Title: [161407] branches/jsCStack/Source/_javascript_Core
Revision 161407
Author msab...@apple.com
Date 2014-01-06 22:09:59 -0800 (Mon, 06 Jan 2014)
Log Message
CStack Branch: ARM64 Crash in llint_function_for_call_arity_check running 3d-raytrace.js
https://bugs.webkit.org/show_bug.cgi?id
Title: [161431] branches/jsCStack/Source/_javascript_Core
Revision 161431
Author msab...@apple.com
Date 2014-01-07 09:57:17 -0800 (Tue, 07 Jan 2014)
Log Message
CStack Branch: Disable JIT stack alignment check for ARM64
https://bugs.webkit.org/show_bug.cgi?id=126550
Unreviewed comment on
Title: [161439] branches/jsCStack/Source/_javascript_Core
Revision 161439
Author msab...@apple.com
Date 2014-01-07 11:30:34 -0800 (Tue, 07 Jan 2014)
Log Message
CStack Branch: ARM64 Crash running ecma/FunctionObjects/15.3.1.1-3.js
https://bugs.webkit.org/show_bug.cgi?id=126585
Reviewed b
Title: [161504] branches/jsCStack/Source/_javascript_Core
Revision 161504
Author msab...@apple.com
Date 2014-01-08 08:15:29 -0800 (Wed, 08 Jan 2014)
Log Message
CStack Branch: ARM64 DFG produces the wrong answer for X % 0
https://bugs.webkit.org/show_bug.cgi?id=126612
Reviewed by Geoffre
Title: [161531] branches/jsCStack/Source/_javascript_Core
Revision 161531
Author msab...@apple.com
Date 2014-01-08 17:55:32 -0800 (Wed, 08 Jan 2014)
Log Message
CStack: stack frame gets unaligned before call to operationVMHandleException
https://bugs.webkit.org/show_bug.cgi?id=126673
Rev
Title: [161686] trunk/Source/_javascript_Core
Revision 161686
Author msab...@apple.com
Date 2014-01-10 15:47:12 -0800 (Fri, 10 Jan 2014)
Log Message
REGRESSION(C stack work): stack traces no longer work in CrashTracer, lldb, and other tools
https://bugs.webkit.org/show_bug.cgi?id=126764
Title: [161913] branches/jsCStack/Source/_javascript_Core
Revision 161913
Author msab...@apple.com
Date 2014-01-13 15:23:52 -0800 (Mon, 13 Jan 2014)
Log Message
CStack Branch: Fix unwind on branch for X86-64
https://bugs.webkit.org/show_bug.cgi?id=126932
Reviewed by Geoffrey Garen.
Adde
Title: [162240] branches/jsCStack/Source/_javascript_Core
Revision 162240
Author msab...@apple.com
Date 2014-01-17 21:05:34 -0800 (Fri, 17 Jan 2014)
Log Message
CStack Branch: X86-32 Fix LLInt
https://bugs.webkit.org/show_bug.cgi?id=127071
Reviewed by Filip Pizlo.
This fixes X86-32 comp
Title: [162242] branches/jsCStack/Source/_javascript_Core
Revision 162242
Author msab...@apple.com
Date 2014-01-17 21:10:15 -0800 (Fri, 17 Jan 2014)
Log Message
CStack Branch: Fix Baseline JIT for X86-32
https://bugs.webkit.org/show_bug.cgi?id=127201
Reviewed by Geoffrey Garen.
Most of
Title: [162520] branches/jsCStack/Source/_javascript_Core
Revision 162520
Author msab...@apple.com
Date 2014-01-22 08:52:51 -0800 (Wed, 22 Jan 2014)
Log Message
Unreviewed build fix for non FTL platforms.
* ftl/FTLValueRange.cpp: Encapsulated code within #if ENABLE(FTL_JIT) / #endif
Mod
Title: [162521] branches/jsCStack/Source/_javascript_Core
Revision 162521
Author msab...@apple.com
Date 2014-01-22 09:19:17 -0800 (Wed, 22 Jan 2014)
Log Message
CStack Branch: Fix DFG for X86-32
https://bugs.webkit.org/show_bug.cgi?id=127407
Reviewed by Filip Pizlo.
Made DFG calling con
Title: [162539] branches/jsCStack/Source/WTF
Revision 162539
Author msab...@apple.com
Date 2014-01-22 11:21:59 -0800 (Wed, 22 Jan 2014)
Log Message
Merge trunk r160838
2013-12-18 Daniel Bates
WTF, _javascript_Core fails to build with trunk clang: operators new, new[],
delete, delete[
Title: [162701] trunk/Source/_javascript_Core
Revision 162701
Author msab...@apple.com
Date 2014-01-24 08:34:24 -0800 (Fri, 24 Jan 2014)
Log Message
ARM Offline assembler temporary register allocator has duplicate register when building fat binaries
https://bugs.webkit.org/show_bug.cgi?id
Title: [162703] branches/jsCStack/Source/_javascript_Core
Revision 162703
Author msab...@apple.com
Date 2014-01-24 09:33:54 -0800 (Fri, 24 Jan 2014)
Log Message
Merge trunk change set r162701.
Modified Paths
branches/jsCStack/Source/_javascript_Core/ChangeLog
branches/jsCStack/Source/_j
Title: [162705] branches/jsCStack/Source/_javascript_Core
Revision 162705
Author msab...@apple.com
Date 2014-01-24 10:06:47 -0800 (Fri, 24 Jan 2014)
Log Message
CStack Branch: Get ARM working
https://bugs.webkit.org/show_bug.cgi?id=127510
Reviewed by Geoffrey Garen.
Fixed nativeCallTram
Title: [162861] branches/jsCStack/Source/_javascript_Core
Revision 162861
Author msab...@apple.com
Date 2014-01-27 13:03:05 -0800 (Mon, 27 Jan 2014)
Log Message
CStack Branch: [X86-32] testapi crashes in gatherConservativeRoots()
https://bugs.webkit.org/show_bug.cgi?id=127699
Reviewed by
Title: [162900] branches/jsCStack/Source/WebKit/mac/postprocess-headers.sh
Revision 162900
Author msab...@apple.com
Date 2014-01-27 18:12:14 -0800 (Mon, 27 Jan 2014)
Log Message
Set exectueable property to match trunk.
Property Changed
branches/jsCStack/Source/WebKit/mac/postprocess-hea
Title: [162934] branches/jsCStack/Source/_javascript_Core
Revision 162934
Author msab...@apple.com
Date 2014-01-28 09:07:38 -0800 (Tue, 28 Jan 2014)
Log Message
CStack Branch: Some LLInt symbols not declared extern "C"
https://bugs.webkit.org/show_bug.cgi?id=127782
Reviewed by Geoffrey G
Title: [174918] trunk/Source/WebCore
Revision 174918
Author msab...@apple.com
Date 2014-10-20 18:21:03 -0700 (Mon, 20 Oct 2014)
Log Message
Make post checkin suggested changes to r174847
https://bugs.webkit.org/show_bug.cgi?id=137885
Reviewed by Mark Lam.
Eliminated the creation of a te
Title: [174985] trunk/Source/WebCore
Revision 174985
Author msab...@apple.com
Date 2014-10-21 10:19:49 -0700 (Tue, 21 Oct 2014)
Log Message
Don't create cached functions for HTMLDocument.write*()
https://bugs.webkit.org/show_bug.cgi?id=137906
Reviewed by Darin Adler.
Made it so that JSH
Title: [174991] trunk/Source/WebCore/ChangeLog
Revision 174991
Author msab...@apple.com
Date 2014-10-21 11:19:34 -0700 (Tue, 21 Oct 2014)
Log Message
Updated ChangeLog entry to include tests that cover r174985
Modified Paths
trunk/Source/WebCore/ChangeLog
Diff
Modified: trunk/Sourc
Title: [174996] trunk
Revision 174996
Author msab...@apple.com
Date 2014-10-21 13:03:28 -0700 (Tue, 21 Oct 2014)
Log Message
Change native call frames to use the scope from their Callee instead of their caller's scope
https://bugs.webkit.org/show_bug.cgi?id=137907
Source/_javascript_Core
Title: [174997] trunk/Source
Revision 174997
Author msab...@apple.com
Date 2014-10-21 13:43:18 -0700 (Tue, 21 Oct 2014)
Log Message
Add operator==(PropertyName, const char*)
https://bugs.webkit.org/show_bug.cgi?id=137925
Reviewed by Mark Lam.
Source/_javascript_Core:
* runtime/Property
Title: [175058] trunk/Source/_javascript_Core
Revision 175058
Author msab...@apple.com
Date 2014-10-22 11:59:04 -0700 (Wed, 22 Oct 2014)
Log Message
REGRESSION(r174996): Broke C_LOOP
https://bugs.webkit.org/show_bug.cgi?id=137971
Reviewed by Mark Lam.
Removed incorrect move to cfr (Call
Title: [175118] trunk/Source/_javascript_Core
Revision 175118
Author msab...@apple.com
Date 2014-10-23 06:15:58 -0700 (Thu, 23 Oct 2014)
Log Message
Change CallFrame::lexicalGlobalObject() to use Callee instead of JSScope
https://bugs.webkit.org/show_bug.cgi?id=136901
Reviewed by Mark La
Title: [175141] trunk/Source/_javascript_Core
Revision 175141
Author msab...@apple.com
Date 2014-10-23 13:54:22 -0700 (Thu, 23 Oct 2014)
Log Message
offsets.rb:183:in `buildOffsetsMap': unhandled exception - is offlineasm dependency tracking broken? (132668)
https://bugs.webkit.org/show_b
Title: [175426] trunk/Source/_javascript_Core
Revision 175426
Author msab...@apple.com
Date 2014-10-31 14:27:10 -0700 (Fri, 31 Oct 2014)
Log Message
Add scope operand to op_push_with_scope, op_push_name_scope and op_pop_scope
https://bugs.webkit.org/show_bug.cgi?id=138252
Reviewed by Geo
Title: [175442] trunk/Tools
Revision 175442
Author msab...@apple.com
Date 2014-10-31 17:23:29 -0700 (Fri, 31 Oct 2014)
Log Message
No way to specify target os or architecture when using the --no-copy option with run-jsc-stress-tests
https://bugs.webkit.org/show_bug.cgi?id=138268
Reviewed
Title: [175471] trunk/Source/_javascript_Core
Revision 175471
Author msab...@apple.com
Date 2014-11-03 09:56:29 -0800 (Mon, 03 Nov 2014)
Log Message
Add scope operand to op_resolve_scope
https://bugs.webkit.org/show_bug.cgi?id=138253
Reviewed by Mark Lam.
Added scope operand to op_resol
Title: [175508] trunk/Source/_javascript_Core
Revision 175508
Author msab...@apple.com
Date 2014-11-03 19:36:28 -0800 (Mon, 03 Nov 2014)
Log Message
Add "get scope" byte code
https://bugs.webkit.org/show_bug.cgi?id=138326
Reviewed by Mark Lam.
Added op_get_scope. Added implementations
Title: [175509] trunk/Source/_javascript_Core
Revision 175509
Author msab...@apple.com
Date 2014-11-03 19:53:18 -0800 (Mon, 03 Nov 2014)
Log Message
Update scope related slow path code to use scope register added to opcodes
https://bugs.webkit.org/show_bug.cgi?id=138254
Reviewed by Mark
Title: [175586] trunk/LayoutTests
Revision 175586
Author msab...@apple.com
Date 2014-11-04 16:26:08 -0800 (Tue, 04 Nov 2014)
Log Message
Disable flakey dfg-int8array.js and dfg-int16array.js tests for ARM64
https://bugs.webkit.org/show_bug.cgi?id=138379
Reviewed by Mark Lam.
Disabled th
Title: [175587] trunk/Source/_javascript_Core
Revision 175587
Author msab...@apple.com
Date 2014-11-04 16:29:21 -0800 (Tue, 04 Nov 2014)
Log Message
Disable flakey float32-repeat-out-of-bounds.js and int8-repeat-out-of-bounds.js tests for ARM64
https://bugs.webkit.org/show_bug.cgi?id=1383
Title: [175590] trunk/PerformanceTests/SunSpider
Revision 175590
Author msab...@apple.com
Date 2014-11-04 16:53:55 -0800 (Tue, 04 Nov 2014)
Log Message
Disable failing v8-deltablue.js for ARM
https://bugs.webkit.org/show_bug.cgi?id=138382
Reviewed by Geoffrey Garen.
This test is failing
Title: [175644] trunk/Source/_javascript_Core
Revision 175644
Author msab...@apple.com
Date 2014-11-05 15:20:28 -0800 (Wed, 05 Nov 2014)
Log Message
Disable flakey float32-repeat-out-of-bounds.js and int8-repeat-out-of-bounds.js tests for ARM64
https://bugs.webkit.org/show_bug.cgi?id=1383
Title: [175706] trunk/Source
Revision 175706
Author msab...@apple.com
Date 2014-11-06 11:47:17 -0800 (Thu, 06 Nov 2014)
Log Message
REGRESSION (r174985-174986): Site display disappears
https://bugs.webkit.org/show_bug.cgi?id=138082
Reviewed by Geoffrey Garen.
Source/_javascript_Core:
Title: [175762] trunk/Source/_javascript_Core
Revision 175762
Author msab...@apple.com
Date 2014-11-07 13:58:43 -0800 (Fri, 07 Nov 2014)
Log Message
Update scope related slow path code to use scope register added to opcodes
https://bugs.webkit.org/show_bug.cgi?id=138254
Reviewed by Mark
Title: [175834] trunk/LayoutTests
Revision 175834
Author msab...@apple.com
Date 2014-11-10 15:23:49 -0800 (Mon, 10 Nov 2014)
Log Message
Add test for fix of REGRESSION (r174985-174986): Site display disappears
https://bugs.webkit.org/show_bug.cgi?id=138470
Reviewed by Geoffrey Garen.
Th
Title: [175845] trunk/Source/_javascript_Core
Revision 175845
Author msab...@apple.com
Date 2014-11-10 19:05:25 -0800 (Mon, 10 Nov 2014)
Log Message
Add scope operand to op_create_lexical_environment
https://bugs.webkit.org/show_bug.cgi?id=138588
Reviewed by Geoffrey Garen.
Added a seco
Title: [175998] trunk/Source/_javascript_Core
Revision 175998
Author msab...@apple.com
Date 2014-11-11 18:33:43 -0800 (Tue, 11 Nov 2014)
Log Message
Use scope register when processing op_resolve_scope in LLInt and Baseline JIT
https://bugs.webkit.org/show_bug.cgi?id=138637
Reviewed by Ma
Title: [176005] trunk/Source/_javascript_Core
Revision 176005
Author msab...@apple.com
Date 2014-11-11 22:00:42 -0800 (Tue, 11 Nov 2014)
Log Message
Change DFG to use scope operand for op_resolve_scope
https://bugs.webkit.org/show_bug.cgi?id=138651
Reviewed by Geoffrey Garen.
Changed to
Title: [176109] trunk/Source/_javascript_Core
Revision 176109
Author msab...@apple.com
Date 2014-11-13 17:07:48 -0800 (Thu, 13 Nov 2014)
Log Message
Add scope operand to op_new_func* byte codes
https://bugs.webkit.org/show_bug.cgi?id=138707
Reviewed by Mark Lam.
Added scope operand to o
Title: [172429] trunk/Source/_javascript_Core
Revision 172429
Author msab...@apple.com
Date 2014-08-11 20:20:04 -0700 (Mon, 11 Aug 2014)
Log Message
Eliminate {push,pop}CalleeSaves in favor of individual pushes & pops
https://bugs.webkit.org/show_bug.cgi?id=127155
Reviewed by Geoffrey Ga
Title: [172665] trunk/Source/_javascript_Core
Revision 172665
Author msab...@apple.com
Date 2014-08-15 18:45:40 -0700 (Fri, 15 Aug 2014)
Log Message
Change callToJavaScript and callToNativeFunction so their callFrames match the native calling conventions
https://bugs.webkit.org/show_bug.c
Title: [172792] trunk/Source/_javascript_Core
Revision 172792
Author msab...@apple.com
Date 2014-08-19 17:36:13 -0700 (Tue, 19 Aug 2014)
Log Message
Crash in jsc-layout-tests.yaml/js/script-tests/reentrant-caching.js
https://bugs.webkit.org/show_bug.cgi?id=136080
Reviewed by Mark Lam.
U
Title: [172807] trunk/Source/_javascript_Core
Revision 172807
Author msab...@apple.com
Date 2014-08-20 13:28:24 -0700 (Wed, 20 Aug 2014)
Log Message
REGRESSION: Web Inspector crashes when reloading apple.com with Timeline recording active
https://bugs.webkit.org/show_bug.cgi?id=136034
Re
Title: [172867] trunk/Source/_javascript_Core
Revision 172867
Author msab...@apple.com
Date 2014-08-22 12:54:30 -0700 (Fri, 22 Aug 2014)
Log Message
REGRESSION(r163179): Sporadic crash in js/dom/line-column-numbers.html test
https://bugs.webkit.org/show_bug.cgi?id=136111
Reviewed by Fili
Title: [172932] trunk/Source/_javascript_Core
Revision 172932
Author msab...@apple.com
Date 2014-08-25 12:32:40 -0700 (Mon, 25 Aug 2014)
Log Message
After r172867 another crash in in js/dom/line-column-numbers.html
https://bugs.webkit.org/show_bug.cgi?id=136192
Reviewed by Geoffrey Garen
Title: [172959] trunk/Source/_javascript_Core
Revision 172959
Author msab...@apple.com
Date 2014-08-26 08:55:01 -0700 (Tue, 26 Aug 2014)
Log Message
REGRESSION(r172794) + 32Bit build: ASSERT failures in for-in-tests.js tests.
https://bugs.webkit.org/show_bug.cgi?id=136165
Reviewed by Mar
Title: [172962] trunk/Source/_javascript_Core
Revision 172962
Author msab...@apple.com
Date 2014-08-26 10:34:21 -0700 (Tue, 26 Aug 2014)
Log Message
REGRESSION(r172794) + 32Bit build: for-in-base-reassigned-later-and-change-structure.js fail with NaN result
https://bugs.webkit.org/show_bu
Title: [172978] trunk/Source/_javascript_Core
Revision 172978
Author msab...@apple.com
Date 2014-08-26 15:08:42 -0700 (Tue, 26 Aug 2014)
Log Message
[Win] 64-bit _javascript_Core crashes on launch
https://bugs.webkit.org/show_bug.cgi?id=136241
Reviewed by Mark Lam.
* llint/LowLevelInter
Title: [173178] trunk
Revision 173178
Author msab...@apple.com
Date 2014-09-02 09:52:35 -0700 (Tue, 02 Sep 2014)
Log Message
Out of bounds write in vmEntryToJavaScript / JSC::JITCode::execute
https://bugs.webkit.org/show_bug.cgi?id=136305
Reviewed by Filip Pizlo.
Source/_javascript_Core
Title: [173282] trunk/Source/_javascript_Core
Revision 173282
Author msab...@apple.com
Date 2014-09-04 14:23:38 -0700 (Thu, 04 Sep 2014)
Log Message
REGRESSION(r173031): crashes during run-layout-jsc on x86/Linux
https://bugs.webkit.org/show_bug.cgi?id=136436
Reviewed by Geoffrey Garen.
Title: [173312] trunk/Source/_javascript_Core
Revision 173312
Author msab...@apple.com
Date 2014-09-05 09:17:17 -0700 (Fri, 05 Sep 2014)
Log Message
ARM: Add more coverage to ARMv7 disassembler
https://bugs.webkit.org/show_bug.cgi?id=136565
Reviewed by Mark Lam.
Added ARMV7 disassembler
Title: [173330] trunk/LayoutTests
Revision 173330
Author msab...@apple.com
Date 2014-09-05 13:05:32 -0700 (Fri, 05 Sep 2014)
Log Message
ARM32 iOS: JSC Test math.js fails
https://bugs.webkit.org/show_bug.cgi?id=136261
Reviewed by Geoffrey Garen.
Split out the failing tests to a new test
Title: [179457] trunk
Revision 179457
Author msab...@apple.com
Date 2015-01-31 19:58:39 -0800 (Sat, 31 Jan 2015)
Log Message
Crash (DFG assertion) beneath AbstractInterpreter::verifyEdge() @ http://experilous.com/1/planet-generator/2014-09-28/version-1
https://bugs.webkit.org/show_bug.cgi
Title: [179728] trunk/Source/_javascript_Core
Revision 179728
Author msab...@apple.com
Date 2015-02-05 17:12:00 -0800 (Thu, 05 Feb 2015)
Log Message
CodeCache is not thread safe when adding the same source from two different threads
https://bugs.webkit.org/show_bug.cgi?id=141275
Reviewed
Title: [179882] trunk/Source/_javascript_Core
Revision 179882
Author msab...@apple.com
Date 2015-02-10 13:59:54 -0800 (Tue, 10 Feb 2015)
Log Message
Crash in JSC::FTL::LowerDFGToLLVM::compileCompareStrictEq
https://bugs.webkit.org/show_bug.cgi?id=139398
Reviewed by Filip Pizlo.
Due to C
Title: [180060] trunk
Revision 180060
Author msab...@apple.com
Date 2015-02-13 10:57:57 -0800 (Fri, 13 Feb 2015)
Log Message
Google doc spreadsheet reproducibly crashes when sorting
https://bugs.webkit.org/show_bug.cgi?id=141098
Reviewed by Oliver Hunt.
Source/_javascript_Core:
Moved t
Title: [180083] trunk/Source/_javascript_Core
Revision 180083
Author msab...@apple.com
Date 2015-02-13 14:46:50 -0800 (Fri, 13 Feb 2015)
Log Message
REGRESSION(r180060) New js/regress-141098 test crashes when LLInt is disabled.
https://bugs.webkit.org/show_bug.cgi?id=141577
Reviewed by B
Title: [180184] trunk/Source/_javascript_Core
Revision 180184
Author msab...@apple.com
Date 2015-02-16 16:08:17 -0800 (Mon, 16 Feb 2015)
Log Message
REGRESSION(r180060): C Loop crashes
https://bugs.webkit.org/show_bug.cgi?id=141671
Reviewed by Geoffrey Garen.
Fixed a typo that only affe
Title: [180247] trunk/Source/_javascript_Core
Revision 180247
Author msab...@apple.com
Date 2015-02-17 18:38:16 -0800 (Tue, 17 Feb 2015)
Log Message
CrashTracer: DFG_CRASH beneath JSC::FTL::LowerDFGToLLVM::compileNode
https://bugs.webkit.org/show_bug.cgi?id=141730
Reviewed by Geoffrey Ga
Title: [180270] trunk/Source/_javascript_Core
Revision 180270
Author msab...@apple.com
Date 2015-02-18 10:23:14 -0800 (Wed, 18 Feb 2015)
Log Message
Unreviewed, Restoring the C LOOP insta-crash fix in r180184.
Fixed a typo that only affected the C Loop in the prologue() macro in LowLevel
Title: [180317] trunk/Source/_javascript_Core
Revision 180317
Author msab...@apple.com
Date 2015-02-18 15:52:16 -0800 (Wed, 18 Feb 2015)
Log Message
Rollout r180247 & r180249 from trunk
https://bugs.webkit.org/show_bug.cgi?id=141773
Reviewed by Filip Pizlo.
Theses changes makes sense to
Title: [180423] trunk
Revision 180423
Author msab...@apple.com
Date 2015-02-20 10:38:57 -0800 (Fri, 20 Feb 2015)
Log Message
DFG JIT needs to check for stack overflow at the start of Program and Eval execution
https://bugs.webkit.org/show_bug.cgi?id=141676
Reviewed by Filip Pizlo.
Sourc
Title: [180453] trunk/LayoutTests
Revision 180453
Author msab...@apple.com
Date 2015-02-20 14:21:47 -0800 (Fri, 20 Feb 2015)
Log Message
Layout Test js/regress-141098.html is failing on 32-bit Machines
https://bugs.webkit.org/show_bug.cgi?id=141848
Reviewed by Geoffrey Garen.
It appears
Title: [180660] trunk
Revision 180660
Author msab...@apple.com
Date 2015-02-25 22:05:02 -0800 (Wed, 25 Feb 2015)
Log Message
Web Inspector: CRASH when debugger pauses inside a Promise handler
https://bugs.webkit.org/show_bug.cgi?id=141396
Reviewed by Mark Lam.
Source/_javascript_Core:
Title: [180684] trunk/Source/_javascript_Core
Revision 180684
Author msab...@apple.com
Date 2015-02-26 10:36:43 -0800 (Thu, 26 Feb 2015)
Log Message
[Win] Debug-only _javascript_Core failures
https://bugs.webkit.org/show_bug.cgi?id=142045
Rubber stamped by Filip Pizlo.
Reduced loop coun
Title: [176479] trunk
Revision 176479
Author msab...@apple.com
Date 2014-11-21 15:41:26 -0800 (Fri, 21 Nov 2014)
Log Message
Allocate local ScopeChain register
https://bugs.webkit.org/show_bug.cgi?id=138793
Reviewed by Geoffrey Garen.
Source/_javascript_Core:
Now we allocate the scope
Title: [176506] trunk/Source/_javascript_Core
Revision 176506
Author msab...@apple.com
Date 2014-11-22 11:07:26 -0800 (Sat, 22 Nov 2014)
Log Message
r176455: ASSERT(!m_vector.isEmpty()) in IntendedStructureChain.cpp(143)
https://bugs.webkit.org/show_bug.cgi?id=139000
Reviewed by Darin Ad
Title: [176624] trunk/Source/_javascript_Core
Revision 176624
Author msab...@apple.com
Date 2014-12-01 18:50:15 -0800 (Mon, 01 Dec 2014)
Log Message
Crash (integer overflow) beneath ByteCodeParser::handleGetById typing in search field on weather.com
https://bugs.webkit.org/show_bug.cgi?id
Title: [176625] trunk/Source/_javascript_Core
Revision 176625
Author msab...@apple.com
Date 2014-12-01 20:09:24 -0800 (Mon, 01 Dec 2014)
Log Message
Remove GetMyScope node from DFG
https://bugs.webkit.org/show_bug.cgi?id=139166
Reviewed by Oliver Hunt.
Eliminated GetMyScope DFG node typ
Title: [176700] trunk/Source/_javascript_Core
Revision 176700
Author msab...@apple.com
Date 2014-12-02 16:49:19 -0800 (Tue, 02 Dec 2014)
Log Message
Change CallFrame::globalThisValue() to not use CallFrame::scope()
https://bugs.webkit.org/show_bug.cgi?id=139202
Reviewed by Mark Lam.
Cha
Title: [176771] trunk/Source/_javascript_Core
Revision 176771
Author msab...@apple.com
Date 2014-12-03 17:59:40 -0800 (Wed, 03 Dec 2014)
Log Message
REGRESSION (r176479): DFG ASSERTION beneath emitOSRExitCall running Kraken/imaging-gaussian-blur.js.ftl-no-cjit-osr-validation and other tes
Title: [177030] trunk
Revision 177030
Author msab...@apple.com
Date 2014-12-09 11:52:40 -0800 (Tue, 09 Dec 2014)
Log Message
DFG Tries using an inner object's getter/setter when one hasn't been defined
https://bugs.webkit.org/show_bug.cgi?id=139229
Reviewed by Filip Pizlo.
Source/_javas
Title: [177146] trunk/Source/_javascript_Core
Revision 177146
Author msab...@apple.com
Date 2014-12-11 08:41:33 -0800 (Thu, 11 Dec 2014)
Log Message
REGRESSION: Use of undefined CallFrame::ScopeChain value
https://bugs.webkit.org/show_bug.cgi?id=139533
Reviewed by Mark Lam.
Removed Call
Title: [177203] trunk/LayoutTests
Revision 177203
Author msab...@apple.com
Date 2014-12-11 18:41:57 -0800 (Thu, 11 Dec 2014)
Log Message
Need a regression test for bug 139533
https://bugs.webkit.org/show_bug.cgi?id=139572
Reviewed by Mark Lam.
* js/regress-139533-expected.txt: Added.
*
Title: [177460] trunk
Revision 177460
Author msab...@apple.com
Date 2014-12-17 13:38:43 -0800 (Wed, 17 Dec 2014)
Log Message
Tests with infinite recursion frequently crash
https://bugs.webkit.org/show_bug.cgi?id=139548
Reviewed by Geoffrey Garen.
Source/_javascript_Core:
While unwindin
Title: [177578] trunk
Revision 177578
Author msab...@apple.com
Date 2014-12-19 10:48:25 -0800 (Fri, 19 Dec 2014)
Log Message
REGRESSION(174226): Captured arguments in a using function compiled by the DFG have the initial value when the closure was invoked
https://bugs.webkit.org/show_bug.
Title: [177871] trunk
Revision 177871
Author msab...@apple.com
Date 2015-01-03 19:47:25 -0800 (Sat, 03 Jan 2015)
Log Message
Crash in operationNewFunction when scrolling on Google+
https://bugs.webkit.org/show_bug.cgi?id=140033
Reviewed by Oliver Hunt.
Source/_javascript_Core:
In DFG c
Title: [167599] trunk/Source/_javascript_Core
Revision 167599
Author msab...@apple.com
Date 2014-04-21 11:10:41 -0700 (Mon, 21 Apr 2014)
Log Message
REGRESSION(r167591): ARM64 and ARM traditional builds broken
https://bugs.webkit.org/show_bug.cgi?id=131935
Reviewed by Mark Hahnenberg.
A
Title: [167782] trunk/Source/_javascript_Core
Revision 167782
Author msab...@apple.com
Date 2014-04-24 17:14:14 -0700 (Thu, 24 Apr 2014)
Log Message
REGRESSION: Apparent hang of PCE.js Mac OS System 7.0.1 on ARM64 devices
https://bugs.webkit.org/show_bug.cgi?id=132147
Reviewed by Mark La
Title: [167819] trunk/Tools
Revision 167819
Author msab...@apple.com
Date 2014-04-25 13:34:47 -0700 (Fri, 25 Apr 2014)
Log Message
Crash in platform/mac/accessibility/table-visible-rows.html
https://bugs.webkit.org/show_bug.cgi?id=132146
Reviewed by Mark Lam.
Changed to use a local JSVa
Title: [167913] trunk/Tools
Revision 167913
Author msab...@apple.com
Date 2014-04-28 17:31:45 -0700 (Mon, 28 Apr 2014)
Log Message
Crash in platform/mac/accessibility/table-visible-rows.html
https://bugs.webkit.org/show_bug.cgi?id=132146
Reviewed by Filip Pizlo.
Instead of creating a lo
Title: [167917] trunk/Source/_javascript_Core
Revision 167917
Author msab...@apple.com
Date 2014-04-28 18:36:14 -0700 (Mon, 28 Apr 2014)
Log Message
REGRESSION(r153142) ASSERT from CodeBlock::dumpBytecode dumping String Switch Jump Tables
https://bugs.webkit.org/show_bug.cgi?id=132315
Re
Title: [167953] trunk/Source/WTF
Revision 167953
Author msab...@apple.com
Date 2014-04-29 13:28:37 -0700 (Tue, 29 Apr 2014)
Log Message
For DARWIN platforms, use system temporary directory for DataLog output
https://bugs.webkit.org/show_bug.cgi?id=132346
Reviewed by Geoffrey Garen.
Adde
Title: [168197] trunk/Source/_javascript_Core
Revision 168197
Author msab...@apple.com
Date 2014-05-02 15:24:37 -0700 (Fri, 02 May 2014)
Log Message
"arm64 function not 4-byte aligned" warnings when building JSC
https://bugs.webkit.org/show_bug.cgi?id=132495
Reviewed by Geoffrey Garen.
Title: [168319] trunk/Source/_javascript_Core
Revision 168319
Author msab...@apple.com
Date 2014-05-05 15:09:00 -0700 (Mon, 05 May 2014)
Log Message
REGRESSION: RELEASE_ASSERT in CodeBlock::baselineVersion @ cnn.com
https://bugs.webkit.org/show_bug.cgi?id=132581
Reviewed by Filip Pizlo.
Title: [168396] trunk/Source/_javascript_Core
Revision 168396
Author msab...@apple.com
Date 2014-05-06 17:34:34 -0700 (Tue, 06 May 2014)
Log Message
Add test for deleteAllCompiledCode
https://bugs.webkit.org/show_bug.cgi?id=132632
Reviewed by Phil Pizlo.
Added two new hooks to jsc, one
Title: [168406] trunk/Source/_javascript_Core
Revision 168406
Author msab...@apple.com
Date 2014-05-06 21:01:25 -0700 (Tue, 06 May 2014)
Log Message
Unreviewd build fix for C-LOOP after r168396.
* runtime/TestRunnerUtils.cpp:
(JSC::optimizeNextInvocation): Wrapped actual call inside #if
Title: [168983] trunk/Source/_javascript_Core
Revision 168983
Author msab...@apple.com
Date 2014-05-16 15:09:51 -0700 (Fri, 16 May 2014)
Log Message
Crash in JSC::Yarr::YarrGenerator<(JSC::Yarr::YarrJITCompileMode)0>::generatePatternCharacterFixed() due to WTF::CrashOnOverflow::overflowed
Title: [169217] trunk/Tools
Revision 169217
Author msab...@apple.com
Date 2014-05-22 14:11:55 -0700 (Thu, 22 May 2014)
Log Message
Add option to run-jsc-stress-tests to use installed jsc
https://bugs.webkit.org/show_bug.cgi?id=133102
Reviewed by Geoffrey Garen.
Added --no-copy option to
Title: [169241] trunk/Tools
Revision 169241
Author msab...@apple.com
Date 2014-05-22 20:27:36 -0700 (Thu, 22 May 2014)
Log Message
Eliminate n/total progress update from run-jsc-stress-tests output to file
https://bugs.webkit.org/show_bug.cgi?id=133191
Reviewed by Geoffrey Garen.
Change
Title: [169265] trunk/Tools
Revision 169265
Author msab...@apple.com
Date 2014-05-23 11:05:57 -0700 (Fri, 23 May 2014)
Log Message
REGRESSION (r169241) Crash running run-jsc-stress-tests on EFL ARM
https://bugs.webkit.org/show_bug.cgi?id=133223
Reviewed by Geoffrey Garen.
Change runAndM
Title: [169293] trunk/Tools
Revision 169293
Author msab...@apple.com
Date 2014-05-23 17:13:43 -0700 (Fri, 23 May 2014)
Log Message
REGRESSION(r169265): sh: line 0: cd: ../.vm
https://bugs.webkit.org/show_bug.cgi?id=133242
Rubber stamped by Geoffrey Garen.
Added missing shell escapes '\'
Title: [169396] trunk/Tools
Revision 169396
Author msab...@apple.com
Date 2014-05-27 11:53:07 -0700 (Tue, 27 May 2014)
Log Message
REGRESSION(r169265): sh: line 0: cd: ../.vm
https://bugs.webkit.org/show_bug.cgi?id=133242
Rubber stamped by Oliver Hunt.
Changed runAndMonitorTestRunnerCom
Title: [169489] trunk/Tools
Revision 169489
Author msab...@apple.com
Date 2014-05-30 11:19:21 -0700 (Fri, 30 May 2014)
Log Message
Change run-jsc-stress-tests to not resolve jsc path locally when creating a bundle
https://bugs.webkit.org/show_bug.cgi?id=133409
Reviewed by Filip Pizlo.
H
Title: [169751] trunk
Revision 169751
Author msab...@apple.com
Date 2014-06-10 10:58:03 -0700 (Tue, 10 Jun 2014)
Log Message
In a certain app state, Array.prototype.filter() returns incorrect results
https://bugs.webkit.org/show_bug.cgi?id=133577
Reviewed by Oliver Hunt.
Source/_javasc
Title: [169973] trunk/Source/_javascript_Core
Revision 169973
Author msab...@apple.com
Date 2014-06-14 10:43:32 -0700 (Sat, 14 Jun 2014)
Log Message
operationCreateArguments could cause a GC during OSR exit
https://bugs.webkit.org/show_bug.cgi?id=133905
Reviewed by Filip Pizlo.
Defer GC
Title: [170011] trunk/Source/_javascript_Core
Revision 170011
Author msab...@apple.com
Date 2014-06-16 09:40:56 -0700 (Mon, 16 Jun 2014)
Log Message
Convert ASSERT in inlineFunctionForCapabilityLevel to early return
https://bugs.webkit.org/show_bug.cgi?id=133903
Reviewed by Mark Hahnenbe
801 - 900 of 949 matches
Mail list logo