Reviewers: Yang,
Description:
Merged r16205, r16220, r16237, r16249, r16262, r16269, r16273 into 3.20
branch.
Mark HStringCompareAndBranch as potentially causing GCs.
Prevent empty handle dereference in Runtime_InternalNumberFormat.
Fix null handle deref in InternalDateFormat
Fix a bug in Div when all uses are truncating
Fix "Hole" leak in TryBuildConsolidatedElementLoad
Never clear debug-stub call ICs. Make a clear distinction between
is_debug_stub
used everywhere but the debugger, and IsDebugBreak, used by the debugger.
Fix deoptimization bug, where recursive call can frighten and confuse the
unwitting, simple, poor caveman that is Runtime_NotifyDeoptimized.
BUG=chromium:274438,chromium:275467,274164
[email protected]
Please review this at https://codereview.chromium.org/23761002/
SVN Base: https://v8.googlecode.com/svn/branches/3.20
Affected files:
M src/arm/lithium-codegen-arm.cc
M src/debug.cc
M src/deoptimizer.h
M src/heap.h
M src/heap.cc
M src/hydrogen-instructions.h
M src/hydrogen.cc
M src/ia32/lithium-codegen-ia32.cc
M src/ic.cc
M src/liveedit.cc
M src/objects-inl.h
M src/objects.h
M src/runtime.h
M src/runtime.cc
M src/version.cc
M src/x64/lithium-codegen-x64.cc
A + test/mjsunit/compiler/regress-shared-deopt.js
A + test/mjsunit/regress/consolidated-holey-load.js
A + test/mjsunit/regress/debug-prepare-step-in.js
A + test/mjsunit/regress/regress-crbug-274438.js
M test/mjsunit/shift-for-integer-div.js
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
