[webkit-changes] [153410] trunk/Source/JavaScriptCore

2013-07-28 Thread oliver
=> 153410) --- trunk/Source/_javascript_Core/ChangeLog 2013-07-28 06:48:35 UTC (rev 153409) +++ trunk/Source/_javascript_Core/ChangeLog 2013-07-28 18:04:18 UTC (rev 153410) @@ -1,3 +1,19 @@ +2013-07-28 Oliver Hunt oli...@apple.com + +REGRESSION: Crash when opening Facebook.com +ht

[webkit-changes] [153383] trunk

2013-07-26 Thread oliver
,14 @@ +2013-07-26 Oliver Hunt oli...@apple.com + +REGRESSION(FTL?): Crashes in plugin tests +https://bugs.webkit.org/show_bug.cgi?id=119141 + +Reviewed by Michael Saboff. + +Bring back plugin tests + +* platform/mac/TestExpectations: + 2013-07-26 Filip Pizlo

[webkit-changes] [153334] trunk/Source/JavaScriptCore

2013-07-25 Thread oliver
153334) @@ -1,3 +1,14 @@ +2013-07-25 Oliver Hunt oli...@apple.com + +More 32bit build fixes + +- Apparnetly some compilers don't track the fastcall directive everywhere we expect + +* API/APICallbackFunction.h: +(JSC::APICallbackFunction::call): +* by

[webkit-changes] [153339] trunk/Source/JavaScriptCore

2013-07-25 Thread oliver
-07-25 19:05:37 UTC (rev 153338) +++ trunk/Source/_javascript_Core/ChangeLog 2013-07-25 19:36:44 UTC (rev 153339) @@ -1,5 +1,15 @@ 2013-07-25 Oliver Hunt oli...@apple.com +32 bit portion of load validation logic +https://bugs.webkit.org/show_bug.cgi?id=118878 + +Revie

[webkit-changes] [153341] trunk/Source/JavaScriptCore

2013-07-25 Thread oliver
/bytecode/CodeBlock.h Diff Modified: trunk/Source/_javascript_Core/ChangeLog (153340 => 153341) --- trunk/Source/_javascript_Core/ChangeLog 2013-07-25 20:19:28 UTC (rev 153340) +++ trunk/Source/_javascript_Core/ChangeLog 2013-07-25 20:22:45 UTC (rev 153341) @@ -1,5 +1,18 @@ 2013-07-25 Oliver H

[webkit-changes] [153115] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
/runtime/Executable.cpp Diff Modified: trunk/Source/_javascript_Core/ChangeLog (153114 => 153115) --- trunk/Source/_javascript_Core/ChangeLog 2013-07-25 03:58:14 UTC (rev 153114) +++ trunk/Source/_javascript_Core/ChangeLog 2013-07-25 03:58:16 UTC (rev 153115) @@ -1,3 +1,64 @@ +2013-07-15 Oliver H

[webkit-changes] [153118] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153118] trunk/Source/_javascript_Core Revision 153118 Author oli...@apple.com Date 2013-07-24 20:58:23 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should better abstract floating point arguments https://bugs.webkit.org/show_bug.cgi?id=114300 Reviewed by Mark Hahnenberg.

[webkit-changes] [153114] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
cpp: +(JSC::DFG::SpeculativeJIT::convertLastOSRExitToForward): + 2013-07-15 Oliver Hunt oli...@apple.com +Merge dfgFourthTier r147582 + +2013-07-15 Oliver Hunt oli...@apple.com + Merge dfgFourthTier r147014 2013-03-27 Filip Pizlo fpi...@apple.com Modified: trunk/Sou

[webkit-changes] [153127] trunk/Tools

2013-07-24 Thread oliver
-07-25 03:58:53 UTC (rev 153126) +++ trunk/Tools/ChangeLog 2013-07-25 03:58:55 UTC (rev 153127) @@ -1,5 +1,20 @@ 2013-07-16 Oliver Hunt oli...@apple.com +Merge dfgFourthTier r148853 + +2013-04-21 Filip Pizlo fpi...@apple.com + +fourthTier: tandem WebKit and LLVM builds sho

[webkit-changes] [153125] trunk/Tools

2013-07-24 Thread oliver
-to-product-directory Diff Modified: trunk/Tools/ChangeLog (153124 => 153125) --- trunk/Tools/ChangeLog 2013-07-25 03:58:49 UTC (rev 153124) +++ trunk/Tools/ChangeLog 2013-07-25 03:58:51 UTC (rev 153125) @@ -1,3 +1,68 @@ +2013-07-16 Oliver Hunt oli...@apple.com + +Merge dfgFourthT

[webkit-changes] [153120] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153120] trunk/Source/_javascript_Core Revision 153120 Author oli...@apple.com Date 2013-07-24 20:58:27 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should be able to query Structure without modifying it https://bugs.webkit.org/show_bug.cgi?id=114708 Reviewed by Oliver

[webkit-changes] [153135] trunk/Source

2013-07-24 Thread oliver
tf8() +https://bugs.webkit.org/show_bug.cgi?id=115393 + +Reviewed by Geoffrey Garen. + +* runtime/JSGlobalObjectFunctions.cpp: +(JSC::encode): + 2013-07-16 Oliver Hunt oli...@apple.com Merge dfgFourthTier r149301 Modified: trunk/Source/_javascript_Core/runt

[webkit-changes] [153117] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
wed by Mark Hahnenberg. + +* dfg/DFGGPRInfo.h: +(GPRInfo): +(JSC::DFG::GPRInfo::toArgumentRegister): + 2013-07-15 Oliver Hunt oli...@apple.com Merged dfgFourthTier r147609 Modified: trunk/Source/_javascript_Core/dfg/DFGGPRInfo.h (153116 => 153117) ---

[webkit-changes] [153131] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
DFG::GenericDesiredWatchpoints::shouldAssumeMixedState): + 2013-07-16 Oliver Hunt oli...@apple.com Merge dfgFourthTier r149233 Modified: trunk/Source/_javascript_Core/bytecode/Watchpoint.cpp (153130 => 153131) --- trunk/Source/_javascript_Core/bytecode/Watchpoint.cpp 2013-07-25 03:59:00 UT

[webkit-changes] [153137] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153137] trunk/Source/_javascript_Core Revision 153137 Author oli...@apple.com Date 2013-07-24 20:59:17 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Don't link gtest into _javascript_Core Rubber stamped by Mark Rowe. * Configurations/_javascript_Core.xcconfig: Modified

[webkit-changes] [153119] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
-07-15 Oliver Hunt oli...@apple.com +Merged dfgFourthTier r148047 + +2013-04-09 Filip Pizlo fpi...@apple.com + +fourthTier: DFG should provide utilities for common OSR exit tasks +https://bugs.webkit.org/show_bug.cgi?id=114306 + +Reviewed by Mark Hahn

[webkit-changes] [153132] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153132] trunk/Source/_javascript_Core Revision 153132 Author oli...@apple.com Date 2013-07-24 20:59:04 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: SymbolTable should be thread-safe https://bugs.webkit.org/show_bug.cgi?id=115301 Reviewed by Geoffrey Garen. Makes SymbolTable

[webkit-changes] [153133] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153133] trunk/Source/_javascript_Core Revision 153133 Author oli...@apple.com Date 2013-07-24 20:59:06 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support double variables https://bugs.webkit.org/show_bug.cgi?id=113624 Reviewed by Geoffrey Garen. Made all of the

[webkit-changes] [153126] trunk

2013-07-24 Thread oliver
/_javascript_Core/ChangeLog (153125 => 153126) --- trunk/Source/_javascript_Core/ChangeLog 2013-07-25 03:58:51 UTC (rev 153125) +++ trunk/Source/_javascript_Core/ChangeLog 2013-07-25 03:58:53 UTC (rev 153126) @@ -1,5 +1,23 @@ 2013-07-16 Oliver Hunt oli...@apple.com +Merge dfgFourthTier r148

[webkit-changes] [153140] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153140] trunk/Source/_javascript_Core Revision 153140 Author oli...@apple.com Date 2013-07-24 20:59:22 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Structure::addPropertyTransitionToExistingStructure should be thread-safe https://bugs.webkit.org/show_bug.cgi?id=115468

[webkit-changes] [153138] trunk/Tools

2013-07-24 Thread oliver
rev 153138) @@ -1,3 +1,11 @@ +2013-04-30 Filip Pizlo fpi...@apple.com + +fourthTier: Use hw.availcpu instead of hw.ncpu, and configure LLVM with --enable-zlib=no + +Rubber stamped by Mark Rowe. + +* Scripts/copy-webkitlibraries-to-product-directory: + 2013-07-16 Oliver Hunt

[webkit-changes] [153139] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
/show_bug.cgi?id=115464 Reviewed by Oliver Hunt and Geoffrey Garen. This can happen for example transitively from JSObject::put(). getCurrently() does work for uncacheable dictionaries; it just has the obvious race that right after it returns, the result it returned may no longer be right. This isn't

[webkit-changes] [153156] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153156] trunk/Source/_javascript_Core Revision 153156 Author oli...@apple.com Date 2013-07-24 21:00:02 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support Jump and ForceOSRExit https://bugs.webkit.org/show_bug.cgi?id=115942 Reviewed by Oliver Hunt. Added two

[webkit-changes] [153152] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153152] trunk/Source/_javascript_Core Revision 153152 Author oli...@apple.com Date 2013-07-24 20:59:55 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support Int32ToDouble https://bugs.webkit.org/show_bug.cgi?id=115926 Reviewed by Mark Hahnenberg. This node exists

[webkit-changes] [153144] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153144] trunk/Source/_javascript_Core Revision 153144 Author oli...@apple.com Date 2013-07-24 20:59:32 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG::ByteCodeParser doesn't need ExecState* https://bugs.webkit.org/show_bug.cgi?id=115582 Reviewed by Geoffrey Garen. *

[webkit-changes] [153143] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153143] trunk/Source/_javascript_Core Revision 153143 Author oli...@apple.com Date 2013-07-24 20:59:31 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Profiler should be thread-safe https://bugs.webkit.org/show_bug.cgi?id=115445 Reviewed by Geoffrey Garen. Change the

[webkit-changes] [153141] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153141] trunk/Source/_javascript_Core Revision 153141 Author oli...@apple.com Date 2013-07-24 20:59:24 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Structure transition table keys don't have to ref their StringImpl's https://bugs.webkit.org/show_bug.cgi?id=115525 Reviewed by

[webkit-changes] [153150] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153150] trunk/Source/_javascript_Core Revision 153150 Author oli...@apple.com Date 2013-07-24 20:59:52 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support CompareGreater, CompareLessEq, and CompareGreaterEq https://bugs.webkit.org/show_bug.cgi?id=115923 Reviewed

[webkit-changes] [153148] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153148] trunk/Source/_javascript_Core Revision 153148 Author oli...@apple.com Date 2013-07-24 20:59:49 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG shouldn't allocate in the GC heap https://bugs.webkit.org/show_bug.cgi?id=115598 Reviewed by Geoffrey Garen. I believe

[webkit-changes] [153158] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153158] trunk/Source/_javascript_Core Revision 153158 Author oli...@apple.com Date 2013-07-24 21:00:05 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Rename StructureCheckHoistingPhase to TypeCheckHoistingPhase https://bugs.webkit.org/show_bug.cgi?id=115938 We're going to add

[webkit-changes] [153159] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153159] trunk/Source/_javascript_Core Revision 153159 Author oli...@apple.com Date 2013-07-24 21:00:07 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Segfault in jsc with simple test program when running with profile dumping enabled

[webkit-changes] [153153] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153153] trunk/Source/_javascript_Core Revision 153153 Author oli...@apple.com Date 2013-07-24 20:59:57 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support CompareStrictEq https://bugs.webkit.org/show_bug.cgi?id=115927 Reviewed by Mark Hahnenberg. Do the sensible

[webkit-changes] [153163] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
CodeBlock and JITCode should be ThreadSafeRefCounted. We're going to start using them on more threads very soon (with concurrent compilation). This patch also fixes the specific place where we were superfluously creating a RefPtr. Reviewed by Oliver Hunt. * bytecode/CodeBlock.h: (JSC::CodeBlock

[webkit-changes] [153149] trunk/Source/JavaScriptCore/ChangeLog

2013-07-24 Thread oliver
Title: [153149] trunk/Source/_javascript_Core/ChangeLog Revision 153149 Author oli...@apple.com Date 2013-07-24 20:59:50 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL CompareEq ObjectUse should handle masquerading https://bugs.webkit.org/show_bug.cgi?id=115920 Reviewed by Mark

[webkit-changes] [153157] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153157] trunk/Source/_javascript_Core Revision 153157 Author oli...@apple.com Date 2013-07-24 21:00:04 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: SpeculativeJIT::checkArray should use the correct ExitKind https://bugs.webkit.org/show_bug.cgi?id=115943 Currently it uses

[webkit-changes] [153151] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153151] trunk/Source/_javascript_Core Revision 153151 Author oli...@apple.com Date 2013-07-24 20:59:53 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support LogicalNot https://bugs.webkit.org/show_bug.cgi?id=115924 Reviewed by Mark Hahnenberg. *

[webkit-changes] [153154] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153154] trunk/Source/_javascript_Core Revision 153154 Author oli...@apple.com Date 2013-07-24 20:59:59 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support CompareEqConstant https://bugs.webkit.org/show_bug.cgi?id=115939 Reviewed by Oliver Hunt and Mark Hahnenberg

[webkit-changes] [153155] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153155] trunk/Source/_javascript_Core Revision 153155 Author oli...@apple.com Date 2013-07-24 21:00:00 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support CompareStrictEqConstant https://bugs.webkit.org/show_bug.cgi?id=115941 Reviewed by Mark Hahnenberg. Pretty

[webkit-changes] [153166] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153166] trunk/Source/_javascript_Core Revision 153166 Author oli...@apple.com Date 2013-07-24 21:00:24 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: getCTIStub should be thread-safe https://bugs.webkit.org/show_bug.cgi?id=116126 Reviewed by Dan Bernstein. It's called from

[webkit-changes] [153168] trunk/Tools

2013-07-24 Thread oliver
?id=116556 Reviewed by Oliver Hunt. This adds three new capabilities: - 'display' now accepts negative compilation indices, and allows specifying wildcard hashes combined with combination indices. Previously you could say 'display hash', 'display hash-index-engine', or 'display *'. The latter

[webkit-changes] [153164] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153164] trunk/Source/_javascript_Core Revision 153164 Author oli...@apple.com Date 2013-07-24 21:00:19 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: observeUseKindOnNode doesn't contain a case for KnownCellUse https://bugs.webkit.org/show_bug.cgi?id=116130 This would just

[webkit-changes] [153174] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153174] trunk/Source/_javascript_Core Revision 153174 Author oli...@apple.com Date 2013-07-24 21:00:48 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL shouldn't use the LLVM global context, and should instead create its own context for each compilation

[webkit-changes] [153171] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Reviewed by Oliver Hunt. This switches off FastISel and makes it possible to turn off Small code model. * ftl/FTLCompile.cpp: (JSC::FTL::compile): * runtime/Options.h: (JSC): Modified Paths trunk/Source/_javascript_Core/ChangeLog trunk/Source/_javascript_Core/ftl/FTLCompile.cpp trunk/Source

[webkit-changes] [153188] trunk

2013-07-24 Thread oliver
Title: [153188] trunk Revision 153188 Author oli...@apple.com Date 2013-07-24 21:01:17 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: testRunner should be able to tell you if a function is DFG compiled https://bugs.webkit.org/show_bug.cgi?id=116847 Reviewed by Mark Hahnenberg.

[webkit-changes] [153176] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153176] trunk/Source/_javascript_Core Revision 153176 Author oli...@apple.com Date 2013-07-24 21:00:51 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Race between LLInt-Baseline tier-up and DFG reading Baseline profiling data https://bugs.webkit.org/show_bug.cgi?id=116633

[webkit-changes] [153183] trunk/Source

2013-07-24 Thread oliver
Title: [153183] trunk/Source Revision 153183 Author oli...@apple.com Date 2013-07-24 21:01:06 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Remove Interpreter::retrieveLastCaller(). This merge is complicated by the trunk js stack reporting logic. Remove

[webkit-changes] [153181] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153181] trunk/Source/_javascript_Core Revision 153181 Author oli...@apple.com Date 2013-07-24 21:01:02 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support LogicalNot and Branch on Int32 and Number https://bugs.webkit.org/show_bug.cgi?id=116739 Reviewed by Gavin

[webkit-changes] [153184] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153184] trunk/Source/_javascript_Core Revision 153184 Author oli...@apple.com Date 2013-07-24 21:01:08 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ArithDiv https://bugs.webkit.org/show_bug.cgi?id=116771 Reviewed by Oliver Hunt. * ftl/FTLAbbreviations.h

[webkit-changes] [153185] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153185] trunk/Source/_javascript_Core Revision 153185 Author oli...@apple.com Date 2013-07-24 21:01:09 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: cti_optimize shouldn't allow GCs to get in the way of it seeing the state of its CodeBlock

[webkit-changes] [153187] trunk

2013-07-24 Thread oliver
Title: [153187] trunk Revision 153187 Author oli...@apple.com Date 2013-07-24 21:01:14 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG ArithMod should have the !nodeUsedAsNumber optimizations that ArithDiv has https://bugs.webkit.org/show_bug.cgi?id=116841 Reviewed by Mark

[webkit-changes] [153180] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153180] trunk/Source/_javascript_Core Revision 153180 Author oli...@apple.com Date 2013-07-24 21:01:00 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: add heuristics to reduce the likelihood of a trivially inlineable function being independently compiled by the concurrent JIT

[webkit-changes] [153191] trunk

2013-07-24 Thread oliver
Title: [153191] trunk Revision 153191 Author oli...@apple.com Date 2013-07-24 21:01:24 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: testRunner should have a way of disabling inlining of functions https://bugs.webkit.org/show_bug.cgi?id=116875 Reviewed by Mark Hahnenberg.

[webkit-changes] [153182] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153182] trunk/Source/_javascript_Core Revision 153182 Author oli...@apple.com Date 2013-07-24 21:01:03 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL boolify should support ObjectOrOtherUse https://bugs.webkit.org/show_bug.cgi?id=116741 Reviewed by Geoffrey Garen. Just

[webkit-changes] [153179] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153179] trunk/Source/_javascript_Core Revision 153179 Author oli...@apple.com Date 2013-07-24 21:00:58 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: rationalize DFG::CapabilityLevel and DFGCapabilities.[h|cpp] https://bugs.webkit.org/show_bug.cgi?id=116696 Reviewed by Sam

[webkit-changes] [153172] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153172] trunk/Source/_javascript_Core Revision 153172 Author oli...@apple.com Date 2013-07-24 21:00:41 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should force LLVM to use our own JIT memory allocator, and we shouldn't have to keep around an LLVMExecutionEngineRef to

[webkit-changes] [153175] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153175] trunk/Source/_javascript_Core Revision 153175 Author oli...@apple.com Date 2013-07-24 21:00:50 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: It should be possible to use more than one compiler thread https://bugs.webkit.org/show_bug.cgi?id=116630 Reviewed by Mark

[webkit-changes] [153201] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153201] trunk/Source/_javascript_Core Revision 153201 Author oli...@apple.com Date 2013-07-24 21:01:46 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Remove finalDestinationOrIgnored since it isn't called anymore. Rubber stamped by Mark Hahnenberg. *

[webkit-changes] [153193] trunk/LayoutTests

2013-07-24 Thread oliver
Title: [153193] trunk/LayoutTests Revision 153193 Author oli...@apple.com Date 2013-07-24 21:01:28 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: convert more fast/js/dfg-* tests to wait for the concurrent JIT Rubber stamped by Oliver Hunt. * fast/js/dfg-abs-backwards-propagation

[webkit-changes] [153207] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153207] trunk/Source/_javascript_Core Revision 153207 Author oli...@apple.com Date 2013-07-24 21:01:59 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: The DFG JIT should populate frame bytecodeOffsets on OSR exit. https://bugs.webkit.org/show_bug.cgi?id=117103. Reviewed by

[webkit-changes] [153212] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153212] trunk/Source/_javascript_Core Revision 153212 Author oli...@apple.com Date 2013-07-24 21:02:09 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: 32-bit CallFrame::Location should use Instruction* for BytecodeLocation, not bytecodeOffset.

[webkit-changes] [153205] trunk

2013-07-24 Thread oliver
Title: [153205] trunk Revision 153205 Author oli...@apple.com Date 2013-07-24 21:01:54 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Get rid of StructureStubInfo::bytecodeIndex https://bugs.webkit.org/show_bug.cgi?id=117127 Reviewed by Mark Hahnenberg. StructureStubInfo already has

[webkit-changes] [153192] trunk/LayoutTests

2013-07-24 Thread oliver
=116878 Reviewed by Oliver Hunt. This adds three things to js-test-pre and uses them in one representative test: silentTestPass: If you set this to true, then testPassed() won't print anything, and will instead just have isSuccessfullyParsed() print a message saying that some tests passed

[webkit-changes] [153204] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153204] trunk/Source/_javascript_Core Revision 153204 Author oli...@apple.com Date 2013-07-24 21:01:52 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Fix some minor issues in the DFG's profiling of heap accesses https://bugs.webkit.org/show_bug.cgi?id=113010 Reviewed by

[webkit-changes] [153196] trunk

2013-07-24 Thread oliver
masqueradesAsUndefinedWatchpointIsStillValid() https://bugs.webkit.org/show_bug.cgi?id=116892 Reviewed by Oliver Hunt. All of those places mean to plant the watchpoint if it's still valid. * ftl/FTLLowerDFGToLLVM.cpp: (JSC::FTL::LowerDFGToLLVM::equalNullOrUndefined): (JSC::FTL::LowerDFGToLLVM::speculateNonNullObject): Modified Paths

[webkit-changes] [153199] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153199] trunk/Source/_javascript_Core Revision 153199 Author oli...@apple.com Date 2013-07-24 21:01:42 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: LLInt shouldn't store an offset call PC during op_call-like calls https://bugs.webkit.org/show_bug.cgi?id=117048 Reviewed by

[webkit-changes] [153190] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153190] trunk/Source/_javascript_Core Revision 153190 Author oli...@apple.com Date 2013-07-24 21:01:22 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ArithMod https://bugs.webkit.org/show_bug.cgi?id=116792 Reviewed by Oliver Hunt. * ftl/FTLAbbreviations.h

[webkit-changes] [153211] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153211] trunk/Source/_javascript_Core Revision 153211 Author oli...@apple.com Date 2013-07-24 21:02:07 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: CallFrame::trueCallFrame() should populate the bytecodeOffset field when reifying inlined frames..

[webkit-changes] [153214] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153214] trunk/Source/_javascript_Core Revision 153214 Author oli...@apple.com Date 2013-07-24 21:02:15 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Reenable the DFG optimization fixpoint now that it's profitable to do so with concurrent compilation

[webkit-changes] [153194] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153194] trunk/Source/_javascript_Core Revision 153194 Author oli...@apple.com Date 2013-07-24 21:01:30 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ArithMin/ArithMax https://bugs.webkit.org/show_bug.cgi?id=116885 Reviewed by Oliver Hunt. * ftl

[webkit-changes] [153202] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153202] trunk/Source/_javascript_Core Revision 153202 Author oli...@apple.com Date 2013-07-24 21:01:48 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Remove CodeOrigin::valueProfileOffset since it was only needed for op_call_put_result. Rubber stamped by Mark Hahnenberg. *

[webkit-changes] [153209] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153209] trunk/Source/_javascript_Core Revision 153209 Author oli...@apple.com Date 2013-07-24 21:02:03 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Disambiguate between CallFrame bytecodeOffset and codeOriginIndex. https://bugs.webkit.org/show_bug.cgi?id=117262. Reviewed by

[webkit-changes] [153206] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153206] trunk/Source/_javascript_Core Revision 153206 Author oli...@apple.com Date 2013-07-24 21:01:56 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: all cached put_by_id transitions, even ones that weren't inlined by the DFG, should be propagated by the GC

[webkit-changes] [153210] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153210] trunk/Source/_javascript_Core Revision 153210 Author oli...@apple.com Date 2013-07-24 21:02:04 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG CFA shouldn't filter ArrayModes with ALL_NON_ARRAY_ARRAY_MODES if the speculated type is not SpecArray

[webkit-changes] [153198] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153198] trunk/Source/_javascript_Core Revision 153198 Author oli...@apple.com Date 2013-07-24 21:01:40 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ArithAbs https://bugs.webkit.org/show_bug.cgi?id=116890 Reviewed by Oliver Hunt. Implements ArithAbs

[webkit-changes] [153208] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153208] trunk/Source/_javascript_Core Revision 153208 Author oli...@apple.com Date 2013-07-24 21:02:00 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Clean up AbstractValue https://bugs.webkit.org/show_bug.cgi?id=117217 Reviewed by Oliver Hunt. This started as an attempt

[webkit-changes] [153227] trunk/Source

2013-07-24 Thread oliver
Title: [153227] trunk/Source Revision 153227 Author oli...@apple.com Date 2013-07-24 21:02:57 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Concurrent JIT shouldn't try to recompute the CodeBlockHash as part of debug dumps, since doing so may fail if dealing with a CachedScript that

[webkit-changes] [153216] trunk/Source

2013-07-24 Thread oliver
Title: [153216] trunk/Source Revision 153216 Author oli...@apple.com Date 2013-07-24 21:02:20 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Recursive deadlock in DFG::ByteCodeParser https://bugs.webkit.org/show_bug.cgi?id=117376 Source/_javascript_Core: Reviewed by Mark Hahnenberg.

[webkit-changes] [153233] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153233] trunk/Source/_javascript_Core Revision 153233 Author oli...@apple.com Date 2013-07-24 21:03:12 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Refactor ObjCCallbackFunction to inherit directly from InternalFunction https://bugs.webkit.org/show_bug.cgi?id=117595 Reviewed

[webkit-changes] [153226] trunk/Source/WTF

2013-07-24 Thread oliver
Title: [153226] trunk/Source/WTF Revision 153226 Author oli...@apple.com Date 2013-07-24 21:02:55 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Printing a StringImpl* should really guard against NULL https://bugs.webkit.org/show_bug.cgi?id=117675 Reviewed by Mark Hahnenberg. *

[webkit-changes] [153229] trunk

2013-07-24 Thread oliver
Title: [153229] trunk Revision 153229 Author oli...@apple.com Date 2013-07-24 21:03:03 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Add CFG simplification for Switch https://bugs.webkit.org/show_bug.cgi?id=117677 Source/_javascript_Core: Reviewed by Mark Hahnenberg. This is for

[webkit-changes] [153224] trunk/LayoutTests/fast/js/resources/standalone-pre.js

2013-07-24 Thread oliver
Title: [153224] trunk/LayoutTests/fast/js/resources/standalone-pre.js Revision 153224 Author oli...@apple.com Date 2013-07-24 21:02:48 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: A few fixups to standalone-pre.js Modified Paths trunk/LayoutTests/fast/js/resources/standalone-pre.js

[webkit-changes] [153220] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153220] trunk/Source/_javascript_Core Revision 153220 Author oli...@apple.com Date 2013-07-24 21:02:32 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: isContravenedByStructure is backwards https://bugs.webkit.org/show_bug.cgi?id=117366 We should be checking if

[webkit-changes] [153219] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153219] trunk/Source/_javascript_Core Revision 153219 Author oli...@apple.com Date 2013-07-24 21:02:30 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Type check hoisting phase has a dead if statement https://bugs.webkit.org/show_bug.cgi?id=117510 Reviewed by Geoffrey Garen. *

[webkit-changes] [153230] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153230] trunk/Source/_javascript_Core Revision 153230 Author oli...@apple.com Date 2013-07-24 21:03:05 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support Switch https://bugs.webkit.org/show_bug.cgi?id=117704 Reviewed by Oliver Hunt. * bytecode/CodeBlock.h: (JSC

[webkit-changes] [153231] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153231] trunk/Source/_javascript_Core Revision 153231 Author oli...@apple.com Date 2013-07-24 21:03:07 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Add another temp register regT4 to JSInterfaceJIT https://bugs.webkit.org/show_bug.cgi?id=117719 Reviewed by Geoffrey Garen.

[webkit-changes] [153223] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153223] trunk/Source/_javascript_Core Revision 153223 Author oli...@apple.com Date 2013-07-24 21:02:47 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: The Math object should not be polymorphic https://bugs.webkit.org/show_bug.cgi?id=117576 Reviewed by Oliver Hunt. Fill

[webkit-changes] [153215] trunk

2013-07-24 Thread oliver
..@apple.com + +Removed bogus assertion in CallFrame::setLocationAsBytecodeOffset(). +https://bugs.webkit.org/show_bug.cgi?id=117373. + +Reviewed by Oliver Hunt. + +The assertion wrongly assumes that the incoming offset argument is in +units of bytes. This is not true. It

[webkit-changes] [153243] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153243] trunk/Source/_javascript_Core Revision 153243 Author oli...@apple.com Date 2013-07-24 21:03:36 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: GC's put_by_id transition fixpoint should converge more quickly https://bugs.webkit.org/show_bug.cgi?id=117912 Reviewed by Mark

[webkit-changes] [153238] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153238] trunk/Source/_javascript_Core Revision 153238 Author oli...@apple.com Date 2013-07-24 21:03:25 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Structure should have a dump() https://bugs.webkit.org/show_bug.cgi?id=117859 Reviewed by Geoffrey Garen. This is pretty cool.

[webkit-changes] [153236] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153236] trunk/Source/_javascript_Core Revision 153236 Author oli...@apple.com Date 2013-07-24 21:03:20 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should clear character switch jump tables https://bugs.webkit.org/show_bug.cgi?id=117852 Reviewed by Sam Weinig. The FTL

[webkit-changes] [153232] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153232] trunk/Source/_javascript_Core Revision 153232 Author oli...@apple.com Date 2013-07-24 21:03:10 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Arity fixup should be done while on same stack https://bugs.webkit.org/show_bug.cgi?id=117102 Reviewed by Oliver Hunt. Removed

[webkit-changes] [153240] trunk

2013-07-24 Thread oliver
Title: [153240] trunk Revision 153240 Author oli...@apple.com Date 2013-07-24 21:03:30 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Small strings shouldn't get GC'd https://bugs.webkit.org/show_bug.cgi?id=117897 Source/_javascript_Core: Reviewed by Mark Hahnenberg. Kill off the

[webkit-changes] [153239] trunk/Source/JavaScriptCore/runtime/JSString.h

2013-07-24 Thread oliver
Title: [153239] trunk/Source/_javascript_Core/runtime/JSString.h Revision 153239 Author oli...@apple.com Date 2013-07-24 21:03:27 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Re-indent JSString.h to aid mhe merging of the FTL branch Modified Paths

[webkit-changes] [153246] trunk/Source/WTF/ChangeLog

2013-07-24 Thread oliver
Title: [153246] trunk/Source/WTF/ChangeLog Revision 153246 Author oli...@apple.com Date 2013-07-24 21:03:44 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should optimize identifier string equality https://bugs.webkit.org/show_bug.cgi?id=117920 Reviewed by Sam Weinig. Note that

[webkit-changes] [153241] trunk

2013-07-24 Thread oliver
Title: [153241] trunk Revision 153241 Author oli...@apple.com Date 2013-07-24 21:03:33 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should't exit just because it GetByVal'd a big character https://bugs.webkit.org/show_bug.cgi?id=117899 Source/_javascript_Core: Reviewed by Mark

[webkit-changes] [153242] trunk

2013-07-24 Thread oliver
Title: [153242] trunk Revision 153242 Author oli...@apple.com Date 2013-07-24 21:03:35 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should CSE MakeRope https://bugs.webkit.org/show_bug.cgi?id=117905 Source/_javascript_Core: Reviewed by Geoffrey Garen. Adds MakeRope to the CSE

[webkit-changes] [153247] trunk/Source

2013-07-24 Thread oliver
Title: [153247] trunk/Source Revision 153247 Author oli...@apple.com Date 2013-07-24 21:03:46 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Count external memory usage towards heap footprint https://bugs.webkit.org/show_bug.cgi?id=117948 Reviewed by Geoffrey Garen.

[webkit-changes] [153245] trunk

2013-07-24 Thread oliver
Title: [153245] trunk Revision 153245 Author oli...@apple.com Date 2013-07-24 21:03:42 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should optimize identifier string equality https://bugs.webkit.org/show_bug.cgi?id=117920 Source/_javascript_Core: Reviewed by Sam Weinig. This

[webkit-changes] [153251] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153251] trunk/Source/_javascript_Core Revision 153251 Author oli...@apple.com Date 2013-07-24 21:03:56 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ForwardCheckStructure/ForwardStructureTransitionWatchpoint and doing so shouldn't break V8/crypto

[webkit-changes] [153259] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153259] trunk/Source/_javascript_Core Revision 153259 Author oli...@apple.com Date 2013-07-24 21:04:11 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should run AA passes before GVN https://bugs.webkit.org/show_bug.cgi?id=118276 Rubber stamped by Geoffrey Garen. These

<    1   2   3   4   5   6   7   >