Title: [170586] trunk/LayoutTests
Revision 170586
Author msab...@apple.com
Date 2014-06-30 10:37:06 -0700 (Mon, 30 Jun 2014)
Log Message
Reduce memory required for js/typedarray-zero-size.js
https://bugs.webkit.org/show_bug.cgi?id=134448
Reviewed by Darin Adler.
Making the loop count
Title: [170591] trunk/LayoutTests
Revision 170591
Author msab...@apple.com
Date 2014-06-30 11:22:25 -0700 (Mon, 30 Jun 2014)
Log Message
Reduce memory required for js/typedarray-zero-size.js
https://bugs.webkit.org/show_bug.cgi?id=134448
Reviewed by Mark Hahnenberg.
Reduce the loop
Title: [170601] trunk
Revision 170601
Author msab...@apple.com
Date 2014-06-30 15:12:17 -0700 (Mon, 30 Jun 2014)
Log Message
Add option to run-jsc-stress-testes to filter out tests that use large heaps
https://bugs.webkit.org/show_bug.cgi?id=134458
Reviewed by Filip Pizlo.
Title: [170602] trunk/LayoutTests
Revision 170602
Author msab...@apple.com
Date 2014-06-30 15:13:37 -0700 (Mon, 30 Jun 2014)
Log Message
js/script-tests/function-apply-many-args.js fails on ARM
https://bugs.webkit.org/show_bug.cgi?id=126588
Reviewed by Mark Lam.
Removed three test
Title: [172429] trunk/Source/_javascript_Core
Revision 172429
Author msab...@apple.com
Date 2014-08-11 20:20:04 -0700 (Mon, 11 Aug 2014)
Log Message
Eliminate {push,pop}CalleeSaves in favor of individual pushes pops
https://bugs.webkit.org/show_bug.cgi?id=127155
Reviewed by Geoffrey
Title: [172665] trunk/Source/_javascript_Core
Revision 172665
Author msab...@apple.com
Date 2014-08-15 18:45:40 -0700 (Fri, 15 Aug 2014)
Log Message
Change callToJavaScript and callToNativeFunction so their callFrames match the native calling conventions
Title: [172792] trunk/Source/_javascript_Core
Revision 172792
Author msab...@apple.com
Date 2014-08-19 17:36:13 -0700 (Tue, 19 Aug 2014)
Log Message
Crash in jsc-layout-tests.yaml/js/script-tests/reentrant-caching.js
https://bugs.webkit.org/show_bug.cgi?id=136080
Reviewed by Mark Lam.
Title: [172807] trunk/Source/_javascript_Core
Revision 172807
Author msab...@apple.com
Date 2014-08-20 13:28:24 -0700 (Wed, 20 Aug 2014)
Log Message
REGRESSION: Web Inspector crashes when reloading apple.com with Timeline recording active
https://bugs.webkit.org/show_bug.cgi?id=136034
Title: [172867] trunk/Source/_javascript_Core
Revision 172867
Author msab...@apple.com
Date 2014-08-22 12:54:30 -0700 (Fri, 22 Aug 2014)
Log Message
REGRESSION(r163179): Sporadic crash in js/dom/line-column-numbers.html test
https://bugs.webkit.org/show_bug.cgi?id=136111
Reviewed by
Title: [172932] trunk/Source/_javascript_Core
Revision 172932
Author msab...@apple.com
Date 2014-08-25 12:32:40 -0700 (Mon, 25 Aug 2014)
Log Message
After r172867 another crash in in js/dom/line-column-numbers.html
https://bugs.webkit.org/show_bug.cgi?id=136192
Reviewed by Geoffrey
Title: [172959] trunk/Source/_javascript_Core
Revision 172959
Author msab...@apple.com
Date 2014-08-26 08:55:01 -0700 (Tue, 26 Aug 2014)
Log Message
REGRESSION(r172794) + 32Bit build: ASSERT failures in for-in-tests.js tests.
https://bugs.webkit.org/show_bug.cgi?id=136165
Reviewed by
Title: [172962] trunk/Source/_javascript_Core
Revision 172962
Author msab...@apple.com
Date 2014-08-26 10:34:21 -0700 (Tue, 26 Aug 2014)
Log Message
REGRESSION(r172794) + 32Bit build: for-in-base-reassigned-later-and-change-structure.js fail with NaN result
Title: [172978] trunk/Source/_javascript_Core
Revision 172978
Author msab...@apple.com
Date 2014-08-26 15:08:42 -0700 (Tue, 26 Aug 2014)
Log Message
[Win] 64-bit _javascript_Core crashes on launch
https://bugs.webkit.org/show_bug.cgi?id=136241
Reviewed by Mark Lam.
*
Title: [173282] trunk/Source/_javascript_Core
Revision 173282
Author msab...@apple.com
Date 2014-09-04 14:23:38 -0700 (Thu, 04 Sep 2014)
Log Message
REGRESSION(r173031): crashes during run-layout-jsc on x86/Linux
https://bugs.webkit.org/show_bug.cgi?id=136436
Reviewed by Geoffrey Garen.
Title: [173312] trunk/Source/_javascript_Core
Revision 173312
Author msab...@apple.com
Date 2014-09-05 09:17:17 -0700 (Fri, 05 Sep 2014)
Log Message
ARM: Add more coverage to ARMv7 disassembler
https://bugs.webkit.org/show_bug.cgi?id=136565
Reviewed by Mark Lam.
Added ARMV7
Title: [173330] trunk/LayoutTests
Revision 173330
Author msab...@apple.com
Date 2014-09-05 13:05:32 -0700 (Fri, 05 Sep 2014)
Log Message
ARM32 iOS: JSC Test math.js fails
https://bugs.webkit.org/show_bug.cgi?id=136261
Reviewed by Geoffrey Garen.
Split out the failing tests to a new
Title: [173541] trunk/Source
Revision 173541
Author msab...@apple.com
Date 2014-09-11 14:52:33 -0700 (Thu, 11 Sep 2014)
Log Message
Move JSScope out of JSFunction into separate JSCallee class
https://bugs.webkit.org/show_bug.cgi?id=136725
Reviewed by Oliver Hunt.
Created new JSCallee
Title: [173550] trunk/Tools
Revision 173550
Author msab...@apple.com
Date 2014-09-11 18:04:05 -0700 (Thu, 11 Sep 2014)
Log Message
lldb_webkit.py:btjs doesn't work with release builds
https://bugs.webkit.org/show_bug.cgi?id=136760
Reviewed by Jer Noble.
If we can't get a result calling
Title: [173600] trunk/Source/_javascript_Core
Revision 173600
Author msab...@apple.com
Date 2014-09-12 22:21:44 -0700 (Fri, 12 Sep 2014)
Log Message
Add JSCallee to program and eval CallFrames
https://bugs.webkit.org/show_bug.cgi?id=136785
Reviewed by Mark Lam.
Populated Callee slot
Title: [173601] trunk/Source/_javascript_Core
Revision 173601
Author msab...@apple.com
Date 2014-09-13 09:26:04 -0700 (Sat, 13 Sep 2014)
Log Message
Merge JSGlobalObject::reset() into ::init()
https://bugs.webkit.org/show_bug.cgi?id=136800
Reviewed by Oliver Hunt.
Moved the contents of
Title: [173636] trunk/Source/_javascript_Core
Revision 173636
Author msab...@apple.com
Date 2014-09-15 15:58:54 -0700 (Mon, 15 Sep 2014)
Log Message
Create a JSCallee for GlobalExec object
https://bugs.webkit.org/show_bug.cgi?id=136840
Reviewed by Geoffrey Garen.
Added m_globalCallee,
Title: [173706] trunk/Source/_javascript_Core
Revision 173706
Author msab...@apple.com
Date 2014-09-17 15:34:14 -0700 (Wed, 17 Sep 2014)
Log Message
Change CallFrame to use Callee instead of JSScope to implement vm()
https://bugs.webkit.org/show_bug.cgi?id=136894
Reviewed by Geoffrey
Title: [174301] trunk/Source/_javascript_Core
Revision 174301
Author msab...@apple.com
Date 2014-10-03 16:22:21 -0700 (Fri, 03 Oct 2014)
Log Message
REGRESSION(r174216): CodeBlock::dumpByteCodes crashes on op_push_name_scope
https://bugs.webkit.org/show_bug.cgi?id=137412
Reviewed by
Title: [174601] trunk/Tools
Revision 174601
Author msab...@apple.com
Date 2014-10-10 10:47:52 -0700 (Fri, 10 Oct 2014)
Log Message
Add ability to select tarfile name in run-jsc-stress-tests
https://bugs.webkit.org/show_bug.cgi?id=137614
Reviewed by Mark Hahnenberg.
Added optional file
Title: [174749] trunk/Source/_javascript_Core
Revision 174749
Author msab...@apple.com
Date 2014-10-15 17:14:28 -0700 (Wed, 15 Oct 2014)
Log Message
REGRESSION(r174025): remote inspector crashes frequently when executing inspector frontend's _javascript_
Title: [174847] trunk
Revision 174847
Author msab...@apple.com
Date 2014-10-17 15:58:33 -0700 (Fri, 17 Oct 2014)
Log Message
Don't create cached functions that access lexicalGlobalObject()
https://bugs.webkit.org/show_bug.cgi?id=137839
Reviewed by Geoffrey Garen.
Source/WebCore:
Made
Title: [174918] trunk/Source/WebCore
Revision 174918
Author msab...@apple.com
Date 2014-10-20 18:21:03 -0700 (Mon, 20 Oct 2014)
Log Message
Make post checkin suggested changes to r174847
https://bugs.webkit.org/show_bug.cgi?id=137885
Reviewed by Mark Lam.
Eliminated the creation of a
Title: [174985] trunk/Source/WebCore
Revision 174985
Author msab...@apple.com
Date 2014-10-21 10:19:49 -0700 (Tue, 21 Oct 2014)
Log Message
Don't create cached functions for HTMLDocument.write*()
https://bugs.webkit.org/show_bug.cgi?id=137906
Reviewed by Darin Adler.
Made it so that
Title: [174991] trunk/Source/WebCore/ChangeLog
Revision 174991
Author msab...@apple.com
Date 2014-10-21 11:19:34 -0700 (Tue, 21 Oct 2014)
Log Message
Updated ChangeLog entry to include tests that cover r174985
Modified Paths
trunk/Source/WebCore/ChangeLog
Diff
Modified:
Title: [174996] trunk
Revision 174996
Author msab...@apple.com
Date 2014-10-21 13:03:28 -0700 (Tue, 21 Oct 2014)
Log Message
Change native call frames to use the scope from their Callee instead of their caller's scope
https://bugs.webkit.org/show_bug.cgi?id=137907
Title: [174997] trunk/Source
Revision 174997
Author msab...@apple.com
Date 2014-10-21 13:43:18 -0700 (Tue, 21 Oct 2014)
Log Message
Add operator==(PropertyName, const char*)
https://bugs.webkit.org/show_bug.cgi?id=137925
Reviewed by Mark Lam.
Source/_javascript_Core:
*
Title: [175058] trunk/Source/_javascript_Core
Revision 175058
Author msab...@apple.com
Date 2014-10-22 11:59:04 -0700 (Wed, 22 Oct 2014)
Log Message
REGRESSION(r174996): Broke C_LOOP
https://bugs.webkit.org/show_bug.cgi?id=137971
Reviewed by Mark Lam.
Removed incorrect move to cfr
Title: [175118] trunk/Source/_javascript_Core
Revision 175118
Author msab...@apple.com
Date 2014-10-23 06:15:58 -0700 (Thu, 23 Oct 2014)
Log Message
Change CallFrame::lexicalGlobalObject() to use Callee instead of JSScope
https://bugs.webkit.org/show_bug.cgi?id=136901
Reviewed by Mark
Title: [175141] trunk/Source/_javascript_Core
Revision 175141
Author msab...@apple.com
Date 2014-10-23 13:54:22 -0700 (Thu, 23 Oct 2014)
Log Message
offsets.rb:183:in `buildOffsetsMap': unhandled exception - is offlineasm dependency tracking broken? (132668)
Title: [175426] trunk/Source/_javascript_Core
Revision 175426
Author msab...@apple.com
Date 2014-10-31 14:27:10 -0700 (Fri, 31 Oct 2014)
Log Message
Add scope operand to op_push_with_scope, op_push_name_scope and op_pop_scope
https://bugs.webkit.org/show_bug.cgi?id=138252
Reviewed by
Title: [175442] trunk/Tools
Revision 175442
Author msab...@apple.com
Date 2014-10-31 17:23:29 -0700 (Fri, 31 Oct 2014)
Log Message
No way to specify target os or architecture when using the --no-copy option with run-jsc-stress-tests
https://bugs.webkit.org/show_bug.cgi?id=138268
Title: [175471] trunk/Source/_javascript_Core
Revision 175471
Author msab...@apple.com
Date 2014-11-03 09:56:29 -0800 (Mon, 03 Nov 2014)
Log Message
Add scope operand to op_resolve_scope
https://bugs.webkit.org/show_bug.cgi?id=138253
Reviewed by Mark Lam.
Added scope operand to
Title: [175508] trunk/Source/_javascript_Core
Revision 175508
Author msab...@apple.com
Date 2014-11-03 19:36:28 -0800 (Mon, 03 Nov 2014)
Log Message
Add get scope byte code
https://bugs.webkit.org/show_bug.cgi?id=138326
Reviewed by Mark Lam.
Added op_get_scope. Added implementations
Title: [175509] trunk/Source/_javascript_Core
Revision 175509
Author msab...@apple.com
Date 2014-11-03 19:53:18 -0800 (Mon, 03 Nov 2014)
Log Message
Update scope related slow path code to use scope register added to opcodes
https://bugs.webkit.org/show_bug.cgi?id=138254
Reviewed by Mark
Title: [175586] trunk/LayoutTests
Revision 175586
Author msab...@apple.com
Date 2014-11-04 16:26:08 -0800 (Tue, 04 Nov 2014)
Log Message
Disable flakey dfg-int8array.js and dfg-int16array.js tests for ARM64
https://bugs.webkit.org/show_bug.cgi?id=138379
Reviewed by Mark Lam.
Disabled
Title: [175587] trunk/Source/_javascript_Core
Revision 175587
Author msab...@apple.com
Date 2014-11-04 16:29:21 -0800 (Tue, 04 Nov 2014)
Log Message
Disable flakey float32-repeat-out-of-bounds.js and int8-repeat-out-of-bounds.js tests for ARM64
Title: [175590] trunk/PerformanceTests/SunSpider
Revision 175590
Author msab...@apple.com
Date 2014-11-04 16:53:55 -0800 (Tue, 04 Nov 2014)
Log Message
Disable failing v8-deltablue.js for ARM
https://bugs.webkit.org/show_bug.cgi?id=138382
Reviewed by Geoffrey Garen.
This test is
Title: [175644] trunk/Source/_javascript_Core
Revision 175644
Author msab...@apple.com
Date 2014-11-05 15:20:28 -0800 (Wed, 05 Nov 2014)
Log Message
Disable flakey float32-repeat-out-of-bounds.js and int8-repeat-out-of-bounds.js tests for ARM64
Title: [175706] trunk/Source
Revision 175706
Author msab...@apple.com
Date 2014-11-06 11:47:17 -0800 (Thu, 06 Nov 2014)
Log Message
REGRESSION (r174985-174986): Site display disappears
https://bugs.webkit.org/show_bug.cgi?id=138082
Reviewed by Geoffrey Garen.
Source/_javascript_Core:
Title: [175762] trunk/Source/_javascript_Core
Revision 175762
Author msab...@apple.com
Date 2014-11-07 13:58:43 -0800 (Fri, 07 Nov 2014)
Log Message
Update scope related slow path code to use scope register added to opcodes
https://bugs.webkit.org/show_bug.cgi?id=138254
Reviewed by Mark
Title: [175834] trunk/LayoutTests
Revision 175834
Author msab...@apple.com
Date 2014-11-10 15:23:49 -0800 (Mon, 10 Nov 2014)
Log Message
Add test for fix of REGRESSION (r174985-174986): Site display disappears
https://bugs.webkit.org/show_bug.cgi?id=138470
Reviewed by Geoffrey Garen.
Title: [175845] trunk/Source/_javascript_Core
Revision 175845
Author msab...@apple.com
Date 2014-11-10 19:05:25 -0800 (Mon, 10 Nov 2014)
Log Message
Add scope operand to op_create_lexical_environment
https://bugs.webkit.org/show_bug.cgi?id=138588
Reviewed by Geoffrey Garen.
Added a
Title: [175998] trunk/Source/_javascript_Core
Revision 175998
Author msab...@apple.com
Date 2014-11-11 18:33:43 -0800 (Tue, 11 Nov 2014)
Log Message
Use scope register when processing op_resolve_scope in LLInt and Baseline JIT
https://bugs.webkit.org/show_bug.cgi?id=138637
Reviewed by
Title: [176005] trunk/Source/_javascript_Core
Revision 176005
Author msab...@apple.com
Date 2014-11-11 22:00:42 -0800 (Tue, 11 Nov 2014)
Log Message
Change DFG to use scope operand for op_resolve_scope
https://bugs.webkit.org/show_bug.cgi?id=138651
Reviewed by Geoffrey Garen.
Changed
Title: [176109] trunk/Source/_javascript_Core
Revision 176109
Author msab...@apple.com
Date 2014-11-13 17:07:48 -0800 (Thu, 13 Nov 2014)
Log Message
Add scope operand to op_new_func* byte codes
https://bugs.webkit.org/show_bug.cgi?id=138707
Reviewed by Mark Lam.
Added scope operand to
Title: [176479] trunk
Revision 176479
Author msab...@apple.com
Date 2014-11-21 15:41:26 -0800 (Fri, 21 Nov 2014)
Log Message
Allocate local ScopeChain register
https://bugs.webkit.org/show_bug.cgi?id=138793
Reviewed by Geoffrey Garen.
Source/_javascript_Core:
Now we allocate the scope
Title: [176506] trunk/Source/_javascript_Core
Revision 176506
Author msab...@apple.com
Date 2014-11-22 11:07:26 -0800 (Sat, 22 Nov 2014)
Log Message
r176455: ASSERT(!m_vector.isEmpty()) in IntendedStructureChain.cpp(143)
https://bugs.webkit.org/show_bug.cgi?id=139000
Reviewed by Darin
Title: [176624] trunk/Source/_javascript_Core
Revision 176624
Author msab...@apple.com
Date 2014-12-01 18:50:15 -0800 (Mon, 01 Dec 2014)
Log Message
Crash (integer overflow) beneath ByteCodeParser::handleGetById typing in search field on weather.com
Title: [176625] trunk/Source/_javascript_Core
Revision 176625
Author msab...@apple.com
Date 2014-12-01 20:09:24 -0800 (Mon, 01 Dec 2014)
Log Message
Remove GetMyScope node from DFG
https://bugs.webkit.org/show_bug.cgi?id=139166
Reviewed by Oliver Hunt.
Eliminated GetMyScope DFG node
Title: [176700] trunk/Source/_javascript_Core
Revision 176700
Author msab...@apple.com
Date 2014-12-02 16:49:19 -0800 (Tue, 02 Dec 2014)
Log Message
Change CallFrame::globalThisValue() to not use CallFrame::scope()
https://bugs.webkit.org/show_bug.cgi?id=139202
Reviewed by Mark Lam.
Title: [176771] trunk/Source/_javascript_Core
Revision 176771
Author msab...@apple.com
Date 2014-12-03 17:59:40 -0800 (Wed, 03 Dec 2014)
Log Message
REGRESSION (r176479): DFG ASSERTION beneath emitOSRExitCall running Kraken/imaging-gaussian-blur.js.ftl-no-cjit-osr-validation and other
Title: [177030] trunk
Revision 177030
Author msab...@apple.com
Date 2014-12-09 11:52:40 -0800 (Tue, 09 Dec 2014)
Log Message
DFG Tries using an inner object's getter/setter when one hasn't been defined
https://bugs.webkit.org/show_bug.cgi?id=139229
Reviewed by Filip Pizlo.
Title: [177146] trunk/Source/_javascript_Core
Revision 177146
Author msab...@apple.com
Date 2014-12-11 08:41:33 -0800 (Thu, 11 Dec 2014)
Log Message
REGRESSION: Use of undefined CallFrame::ScopeChain value
https://bugs.webkit.org/show_bug.cgi?id=139533
Reviewed by Mark Lam.
Removed
Title: [177203] trunk/LayoutTests
Revision 177203
Author msab...@apple.com
Date 2014-12-11 18:41:57 -0800 (Thu, 11 Dec 2014)
Log Message
Need a regression test for bug 139533
https://bugs.webkit.org/show_bug.cgi?id=139572
Reviewed by Mark Lam.
* js/regress-139533-expected.txt: Added.
*
Title: [177460] trunk
Revision 177460
Author msab...@apple.com
Date 2014-12-17 13:38:43 -0800 (Wed, 17 Dec 2014)
Log Message
Tests with infinite recursion frequently crash
https://bugs.webkit.org/show_bug.cgi?id=139548
Reviewed by Geoffrey Garen.
Source/_javascript_Core:
While
Title: [177578] trunk
Revision 177578
Author msab...@apple.com
Date 2014-12-19 10:48:25 -0800 (Fri, 19 Dec 2014)
Log Message
REGRESSION(174226): Captured arguments in a using function compiled by the DFG have the initial value when the closure was invoked
Title: [179015] trunk/Source/_javascript_Core
Revision 179015
Author msab...@apple.com
Date 2015-01-23 11:52:25 -0800 (Fri, 23 Jan 2015)
Log Message
Immediate crash when setting JS breakpoint
https://bugs.webkit.org/show_bug.cgi?id=140811
Reviewed by Mark Lam.
When the DFG stack layout
Title: [179728] trunk/Source/_javascript_Core
Revision 179728
Author msab...@apple.com
Date 2015-02-05 17:12:00 -0800 (Thu, 05 Feb 2015)
Log Message
CodeCache is not thread safe when adding the same source from two different threads
https://bugs.webkit.org/show_bug.cgi?id=141275
Title: [178432] trunk
Revision 178432
Author msab...@apple.com
Date 2015-01-14 11:38:21 -0800 (Wed, 14 Jan 2015)
Log Message
REGRESSION (r174226): Header on huffingtonpost.com is too large
https://bugs.webkit.org/show_bug.cgi?id=140306
Reviewed by Geoffrey Garen.
Title: [178427] trunk
Revision 178427
Author msab...@apple.com
Date 2015-01-14 10:48:58 -0800 (Wed, 14 Jan 2015)
Log Message
_javascript_ identifier incorrectly parsed if the prefix before an escape sequence is a keyword
https://bugs.webkit.org/show_bug.cgi?id=140420
Reviewed by Oliver
Title: [178698] trunk/LayoutTests
Revision 178698
Author msab...@apple.com
Date 2015-01-19 21:58:26 -0800 (Mon, 19 Jan 2015)
Log Message
Re-enable js/dom/string-replace-exception-crash.html as root problem is fixed.
https://bugs.webkit.org/show_bug.cgi?id=140666
Rubber Stamped by Filip
Title: [178696] trunk
Revision 178696
Author msab...@apple.com
Date 2015-01-19 21:28:04 -0800 (Mon, 19 Jan 2015)
Log Message
A cached null setter should throw a TypeException when called in strict mode and doesn't
https://bugs.webkit.org/show_bug.cgi?id=139418
Reviewed by Filip Pizlo.
Title: [178855] trunk/Source/_javascript_Core
Revision 178855
Author msab...@apple.com
Date 2015-01-21 11:46:13 -0800 (Wed, 21 Jan 2015)
Log Message
Eliminate construct methods from NullGetterFunction and NullSetterFunction classes
https://bugs.webkit.org/show_bug.cgi?id=140708
Reviewed
Title: [178856] trunk/Source/_javascript_Core
Revision 178856
Author msab...@apple.com
Date 2015-01-21 13:43:55 -0800 (Wed, 21 Jan 2015)
Log Message
Eliminate Scope slot from _javascript_ CallFrame
https://bugs.webkit.org/show_bug.cgi?id=136724
Reviewed by Geoffrey Garen.
This finishes
Title: [178629] trunk
Revision 178629
Author msab...@apple.com
Date 2015-01-17 16:20:49 -0800 (Sat, 17 Jan 2015)
Log Message
Crash in JSScope::resolve() on tools.ups.com
https://bugs.webkit.org/show_bug.cgi?id=140579
Reviewed by Geoffrey Garen.
Source/_javascript_Core:
For
Title: [178966] trunk
Revision 178966
Author msab...@apple.com
Date 2015-01-22 16:15:51 -0800 (Thu, 22 Jan 2015)
Log Message
REGRESSION (174847): can't view NHK(Japan's national public broadcasting organization)’s news pages
https://bugs.webkit.org/show_bug.cgi?id=140794
Reviewed by
Title: [178728] trunk/Source/_javascript_Core
Revision 178728
Author msab...@apple.com
Date 2015-01-20 11:35:29 -0800 (Tue, 20 Jan 2015)
Log Message
REGRESSION(178696): Sporadic crashes while garbage collecting
https://bugs.webkit.org/show_bug.cgi?id=140688
Reviewed by Geoffrey Garen.
Title: [178591] trunk
Revision 178591
Author msab...@apple.com
Date 2015-01-16 12:40:22 -0800 (Fri, 16 Jan 2015)
Log Message
REGRESSION (r174226): Header on huffingtonpost.com is too large
https://bugs.webkit.org/show_bug.cgi?id=140306
Reviewed by Filip Pizlo.
Source/_javascript_Core:
Title: [178614] trunk/LayoutTests
Revision 178614
Author msab...@apple.com
Date 2015-01-16 16:37:08 -0800 (Fri, 16 Jan 2015)
Log Message
REGRESSION(178591): js/slow-stress/call-spread.html js/slow-stress/new-spread.html
https://bugs.webkit.org/show_bug.cgi?id=140574
Rubber stamped by
Title: [180247] trunk/Source/_javascript_Core
Revision 180247
Author msab...@apple.com
Date 2015-02-17 18:38:16 -0800 (Tue, 17 Feb 2015)
Log Message
CrashTracer: DFG_CRASH beneath JSC::FTL::LowerDFGToLLVM::compileNode
https://bugs.webkit.org/show_bug.cgi?id=141730
Reviewed by Geoffrey
Title: [180270] trunk/Source/_javascript_Core
Revision 180270
Author msab...@apple.com
Date 2015-02-18 10:23:14 -0800 (Wed, 18 Feb 2015)
Log Message
Unreviewed, Restoring the C LOOP insta-crash fix in r180184.
Fixed a typo that only affected the C Loop in the prologue() macro in
Title: [180184] trunk/Source/_javascript_Core
Revision 180184
Author msab...@apple.com
Date 2015-02-16 16:08:17 -0800 (Mon, 16 Feb 2015)
Log Message
REGRESSION(r180060): C Loop crashes
https://bugs.webkit.org/show_bug.cgi?id=141671
Reviewed by Geoffrey Garen.
Fixed a typo that only
Title: [179202] trunk/Source/_javascript_Core
Revision 179202
Author msab...@apple.com
Date 2015-01-27 12:25:04 -0800 (Tue, 27 Jan 2015)
Log Message
REGRESSION(r178591): 20% regression in Octane box2d
https://bugs.webkit.org/show_bug.cgi?id=140948
Reviewed by Geoffrey Garen.
Added
Title: [179035] trunk/Source/_javascript_Core
Revision 179035
Author msab...@apple.com
Date 2015-01-23 15:48:14 -0800 (Fri, 23 Jan 2015)
Log Message
LayoutTests/js/script-tests/reentrant-caching.js crashing on 32 bit builds
https://bugs.webkit.org/show_bug.cgi?id=140843
Reviewed by
Title: [179457] trunk
Revision 179457
Author msab...@apple.com
Date 2015-01-31 19:58:39 -0800 (Sat, 31 Jan 2015)
Log Message
Crash (DFG assertion) beneath AbstractInterpreter::verifyEdge() @ http://experilous.com/1/planet-generator/2014-09-28/version-1
Title: [178232] trunk
Revision 178232
Author msab...@apple.com
Date 2015-01-09 18:44:56 -0800 (Fri, 09 Jan 2015)
Log Message
Breakpoint doesn't fire in this HTML5 game
https://bugs.webkit.org/show_bug.cgi?id=140269
Reviewed by Mark Lam.
Source/_javascript_Core:
When parsing a single
Title: [178266] trunk/Source/_javascript_Core
Revision 178266
Author msab...@apple.com
Date 2015-01-12 08:29:22 -0800 (Mon, 12 Jan 2015)
Log Message
Local JSArray* keys in objectConstructorKeys() is not marked during garbage collection
https://bugs.webkit.org/show_bug.cgi?id=140348
Title: [178364] trunk/Source/_javascript_Core
Revision 178364
Author msab...@apple.com
Date 2015-01-13 09:46:40 -0800 (Tue, 13 Jan 2015)
Log Message
Local JSArray* keys in objectConstructorKeys() is not marked during garbage collection
https://bugs.webkit.org/show_bug.cgi?id=140348
Title: [179882] trunk/Source/_javascript_Core
Revision 179882
Author msab...@apple.com
Date 2015-02-10 13:59:54 -0800 (Tue, 10 Feb 2015)
Log Message
Crash in JSC::FTL::LowerDFGToLLVM::compileCompareStrictEq
https://bugs.webkit.org/show_bug.cgi?id=139398
Reviewed by Filip Pizlo.
Due to
Title: [180060] trunk
Revision 180060
Author msab...@apple.com
Date 2015-02-13 10:57:57 -0800 (Fri, 13 Feb 2015)
Log Message
Google doc spreadsheet reproducibly crashes when sorting
https://bugs.webkit.org/show_bug.cgi?id=141098
Reviewed by Oliver Hunt.
Source/_javascript_Core:
Moved
Title: [180083] trunk/Source/_javascript_Core
Revision 180083
Author msab...@apple.com
Date 2015-02-13 14:46:50 -0800 (Fri, 13 Feb 2015)
Log Message
REGRESSION(r180060) New js/regress-141098 test crashes when LLInt is disabled.
https://bugs.webkit.org/show_bug.cgi?id=141577
Reviewed by
Title: [177871] trunk
Revision 177871
Author msab...@apple.com
Date 2015-01-03 19:47:25 -0800 (Sat, 03 Jan 2015)
Log Message
Crash in operationNewFunction when scrolling on Google+
https://bugs.webkit.org/show_bug.cgi?id=140033
Reviewed by Oliver Hunt.
Source/_javascript_Core:
In DFG
Title: [180317] trunk/Source/_javascript_Core
Revision 180317
Author msab...@apple.com
Date 2015-02-18 15:52:16 -0800 (Wed, 18 Feb 2015)
Log Message
Rollout r180247 r180249 from trunk
https://bugs.webkit.org/show_bug.cgi?id=141773
Reviewed by Filip Pizlo.
Theses changes makes sense to
Title: [180453] trunk/LayoutTests
Revision 180453
Author msab...@apple.com
Date 2015-02-20 14:21:47 -0800 (Fri, 20 Feb 2015)
Log Message
Layout Test js/regress-141098.html is failing on 32-bit Machines
https://bugs.webkit.org/show_bug.cgi?id=141848
Reviewed by Geoffrey Garen.
It
Title: [181501] trunk/Source/WTF
Revision 181501
Author msab...@apple.com
Date 2015-03-14 14:42:20 -0700 (Sat, 14 Mar 2015)
Log Message
Disable Yarr JIT for ARMv7k
https://bugs.webkit.org/show_bug.cgi?id=142645
Rubber stamped by Geoffrey Garen.
Changed the setting of ENABLE_YARR_JIT to
Title: [181628] trunk/Source
Revision 181628
Author msab...@apple.com
Date 2015-03-17 02:33:30 -0700 (Tue, 17 Mar 2015)
Log Message
Windows X86-64 should use the fixed executable allocator
https://bugs.webkit.org/show_bug.cgi?id=142749
Reviewed by Filip Pizlo.
Source/_javascript_Core:
Title: [181750] branches/safari-600.1.17-branch/Source
Revision 181750
Author msab...@apple.com
Date 2015-03-19 10:52:02 -0700 (Thu, 19 Mar 2015)
Log Message
Merged r181628. rdar://problem/19804738
2015-03-16 Michael Saboff msab...@apple.com
Windows X86-64 should use the
Title: [181497] trunk
Revision 181497
Author msab...@apple.com
Date 2015-03-14 09:29:20 -0700 (Sat, 14 Mar 2015)
Log Message
ES6: Add binary and octal literal support
https://bugs.webkit.org/show_bug.cgi?id=142681
Reviewed by Ryosuke Niwa.
Source/_javascript_Core:
Added a binary
Title: [181462] trunk/Source/WTF
Revision 181462
Author msab...@apple.com
Date 2015-03-12 17:40:46 -0700 (Thu, 12 Mar 2015)
Log Message
Disable Yarr JIT for ARMv7k
https://bugs.webkit.org/show_bug.cgi?id=142645
Reviewed by Oliver Hunt.
Make the setting of ENABLE_YARR_JIT match
Title: [181891] trunk
Revision 181891
Author msab...@apple.com
Date 2015-03-24 03:05:21 -0700 (Tue, 24 Mar 2015)
Log Message
REGRESSION (172175-172177): Change in for...in processing causes properties added in loop to be enumerated
https://bugs.webkit.org/show_bug.cgi?id=142856
Reviewed
Title: [181890] trunk/Source/_javascript_Core
Revision 181890
Author msab...@apple.com
Date 2015-03-24 02:22:34 -0700 (Tue, 24 Mar 2015)
Log Message
Unreviewed build fix for debug builds.
* runtime/ExceptionHelpers.cpp:
(JSC::invalidParameterInSourceAppender):
Modified Paths
Title: [182158] trunk/Source/_javascript_Core
Revision 182158
Author msab...@apple.com
Date 2015-03-30 15:58:22 -0700 (Mon, 30 Mar 2015)
Log Message
Fix flakey float32-repeat-out-of-bounds.js and int8-repeat-out-of-bounds.js tests for ARM64
https://bugs.webkit.org/show_bug.cgi?id=138391
Title: [182170] trunk/PerformanceTests/SunSpider
Revision 182170
Author msab...@apple.com
Date 2015-03-30 18:21:21 -0700 (Mon, 30 Mar 2015)
Log Message
Fix failing v8-deltablue.js for ARM
https://bugs.webkit.org/show_bug.cgi?id=138392
Rubber-stamped by Mark Lam.
Re-enable this test for
Title: [182058] trunk
Revision 182058
Author msab...@apple.com
Date 2015-03-27 07:28:34 -0700 (Fri, 27 Mar 2015)
Log Message
Objects with numeric properties intermittently get a phantom 'length' property
https://bugs.webkit.org/show_bug.cgi?id=142792
Reviewed by Csaba Osztrogonác.
Title: [180992] trunk/Source/_javascript_Core
Revision 180992
Author msab...@apple.com
Date 2015-03-03 21:33:37 -0800 (Tue, 03 Mar 2015)
Log Message
DelayedReleaseScope drops locks during GC which can cause a thread switch and code reentry
https://bugs.webkit.org/show_bug.cgi?id=141275
401 - 500 of 918 matches
Mail list logo
