 09 Mar 2016)
Log Message
Harden JSC Root element functions from bad values
https://bugs.webkit.org/show_bug.cgi?id=155234
Reviewed by Saam Barati.
Changed jsCast()
Title: [197869] trunk
Revision 197869
Author msab...@apple.com
Date 2016-03-09 12:11:46 -0800 (Wed, 09 Mar 2016)
Log Message
[ES6] Implement RegExp sticky flag and related functionality
https://bugs.webkit.org/show_bug.cgi?id=155177
Reviewed by Saam Barati.
Source/_javascript_Core:
Imp
Title: [197962] trunk
Revision 197962
Author msab...@apple.com
Date 2016-03-10 15:38:15 -0800 (Thu, 10 Mar 2016)
Log Message
[ES6] Allow RegExp constructor to take pattern from an existing RegExp with new flags
https://bugs.webkit.org/show_bug.cgi?id=155315
Reviewed by Saam Barati.
Sour
Title: [197963] trunk/Source/_javascript_Core
Revision 197963
Author msab...@apple.com
Date 2016-03-10 15:48:58 -0800 (Thu, 10 Mar 2016)
Log Message
[ES6] RegExp sticky flag should be ignored in String.match when global flag is given
https://bugs.webkit.org/show_bug.cgi?id=155332
Reviewe
Title: [198348] trunk/Source/_javascript_Core
Revision 198348
Author msab...@apple.com
Date 2016-03-17 13:13:18 -0700 (Thu, 17 Mar 2016)
Log Message
[ES6] Getters and Setters should be prefixed appropriately
https://bugs.webkit.org/show_bug.cgi?id=155593
Reviewed by Mark Lam.
Changed th
Title: [198478] trunk/Source/_javascript_Core
Revision 198478
Author msab...@apple.com
Date 2016-03-20 16:08:51 -0700 (Sun, 20 Mar 2016)
Log Message
Crash in stress/regexp-matches-array-slow-put.js due to stomping on memory when having bad time
https://bugs.webkit.org/show_bug.cgi?id=1556
Title: [198554] trunk
Revision 198554
Author msab...@apple.com
Date 2016-03-22 14:42:06 -0700 (Tue, 22 Mar 2016)
Log Message
[ES6] Implement RegExp.prototype[@@match]
https://bugs.webkit.org/show_bug.cgi?id=155711
Reviewed by Filip Pizlo.
Source/_javascript_Core:
Implemented ES6 spec f
Title: [198592] trunk
Revision 198592
Author msab...@apple.com
Date 2016-03-23 14:03:02 -0700 (Wed, 23 Mar 2016)
Log Message
_javascript_Core ArrayPrototype::join shouldn't cache butterfly when it makes effectful calls
https://bugs.webkit.org/show_bug.cgi?id=155776
Reviewed by Saam Barat
Title: [198624] trunk
Revision 198624
Author msab...@apple.com
Date 2016-03-24 07:19:37 -0700 (Thu, 24 Mar 2016)
Log Message
[ES6] Greedy unicode RegExp's don't properly backtrack past non BMP characters
https://bugs.webkit.org/show_bug.cgi?id=155829
Reviewed by Saam Barati.
Source/_jav
Title: [198625] trunk/Source/_javascript_Core
Revision 198625
Author msab...@apple.com
Date 2016-03-24 09:13:46 -0700 (Thu, 24 Mar 2016)
Log Message
[ES6] Add Proxy based tests for RegExp.prototype[@@match]
https://bugs.webkit.org/show_bug.cgi?id=155807
Reviewed by Saam Barati.
Added ne
Title: [198647] trunk/Source/_javascript_Core
Revision 198647
Author msab...@apple.com
Date 2016-03-24 15:35:35 -0700 (Thu, 24 Mar 2016)
Log Message
Create private builtin helper advanceStringIndexUnicode() for use by RegExp builtins
https://bugs.webkit.org/show_bug.cgi?id=155855
Reviewe
Title: [198866] trunk
Revision 198866
Author msab...@apple.com
Date 2016-03-30 17:38:20 -0700 (Wed, 30 Mar 2016)
Log Message
[ES6] Quantified unicode regular expressions do not work for counts greater than 1
https://bugs.webkit.org/show_bug.cgi?id=156044
Reviewed by Mark Lam.
Source/_ja
Title: [212262] trunk/Source/_javascript_Core
Revision 212262
Author msab...@apple.com
Date 2017-02-13 17:08:54 -0800 (Mon, 13 Feb 2017)
Log Message
asyncDisassembly crashes on iOS
https://bugs.webkit.org/show_bug.cgi?id=168259
Reviewed by Filip Pizlo.
Eliminated the dumping of the dis
Title: [212592] trunk/Source/_javascript_Core
Revision 212592
Author msab...@apple.com
Date 2017-02-17 15:52:17 -0800 (Fri, 17 Feb 2017)
Log Message
Improve ARM64 disassembler handling of pseudo ops, unsupported opcodes and zero reg
https://bugs.webkit.org/show_bug.cgi?id=168527
Reviewed
Title: [213151] trunk/Source
Revision 213151
Author msab...@apple.com
Date 2017-02-28 10:50:00 -0800 (Tue, 28 Feb 2017)
Log Message
Add ability to configure JSC options from a file
https://bugs.webkit.org/show_bug.cgi?id=168914
Reviewed by Filip Pizlo.
Added the ability to set options a
Title: [213242] trunk/Source/_javascript_Core
Revision 213242
Author msab...@apple.com
Date 2017-03-01 14:28:23 -0800 (Wed, 01 Mar 2017)
Log Message
Source/_javascript_Core/ChangeLog
https://bugs.webkit.org/show_bug.cgi?id=169055
Reviewed by Mark Lam.
Made local copies of options string
Title: [213323] trunk/Source/_javascript_Core
Revision 213323
Author msab...@apple.com
Date 2017-03-02 16:24:15 -0800 (Thu, 02 Mar 2017)
Log Message
Add JSC identity when code signing to allow debugging on iOS
https://bugs.webkit.org/show_bug.cgi?id=169099
Reviewed by Filip Pizlo.
* Con
Title: [213397] trunk/Source/_javascript_Core
Revision 213397
Author msab...@apple.com
Date 2017-03-03 16:55:45 -0800 (Fri, 03 Mar 2017)
Log Message
Add load / store exclusive instruction group to ARM64 disassembler
https://bugs.webkit.org/show_bug.cgi?id=169152
Reviewed by Filip Pizlo.
Title: [213399] trunk/Source/_javascript_Core
Revision 213399
Author msab...@apple.com
Date 2017-03-03 17:10:55 -0800 (Fri, 03 Mar 2017)
Log Message
Add support for relative pathnames to JSC config files
https://bugs.webkit.org/show_bug.cgi?id=169154
Reviewed by Saam Barati.
If the conf
Title: [213483] trunk
Revision 213483
Author msab...@apple.com
Date 2017-03-06 17:51:19 -0800 (Mon, 06 Mar 2017)
Log Message
Take advantage of fast permissions switching of JIT memory for devices that support it
https://bugs.webkit.org/show_bug.cgi?id=169155
Reviewed by Saam Barati.
Sou
Title: [213492] trunk/Source/WebKit2
Revision 213492
Author msab...@apple.com
Date 2017-03-06 19:37:35 -0800 (Mon, 06 Mar 2017)
Log Message
Unreviewed build fix after r213483.
* Configurations/Base.xcconfig:
Modified Paths
trunk/Source/WebKit2/ChangeLog
trunk/Source/WebKit2/Configurati
Title: [213496] trunk/Source/WebKit2
Revision 213496
Author msab...@apple.com
Date 2017-03-06 20:39:15 -0800 (Mon, 06 Mar 2017)
Log Message
Unreviewed build fix after r213492.
* Configurations/Base.xcconfig:
Modified Paths
trunk/Source/WebKit2/ChangeLog
trunk/Source/WebKit2/Configurati
Title: [213500] trunk/Source/WebKit/mac
Revision 213500
Author msab...@apple.com
Date 2017-03-06 21:44:03 -0800 (Mon, 06 Mar 2017)
Log Message
Unreviewed build fix to add
-isystem $(SDKROOT)/System/Library/Frameworks/System.framework/PrivateHeaders
for objective C++ files.
* Configuratio
Title: [207491] trunk/Source/_javascript_Core
Revision 207491
Author msab...@apple.com
Date 2016-10-18 14:28:58 -0700 (Tue, 18 Oct 2016)
Log Message
Add JSC option to show time spent in each optimization phase
https://bugs.webkit.org/show_bug.cgi?id=163617
Reviewed by Saam Barati.
Added
Title: [208299] trunk/Source/_javascript_Core
Revision 208299
Author msab...@apple.com
Date 2016-11-02 14:09:35 -0700 (Wed, 02 Nov 2016)
Log Message
Crash beneath SlotVisitor::drain @ cooksillustrated.com
https://bugs.webkit.org/show_bug.cgi?id=164304
Reviewed by Mark Lam.
Added back wr
Title: [200610] trunk/Source/_javascript_Core
Revision 200610
Author msab...@apple.com
Date 2016-05-09 20:22:39 -0700 (Mon, 09 May 2016)
Log Message
Crash beneath ObjCCallbackFunctionImpl::call
https://bugs.webkit.org/show_bug.cgi?id=157491
Reviewed by Saam Barati.
Clear any exceptions
Title: [200666] trunk/Source/_javascript_Core
Revision 200666
Author msab...@apple.com
Date 2016-05-10 18:56:00 -0700 (Tue, 10 May 2016)
Log Message
REGRESSION(r200447): Unable to build C_LOOP with clang version 800.0.12 or higher
https://bugs.webkit.org/show_bug.cgi?id=157549
Reviewed b
Title: [200946] trunk
Revision 200946
Author msab...@apple.com
Date 2016-05-16 10:40:15 -0700 (Mon, 16 May 2016)
Log Message
RegExp /y flag incorrect handling of mixed-length alternation
https://bugs.webkit.org/show_bug.cgi?id=157723
Reviewed by Filip Pizlo.
Source/_javascript_Core:
Pr
Title: [200993] trunk/Source/WTF
Revision 200993
Author msab...@apple.com
Date 2016-05-16 21:02:40 -0700 (Mon, 16 May 2016)
Log Message
ARMV7K: Crash at _javascript_Core: WTF::ScopedLambdaFunctor
Modified Paths
trunk/Source/WTF/ChangeLog
trunk/Source/WTF/wtf/ParkingLot.cpp
trunk/Source/
Title: [201105] trunk
Revision 201105
Author msab...@apple.com
Date 2016-05-18 15:36:01 -0700 (Wed, 18 May 2016)
Log Message
r199812 broke test262
https://bugs.webkit.org/show_bug.cgi?id=157595
Reviewed by Filip Pizlo.
Source/_javascript_Core:
Added a reasonable limit to the size of th
Title: [201172] trunk/Source/_javascript_Core
Revision 201172
Author msab...@apple.com
Date 2016-05-19 11:39:04 -0700 (Thu, 19 May 2016)
Log Message
Unreviewed build fix.
Skipping this new test as it times out on the bots.
Issue tracked in https://bugs.webkit.org/show_bug.cgi?id=157903
Title: [201589] trunk/Source/_javascript_Core
Revision 201589
Author msab...@apple.com
Date 2016-06-01 21:07:14 -0700 (Wed, 01 Jun 2016)
Log Message
Runaway WebContent process CPU & memory @ foxnews.com
https://bugs.webkit.org/show_bug.cgi?id=158290
Reviewed by Mark Lam.
Clear the throw
Title: [201618] trunk
Revision 201618
Author msab...@apple.com
Date 2016-06-02 14:53:55 -0700 (Thu, 02 Jun 2016)
Log Message
[iOS]: Some JSC stress tests fail running out of executable memory when the LLInt is disabled
https://bugs.webkit.org/show_bug.cgi?id=158317
Reviewed by Saam Barat
Title: [201619] trunk
Revision 201619
Author msab...@apple.com
Date 2016-06-02 15:01:50 -0700 (Thu, 02 Jun 2016)
Log Message
REGRESSION(r200694): %ThrowTypeError% is not unique
https://bugs.webkit.org/show_bug.cgi?id=158231
Reviewed by Joseph Pecoraro.
Source/_javascript_Core:
The ES6
Title: [201737] trunk/Source/_javascript_Core
Revision 201737
Author msab...@apple.com
Date 2016-06-06 20:02:06 -0700 (Mon, 06 Jun 2016)
Log Message
octal and binary parsing is wrong for some programs
https://bugs.webkit.org/show_bug.cgi?id=158437
Reviewed by Saam Barati.
When there is
Title: [201863] trunk
Revision 201863
Author msab...@apple.com
Date 2016-06-09 07:54:50 -0700 (Thu, 09 Jun 2016)
Log Message
WebKitTestRunner and DumpRenderTree do not handle dangling surrogate characters
https://bugs.webkit.org/show_bug.cgi?id=154863
Reviewed by Alexey Proskuryakov.
So
Title: [201892] trunk
Revision 201892
Author msab...@apple.com
Date 2016-06-09 16:30:39 -0700 (Thu, 09 Jun 2016)
Log Message
ES6: Reusing function name as a parameter name shouldn't throw Syntax Error
https://bugs.webkit.org/show_bug.cgi?id=158575
Reviewed by Benjamin Poulain.
Source/_j
Title: [194208] trunk/Source/_javascript_Core
Revision 194208
Author msab...@apple.com
Date 2015-12-16 21:02:49 -0800 (Wed, 16 Dec 2015)
Log Message
ARM64 MacroAssembler improperly reuses data temp register in test32() and test8() calls
https://bugs.webkit.org/show_bug.cgi?id=152370
Revi
Title: [209938] trunk/Source/WTF
Revision 209938
Author msab...@apple.com
Date 2016-12-16 14:26:09 -0800 (Fri, 16 Dec 2016)
Log Message
REGRESSION: HipChat and Mail sometimes hang beneath JSC::Heap::lastChanceToFinalize()
https://bugs.webkit.org/show_bug.cgi?id=165962
Reviewed by Filip P
Title: [210457] trunk
Revision 210457
Author msab...@apple.com
Date 2017-01-06 15:30:57 -0800 (Fri, 06 Jan 2017)
Log Message
@putByValDirect in Array.of and Array.from overwrites non-writable/configurable properties
https://bugs.webkit.org/show_bug.cgi?id=153486
Reviewed by Saam Barati.
Title: [210837] trunk
Revision 210837
Author msab...@apple.com
Date 2017-01-17 17:27:04 -0800 (Tue, 17 Jan 2017)
Log Message
Nested parenthesized regular expressions with non-zero minimum counts appear to hang and use lots of memory
https://bugs.webkit.org/show_bug.cgi?id=167125
Reviewed
Title: [211043] trunk/Source/_javascript_Core
Revision 211043
Author msab...@apple.com
Date 2017-01-23 10:45:17 -0800 (Mon, 23 Jan 2017)
Log Message
IntlObject uses JSArray::tryCreateUninitialized in an unsafe way
https://bugs.webkit.org/show_bug.cgi?id=167288
Reviewed by Filip Pizlo.
R
Title: [202490] trunk
Revision 202490
Author msab...@apple.com
Date 2016-06-27 10:38:55 -0700 (Mon, 27 Jun 2016)
Log Message
ES6 Change: Unify handling of RegExp CharacterClassEscapes \w and \W and Word Asserts \b and \B
https://bugs.webkit.org/show_bug.cgi?id=158505
Reviewed by Geoffrey
Title: [202597] trunk
Revision 202597
Author msab...@apple.com
Date 2016-06-28 17:38:58 -0700 (Tue, 28 Jun 2016)
Log Message
REGRESSION (r200946): Improper backtracking from last alternative in sticky patterns
https://bugs.webkit.org/show_bug.cgi?id=159233
Reviewed by Mark Lam.
Source/_
Title: [202604] trunk/Tools
Revision 202604
Author msab...@apple.com
Date 2016-06-28 19:26:54 -0700 (Tue, 28 Jun 2016)
Log Message
btjs no longer accepts optional frame count argument
https://bugs.webkit.org/show_bug.cgi?id=159235
Reviewed by Saam Barati.
Fix the detection of optional b
Title: [202670] trunk/Source/_javascript_Core
Revision 202670
Author msab...@apple.com
Date 2016-06-29 21:46:51 -0700 (Wed, 29 Jun 2016)
Log Message
REGRESSION(200114): Netflix app does not see ChromeCast
https://bugs.webkit.org/show_bug.cgi?id=159287
Reviewed by Benjamin Poulain.
Chang
Title: [202955] trunk/Source/_javascript_Core
Revision 202955
Author msab...@apple.com
Date 2016-07-07 20:47:59 -0700 (Thu, 07 Jul 2016)
Log Message
REGRESSION(184445): Need to insert a StoreBarrier when we don't know child's epoch
https://bugs.webkit.org/show_bug.cgi?id=159537
Reviewed
Title: [203000] trunk/Source/_javascript_Core
Revision 203000
Author msab...@apple.com
Date 2016-07-08 11:56:31 -0700 (Fri, 08 Jul 2016)
Log Message
Dumping the object graph doesn't work with verbose GC logging
https://bugs.webkit.org/show_bug.cgi?id=159569
Reviewed by Mark Lam.
The cur
Title: [203012] trunk/Source/_javascript_Core
Revision 203012
Author msab...@apple.com
Date 2016-07-08 17:24:25 -0700 (Fri, 08 Jul 2016)
Log Message
ASSERTION FAILED: Heap::isMarked(cell) in SlotVisitor::appendToMarkStack(JSC::JSCell *)
https://bugs.webkit.org/show_bug.cgi?id=159588
Revi
Title: [203202] trunk
Revision 203202
Author msab...@apple.com
Date 2016-07-13 17:11:56 -0700 (Wed, 13 Jul 2016)
Log Message
Some bad unicode regex escapes aren't flagged as errors
https://bugs.webkit.org/show_bug.cgi?id=158080
Reviewed by Saam Barati.
Source/_javascript_Core:
If we ha
Title: [203206] trunk/Source/_javascript_Core
Revision 203206
Author msab...@apple.com
Date 2016-07-13 18:20:11 -0700 (Wed, 13 Jul 2016)
Log Message
YARR uses mixture of int and unsigned values to index into subject string
https://bugs.webkit.org/show_bug.cgi?id=159744
Reviewed by Benjam
Title: [203376] trunk/Source
Revision 203376
Author msab...@apple.com
Date 2016-07-18 15:20:50 -0700 (Mon, 18 Jul 2016)
Log Message
ASSERTION FAILED: : (year >= 1970 && yearday >= 0) || (year < 1970 && yearday < 0) -- WTF/wtf/DateMath.cpp
https://bugs.webkit.org/show_bug.cgi?id=159883
Re
Title: [203452] trunk/Source/_javascript_Core
Revision 203452
Author msab...@apple.com
Date 2016-07-20 07:50:32 -0700 (Wed, 20 Jul 2016)
Log Message
CrashOnOverflow in JSC::Yarr::YarrPatternConstructor::setupAlternativeOffsets
https://bugs.webkit.org/show_bug.cgi?id=159954
Reviewed by Be
Title: [214977] trunk/JSTests
Revision 214977
Author msab...@apple.com
Date 2017-04-05 16:31:35 -0700 (Wed, 05 Apr 2017)
Log Message
REGRESSION (Safari 10.1): Inserting elements into arrays fails when array contains very large numbers
https://bugs.webkit.org/show_bug.cgi?id=170264
Rubbe
Title: [214978] trunk/JSTests
Revision 214978
Author msab...@apple.com
Date 2017-04-05 16:45:46 -0700 (Wed, 05 Apr 2017)
Log Message
Unreviewed rollout of r214642 as the test still intermittently fails.
Disabled ChakraCore/test/fieldopts/objtypespec-newobj-invalidation.1.js.
* ChakraCor
Title: [215072] trunk
Revision 215072
Author msab...@apple.com
Date 2017-04-06 17:16:18 -0700 (Thu, 06 Apr 2017)
Log Message
Cannot Object.seal() or Object.freeze() global "this"
https://bugs.webkit.org/show_bug.cgi?id=170549
Reviewed by Mark Lam.
JSTests:
Enabled failing tests fixed b
Title: [215133] trunk/JSTests
Revision 215133
Author msab...@apple.com
Date 2017-04-07 17:56:24 -0700 (Fri, 07 Apr 2017)
Log Message
Fix and enable ChakraCore/test/es6/ES6Function_bugs.js after r215072
https://bugs.webkit.org/show_bug.cgi?id=170580
Reviewed by JF Bastien.
Commented out
Title: [215272] trunk
Revision 215272
Author msab...@apple.com
Date 2017-04-12 10:35:31 -0700 (Wed, 12 Apr 2017)
Log Message
Implement Object.isFrozen() and Object.isSealed() per ECMA spec
https://bugs.webkit.org/show_bug.cgi?id=170753
Reviewed by Mark Lam.
JSTests:
Added JSC baseline
Title: [215471] trunk/Source/_javascript_Core
Revision 215471
Author msab...@apple.com
Date 2017-04-18 10:54:26 -0700 (Tue, 18 Apr 2017)
Log Message
REGRESSION(215272): microbenchmark/seal-and-do-work and microbenchmark/freeze-and-do-work are 27x slower
https://bugs.webkit.org/show_bug.cg
Title: [215539] trunk/Source/_javascript_Core
Revision 215539
Author msab...@apple.com
Date 2017-04-19 16:23:39 -0700 (Wed, 19 Apr 2017)
Log Message
Tune GC related JSC options for iOS
https://bugs.webkit.org/show_bug.cgi?id=171019
Reviewed by Mark Lam.
Always set these GC options on iO
Title: [215618] trunk/Source/_javascript_Core
Revision 215618
Author msab...@apple.com
Date 2017-04-21 11:28:51 -0700 (Fri, 21 Apr 2017)
Log Message
X86-64 Assembler doesn't handle xchg with byte register src
https://bugs.webkit.org/show_bug.cgi?id=171118
Reviewed by Saam Barati.
* asse
Title: [215775] trunk/Source
Revision 215775
Author msab...@apple.com
Date 2017-04-25 17:39:22 -0700 (Tue, 25 Apr 2017)
Log Message
Call bmalloc scavenger first when handling a memory pressure event
https://bugs.webkit.org/show_bug.cgi?id=171289
Reviewed by Geoffrey Garen.
Source/bmallo
Title: [215909] trunk/Source/bmalloc
Revision 215909
Author msab...@apple.com
Date 2017-04-27 17:37:51 -0700 (Thu, 27 Apr 2017)
Log Message
bmalloc scavenger should know what page classes are allocating
https://bugs.webkit.org/show_bug.cgi?id=171384
Reviewed by Geoffrey Garen.
This chan
101 - 200 of 949 matches
Mail list logo
