[webkit-changes] [286856] trunk/Source/JavaScriptCore

Title: [286856] trunk/Source/_javascript_Core Revision 286856 Author tzaga...@apple.com Date 2021-12-10 09:25:22 -0800 (Fri, 10 Dec 2021) Log Message Remove Mac-specific ARM64EHash implementation https://bugs.webkit.org/show_bug.cgi?id=234150 Reviewed by Saam Barati. Currently we have

[webkit-changes] [286550] trunk

Title: [286550] trunk Revision 286550 Author tzaga...@apple.com Date 2021-12-06 10:46:03 -0800 (Mon, 06 Dec 2021) Log Message Restore navigator.hardwareConcurrency https://bugs.webkit.org/show_bug.cgi?id=233381 Reviewed by Saam Barati. LayoutTests/imported/w3c: *

[webkit-changes] [284513] trunk/Source/JavaScriptCore

Title: [284513] trunk/Source/_javascript_Core Revision 284513 Author tzaga...@apple.com Date 2021-10-19 17:40:19 -0700 (Tue, 19 Oct 2021) Log Message Address post-landing feedback to wasm exceptions https://bugs.webkit.org/show_bug.cgi?id=231973 Reviewed by Saam Barati. Address

[webkit-changes] [284212] trunk/Source/JavaScriptCore

Title: [284212] trunk/Source/_javascript_Core Revision 284212 Author tzaga...@apple.com Date 2021-10-14 16:15:15 -0700 (Thu, 14 Oct 2021) Log Message Wasm LLInt should zero bytecodeIndex before throwing https://bugs.webkit.org/show_bug.cgi?id=231688 Reviewed by Yusuke Suzuki. After

[webkit-changes] [280505] trunk

Title: [280505] trunk Revision 280505 Author tzaga...@apple.com Date 2021-07-30 18:33:44 -0700 (Fri, 30 Jul 2021) Log Message putInlineFastReplacingStaticPropertyIfNeeded should handle custom values https://bugs.webkit.org/show_bug.cgi?id=227963 Reviewed by Alexey Shvayka. JSTests: *

[webkit-changes] [280463] trunk

Title: [280463] trunk Revision 280463 Author tzaga...@apple.com Date 2021-07-29 19:00:36 -0700 (Thu, 29 Jul 2021) Log Message definePropertyOnReceiver should check if receiver canPerformFastPutInline https://bugs.webkit.org/show_bug.cgi?id=227963 Reviewed by Alexey Shvayka. JSTests:

[webkit-changes] [278937] trunk

Title: [278937] trunk Revision 278937 Author tzaga...@apple.com Date 2021-06-16 09:09:24 -0700 (Wed, 16 Jun 2021) Log Message AssemblyHelpers should save/restore callee save FPRs https://bugs.webkit.org/show_bug.cgi?id=227052 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [278462] trunk

Title: [278462] trunk Revision 278462 Author tzaga...@apple.com Date 2021-06-04 08:58:13 -0700 (Fri, 04 Jun 2021) Log Message Optimize Function.prototype.toString https://bugs.webkit.org/show_bug.cgi?id=226418 Reviewed by Saam Barati. JSTests: * microbenchmarks/function-to-string.js:

[webkit-changes] [278139] trunk/Source/JavaScriptCore

Title: [278139] trunk/Source/_javascript_Core Revision 278139 Author tzaga...@apple.com Date 2021-05-26 17:36:06 -0700 (Wed, 26 May 2021) Log Message REGRESSION: ASSERTION FAILED: !isCompilationThread() in JSC::Profiler::Database::addCompilation()

[webkit-changes] [275521] trunk

Title: [275521] trunk Revision 275521 Author tzaga...@apple.com Date 2021-04-06 09:05:01 -0700 (Tue, 06 Apr 2021) Log Message Handle OOM in ScriptExecutionContext::reportUnhandledPromiseRejection https://bugs.webkit.org/show_bug.cgi?id=223777 Reviewed by Yusuke Suzuki. Source/WebCore:

[webkit-changes] [275374] trunk/Source/JavaScriptCore

Title: [275374] trunk/Source/_javascript_Core Revision 275374 Author tzaga...@apple.com Date 2021-04-01 13:02:50 -0700 (Thu, 01 Apr 2021) Log Message Remove use of ENABLE from API header https://bugs.webkit.org/show_bug.cgi?id=224060 Reviewed by Mark Lam. The use of the ENABLE macro

[webkit-changes] [275333] trunk

Title: [275333] trunk Revision 275333 Author tzaga...@apple.com Date 2021-03-31 18:38:03 -0700 (Wed, 31 Mar 2021) Log Message Missing scope release in JSDOMBuiltinConstructorBase https://bugs.webkit.org/show_bug.cgi?id=216851 Reviewed by Yusuke Suzuki. Source/WebCore: In

[webkit-changes] [274312] trunk

Title: [274312] trunk Revision 274312 Author tzaga...@apple.com Date 2021-03-11 16:47:20 -0800 (Thu, 11 Mar 2021) Log Message AI validator patchpoint should read heap top https://bugs.webkit.org/show_bug.cgi?id=223052 Reviewed by Yusuke Suzuki. JSTests: *

[webkit-changes] [274263] trunk

Title: [274263] trunk Revision 274263 Author tzaga...@apple.com Date 2021-03-10 18:39:16 -0800 (Wed, 10 Mar 2021) Log Message AI validator patchpoint should read heap top https://bugs.webkit.org/show_bug.cgi?id=223052 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [273972] trunk

Title: [273972] trunk Revision 273972 Author tzaga...@apple.com Date 2021-03-05 08:24:08 -0800 (Fri, 05 Mar 2021) Log Message OpGetPrivateName needs to be listed in FOR_EACH_OPCODE_WITH_VALUE_PROFILE https://bugs.webkit.org/show_bug.cgi?id=222775 Reviewed by Michael Saboff. JSTests:

[webkit-changes] [272095] trunk/Source/WTF

Title: [272095] trunk/Source/WTF Revision 272095 Author tzaga...@apple.com Date 2021-01-29 18:16:56 -0800 (Fri, 29 Jan 2021) Log Message Make check for full HashTables opt-in https://bugs.webkit.org/show_bug.cgi?id=221166 Reviewed by Saam Barati and Yusuke Suzuki. Having the check

[webkit-changes] [271144] trunk/Source/JavaScriptCore

Title: [271144] trunk/Source/_javascript_Core Revision 271144 Author tzaga...@apple.com Date 2021-01-04 23:23:31 -0800 (Mon, 04 Jan 2021) Log Message propertyNameEnumerator must check it can still take the fast path after getGenericPropertyNames

[webkit-changes] [271143] trunk/Source/JavaScriptCore

Title: [271143] trunk/Source/_javascript_Core Revision 271143 Author tzaga...@apple.com Date 2021-01-04 23:19:24 -0800 (Mon, 04 Jan 2021) Log Message Validate every instruction in AssemblerBuffer https://bugs.webkit.org/show_bug.cgi?id=218104 Reviewed by Saam Barati. *

[webkit-changes] [270794] trunk/Source

Title: [270794] trunk/Source Revision 270794 Author tzaga...@apple.com Date 2020-12-14 11:47:36 -0800 (Mon, 14 Dec 2020) Log Message Move some of the work from JSLock to VMEntryScope https://bugs.webkit.org/show_bug.cgi?id=219830 Reviewed by Mark Lam. Source/_javascript_Core: We move

[webkit-changes] [270719] trunk/Source/JavaScriptCore

Title: [270719] trunk/Source/_javascript_Core Revision 270719 Author tzaga...@apple.com Date 2020-12-11 16:43:52 -0800 (Fri, 11 Dec 2020) Log Message REGRESSION (r270665): testapi failing on JSC bots https://bugs.webkit.org/show_bug.cgi?id=219787 Reviewed by Saam Barati. *

[webkit-changes] [270700] trunk/Source/JavaScriptCore

Title: [270700] trunk/Source/_javascript_Core Revision 270700 Author tzaga...@apple.com Date 2020-12-11 12:10:12 -0800 (Fri, 11 Dec 2020) Log Message REGRESSION (r270665): testapi failing on CLoop bot https://bugs.webkit.org/show_bug.cgi?id=219787 Reviewed by Mark Lam. The API has to

[webkit-changes] [270665] trunk

Title: [270665] trunk Revision 270665 Author tzaga...@apple.com Date 2020-12-10 20:20:19 -0800 (Thu, 10 Dec 2020) Log Message Removing unnecessary locking from JSValue API functions https://bugs.webkit.org/show_bug.cgi?id=219723 Reviewed by Filip Pizlo. PerformanceTests: Print an

[webkit-changes] [270659] trunk

Title: [270659] trunk Revision 270659 Author tzaga...@apple.com Date 2020-12-10 15:10:36 -0800 (Thu, 10 Dec 2020) Log Message Add a JSC API to allow acquiring the JSLock https://bugs.webkit.org/show_bug.cgi?id=219663 Reviewed by Filip Pizlo. PerformanceTests: This patch does 3 things:

[webkit-changes] [269020] trunk/Source

Title: [269020] trunk/Source Revision 269020 Author tzaga...@apple.com Date 2020-10-26 19:13:14 -0700 (Mon, 26 Oct 2020) Log Message Sign MacroAssembler::jumpsToLink https://bugs.webkit.org/show_bug.cgi?id=217774 Reviewed by Saam Barati. Source/_javascript_Core: *

[webkit-changes] [269019] trunk/Source/WTF

Title: [269019] trunk/Source/WTF Revision 269019 Author tzaga...@apple.com Date 2020-10-26 19:07:46 -0700 (Mon, 26 Oct 2020) Log Message Add extra validation to MetaAllocator::findAndRemoveFreeSpace https://bugs.webkit.org/show_bug.cgi?id=217792 Reviewed Saam Barati. *

[webkit-changes] [269017] trunk/Source/WTF

Title: [269017] trunk/Source/WTF Revision 269017 Author tzaga...@apple.com Date 2020-10-26 19:04:13 -0700 (Mon, 26 Oct 2020) Log Message Assert that WTF::HashTable does not visit the same bucket twice https://bugs.webkit.org/show_bug.cgi?id=217691 Reviewed by Saam Barati. *

[webkit-changes] [269016] trunk/Source/JavaScriptCore

Title: [269016] trunk/Source/_javascript_Core Revision 269016 Author tzaga...@apple.com Date 2020-10-26 18:56:16 -0700 (Mon, 26 Oct 2020) Log Message Validate addresses returned by LinkBuffer::locationOf https://bugs.webkit.org/show_bug.cgi?id=217786 Reviewed by Saam Barati. *

[webkit-changes] [268135] trunk/Source/WTF

Title: [268135] trunk/Source/WTF Revision 268135 Author tzaga...@apple.com Date 2020-10-07 11:05:09 -0700 (Wed, 07 Oct 2020) Log Message Add maximum depth check to RedBlackTree https://bugs.webkit.org/show_bug.cgi?id=217249 Reviewed by Saam Barati. We limit all tree traversals to 128

[webkit-changes] [267495] trunk

Title: [267495] trunk Revision 267495 Author tzaga...@apple.com Date 2020-09-23 12:35:19 -0700 (Wed, 23 Sep 2020) Log Message Missing scope release in JSDOMBuiltinConstructorBase https://bugs.webkit.org/show_bug.cgi?id=216851 Reviewed by Yusuke Suzuki. Source/WebCore: In

[webkit-changes] [267216] trunk

Title: [267216] trunk Revision 267216 Author tzaga...@apple.com Date 2020-09-17 18:17:35 -0700 (Thu, 17 Sep 2020) Log Message Inconsistent loop exit assertion in B3ReduceLoopStrength https://bugs.webkit.org/show_bug.cgi?id=216274 Reviewed by Keith Miller. JSTests: *

[webkit-changes] [267114] trunk

Title: [267114] trunk Revision 267114 Author tzaga...@apple.com Date 2020-09-15 16:46:09 -0700 (Tue, 15 Sep 2020) Log Message Object allocation sinking forgets escaped nodes when structure changes https://bugs.webkit.org/show_bug.cgi?id=216214 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [265891] trunk/Source/JavaScriptCore

Title: [265891] trunk/Source/_javascript_Core Revision 265891 Author tzaga...@apple.com Date 2020-08-19 12:46:35 -0700 (Wed, 19 Aug 2020) Log Message B3 IntRange is incorrect for negative masks https://bugs.webkit.org/show_bug.cgi?id=215536 Reviewed by Michael Saboff and Robin

[webkit-changes] [265065] trunk

Title: [265065] trunk Revision 265065 Author tzaga...@apple.com Date 2020-07-29 16:15:09 -0700 (Wed, 29 Jul 2020) Log Message WebAssembly validation for call_indirect is incorrect https://bugs.webkit.org/show_bug.cgi?id=214901 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [264867] trunk

Title: [264867] trunk Revision 264867 Author tzaga...@apple.com Date 2020-07-24 16:15:07 -0700 (Fri, 24 Jul 2020) Log Message WKStringGetMaximumUTF8CStringSize should cast before arithmetic https://bugs.webkit.org/show_bug.cgi?id=214750 Reviewed by Mark Lam. Source/WebKit: When the

[webkit-changes] [263524] trunk/Source/WTF

Title: [263524] trunk/Source/WTF Revision 263524 Author tzaga...@apple.com Date 2020-06-25 12:38:13 -0700 (Thu, 25 Jun 2020) Log Message WTF::callOnMainThread should not require the main runloop to be initialized https://bugs.webkit.org/show_bug.cgi?id=213612 Reviewed by Yusuke Suzuki.

[webkit-changes] [263071] trunk

Title: [263071] trunk Revision 263071 Author tzaga...@apple.com Date 2020-06-15 18:26:07 -0700 (Mon, 15 Jun 2020) Log Message JSTests: Bytecode liveness should be aware of checkpoints https://bugs.webkit.org/show_bug.cgi?id=213106 Reviewed by Keith Miller. *

[webkit-changes] [262666] trunk/Source/JavaScriptCore

Title: [262666] trunk/Source/_javascript_Core Revision 262666 Author tzaga...@apple.com Date 2020-06-05 18:26:17 -0700 (Fri, 05 Jun 2020) Log Message REGRESSION(r262523): Fix testb3 https://bugs.webkit.org/show_bug.cgi?id=212791 Reviewed by Mark Lam. * b3/testb3_1.cpp: (run): (main):

[webkit-changes] [262523] trunk

Title: [262523] trunk Revision 262523 Author tzaga...@apple.com Date 2020-06-03 16:18:30 -0700 (Wed, 03 Jun 2020) Log Message Disable B3 hoistLoopInvariantValues by default https://bugs.webkit.org/show_bug.cgi?id=212511 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [259131] trunk/Source/JavaScriptCore

Title: [259131] trunk/Source/_javascript_Core Revision 259131 Author tzaga...@apple.com Date 2020-03-27 11:39:46 -0700 (Fri, 27 Mar 2020) Log Message Fix instances of new.target that should be syntax errors https://bugs.webkit.org/show_bug.cgi?id=208040 Reviewed by Michael Saboff. We

[webkit-changes] [258965] trunk

Title: [258965] trunk Revision 258965 Author tzaga...@apple.com Date 2020-03-24 17:51:44 -0700 (Tue, 24 Mar 2020) Log Message LLIntGenerator must link switch jumps to otherwise redundant labels https://bugs.webkit.org/show_bug.cgi?id=209333 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [258573] trunk/Source/JavaScriptCore

Title: [258573] trunk/Source/_javascript_Core Revision 258573 Author tzaga...@apple.com Date 2020-03-17 12:45:05 -0700 (Tue, 17 Mar 2020) Log Message AccessCase::canReplace should allow a Getter to replace an IntrinsicGetter https://bugs.webkit.org/show_bug.cgi?id=209158 Reviewed by

[webkit-changes] [258452] trunk/Source/JavaScriptCore

Title: [258452] trunk/Source/_javascript_Core Revision 258452 Author tzaga...@apple.com Date 2020-03-13 17:19:24 -0700 (Fri, 13 Mar 2020) Log Message Missing arithMode for ArithAbs and ArithNegate in DFGClobberize https://bugs.webkit.org/show_bug.cgi?id=208685 Reviewed by Saam Barati.

[webkit-changes] [256766] trunk

Title: [256766] trunk Revision 256766 Author tzaga...@apple.com Date 2020-02-17 13:24:13 -0800 (Mon, 17 Feb 2020) Log Message [Wasm] REGRESSION(r256665): Wasm->JS call IC needs to save memory size register https://bugs.webkit.org/show_bug.cgi?id=207849 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [256698] trunk/JSTests

Title: [256698] trunk/JSTests Revision 256698 Author tzaga...@apple.com Date 2020-02-14 19:19:11 -0800 (Fri, 14 Feb 2020) Log Message Unreviewed: fix broken tests added in r256665 https://bugs.webkit.org/show_bug.cgi?id=207727 Our inline WAT doesn't seem to like named blocks/branch

[webkit-changes] [256665] trunk

Title: [256665] trunk Revision 256665 Author tzaga...@apple.com Date 2020-02-14 18:57:49 -0800 (Fri, 14 Feb 2020) Log Message [WASM] Wasm interpreter's calling convention doesn't match Wasm JIT's convention. https://bugs.webkit.org/show_bug.cgi?id=207727 JSTests: Reviewed by Mark Lam.

[webkit-changes] [254866] trunk

Title: [254866] trunk Revision 254866 Author tzaga...@apple.com Date 2020-01-21 11:36:05 -0800 (Tue, 21 Jan 2020) Log Message JSTests: Object allocation sinking is missing PutHint for allocations unreachable in the graph https://bugs.webkit.org/show_bug.cgi?id=203799 Reviewed by Saam

[webkit-changes] [254725] trunk

Title: [254725] trunk Revision 254725 Author tzaga...@apple.com Date 2020-01-16 16:55:15 -0800 (Thu, 16 Jan 2020) Log Message JSTests: Object allocation sinking is missing PutHint for allocations unreachable in the graph https://bugs.webkit.org/show_bug.cgi?id=203799 Reviewed by Saam

[webkit-changes] [253335] trunk/Source/JavaScriptCore

Title: [253335] trunk/Source/_javascript_Core Revision 253335 Author tzaga...@apple.com Date 2019-12-10 11:41:40 -0800 (Tue, 10 Dec 2019) Log Message Reduce JSC's binary size https://bugs.webkit.org/show_bug.cgi?id=204549 Reviewed by Saam Barati. The Wasm interpreter landed in r251886

[webkit-changes] [253314] trunk/Source/JavaScriptCore

Title: [253314] trunk/Source/_javascript_Core Revision 253314 Author tzaga...@apple.com Date 2019-12-09 17:54:07 -0800 (Mon, 09 Dec 2019) Log Message [WebAssembly] Remove WasmValidate https://bugs.webkit.org/show_bug.cgi?id=205037 Reviewed by Saam Barati. It's currently only used when

[webkit-changes] [253303] trunk

Title: [253303] trunk Revision 253303 Author tzaga...@apple.com Date 2019-12-09 15:23:51 -0800 (Mon, 09 Dec 2019) Log Message REGRESSION(r253140): WebAssembly validation should check for unmatched else before calling addElse/addElseToUnreachable

[webkit-changes] [253280] trunk

Title: [253280] trunk Revision 253280 Author tzaga...@apple.com Date 2019-12-08 17:35:16 -0800 (Sun, 08 Dec 2019) Log Message [WebAssembly] Fix LLIntGenerator's checkConsistency contract https://bugs.webkit.org/show_bug.cgi?id=204998 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [253188] trunk/Source/JavaScriptCore

Title: [253188] trunk/Source/_javascript_Core Revision 253188 Author tzaga...@apple.com Date 2019-12-05 17:08:57 -0800 (Thu, 05 Dec 2019) Log Message [WebAssembly] Fix LLIntCallee's ownership https://bugs.webkit.org/show_bug.cgi?id=204929 Reviewed by Saam Barati. Currently, after the

[webkit-changes] [253171] trunk/Source/JavaScriptCore

Title: [253171] trunk/Source/_javascript_Core Revision 253171 Author tzaga...@apple.com Date 2019-12-05 14:32:55 -0800 (Thu, 05 Dec 2019) Log Message REGRESSION(r253140): Wasm::FunctionParser needs to bounds check in SetLocal/TeeLocal https://bugs.webkit.org/show_bug.cgi?id=204909

[webkit-changes] [253168] trunk/Source/JavaScriptCore

Title: [253168] trunk/Source/_javascript_Core Revision 253168 Author tzaga...@apple.com Date 2019-12-05 13:05:45 -0800 (Thu, 05 Dec 2019) Log Message [WebAssembly] Fix bad assertion in LLIntPlan https://bugs.webkit.org/show_bug.cgi?id=204893 Reviewed by Mark Lam. Before landing r253140

[webkit-changes] [253010] trunk/Source/JavaScriptCore

Title: [253010] trunk/Source/_javascript_Core Revision 253010 Author tzaga...@apple.com Date 2019-12-02 14:45:25 -0800 (Mon, 02 Dec 2019) Log Message [JSC] Remove BytecodeCacheVersion.h https://bugs.webkit.org/show_bug.cgi?id=204760 Reviewed by Mark Lam. Having that as a phony make

[webkit-changes] [252800] trunk

Title: [252800] trunk Revision 252800 Author tzaga...@apple.com Date 2019-11-22 14:13:28 -0800 (Fri, 22 Nov 2019) Log Message [WebAssembly] Improve Wasm::LLIntGenerator https://bugs.webkit.org/show_bug.cgi?id=204092 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [252310] trunk/Source/JavaScriptCore

Title: [252310] trunk/Source/_javascript_Core Revision 252310 Author tzaga...@apple.com Date 2019-11-09 15:35:11 -0800 (Sat, 09 Nov 2019) Log Message [WebAssembly] Improve bytecode dumping https://bugs.webkit.org/show_bug.cgi?id=204051 Reviewed by Keith Miller. This patch improves the

[webkit-changes] [252306] trunk/Source/JavaScriptCore

Title: [252306] trunk/Source/_javascript_Core Revision 252306 Author tzaga...@apple.com Date 2019-11-08 23:05:16 -0800 (Fri, 08 Nov 2019) Log Message [WebAssembly] LLIntGenerator should not retain VirtualRegisters used for constants https://bugs.webkit.org/show_bug.cgi?id=204028

[webkit-changes] [252231] trunk/Source/JavaScriptCore

Title: [252231] trunk/Source/_javascript_Core Revision 252231 Author tzaga...@apple.com Date 2019-11-07 19:55:47 -0800 (Thu, 07 Nov 2019) Log Message Use fewer virtual registers in Wasm LLInt https://bugs.webkit.org/show_bug.cgi?id=203861 Reviewed by Saam Barati. Reduce the number of

[webkit-changes] [252216] trunk/Source/JavaScriptCore

Title: [252216] trunk/Source/_javascript_Core Revision 252216 Author tzaga...@apple.com Date 2019-11-07 16:37:52 -0800 (Thu, 07 Nov 2019) Log Message [WebAssembly] Inspector's DebuggerCallFrame should be aware of Wasm frames https://bugs.webkit.org/show_bug.cgi?id=203925 Reviewed by

[webkit-changes] [252162] trunk/Source/JavaScriptCore

Title: [252162] trunk/Source/_javascript_Core Revision 252162 Author tzaga...@apple.com Date 2019-11-06 17:22:44 -0800 (Wed, 06 Nov 2019) Log Message [WebAssembly] BBQPlan should retain Wasm::CodeBlock when compiling a single function https://bugs.webkit.org/show_bug.cgi?id=203924

[webkit-changes] [252115] trunk/Source/JavaScriptCore

Title: [252115] trunk/Source/_javascript_Core Revision 252115 Author tzaga...@apple.com Date 2019-11-05 17:30:41 -0800 (Tue, 05 Nov 2019) Log Message [WebAssembly] Allow tiering up from LLInt to BBQ https://bugs.webkit.org/show_bug.cgi?id=203793 Reviewed by Yusuke Suzuki. Even though

[webkit-changes] [251978] trunk

Title: [251978] trunk Revision 251978 Author tzaga...@apple.com Date 2019-11-03 20:11:43 -0800 (Sun, 03 Nov 2019) Log Message LLIntGenerator should not allocate temporaries in between variables https://bugs.webkit.org/show_bug.cgi?id=203787 Reviewed by Yusuke Suzuki. JSTests: *

[webkit-changes] [251911] trunk/Source/JavaScriptCore

Title: [251911] trunk/Source/_javascript_Core Revision 251911 Author tzaga...@apple.com Date 2019-10-31 22:53:44 -0700 (Thu, 31 Oct 2019) Log Message Fix GTK build after r251886 https://bugs.webkit.org/show_bug.cgi?id=203703 Reviewed by Yusuke Suzuki. slow_path_wasm_throw_exception was

[webkit-changes] [251909] trunk/Source/JavaScriptCore

Title: [251909] trunk/Source/_javascript_Core Revision 251909 Author tzaga...@apple.com Date 2019-10-31 22:01:40 -0700 (Thu, 31 Oct 2019) Log Message gcSafeMemmove references undefined slowPathBackwardsMemmove on non-gcc compatible compilers https://bugs.webkit.org/show_bug.cgi?id=203721

[webkit-changes] [251906] trunk/Source/JavaScriptCore

Title: [251906] trunk/Source/_javascript_Core Revision 251906 Author tzaga...@apple.com Date 2019-10-31 21:00:32 -0700 (Thu, 31 Oct 2019) Log Message Fix build when WTF_CPU_NEEDS_ALIGNED_ACCESS=1 after r251886 https://bugs.webkit.org/show_bug.cgi?id=203718 Reviewed by Yusuke Suzuki. *

[webkit-changes] [251905] trunk/Source/JavaScriptCore

Title: [251905] trunk/Source/_javascript_Core Revision 251905 Author tzaga...@apple.com Date 2019-10-31 20:58:47 -0700 (Thu, 31 Oct 2019) Log Message offlineasm should emit the suffixes for floating point instructions on Windows x86 https://bugs.webkit.org/show_bug.cgi?id=203720

[webkit-changes] [251904] trunk/Source/JavaScriptCore

Title: [251904] trunk/Source/_javascript_Core Revision 251904 Author tzaga...@apple.com Date 2019-10-31 20:23:14 -0700 (Thu, 31 Oct 2019) Log Message Disable Wasm interpreter on WinCairo https://bugs.webkit.org/show_bug.cgi?id=203705 Reviewed by Yusuke Suzuki. The interpreter does not

[webkit-changes] [251894] trunk/Source/JavaScriptCore

Title: [251894] trunk/Source/_javascript_Core Revision 251894 Author tzaga...@apple.com Date 2019-10-31 16:37:14 -0700 (Thu, 31 Oct 2019) Log Message Unreviewed, fix LowLevelInterpreter32_64.asm after r251886 https://bugs.webkit.org/show_bug.cgi?id=194257 ci2d was renamed to ci2ds and I

[webkit-changes] [251893] trunk/Source/JavaScriptCore

Title: [251893] trunk/Source/_javascript_Core Revision 251893 Author tzaga...@apple.com Date 2019-10-31 16:28:27 -0700 (Thu, 31 Oct 2019) Log Message Unreviewed, fix cloop builds after r251886 https://bugs.webkit.org/show_bug.cgi?id=194257 ci2d was renamed to ci2ds, but I missed

[webkit-changes] [251812] trunk

Title: [251812] trunk Revision 251812 Author tzaga...@apple.com Date 2019-10-30 15:19:33 -0700 (Wed, 30 Oct 2019) Log Message tryCachePutToScopeGlobal should hold the lock to update metadata.m_getPutInfo https://bugs.webkit.org/show_bug.cgi?id=203628 Reviewed by Yusuke Suzuki.

[webkit-changes] [250543] trunk

Title: [250543] trunk Revision 250543 Author tzaga...@apple.com Date 2019-09-30 21:06:25 -0700 (Mon, 30 Sep 2019) Log Message Make assertion in JSObject::putOwnDataProperty more precise https://bugs.webkit.org/show_bug.cgi?id=202379 Reviewed by Yusuke Suzuki. JSTests: *

[webkit-changes] [250184] trunk

Title: [250184] trunk Revision 250184 Author tzaga...@apple.com Date 2019-09-21 11:30:29 -0700 (Sat, 21 Sep 2019) Log Message AccessCase should strongly visit its dependencies while on stack https://bugs.webkit.org/show_bug.cgi?id=201986 Reviewed by Saam Barati and Yusuke Suzuki.

[webkit-changes] [250098] trunk

Title: [250098] trunk Revision 250098 Author tzaga...@apple.com Date 2019-09-19 11:45:12 -0700 (Thu, 19 Sep 2019) Log Message Syntax checker should report duplicate __proto__ properties https://bugs.webkit.org/show_bug.cgi?id=201897 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [249935] trunk

Title: [249935] trunk Revision 249935 Author tzaga...@apple.com Date 2019-09-16 18:40:49 -0700 (Mon, 16 Sep 2019) Log Message Wasm StreamingParser should validate that number of functions matches number of declarations https://bugs.webkit.org/show_bug.cgi?id=201850 Reviewed by Yusuke

[webkit-changes] [249915] trunk/Source/JavaScriptCore

Title: [249915] trunk/Source/_javascript_Core Revision 249915 Author tzaga...@apple.com Date 2019-09-16 13:48:37 -0700 (Mon, 16 Sep 2019) Log Message SamplingProfiler should hold API lock before reporting results https://bugs.webkit.org/show_bug.cgi?id=201829 Reviewed by Yusuke Suzuki.

[webkit-changes] [249538] trunk

Title: [249538] trunk Revision 249538 Author tzaga...@apple.com Date 2019-09-05 11:47:55 -0700 (Thu, 05 Sep 2019) Log Message LazyClassStructure::setConstructor should not store the constructor to the global object https://bugs.webkit.org/show_bug.cgi?id=201484 Reviewed by Yusuke

[webkit-changes] [249075] trunk

Title: [249075] trunk Revision 249075 Author tzaga...@apple.com Date 2019-08-23 16:08:06 -0700 (Fri, 23 Aug 2019) Log Message Remove MaximalFlushInsertionPhase https://bugs.webkit.org/show_bug.cgi?id=201036 Reviewed by Saam Barati. JSTests: Remove all the references to maximal flush

[webkit-changes] [248866] trunk/Source/JavaScriptCore

Title: [248866] trunk/Source/_javascript_Core Revision 248866 Author tzaga...@apple.com Date 2019-08-19 14:34:07 -0700 (Mon, 19 Aug 2019) Log Message JSC tool targets should unlock the keychain before codesigning https://bugs.webkit.org/show_bug.cgi?id=200733 Reviewed by Alexey

[webkit-changes] [247426] trunk/Source/JavaScriptCore

Title: [247426] trunk/Source/_javascript_Core Revision 247426 Author tzaga...@apple.com Date 2019-07-15 01:47:22 -0700 (Mon, 15 Jul 2019) Log Message Concurrent GC should not rely on current phase to determine if it's safe to steal conn https://bugs.webkit.org/show_bug.cgi?id=199786

[webkit-changes] [247296] trunk

Title: [247296] trunk Revision 247296 Author tzaga...@apple.com Date 2019-07-10 01:24:52 -0700 (Wed, 10 Jul 2019) Log Message Optimize join of large empty arrays https://bugs.webkit.org/show_bug.cgi?id=199636 Reviewed by Mark Lam. JSTests: * microbenchmarks/large-empty-array-join.js:

[webkit-changes] [247166] trunk/Source/JavaScriptCore

Title: [247166] trunk/Source/_javascript_Core Revision 247166 Author tzaga...@apple.com Date 2019-07-05 11:57:55 -0700 (Fri, 05 Jul 2019) Log Message Unreviewed, change the value used to scribble Heap::m_worldState https://bugs.webkit.org/show_bug.cgi?id=199498 Follow-up after r247160.

[webkit-changes] [247160] trunk/Source/JavaScriptCore

Title: [247160] trunk/Source/_javascript_Core Revision 247160 Author tzaga...@apple.com Date 2019-07-05 09:38:40 -0700 (Fri, 05 Jul 2019) Log Message Scribble Heap::m_worldState on destructor https://bugs.webkit.org/show_bug.cgi?id=199498 Reviewed by Sam Weinig. The worldState is

[webkit-changes] [246610] trunk/Source/JavaScriptCore

Title: [246610] trunk/Source/_javascript_Core Revision 246610 Author tzaga...@apple.com Date 2019-06-19 14:29:48 -0700 (Wed, 19 Jun 2019) Log Message Some of the ASSERTs in CachedTypes.cpp should be RELEASE_ASSERTs https://bugs.webkit.org/show_bug.cgi?id=199030 Reviewed by Mark Lam.

[webkit-changes] [246563] trunk/Source/JavaScriptCore

Title: [246563] trunk/Source/_javascript_Core Revision 246563 Author tzaga...@apple.com Date 2019-06-18 13:53:01 -0700 (Tue, 18 Jun 2019) Log Message Add missing mutator fence in compileNewFunction https://bugs.webkit.org/show_bug.cgi?id=198849 Reviewed by Saam Barati. Follow-up after

[webkit-changes] [246553] trunk

Title: [246553] trunk Revision 246553 Author tzaga...@apple.com Date 2019-06-18 11:56:50 -0700 (Tue, 18 Jun 2019) Log Message DFG code should not reify the names of builtin functions with private names https://bugs.webkit.org/show_bug.cgi?id=198849 Reviewed by Filip Pizlo. JSTests: *

[webkit-changes] [246507] trunk/Source/JavaScriptCore

Title: [246507] trunk/Source/_javascript_Core Revision 246507 Author tzaga...@apple.com Date 2019-06-17 11:54:30 -0700 (Mon, 17 Jun 2019) Log Message Concurrent GC should check the conn before starting a new collection cycle https://bugs.webkit.org/show_bug.cgi?id=198913 Reviewed by

[webkit-changes] [246332] trunk

Title: [246332] trunk Revision 246332 Author tzaga...@apple.com Date 2019-06-11 14:06:45 -0700 (Tue, 11 Jun 2019) Log Message AI BitURShift's result should not be unsigned https://bugs.webkit.org/show_bug.cgi?id=198689 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [246307] trunk/Tools

Title: [246307] trunk/Tools Revision 246307 Author tzaga...@apple.com Date 2019-06-11 02:11:24 -0700 (Tue, 11 Jun 2019) Log Message Unreviewed, add myself to the _javascript_Core watchlist. * Scripts/webkitpy/common/config/watchlist: Modified Paths trunk/Tools/ChangeLog

[webkit-changes] [246306] trunk/Tools

Title: [246306] trunk/Tools Revision 246306 Author tzaga...@apple.com Date 2019-06-11 02:02:24 -0700 (Tue, 11 Jun 2019) Log Message Unreviewed, change my status to be a WebKit reviewer * Scripts/webkitpy/common/config/contributors.json: Modified Paths trunk/Tools/ChangeLog

[webkit-changes] [246210] trunk

Title: [246210] trunk Revision 246210 Author tzaga...@apple.com Date 2019-06-07 11:54:31 -0700 (Fri, 07 Jun 2019) Log Message AI should get GetterSetter structure from the base's GlobalObject for GetGetterSetterByOffset https://bugs.webkit.org/show_bug.cgi?id=198581 Reviewed by Saam

[webkit-changes] [246075] trunk

Title: [246075] trunk Revision 246075 Author tzaga...@apple.com Date 2019-06-04 12:06:32 -0700 (Tue, 04 Jun 2019) Log Message Argument elimination should check transitive dependents for interference https://bugs.webkit.org/show_bug.cgi?id=198520 Reviewed by Filip Pizlo. JSTests: *

[webkit-changes] [246071] trunk

Title: [246071] trunk Revision 246071 Author tzaga...@apple.com Date 2019-06-04 10:56:59 -0700 (Tue, 04 Jun 2019) Log Message Argument elimination should check for negative indices in GetByVal https://bugs.webkit.org/show_bug.cgi?id=198302 Reviewed by Filip Pizlo. JSTests: *

[webkit-changes] [246060] trunk/Source/JavaScriptCore

Title: [246060] trunk/Source/_javascript_Core Revision 246060 Author tzaga...@apple.com Date 2019-06-04 04:14:10 -0700 (Tue, 04 Jun 2019) Log Message JSScript should not keep bytecode cache in memory https://bugs.webkit.org/show_bug.cgi?id=198482 Reviewed by Saam Barati. When JSScript

[webkit-changes] [246021] trunk/Source/JavaScriptCore

Title: [246021] trunk/Source/_javascript_Core Revision 246021 Author tzaga...@apple.com Date 2019-06-02 05:25:15 -0700 (Sun, 02 Jun 2019) Log Message CachedMetadataTable::decode leaks empty tables https://bugs.webkit.org/show_bug.cgi?id=198465 Reviewed by Yusuke Suzuki.

[webkit-changes] [245813] trunk

Title: [245813] trunk Revision 245813 Author tzaga...@apple.com Date 2019-05-28 09:03:02 -0700 (Tue, 28 May 2019) Log Message JITOperations putByVal should mark negative array indices as out-of-bounds https://bugs.webkit.org/show_bug.cgi?id=198271 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [245800] trunk/Source/JavaScriptCore

Title: [245800] trunk/Source/_javascript_Core Revision 245800 Author tzaga...@apple.com Date 2019-05-27 14:51:40 -0700 (Mon, 27 May 2019) Log Message Fix opensource build of testapi https://bugs.webkit.org/show_bug.cgi?id=198256 Reviewed by Alexey Proskuryakov. In r245564, we added

[webkit-changes] [245769] trunk

Title: [245769] trunk Revision 245769 Author tzaga...@apple.com Date 2019-05-25 02:25:25 -0700 (Sat, 25 May 2019) Log Message JITOperations getByVal should mark negative array indices as out-of-bounds https://bugs.webkit.org/show_bug.cgi?id=198229 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [245710] trunk

Title: [245710] trunk Revision 245710 Author tzaga...@apple.com Date 2019-05-23 13:43:49 -0700 (Thu, 23 May 2019) Log Message DFG::OSREntry should not perform arity check https://bugs.webkit.org/show_bug.cgi?id=198189 Reviewed by Saam Barati. JSTests: *

[webkit-changes] [245675] trunk

Title: [245675] trunk Revision 245675 Author tzaga...@apple.com Date 2019-05-23 00:06:20 -0700 (Thu, 23 May 2019) Log Message createListFromArrayLike should throw if value is not an object https://bugs.webkit.org/show_bug.cgi?id=198138 Reviewed by Yusuke Suzuki. JSTests: *

  1   2   >