[webkit-changes] [153300] trunk/Source/JavaScriptCore

2013-07-24 Thread ossy
Title: [153300] trunk/Source/_javascript_Core Revision 153300 Author o...@webkit.org Date 2013-07-24 23:09:39 -0700 (Wed, 24 Jul 2013) Log Message Unreviewed buildfix after FTL upstream. Add ftl directory as include path. * CMakeLists.txt: * _javascript_Core.pri: Modified Paths trunk/

[webkit-changes] [153299] trunk/Source/JavaScriptCore

2013-07-24 Thread ossy
Title: [153299] trunk/Source/_javascript_Core Revision 153299 Author o...@webkit.org Date 2013-07-24 22:59:09 -0700 (Wed, 24 Jul 2013) Log Message Unreviewed buildfix after FTL upstream for non C++11 builds. * interpreter/CallFrame.h: * interpreter/StackIteratorPrivate.h: (JSC::StackIter

[webkit-changes] [153298] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153298] trunk/Source/_javascript_Core Revision 153298 Author oli...@apple.com Date 2013-07-24 22:02:45 -0700 (Wed, 24 Jul 2013) Log Message Endeavour to fix CMakelist builds Modified Paths trunk/Source/_javascript_Core/CMakeLists.txt trunk/Source/_javascript_Core/ChangeLog D

[webkit-changes] [153291] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153291] trunk/Source/_javascript_Core Revision 153291 Author oli...@apple.com Date 2013-07-24 21:05:22 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: It should be possible for a DFG::Node to claim to exit to one CodeOrigin, but then claim that it belongs to a different CodeOrigi

[webkit-changes] [153290] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153290] trunk/Source/_javascript_Core Revision 153290 Author oli...@apple.com Date 2013-07-24 21:05:20 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: each DFG node that relies on other nodes to do their type checks should be able to tell you if those type checks happened https:/

[webkit-changes] [153293] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153293] trunk/Source/_javascript_Core Revision 153293 Author oli...@apple.com Date 2013-07-24 21:05:26 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: It should be easy to figure out which blocks nodes belong to https://bugs.webkit.org/show_bug.cgi?id=118957 Reviewed by Sam Wein

[webkit-changes] [153287] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153287] trunk/Source/_javascript_Core Revision 153287 Author oli...@apple.com Date 2013-07-24 21:05:13 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: StringObjectUse uses structures, and CSE should know that https://bugs.webkit.org/show_bug.cgi?id=118940 Reviewed by Geoffrey Ga

[webkit-changes] [153289] trunk

2013-07-24 Thread oliver
Title: [153289] trunk Revision 153289 Author oli...@apple.com Date 2013-07-24 21:05:18 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should be able to generate LLVM IR that uses an intrinsic for OSR exit https://bugs.webkit.org/show_bug.cgi?id=118948 Source/_javascript_Core: Revi

[webkit-changes] [153279] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153279] trunk/Source/_javascript_Core Revision 153279 Author oli...@apple.com Date 2013-07-24 21:04:55 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Add a phase to create loop pre-headers https://bugs.webkit.org/show_bug.cgi?id=118778 Reviewed by Oliver Hunt. Add a loop pre-h

[webkit-changes] [153288] trunk/Tools

2013-07-24 Thread oliver
Title: [153288] trunk/Tools Revision 153288 Author oli...@apple.com Date 2013-07-24 21:05:15 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: We should use the no-asserts build of LLVM if that's what the user configured https://bugs.webkit.org/show_bug.cgi?id=118947 Reviewed by Dan Berns

[webkit-changes] [153285] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153285] trunk/Source/_javascript_Core Revision 153285 Author oli...@apple.com Date 2013-07-24 21:05:08 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Structure::isValidOffset() should be able to tell you if you're loading a valid JSValue, and not just not crashing https://bugs.w

[webkit-changes] [153286] trunk

2013-07-24 Thread oliver
Title: [153286] trunk Revision 153286 Author oli...@apple.com Date 2013-07-24 21:05:12 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: String GetByVal out-of-bounds handling is so wrong https://bugs.webkit.org/show_bug.cgi?id=118935 Source/_javascript_Core: Reviewed by Geoffrey Garen.

[webkit-changes] [153268] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153268] trunk/Source/_javascript_Core Revision 153268 Author oli...@apple.com Date 2013-07-24 21:04:29 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should better report its compile-times and it should be able to run in a mode where it doesn't spend time generating OSR exit

[webkit-changes] [153277] trunk/Source

2013-07-24 Thread oliver
Title: [153277] trunk/Source Revision 153277 Author oli...@apple.com Date 2013-07-24 21:04:51 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: NaturalLoops should be able to quickly answer questions like "what loops own this basic block" https://bugs.webkit.org/show_bug.cgi?id=118750 Sou

[webkit-changes] [153273] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153273] trunk/Source/_javascript_Core Revision 153273 Author oli...@apple.com Date 2013-07-24 21:04:39 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Resurrect the CLoop LLINT on the FTL branch. https://bugs.webkit.org/show_bug.cgi?id=118144. Reviewed by Mark Hahnenberg. * byt

[webkit-changes] [153265] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153265] trunk/Source/_javascript_Core Revision 153265 Author oli...@apple.com Date 2013-07-24 21:04:21 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG::Node::m_opInfo2 should also be a uintptr_t https://bugs.webkit.org/show_bug.cgi?id=118340 Reviewed by Sam Weinig. * dfg/DF

[webkit-changes] [153276] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153276] trunk/Source/_javascript_Core Revision 153276 Author oli...@apple.com Date 2013-07-24 21:04:49 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: don't GC when shutting down the VM https://bugs.webkit.org/show_bug.cgi?id=118751 Reviewed by Mark Hahnenberg. * heap/Heap.h: (

[webkit-changes] [153272] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153272] trunk/Source/_javascript_Core Revision 153272 Author oli...@apple.com Date 2013-07-24 21:04:37 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: NaturalLoops + Profiler = Crash https://bugs.webkit.org/show_bug.cgi?id=118486 Reviewed by Geoffrey Garen. I borked dominators

[webkit-changes] [153275] trunk/Tools

2013-07-24 Thread oliver
Title: [153275] trunk/Tools Revision 153275 Author oli...@apple.com Date 2013-07-24 21:04:47 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: We should have a reduced FTL LLVM pipeline tool in the repository https://bugs.webkit.org/show_bug.cgi?id=118647 Rubber stamped by Geoffrey Garen

[webkit-changes] [153283] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153283] trunk/Source/_javascript_Core Revision 153283 Author oli...@apple.com Date 2013-07-24 21:05:04 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: AbstractInterpreter should explicitly ask AbstractState to create new AbstractValues for newly born nodes https://bugs.webkit.org

[webkit-changes] [153281] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153281] trunk/Source/_javascript_Core Revision 153281 Author oli...@apple.com Date 2013-07-24 21:04:59 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG shouldn't create CheckStructures for array accesses except if the ArrayMode implies an original array access https://bugs.web

[webkit-changes] [153266] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153266] trunk/Source/_javascript_Core Revision 153266 Author oli...@apple.com Date 2013-07-24 21:04:23 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Unreviewed, add a helpful comment for why DCE is needed in the FTL. I believe I've now twice down the experiment of disabling DC

[webkit-changes] [153270] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153270] trunk/Source/_javascript_Core Revision 153270 Author oli...@apple.com Date 2013-07-24 21:04:33 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: CheckArray should call the right version of filterArrayModes https://bugs.webkit.org/show_bug.cgi?id=118488 Reviewed by Filip Pi

[webkit-changes] [153269] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153269] trunk/Source/_javascript_Core Revision 153269 Author oli...@apple.com Date 2013-07-24 21:04:32 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Graph::clearAndDerefChild() makes no sense anymore, and neither does Nop https://bugs.webkit.org/show_bug.cgi?id=118452 Reviewed

[webkit-changes] [153280] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153280] trunk/Source/_javascript_Core Revision 153280 Author oli...@apple.com Date 2013-07-24 21:04:57 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: CFA should consider live-at-head for clobbering and dumping https://bugs.webkit.org/show_bug.cgi?id=118857 Reviewed by Mark Hahn

[webkit-changes] [153264] trunk/Source

2013-07-24 Thread oliver
Title: [153264] trunk/Source Revision 153264 Author oli...@apple.com Date 2013-07-24 21:04:20 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Have fewer Arrayify's https://bugs.webkit.org/show_bug.cgi?id=118335 Reviewed by Mark Hahnenberg. A lot of Arrayify's arise because some program

[webkit-changes] [153271] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153271] trunk/Source/_javascript_Core Revision 153271 Author oli...@apple.com Date 2013-07-24 21:04:35 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG::AbstractState::beginBasicBlock() should set m_haveStructures if any of the valuesAtHead have either a current known structur

[webkit-changes] [153278] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153278] trunk/Source/_javascript_Core Revision 153278 Author oli...@apple.com Date 2013-07-24 21:04:53 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Rationalize Node::replacement https://bugs.webkit.org/show_bug.cgi?id=118774 Reviewed by Oliver Hunt. - Clearing of replacement

[webkit-changes] [153284] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153284] trunk/Source/_javascript_Core Revision 153284 Author oli...@apple.com Date 2013-07-24 21:05:07 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Structure should be able to tell you if it's valid to load at a given offset from any object with that structure https://bugs.web

[webkit-changes] [153258] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153258] trunk/Source/_javascript_Core Revision 153258 Author oli...@apple.com Date 2013-07-24 21:04:09 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Make Graph::substituteGetLocal() out-of-line Rubber stamped by Geoffrey Garen. * dfg/DFGGraph.cpp: (JSC::DFG::Graph::substitute

[webkit-changes] [153262] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153262] trunk/Source/_javascript_Core Revision 153262 Author oli...@apple.com Date 2013-07-24 21:04:16 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: since the FTL disassembly hacks cannot distinguish between code and data, the LLVM disassembler symbol table callback should be a

[webkit-changes] [153261] trunk/Source

2013-07-24 Thread oliver
Title: [153261] trunk/Source Revision 153261 Author oli...@apple.com Date 2013-07-24 21:04:14 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should use the equivalent of llvm opt -O2 by default https://bugs.webkit.org/show_bug.cgi?id=118311 Source/_javascript_Core: Reviewed by Mar

[webkit-changes] [153263] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153263] trunk/Source/_javascript_Core Revision 153263 Author oli...@apple.com Date 2013-07-24 21:04:18 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: add option to disable OSR entry in loops https://bugs.webkit.org/show_bug.cgi?id=118329 Reviewed by Mark Hahnenberg. This adds

[webkit-changes] [153250] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153250] trunk/Source/_javascript_Core Revision 153250 Author oli...@apple.com Date 2013-07-24 21:03:54 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support PutByVal https://bugs.webkit.org/show_bug.cgi?id=118075 Reviewed by Mark Hahnenberg. * ftl/FTLCapabilities.c

[webkit-changes] [153260] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153260] trunk/Source/_javascript_Core Revision 153260 Author oli...@apple.com Date 2013-07-24 21:04:12 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should run LICM after AA setup https://bugs.webkit.org/show_bug.cgi?id=118277 Reviewed by Maciej Stachowiak. LICM queries a

[webkit-changes] [153255] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153255] trunk/Source/_javascript_Core Revision 153255 Author oli...@apple.com Date 2013-07-24 21:04:02 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should be able to dump disassembly https://bugs.webkit.org/show_bug.cgi?id=118141 Reviewed by Geoffrey Garen. * ftl/FTLComp

[webkit-changes] [153252] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153252] trunk/Source/_javascript_Core Revision 153252 Author oli...@apple.com Date 2013-07-24 21:03:57 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ArrayifyToStructure https://bugs.webkit.org/show_bug.cgi?id=118095 Reviewed by Mark Hahnenberg. * ftl/FTLCap

[webkit-changes] [153249] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153249] trunk/Source/_javascript_Core Revision 153249 Author oli...@apple.com Date 2013-07-24 21:03:52 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Convert versus AsIs should have no bearing on whether we can do the SaneChain optimization for double array GetByVals https://bug

[webkit-changes] [153244] trunk

2013-07-24 Thread oliver
Title: [153244] trunk Revision 153244 Author oli...@apple.com Date 2013-07-24 21:03:39 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG shouldn't exit just because a String GetByVal went out-of-bounds https://bugs.webkit.org/show_bug.cgi?id=117906 Source/_javascript_Core: Reviewed b

[webkit-changes] [153259] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153259] trunk/Source/_javascript_Core Revision 153259 Author oli...@apple.com Date 2013-07-24 21:04:11 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should run AA passes before GVN https://bugs.webkit.org/show_bug.cgi?id=118276 Rubber stamped by Geoffrey Garen. These enab

[webkit-changes] [153254] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153254] trunk/Source/_javascript_Core Revision 153254 Author oli...@apple.com Date 2013-07-24 21:04:01 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support hole/OOB PutByVal's https://bugs.webkit.org/show_bug.cgi?id=118112 Reviewed by Geoffrey Garen. Added a commo

[webkit-changes] [153257] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153257] trunk/Source/_javascript_Core Revision 153257 Author oli...@apple.com Date 2013-07-24 21:04:08 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should know how to find natural loops https://bugs.webkit.org/show_bug.cgi?id=118152 Reviewed by Mark Hahnenberg. There are

[webkit-changes] [153253] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153253] trunk/Source/_javascript_Core Revision 153253 Author oli...@apple.com Date 2013-07-24 21:03:59 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL::canCompile(Graph&) should not consider nodes that won't be compiled https://bugs.webkit.org/show_bug.cgi?id=118097 Reviewed

[webkit-changes] [153247] trunk/Source

2013-07-24 Thread oliver
Title: [153247] trunk/Source Revision 153247 Author oli...@apple.com Date 2013-07-24 21:03:46 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Count external memory usage towards heap footprint https://bugs.webkit.org/show_bug.cgi?id=117948 Reviewed by Geoffrey Garen. Source/_javascript

[webkit-changes] [153245] trunk

2013-07-24 Thread oliver
Title: [153245] trunk Revision 153245 Author oli...@apple.com Date 2013-07-24 21:03:42 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should optimize identifier string equality https://bugs.webkit.org/show_bug.cgi?id=117920 Source/_javascript_Core: Reviewed by Sam Weinig. This is

[webkit-changes] [153251] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153251] trunk/Source/_javascript_Core Revision 153251 Author oli...@apple.com Date 2013-07-24 21:03:56 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ForwardCheckStructure/ForwardStructureTransitionWatchpoint and doing so shouldn't break V8/crypto https://bugs

[webkit-changes] [153246] trunk/Source/WTF/ChangeLog

2013-07-24 Thread oliver
Title: [153246] trunk/Source/WTF/ChangeLog Revision 153246 Author oli...@apple.com Date 2013-07-24 21:03:44 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should optimize identifier string equality https://bugs.webkit.org/show_bug.cgi?id=117920 Reviewed by Sam Weinig. Note that th

[webkit-changes] [153241] trunk

2013-07-24 Thread oliver
Title: [153241] trunk Revision 153241 Author oli...@apple.com Date 2013-07-24 21:03:33 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should't exit just because it GetByVal'd a big character https://bugs.webkit.org/show_bug.cgi?id=117899 Source/_javascript_Core: Reviewed by Mark H

[webkit-changes] [153242] trunk

2013-07-24 Thread oliver
Title: [153242] trunk Revision 153242 Author oli...@apple.com Date 2013-07-24 21:03:35 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG should CSE MakeRope https://bugs.webkit.org/show_bug.cgi?id=117905 Source/_javascript_Core: Reviewed by Geoffrey Garen. Adds MakeRope to the CSE p

[webkit-changes] [153232] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153232] trunk/Source/_javascript_Core Revision 153232 Author oli...@apple.com Date 2013-07-24 21:03:10 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Arity fixup should be done while on same stack https://bugs.webkit.org/show_bug.cgi?id=117102 Reviewed by Oliver Hunt. Removed

[webkit-changes] [153240] trunk

2013-07-24 Thread oliver
Title: [153240] trunk Revision 153240 Author oli...@apple.com Date 2013-07-24 21:03:30 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Small strings shouldn't get GC'd https://bugs.webkit.org/show_bug.cgi?id=117897 Source/_javascript_Core: Reviewed by Mark Hahnenberg. Kill off the cod

[webkit-changes] [153239] trunk/Source/JavaScriptCore/runtime/JSString.h

2013-07-24 Thread oliver
Title: [153239] trunk/Source/_javascript_Core/runtime/JSString.h Revision 153239 Author oli...@apple.com Date 2013-07-24 21:03:27 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Re-indent JSString.h to aid mhe merging of the FTL branch Modified Paths trunk/Source/_javascript_Core/runti

[webkit-changes] [153238] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153238] trunk/Source/_javascript_Core Revision 153238 Author oli...@apple.com Date 2013-07-24 21:03:25 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Structure should have a dump() https://bugs.webkit.org/show_bug.cgi?id=117859 Reviewed by Geoffrey Garen. This is pretty cool.

[webkit-changes] [153236] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153236] trunk/Source/_javascript_Core Revision 153236 Author oli...@apple.com Date 2013-07-24 21:03:20 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should clear character switch jump tables https://bugs.webkit.org/show_bug.cgi?id=117852 Reviewed by Sam Weinig. The FTL ju

[webkit-changes] [153215] trunk

2013-07-24 Thread oliver
Title: [153215] trunk Revision 153215 Author oli...@apple.com Date 2013-07-24 21:02:17 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: don't insert ForceOSRExits except for inadequate coverage https://bugs.webkit.org/show_bug.cgi?id=117363 Source/_javascript_Core: Reviewed by Mark Hahn

[webkit-changes] [153243] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153243] trunk/Source/_javascript_Core Revision 153243 Author oli...@apple.com Date 2013-07-24 21:03:36 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: GC's put_by_id transition fixpoint should converge more quickly https://bugs.webkit.org/show_bug.cgi?id=117912 Reviewed by Mark

[webkit-changes] [153231] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153231] trunk/Source/_javascript_Core Revision 153231 Author oli...@apple.com Date 2013-07-24 21:03:07 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Add another temp register regT4 to JSInterfaceJIT https://bugs.webkit.org/show_bug.cgi?id=117719 Reviewed by Geoffrey Garen. Ma

[webkit-changes] [153223] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153223] trunk/Source/_javascript_Core Revision 153223 Author oli...@apple.com Date 2013-07-24 21:02:47 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: The Math object should not be polymorphic https://bugs.webkit.org/show_bug.cgi?id=117576 Reviewed by Oliver Hunt. Fill in the M

[webkit-changes] [153220] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153220] trunk/Source/_javascript_Core Revision 153220 Author oli...@apple.com Date 2013-07-24 21:02:32 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: isContravenedByStructure is backwards https://bugs.webkit.org/show_bug.cgi?id=117366 We should be checking if arrayModeForStruct

[webkit-changes] [153219] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153219] trunk/Source/_javascript_Core Revision 153219 Author oli...@apple.com Date 2013-07-24 21:02:30 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Type check hoisting phase has a dead if statement https://bugs.webkit.org/show_bug.cgi?id=117510 Reviewed by Geoffrey Garen. *

[webkit-changes] [153230] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153230] trunk/Source/_javascript_Core Revision 153230 Author oli...@apple.com Date 2013-07-24 21:03:05 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support Switch https://bugs.webkit.org/show_bug.cgi?id=117704 Reviewed by Oliver Hunt. * bytecode/CodeBlock.h: (JSC:

[webkit-changes] [153226] trunk/Source/WTF

2013-07-24 Thread oliver
Title: [153226] trunk/Source/WTF Revision 153226 Author oli...@apple.com Date 2013-07-24 21:02:55 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Printing a StringImpl* should really guard against NULL https://bugs.webkit.org/show_bug.cgi?id=117675 Reviewed by Mark Hahnenberg. * wtf/Pr

[webkit-changes] [153229] trunk

2013-07-24 Thread oliver
Title: [153229] trunk Revision 153229 Author oli...@apple.com Date 2013-07-24 21:03:03 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Add CFG simplification for Switch https://bugs.webkit.org/show_bug.cgi?id=117677 Source/_javascript_Core: Reviewed by Mark Hahnenberg. This is for com

[webkit-changes] [153224] trunk/LayoutTests/fast/js/resources/standalone-pre.js

2013-07-24 Thread oliver
Title: [153224] trunk/LayoutTests/fast/js/resources/standalone-pre.js Revision 153224 Author oli...@apple.com Date 2013-07-24 21:02:48 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: A few fixups to standalone-pre.js Modified Paths trunk/LayoutTests/fast/js/resources/standalone-pre.js

[webkit-changes] [153227] trunk/Source

2013-07-24 Thread oliver
Title: [153227] trunk/Source Revision 153227 Author oli...@apple.com Date 2013-07-24 21:02:57 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Concurrent JIT shouldn't try to recompute the CodeBlockHash as part of debug dumps, since doing so may fail if dealing with a CachedScript that do

[webkit-changes] [153216] trunk/Source

2013-07-24 Thread oliver
Title: [153216] trunk/Source Revision 153216 Author oli...@apple.com Date 2013-07-24 21:02:20 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Recursive deadlock in DFG::ByteCodeParser https://bugs.webkit.org/show_bug.cgi?id=117376 Source/_javascript_Core: Reviewed by Mark Hahnenberg.

[webkit-changes] [153233] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153233] trunk/Source/_javascript_Core Revision 153233 Author oli...@apple.com Date 2013-07-24 21:03:12 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Refactor ObjCCallbackFunction to inherit directly from InternalFunction https://bugs.webkit.org/show_bug.cgi?id=117595 Reviewed

[webkit-changes] [153198] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153198] trunk/Source/_javascript_Core Revision 153198 Author oli...@apple.com Date 2013-07-24 21:01:40 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ArithAbs https://bugs.webkit.org/show_bug.cgi?id=116890 Reviewed by Oliver Hunt. Implements ArithAbs in the

[webkit-changes] [153208] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153208] trunk/Source/_javascript_Core Revision 153208 Author oli...@apple.com Date 2013-07-24 21:02:00 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Clean up AbstractValue https://bugs.webkit.org/show_bug.cgi?id=117217 Reviewed by Oliver Hunt. This started as an attempt to ma

[webkit-changes] [153210] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153210] trunk/Source/_javascript_Core Revision 153210 Author oli...@apple.com Date 2013-07-24 21:02:04 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG CFA shouldn't filter ArrayModes with ALL_NON_ARRAY_ARRAY_MODES if the speculated type is not SpecArray https://bugs.webkit.or

[webkit-changes] [153202] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153202] trunk/Source/_javascript_Core Revision 153202 Author oli...@apple.com Date 2013-07-24 21:01:48 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Remove CodeOrigin::valueProfileOffset since it was only needed for op_call_put_result. Rubber stamped by Mark Hahnenberg. * byt

[webkit-changes] [153206] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153206] trunk/Source/_javascript_Core Revision 153206 Author oli...@apple.com Date 2013-07-24 21:01:56 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: all cached put_by_id transitions, even ones that weren't inlined by the DFG, should be propagated by the GC https://bugs.webkit.o

[webkit-changes] [153190] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153190] trunk/Source/_javascript_Core Revision 153190 Author oli...@apple.com Date 2013-07-24 21:01:22 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ArithMod https://bugs.webkit.org/show_bug.cgi?id=116792 Reviewed by Oliver Hunt. * ftl/FTLAbbreviations.h: (

[webkit-changes] [153211] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153211] trunk/Source/_javascript_Core Revision 153211 Author oli...@apple.com Date 2013-07-24 21:02:07 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: CallFrame::trueCallFrame() should populate the bytecodeOffset field when reifying inlined frames.. https://bugs.webkit.org/show_b

[webkit-changes] [153194] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153194] trunk/Source/_javascript_Core Revision 153194 Author oli...@apple.com Date 2013-07-24 21:01:30 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ArithMin/ArithMax https://bugs.webkit.org/show_bug.cgi?id=116885 Reviewed by Oliver Hunt. * ftl/FTLCapabilit

[webkit-changes] [153192] trunk/LayoutTests

2013-07-24 Thread oliver
Title: [153192] trunk/LayoutTests Revision 153192 Author oli...@apple.com Date 2013-07-24 21:01:26 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: fast/js should have a way of running tests long enough to wait for the concurrent JIT to tier up https://bugs.webkit.org/show_bug.cgi?id=1168

[webkit-changes] [153204] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153204] trunk/Source/_javascript_Core Revision 153204 Author oli...@apple.com Date 2013-07-24 21:01:52 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Fix some minor issues in the DFG's profiling of heap accesses https://bugs.webkit.org/show_bug.cgi?id=113010 Reviewed by Goeffre

[webkit-changes] [153196] trunk

2013-07-24 Thread oliver
Title: [153196] trunk Revision 153196 Author oli...@apple.com Date 2013-07-24 21:01:35 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should call masqueradesAsUndefinedWatchpointIfIsStillValid() in all of the places where it currently calls masqueradesAsUndefinedWatchpointIsStillVal

[webkit-changes] [153199] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153199] trunk/Source/_javascript_Core Revision 153199 Author oli...@apple.com Date 2013-07-24 21:01:42 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: LLInt shouldn't store an offset call PC during op_call-like calls https://bugs.webkit.org/show_bug.cgi?id=117048 Reviewed by Mar

[webkit-changes] [153214] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153214] trunk/Source/_javascript_Core Revision 153214 Author oli...@apple.com Date 2013-07-24 21:02:15 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Reenable the DFG optimization fixpoint now that it's profitable to do so with concurrent compilation https://bugs.webkit.org/show

[webkit-changes] [153209] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153209] trunk/Source/_javascript_Core Revision 153209 Author oli...@apple.com Date 2013-07-24 21:02:03 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Disambiguate between CallFrame bytecodeOffset and codeOriginIndex. https://bugs.webkit.org/show_bug.cgi?id=117262. Reviewed by G

[webkit-changes] [153201] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153201] trunk/Source/_javascript_Core Revision 153201 Author oli...@apple.com Date 2013-07-24 21:01:46 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Remove finalDestinationOrIgnored since it isn't called anymore. Rubber stamped by Mark Hahnenberg. * bytecompiler/BytecodeGener

[webkit-changes] [153193] trunk/LayoutTests

2013-07-24 Thread oliver
Title: [153193] trunk/LayoutTests Revision 153193 Author oli...@apple.com Date 2013-07-24 21:01:28 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: convert more fast/js/dfg-* tests to wait for the concurrent JIT Rubber stamped by Oliver Hunt. * fast/js/dfg-abs-backwards-propagation-expe

[webkit-changes] [153207] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153207] trunk/Source/_javascript_Core Revision 153207 Author oli...@apple.com Date 2013-07-24 21:01:59 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: The DFG JIT should populate frame bytecodeOffsets on OSR exit. https://bugs.webkit.org/show_bug.cgi?id=117103. Reviewed by Geoff

[webkit-changes] [153212] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153212] trunk/Source/_javascript_Core Revision 153212 Author oli...@apple.com Date 2013-07-24 21:02:09 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: 32-bit CallFrame::Location should use Instruction* for BytecodeLocation, not bytecodeOffset. https://bugs.webkit.org/show_bug.cgi

[webkit-changes] [153205] trunk

2013-07-24 Thread oliver
Title: [153205] trunk Revision 153205 Author oli...@apple.com Date 2013-07-24 21:01:54 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Get rid of StructureStubInfo::bytecodeIndex https://bugs.webkit.org/show_bug.cgi?id=117127 Reviewed by Mark Hahnenberg. StructureStubInfo already has a

[webkit-changes] [153191] trunk

2013-07-24 Thread oliver
Title: [153191] trunk Revision 153191 Author oli...@apple.com Date 2013-07-24 21:01:24 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: testRunner should have a way of disabling inlining of functions https://bugs.webkit.org/show_bug.cgi?id=116875 Reviewed by Mark Hahnenberg. Source/_jav

[webkit-changes] [153182] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153182] trunk/Source/_javascript_Core Revision 153182 Author oli...@apple.com Date 2013-07-24 21:01:03 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL boolify should support ObjectOrOtherUse https://bugs.webkit.org/show_bug.cgi?id=116741 Reviewed by Geoffrey Garen. Just reu

[webkit-changes] [153179] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153179] trunk/Source/_javascript_Core Revision 153179 Author oli...@apple.com Date 2013-07-24 21:00:58 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: rationalize DFG::CapabilityLevel and DFGCapabilities.[h|cpp] https://bugs.webkit.org/show_bug.cgi?id=116696 Reviewed by Sam Wein

[webkit-changes] [153184] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153184] trunk/Source/_javascript_Core Revision 153184 Author oli...@apple.com Date 2013-07-24 21:01:08 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support ArithDiv https://bugs.webkit.org/show_bug.cgi?id=116771 Reviewed by Oliver Hunt. * ftl/FTLAbbreviations.h: (

[webkit-changes] [153187] trunk

2013-07-24 Thread oliver
Title: [153187] trunk Revision 153187 Author oli...@apple.com Date 2013-07-24 21:01:14 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: DFG ArithMod should have the !nodeUsedAsNumber optimizations that ArithDiv has https://bugs.webkit.org/show_bug.cgi?id=116841 Reviewed by Mark Hahnenber

[webkit-changes] [153188] trunk

2013-07-24 Thread oliver
Title: [153188] trunk Revision 153188 Author oli...@apple.com Date 2013-07-24 21:01:17 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: testRunner should be able to tell you if a function is DFG compiled https://bugs.webkit.org/show_bug.cgi?id=116847 Reviewed by Mark Hahnenberg. Source/

[webkit-changes] [153176] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153176] trunk/Source/_javascript_Core Revision 153176 Author oli...@apple.com Date 2013-07-24 21:00:51 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Race between LLInt->Baseline tier-up and DFG reading Baseline profiling data https://bugs.webkit.org/show_bug.cgi?id=116633 Revi

[webkit-changes] [153183] trunk/Source

2013-07-24 Thread oliver
Title: [153183] trunk/Source Revision 153183 Author oli...@apple.com Date 2013-07-24 21:01:06 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: Remove Interpreter::retrieveLastCaller(). This merge is complicated by the trunk js stack reporting logic. Remove Interpreter::retrieveLastCalle

[webkit-changes] [153185] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153185] trunk/Source/_javascript_Core Revision 153185 Author oli...@apple.com Date 2013-07-24 21:01:09 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: cti_optimize shouldn't allow GCs to get in the way of it seeing the state of its CodeBlock https://bugs.webkit.org/show_bug.cgi?i

[webkit-changes] [153180] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153180] trunk/Source/_javascript_Core Revision 153180 Author oli...@apple.com Date 2013-07-24 21:01:00 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: add heuristics to reduce the likelihood of a trivially inlineable function being independently compiled by the concurrent JIT htt

[webkit-changes] [153172] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153172] trunk/Source/_javascript_Core Revision 153172 Author oli...@apple.com Date 2013-07-24 21:00:41 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should force LLVM to use our own JIT memory allocator, and we shouldn't have to keep around an LLVMExecutionEngineRef to keep

[webkit-changes] [153175] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153175] trunk/Source/_javascript_Core Revision 153175 Author oli...@apple.com Date 2013-07-24 21:00:50 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: It should be possible to use more than one compiler thread https://bugs.webkit.org/show_bug.cgi?id=116630 Reviewed by Mark Hahne

[webkit-changes] [153181] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153181] trunk/Source/_javascript_Core Revision 153181 Author oli...@apple.com Date 2013-07-24 21:01:02 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL should support LogicalNot and Branch on Int32 and Number https://bugs.webkit.org/show_bug.cgi?id=116739 Reviewed by Gavin Ba

[webkit-changes] [153171] trunk/Source/JavaScriptCore

2013-07-24 Thread oliver
Title: [153171] trunk/Source/_javascript_Core Revision 153171 Author oli...@apple.com Date 2013-07-24 21:00:39 -0700 (Wed, 24 Jul 2013) Log Message fourthTier: FTL shouldn't use FastISel and Small code model should be turned off for now https://bugs.webkit.org/show_bug.cgi?id=115998 Revi

  1   2   >