[webkit-changes] [172398] trunk/Source/JavaScriptCore

Title: [172398] trunk/Source/_javascript_Core Revision 172398 Author mhahnenb...@apple.com Date 2014-08-11 11:39:52 -0700 (Mon, 11 Aug 2014) Log Message JIT should use full 64-bit stores for jsBoolean and jsNull https://bugs.webkit.org/show_bug.cgi?id=135784 Reviewed by Michael Saboff.

[webkit-changes] [172401] trunk/Source/JavaScriptCore

Title: [172401] trunk/Source/_javascript_Core Revision 172401 Author mhahnenb...@apple.com Date 2014-08-11 11:59:44 -0700 (Mon, 11 Aug 2014) Log Message for-in optimization should also make sure the base matches the object being iterated https://bugs.webkit.org/show_bug.cgi?id=135782

[webkit-changes] [172216] trunk

Title: [172216] trunk Revision 172216 Author mhahnenb...@apple.com Date 2014-08-07 10:29:52 -0700 (Thu, 07 Aug 2014) Log Message for-in is failing fast/dom/dataset-xhtml.xhtml and dataset.html tests https://bugs.webkit.org/show_bug.cgi?id=135681 Reviewed by Filip Pizlo.

[webkit-changes] [172282] trunk/Source/JavaScriptCore

Title: [172282] trunk/Source/_javascript_Core Revision 172282 Author mhahnenb...@apple.com Date 2014-08-07 15:08:19 -0700 (Thu, 07 Aug 2014) Log Message SpeculateInt32Operand is sometimes used in a 64-bit context, which has undefined behavior

[webkit-changes] [171763] branches/ftlopt/Source/JavaScriptCore

Title: [171763] branches/ftlopt/Source/_javascript_Core Revision 171763 Author mhahnenb...@apple.com Date 2014-07-29 14:03:06 -0700 (Tue, 29 Jul 2014) Log Message Support for-in in the FTL https://bugs.webkit.org/show_bug.cgi?id=134140 Reviewed by Filip Pizlo. *

[webkit-changes] [171691] trunk/Source/JavaScriptCore

Title: [171691] trunk/Source/_javascript_Core Revision 171691 Author mhahnenb...@apple.com Date 2014-07-28 13:43:57 -0700 (Mon, 28 Jul 2014) Log Message REGRESSION: JSObjectSetPrototype() does not work on result of JSGetGlobalObject() https://bugs.webkit.org/show_bug.cgi?id=135322

[webkit-changes] [171703] trunk/Source/WebCore

Title: [171703] trunk/Source/WebCore Revision 171703 Author mhahnenb...@apple.com Date 2014-07-28 15:19:11 -0700 (Mon, 28 Jul 2014) Log Message ASSERTION FAILED: m_heap-vm()-currentThreadIsHoldingAPILock() https://bugs.webkit.org/show_bug.cgi?id=135352 Reviewed by Oliver Hunt. *

[webkit-changes] [171606] branches/ftlopt/Source/JavaScriptCore

Title: [171606] branches/ftlopt/Source/_javascript_Core Revision 171606 Author mhahnenb...@apple.com Date 2014-07-25 12:04:50 -0700 (Fri, 25 Jul 2014) Log Message Reindent PropertyNameArray.h https://bugs.webkit.org/show_bug.cgi?id=135067 Reviewed by Geoffrey Garen. *

[webkit-changes] [171611] branches/ftlopt/Source/JavaScriptCore

Title: [171611] branches/ftlopt/Source/_javascript_Core Revision 171611 Author mhahnenb...@apple.com Date 2014-07-25 13:26:35 -0700 (Fri, 25 Jul 2014) Log Message Fix 32-bit build breakage for type profiling https://bugs.webkit.org/process_bug.cgi Patch by Saam Barati sbar...@apple.com

[webkit-changes] [171614] branches/ftlopt/Source/JavaScriptCore

Title: [171614] branches/ftlopt/Source/_javascript_Core Revision 171614 Author mhahnenb...@apple.com Date 2014-07-25 14:26:20 -0700 (Fri, 25 Jul 2014) Log Message Remove JSPropertyNameIterator https://bugs.webkit.org/show_bug.cgi?id=135066 Reviewed by Geoffrey Garen. It has been

[webkit-changes] [171543] trunk/Source/JavaScriptCore

Title: [171543] trunk/Source/_javascript_Core Revision 171543 Author mhahnenb...@apple.com Date 2014-07-24 15:56:05 -0700 (Thu, 24 Jul 2014) Log Message Creating a JSGlobalObject with a custom JSClassRef results in a JSProxy with the wrong prototype

[webkit-changes] [171189] branches/ftlopt/LayoutTests

Title: [171189] branches/ftlopt/LayoutTests Revision 171189 Author mhahnenb...@apple.com Date 2014-07-17 10:43:31 -0700 (Thu, 17 Jul 2014) Log Message sputnik/Implementation_Diagnostics/S12.6.4_D1.html depends on undefined behavior https://bugs.webkit.org/show_bug.cgi?id=135007 Reviewed

[webkit-changes] [171108] trunk/Source/JavaScriptCore

Title: [171108] trunk/Source/_javascript_Core Revision 171108 Author mhahnenb...@apple.com Date 2014-07-15 12:11:57 -0700 (Tue, 15 Jul 2014) Log Message ScriptExecutable::forEachCodeBlock can dereference null CodeBlocks https://bugs.webkit.org/show_bug.cgi?id=134928 Reviewed by Andreas

[webkit-changes] [171115] trunk/Source/JavaScriptCore

Title: [171115] trunk/Source/_javascript_Core Revision 171115 Author mhahnenb...@apple.com Date 2014-07-15 14:05:43 -0700 (Tue, 15 Jul 2014) Log Message Stores to PropertyTable use the Structure as the owner https://bugs.webkit.org/show_bug.cgi?id=134595 Reviewed by Darin Adler. Since

[webkit-changes] [171092] trunk/Source/JavaScriptCore

Title: [171092] trunk/Source/_javascript_Core Revision 171092 Author mhahnenb...@apple.com Date 2014-07-14 16:59:15 -0700 (Mon, 14 Jul 2014) Log Message Flattening dictionaries with oversize backing stores can cause crashes https://bugs.webkit.org/show_bug.cgi?id=134906 Reviewed by

[webkit-changes] [170860] branches/ftlopt/Source/JavaScriptCore

Title: [170860] branches/ftlopt/Source/_javascript_Core Revision 170860 Author mhahnenb...@apple.com Date 2014-07-07 16:33:46 -0700 (Mon, 07 Jul 2014) Log Message Merge r170011 from trunk. 2014-06-16 Michael Saboff msab...@apple.com Convert ASSERT in

[webkit-changes] [170604] branches/ftlopt/Source/JavaScriptCore

Title: [170604] branches/ftlopt/Source/_javascript_Core Revision 170604 Author mhahnenb...@apple.com Date 2014-06-30 15:22:31 -0700 (Mon, 30 Jun 2014) Log Message CodeBlock::stronglyVisitWeakReferences should mark DFG::CommonData::weakStructureReferences

[webkit-changes] [170534] trunk

Title: [170534] trunk Revision 170534 Author mhahnenb...@apple.com Date 2014-06-27 10:49:25 -0700 (Fri, 27 Jun 2014) Log Message XHR should keep attributes on instance https://bugs.webkit.org/show_bug.cgi?id=134363 Reviewed by Sam Weinig. Source/WebCore: Test:

[webkit-changes] [170436] branches/ftlopt/Source/JavaScriptCore

Title: [170436] branches/ftlopt/Source/_javascript_Core Revision 170436 Author mhahnenb...@apple.com Date 2014-06-25 14:15:37 -0700 (Wed, 25 Jun 2014) Log Message Structure bit fields should have a consistent format https://bugs.webkit.org/show_bug.cgi?id=134307 Reviewed by Filip Pizlo.

[webkit-changes] [170386] trunk/Source/JavaScriptCore

Title: [170386] trunk/Source/_javascript_Core Revision 170386 Author mhahnenb...@apple.com Date 2014-06-24 13:29:27 -0700 (Tue, 24 Jun 2014) Log Message REGRESSION (r169703): Invalid cast in JSC::asGetterSetter / JSC::JSObject::defineOwnNonIndexProperty

[webkit-changes] [170215] branches/ftlopt/Source/JavaScriptCore

Title: [170215] branches/ftlopt/Source/_javascript_Core Revision 170215 Author mhahnenb...@apple.com Date 2014-06-20 15:27:36 -0700 (Fri, 20 Jun 2014) Log Message Merge r169903 to the branch. 2014-06-12 Mark Hahnenberg mhahnenb...@apple.com Move structureHasRareData out

[webkit-changes] [169951] trunk/Source

Title: [169951] trunk/Source Revision 169951 Author mhahnenb...@apple.com Date 2014-06-13 15:18:52 -0700 (Fri, 13 Jun 2014) Log Message OSR exit should barrier the Executables for all InlineCallFrames, not just those on the stack at the time of exit

[webkit-changes] [169903] trunk/Source/JavaScriptCore

Title: [169903] trunk/Source/_javascript_Core Revision 169903 Author mhahnenb...@apple.com Date 2014-06-12 11:22:46 -0700 (Thu, 12 Jun 2014) Log Message Move structureHasRareData out of TypeInfo https://bugs.webkit.org/show_bug.cgi?id=133800 Reviewed by Andreas Kling.

[webkit-changes] [169853] trunk/Source/JavaScriptCore

Title: [169853] trunk/Source/_javascript_Core Revision 169853 Author mhahnenb...@apple.com Date 2014-06-11 15:55:34 -0700 (Wed, 11 Jun 2014) Log Message Inline caching should try to flatten uncacheable dictionaries https://bugs.webkit.org/show_bug.cgi?id=133683 Reviewed by Geoffrey

[webkit-changes] [169705] trunk/Source/JavaScriptCore

Title: [169705] trunk/Source/_javascript_Core Revision 169705 Author mhahnenb...@apple.com Date 2014-06-09 12:02:37 -0700 (Mon, 09 Jun 2014) Log Message Build fix after r169703 * _javascript_Core.xcodeproj/project.pbxproj: Modified Paths trunk/Source/_javascript_Core/ChangeLog

[webkit-changes] [169740] trunk/Source/JavaScriptCore

Title: [169740] trunk/Source/_javascript_Core Revision 169740 Author mhahnenb...@apple.com Date 2014-06-09 20:01:42 -0700 (Mon, 09 Jun 2014) Log Message Global HashTables contain references to atomic StringImpls https://bugs.webkit.org/show_bug.cgi?id=133661 Reviewed by Geoffrey Garen.

[webkit-changes] [169270] trunk/LayoutTests

Title: [169270] trunk/LayoutTests Revision 169270 Author mhahnenb...@apple.com Date 2014-05-23 11:36:55 -0700 (Fri, 23 May 2014) Log Message Rebaseline some tests after r169260 * fast/dom/Geolocation/enabled-expected.txt: * fast/dom/Geolocation/script-tests/enabled.js: *

[webkit-changes] [169285] trunk/Source/JavaScriptCore

Title: [169285] trunk/Source/_javascript_Core Revision 169285 Author mhahnenb...@apple.com Date 2014-05-23 15:32:59 -0700 (Fri, 23 May 2014) Log Message Remove operationCallGetter Rubber stamped by Filip Pizlo. Nobody calls this function. * _javascript_Core.order: *

[webkit-changes] [169139] trunk/Source

Title: [169139] trunk/Source Revision 169139 Author mhahnenb...@apple.com Date 2014-05-20 15:55:49 -0700 (Tue, 20 May 2014) Log Message Watchdog timer should be lazily allocated https://bugs.webkit.org/show_bug.cgi?id=133135 Reviewed by Geoffrey Garen. Source/_javascript_Core: We incur

[webkit-changes] [168902] trunk

Title: [168902] trunk Revision 168902 Author mhahnenb...@apple.com Date 2014-05-15 11:28:50 -0700 (Thu, 15 May 2014) Log Message Move subframe name getter lookup later in JSDOMWindow::getOwnPropertySlot https://bugs.webkit.org/show_bug.cgi?id=132922 Reviewed by Geoffrey Garen.

[webkit-changes] [168914] trunk

Title: [168914] trunk Revision 168914 Author mhahnenb...@apple.com Date 2014-05-15 16:03:06 -0700 (Thu, 15 May 2014) Log Message JSDOMWindow should not claim HasImpureGetOwnPropertySlot https://bugs.webkit.org/show_bug.cgi?id=132918 Reviewed by Geoffrey Garen. Source/_javascript_Core:

[webkit-changes] [168861] trunk/Source/JavaScriptCore

Title: [168861] trunk/Source/_javascript_Core Revision 168861 Author mhahnenb...@apple.com Date 2014-05-14 13:48:55 -0700 (Wed, 14 May 2014) Log Message Inline caching for proxies clobbers baseGPR too early https://bugs.webkit.org/show_bug.cgi?id=132916 Reviewed by Filip Pizlo. We

[webkit-changes] [168548] trunk/Source

Title: [168548] trunk/Source Revision 168548 Author mhahnenb...@apple.com Date 2014-05-09 13:26:17 -0700 (Fri, 09 May 2014) Log Message JSDOMWindow should have a WatchpointSet to fire on window close https://bugs.webkit.org/show_bug.cgi?id=132721 Reviewed by Filip Pizlo.

[webkit-changes] [168558] trunk/Source

Title: [168558] trunk/Source Revision 168558 Author mhahnenb...@apple.com Date 2014-05-09 17:06:51 -0700 (Fri, 09 May 2014) Log Message JSDOMWindow should disable property caching after a certain point https://bugs.webkit.org/show_bug.cgi?id=132751 Reviewed by Filip Pizlo.

[webkit-changes] [168510] trunk/Source/JavaScriptCore

Title: [168510] trunk/Source/_javascript_Core Revision 168510 Author mhahnenb...@apple.com Date 2014-05-08 17:22:30 -0700 (Thu, 08 May 2014) Log Message Base case for get-by-id inline cache doesn't check for HasImpureGetOwnPropertySlot https://bugs.webkit.org/show_bug.cgi?id=132695

[webkit-changes] [168373] trunk

Title: [168373] trunk Revision 168373 Author mhahnenb...@apple.com Date 2014-05-06 12:15:42 -0700 (Tue, 06 May 2014) Log Message Roll out r167889 Rubber stamped by Geoff Garen. It broke some websites. Source/_javascript_Core: * runtime/JSPropertyNameIterator.cpp:

[webkit-changes] [168178] trunk/Source/JavaScriptCore

Title: [168178] trunk/Source/_javascript_Core Revision 168178 Author mhahnenb...@apple.com Date 2014-05-02 11:52:10 -0700 (Fri, 02 May 2014) Log Message Add a DFG function whitelist https://bugs.webkit.org/show_bug.cgi?id=132437 Reviewed by Geoffrey Garen. Often times when debugging,

[webkit-changes] [168189] trunk/Source/JavaScriptCore

Title: [168189] trunk/Source/_javascript_Core Revision 168189 Author mhahnenb...@apple.com Date 2014-05-02 14:21:04 -0700 (Fri, 02 May 2014) Log Message Fix cloop build after r168178 * bytecode/CodeBlock.cpp: Modified Paths trunk/Source/_javascript_Core/ChangeLog

[webkit-changes] [167963] trunk/Source

Title: [167963] trunk/Source Revision 167963 Author mhahnenb...@apple.com Date 2014-04-29 15:21:04 -0700 (Tue, 29 Apr 2014) Log Message JSProxies should be cacheable https://bugs.webkit.org/show_bug.cgi?id=132351 Reviewed by Geoffrey Garen. Source/_javascript_Core: Whenever we

[webkit-changes] [167889] trunk

Title: [167889] trunk Revision 167889 Author mhahnenb...@apple.com Date 2014-04-28 10:26:33 -0700 (Mon, 28 Apr 2014) Log Message Deleting properties poisons objects https://bugs.webkit.org/show_bug.cgi?id=131551 Reviewed by Oliver Hunt. Source/_javascript_Core: This is ~3% progression

[webkit-changes] [167922] trunk/Source/JavaScriptCore

Title: [167922] trunk/Source/_javascript_Core Revision 167922 Author mhahnenb...@apple.com Date 2014-04-28 20:10:53 -0700 (Mon, 28 Apr 2014) Log Message Simplify tryCacheGetById https://bugs.webkit.org/show_bug.cgi?id=132314 Reviewed by Oliver Hunt and Filip Pizlo. This is neutral

[webkit-changes] [167729] trunk/Source/JavaScriptCore

Title: [167729] trunk/Source/_javascript_Core Revision 167729 Author mhahnenb...@apple.com Date 2014-04-23 15:35:16 -0700 (Wed, 23 Apr 2014) Log Message Arguments::copyBackingStore needs to update m_registers in tandem with m_registerArray https://bugs.webkit.org/show_bug.cgi?id=132079

[webkit-changes] [167591] trunk/Source/JavaScriptCore

Title: [167591] trunk/Source/_javascript_Core Revision 167591 Author mhahnenb...@apple.com Date 2014-04-21 08:11:33 -0700 (Mon, 21 Apr 2014) Log Message Inline allocate Arguments objects in the DFG https://bugs.webkit.org/show_bug.cgi?id=131897 Reviewed by Geoffrey Garen. Many

[webkit-changes] [167641] trunk/Source/JavaScriptCore

Title: [167641] trunk/Source/_javascript_Core Revision 167641 Author mhahnenb...@apple.com Date 2014-04-21 18:37:34 -0700 (Mon, 21 Apr 2014) Log Message Arguments objects shouldn't need a destructor https://bugs.webkit.org/show_bug.cgi?id=131899 Reviewed by Oliver Hunt. This patch rids

[webkit-changes] [167501] trunk

Title: [167501] trunk Revision 167501 Author mhahnenb...@apple.com Date 2014-04-18 13:07:50 -0700 (Fri, 18 Apr 2014) Log Message Deleting properties poisons objects https://bugs.webkit.org/show_bug.cgi?id=131551 Reviewed by Geoffrey Garen. Source/_javascript_Core: This is ~3%

[webkit-changes] [167364] trunk/Source/JavaScriptCore

Title: [167364] trunk/Source/_javascript_Core Revision 167364 Author mhahnenb...@apple.com Date 2014-04-16 11:09:56 -0700 (Wed, 16 Apr 2014) Log Message [WebKit] Cleanup the build from uninitialized variable in _javascript_Core https://bugs.webkit.org/show_bug.cgi?id=131728 Reviewed by

[webkit-changes] [167326] trunk/Source/JavaScriptCore

Title: [167326] trunk/Source/_javascript_Core Revision 167326 Author mhahnenb...@apple.com Date 2014-04-15 14:05:09 -0700 (Tue, 15 Apr 2014) Log Message Objective-C API external object graphs don't handle generational collection properly https://bugs.webkit.org/show_bug.cgi?id=131634

[webkit-changes] [167328] trunk/Source/JavaScriptCore

Title: [167328] trunk/Source/_javascript_Core Revision 167328 Author mhahnenb...@apple.com Date 2014-04-15 14:50:38 -0700 (Tue, 15 Apr 2014) Log Message Fix precedence issue in JSCell:setRemembered Rubber stamped by Filip Pizlo. * runtime/JSCell.h: (JSC::JSCell::setRemembered):

[webkit-changes] [167288] trunk/Source/JavaScriptCore

Title: [167288] trunk/Source/_javascript_Core Revision 167288 Author mhahnenb...@apple.com Date 2014-04-14 19:20:17 -0700 (Mon, 14 Apr 2014) Log Message emit_op_put_by_id should not emit a write barrier that filters on value https://bugs.webkit.org/show_bug.cgi?id=131654 Reviewed by

[webkit-changes] [166835] trunk/Source/JavaScriptCore

Title: [166835] trunk/Source/_javascript_Core Revision 166835 Author mhahnenb...@apple.com Date 2014-04-05 12:54:18 -0700 (Sat, 05 Apr 2014) Log Message Remove bogus ASSERT in -JSVirtualMachine scanObjectGraph https://bugs.webkit.org/show_bug.cgi?id=131251 Reviewed by Geoffrey Garen. *

[webkit-changes] [166838] trunk/Source/JavaScriptCore

Title: [166838] trunk/Source/_javascript_Core Revision 166838 Author mhahnenb...@apple.com Date 2014-04-05 13:06:57 -0700 (Sat, 05 Apr 2014) Log Message Add missing files from r166837 * heap/GCLogging.cpp: Added. (JSC::GCLogging::levelAsString): (JSC::LoggingFunctor::LoggingFunctor):

[webkit-changes] [166788] trunk/Source/JavaScriptCore

Title: [166788] trunk/Source/_javascript_Core Revision 166788 Author mhahnenb...@apple.com Date 2014-04-04 10:21:03 -0700 (Fri, 04 Apr 2014) Log Message Use JSCell::type instead of TypeInfo::type wherever possible https://bugs.webkit.org/show_bug.cgi?id=131229 Reviewed by Michael

[webkit-changes] [166759] trunk/Source/JavaScriptCore

Title: [166759] trunk/Source/_javascript_Core Revision 166759 Author mhahnenb...@apple.com Date 2014-04-03 19:24:28 -0700 (Thu, 03 Apr 2014) Log Message All Heap::writeBarriers should be inline https://bugs.webkit.org/show_bug.cgi?id=131197 Reviewed by Mark Lam. One is in a

[webkit-changes] [166678] trunk/Source/JavaScriptCore

Title: [166678] trunk/Source/_javascript_Core Revision 166678 Author mhahnenb...@apple.com Date 2014-04-02 16:50:25 -0700 (Wed, 02 Apr 2014) Log Message CodeBlockSet should be generational https://bugs.webkit.org/show_bug.cgi?id=127152 Reviewed by Geoffrey Garen. During EdenCollections

[webkit-changes] [166544] trunk/Source/JavaScriptCore

Title: [166544] trunk/Source/_javascript_Core Revision 166544 Author mhahnenb...@apple.com Date 2014-03-31 16:27:29 -0700 (Mon, 31 Mar 2014) Log Message Improve GC_LOGGING https://bugs.webkit.org/show_bug.cgi?id=130988 Reviewed by Geoffrey Garen. GC_LOGGING can be useful for diagnosing

[webkit-changes] [166366] trunk/Source/JavaScriptCore

Title: [166366] trunk/Source/_javascript_Core Revision 166366 Author mhahnenb...@apple.com Date 2014-03-27 12:19:28 -0700 (Thu, 27 Mar 2014) Log Message Clean up questionable style in ScriptExecutable::prepareForExecutionImpl https://bugs.webkit.org/show_bug.cgi?id=130845 Reviewed by

[webkit-changes] [166375] trunk/Source/JavaScriptCore

Title: [166375] trunk/Source/_javascript_Core Revision 166375 Author mhahnenb...@apple.com Date 2014-03-27 15:34:23 -0700 (Thu, 27 Mar 2014) Log Message Check the remembered set bit faster https://bugs.webkit.org/show_bug.cgi?id=130860 Reviewed by Oliver Hunt. Currently we look up the

[webkit-changes] [166099] trunk/Source/JavaScriptCore

Title: [166099] trunk/Source/_javascript_Core Revision 166099 Author mhahnenb...@apple.com Date 2014-03-21 14:53:25 -0700 (Fri, 21 Mar 2014) Log Message 6% SunSpider commandline regression due to r165940 https://bugs.webkit.org/show_bug.cgi?id=130617 Reviewed by Michael Saboff. In

[webkit-changes] [166028] trunk/Source/JavaScriptCore

Title: [166028] trunk/Source/_javascript_Core Revision 166028 Author mhahnenb...@apple.com Date 2014-03-20 17:10:50 -0700 (Thu, 20 Mar 2014) Log Message Add some assertions back https://bugs.webkit.org/show_bug.cgi?id=130531 Reviewed by Geoffrey Garen. We removed a useful set of

[webkit-changes] [165909] trunk/Source/JavaScriptCore

Title: [165909] trunk/Source/_javascript_Core Revision 165909 Author mhahnenb...@apple.com Date 2014-03-19 12:32:43 -0700 (Wed, 19 Mar 2014) Log Message Normalize some of the older JSC options https://bugs.webkit.org/show_bug.cgi?id=128753 Reviewed by Michael Saboff. *

[webkit-changes] [165929] trunk/Source/WebCore

Title: [165929] trunk/Source/WebCore Revision 165929 Author mhahnenb...@apple.com Date 2014-03-19 16:27:50 -0700 (Wed, 19 Mar 2014) Log Message Build fix for iOS after r165926 * bindings/js/JSDOMWindowBase.cpp: (WebCore::JSDOMWindowBase::commonVM): *

[webkit-changes] [165486] trunk/Source/JavaScriptCore

Title: [165486] trunk/Source/_javascript_Core Revision 165486 Author mhahnenb...@apple.com Date 2014-03-12 11:17:43 -0700 (Wed, 12 Mar 2014) Log Message Layout Test fast/workers/worker-gc.html is failing https://bugs.webkit.org/show_bug.cgi?id=130135 Reviewed by Geoffrey Garen. When

[webkit-changes] [165490] trunk/Source/JavaScriptCore

Title: [165490] trunk/Source/_javascript_Core Revision 165490 Author mhahnenb...@apple.com Date 2014-03-12 11:29:00 -0700 (Wed, 12 Mar 2014) Log Message Remove HandleSet::m_nextToFinalize https://bugs.webkit.org/show_bug.cgi?id=130109 Reviewed by Mark Lam. This is a remnant of when

[webkit-changes] [165435] trunk/Source/JavaScriptCore

Title: [165435] trunk/Source/_javascript_Core Revision 165435 Author mhahnenb...@apple.com Date 2014-03-10 23:57:43 -0700 (Mon, 10 Mar 2014) Log Message REGRESSION(r165407): DoYouEvenBench crashes in DRT https://bugs.webkit.org/show_bug.cgi?id=130066 Reviewed by Geoffrey Garen. The

[webkit-changes] [165458] trunk/Source/JavaScriptCore

Title: [165458] trunk/Source/_javascript_Core Revision 165458 Author mhahnenb...@apple.com Date 2014-03-11 18:45:54 -0700 (Tue, 11 Mar 2014) Log Message MarkedBlocks that are full enough shouldn't be swept after EdenCollections https://bugs.webkit.org/show_bug.cgi?id=129920 Reviewed by

[webkit-changes] [165380] trunk/Source/WTF

Title: [165380] trunk/Source/WTF Revision 165380 Author mhahnenb...@apple.com Date 2014-03-10 10:42:25 -0700 (Mon, 10 Mar 2014) Log Message Turn on GenGC on other 64-bit platforms https://bugs.webkit.org/show_bug.cgi?id=129258 Reviewed by Oliver Hunt. * wtf/Platform.h: Modified Paths

[webkit-changes] [165389] trunk/Source/JavaScriptCore

Title: [165389] trunk/Source/_javascript_Core Revision 165389 Author mhahnenb...@apple.com Date 2014-03-10 11:55:17 -0700 (Mon, 10 Mar 2014) Log Message writeBarrier in emitPutReplaceStub is unnecessary https://bugs.webkit.org/show_bug.cgi?id=130030 Reviewed by Filip Pizlo. We already

[webkit-changes] [165407] trunk/Source/JavaScriptCore

Title: [165407] trunk/Source/_javascript_Core Revision 165407 Author mhahnenb...@apple.com Date 2014-03-10 15:21:44 -0700 (Mon, 10 Mar 2014) Log Message Remove ConditionalStore barrier https://bugs.webkit.org/show_bug.cgi?id=130040 Reviewed by Geoffrey Garen. ConditionalStoreBarrier

[webkit-changes] [165265] trunk/Source/JavaScriptCore

Title: [165265] trunk/Source/_javascript_Core Revision 165265 Author mhahnenb...@apple.com Date 2014-03-07 09:13:38 -0800 (Fri, 07 Mar 2014) Log Message Use OwnPtr in StructureIDTable https://bugs.webkit.org/show_bug.cgi?id=129828 Reviewed by Geoffrey Garen. This reduces the amount of

[webkit-changes] [165274] trunk/Tools

Title: [165274] trunk/Tools Revision 165274 Author mhahnenb...@apple.com Date 2014-03-07 11:40:21 -0800 (Fri, 07 Mar 2014) Log Message run-jsc-stress-tests doesn't eagerly report test failures when using the shell runner https://bugs.webkit.org/show_bug.cgi?id=129886 Reviewed by Mark

[webkit-changes] [165282] trunk/Source/JavaScriptCore

Title: [165282] trunk/Source/_javascript_Core Revision 165282 Author mhahnenb...@apple.com Date 2014-03-07 13:28:43 -0800 (Fri, 07 Mar 2014) Log Message Move GCActivityCallback to heap https://bugs.webkit.org/show_bug.cgi?id=129457 Reviewed by Geoffrey Garen. All the other GC timer

[webkit-changes] [165203] trunk/Source/JavaScriptCore

Title: [165203] trunk/Source/_javascript_Core Revision 165203 Author mhahnenb...@apple.com Date 2014-03-06 12:00:52 -0800 (Thu, 06 Mar 2014) Log Message Fix write barriers in Repatch.cpp for !ENABLE(DFG_JIT) platforms after r165128 https://bugs.webkit.org/show_bug.cgi?id=129760 Reviewed

[webkit-changes] [165239] trunk/Tools

Title: [165239] trunk/Tools Revision 165239 Author mhahnenb...@apple.com Date 2014-03-06 18:18:38 -0800 (Thu, 06 Mar 2014) Log Message detectFailures in run-jsc-stress-tests can report everything was ok if too many tests fail https://bugs.webkit.org/show_bug.cgi?id=129837 Reviewed by

[webkit-changes] [165244] trunk/Source/JavaScriptCore

Title: [165244] trunk/Source/_javascript_Core Revision 165244 Author mhahnenb...@apple.com Date 2014-03-06 19:29:55 -0800 (Thu, 06 Mar 2014) Log Message JSGlobalContextRelease incorrectly handles saving/restoring IdentifierTable https://bugs.webkit.org/show_bug.cgi?id=129858 Reviewed by

[webkit-changes] [165109] trunk/Source/JavaScriptCore

Title: [165109] trunk/Source/_javascript_Core Revision 165109 Author mhahnenb...@apple.com Date 2014-03-05 08:46:23 -0800 (Wed, 05 Mar 2014) Log Message Use range-based loops where possible in Heap methods https://bugs.webkit.org/show_bug.cgi?id=129513 Reviewed by Mark Lam. Replace old

[webkit-changes] [165112] trunk/Source/JavaScriptCore

Title: [165112] trunk/Source/_javascript_Core Revision 165112 Author mhahnenb...@apple.com Date 2014-03-05 09:43:57 -0800 (Wed, 05 Mar 2014) Log Message DFGStoreBarrierElisionPhase should should GCState directly instead of m_gcClobberSet when calling writesOverlap()

[webkit-changes] [165135] trunk/Source/JavaScriptCore

Title: [165135] trunk/Source/_javascript_Core Revision 165135 Author mhahnenb...@apple.com Date 2014-03-05 15:33:21 -0800 (Wed, 05 Mar 2014) Log Message JSCell::m_gcData should encode its information differently https://bugs.webkit.org/show_bug.cgi?id=129741 Reviewed by Geoffrey Garen.

[webkit-changes] [165164] trunk/Source/JavaScriptCore

Title: [165164] trunk/Source/_javascript_Core Revision 165164 Author mhahnenb...@apple.com Date 2014-03-05 19:20:37 -0800 (Wed, 05 Mar 2014) Log Message JSObject::fastGetOwnPropertySlot does a slow check for OverridesGetOwnPropertySlot https://bugs.webkit.org/show_bug.cgi?id=129754

[webkit-changes] [164862] trunk/Source/JavaScriptCore

Title: [164862] trunk/Source/_javascript_Core Revision 164862 Author mhahnenb...@apple.com Date 2014-02-28 08:56:17 -0800 (Fri, 28 Feb 2014) Log Message Clean up Heap::collect and Heap::markRoots https://bugs.webkit.org/show_bug.cgi?id=129464 Reviewed by Geoffrey Garen. These functions

[webkit-changes] [164864] trunk/Source/JavaScriptCore

Title: [164864] trunk/Source/_javascript_Core Revision 164864 Author mhahnenb...@apple.com Date 2014-02-28 09:46:12 -0800 (Fri, 28 Feb 2014) Log Message Fix !ENABLE(GGC) builds * heap/Heap.cpp: (JSC::Heap::markRoots): (JSC::Heap::gatherJSStackRoots): Also fix one of the names of the GC

[webkit-changes] [164781] trunk/Source/JavaScriptCore

Title: [164781] trunk/Source/_javascript_Core Revision 164781 Author mhahnenb...@apple.com Date 2014-02-27 00:45:57 -0800 (Thu, 27 Feb 2014) Log Message r164764 broke the ARM build https://bugs.webkit.org/show_bug.cgi?id=129415 Reviewed by Geoffrey Garen. *

[webkit-changes] [164727] trunk/Tools

Title: [164727] trunk/Tools Revision 164727 Author mhahnenb...@apple.com Date 2014-02-26 11:16:21 -0800 (Wed, 26 Feb 2014) Log Message runscript: line 42: /bin/ls: Argument list too long https://bugs.webkit.org/show_bug.cgi?id=129376 Reviewed by Michael Saboff. The test_script_* can

[webkit-changes] [164761] trunk/Source/JavaScriptCore

Title: [164761] trunk/Source/_javascript_Core Revision 164761 Author mhahnenb...@apple.com Date 2014-02-26 17:09:39 -0800 (Wed, 26 Feb 2014) Log Message Unconditional logging in compileFTLOSRExit https://bugs.webkit.org/show_bug.cgi?id=129407 Reviewed by Michael Saboff. This was

[webkit-changes] [164766] trunk/Source/JavaScriptCore

Title: [164766] trunk/Source/_javascript_Core Revision 164766 Author mhahnenb...@apple.com Date 2014-02-26 17:53:02 -0800 (Wed, 26 Feb 2014) Log Message EFL build fix * dfg/DFGSpeculativeJIT32_64.cpp: Remove unused variables.

[webkit-changes] [164774] trunk/Source/JavaScriptCore

Title: [164774] trunk/Source/_javascript_Core Revision 164774 Author mhahnenb...@apple.com Date 2014-02-26 19:41:29 -0800 (Wed, 26 Feb 2014) Log Message r164764 broke the ARM build https://bugs.webkit.org/show_bug.cgi?id=129415 Reviewed by Geoffrey Garen. *

[webkit-changes] [164590] trunk/Source/WTF

Title: [164590] trunk/Source/WTF Revision 164590 Author mhahnenb...@apple.com Date 2014-02-24 10:15:47 -0800 (Mon, 24 Feb 2014) Log Message Turn GenGC on for 32-bit systems https://bugs.webkit.org/show_bug.cgi?id=128824 Reviewed by Geoffrey Garen. * wtf/Platform.h: Modified Paths

[webkit-changes] [164437] trunk/LayoutTests

Title: [164437] trunk/LayoutTests Revision 164437 Author mhahnenb...@apple.com Date 2014-02-20 11:19:12 -0800 (Thu, 20 Feb 2014) Log Message Unskip fast/workers/use-machine-stack.html Unreviewed test gardening. This was fixed as part of http://trac.webkit.org/changeset/164371, so we're

[webkit-changes] [164439] trunk/Source/JavaScriptCore

Title: [164439] trunk/Source/_javascript_Core Revision 164439 Author mhahnenb...@apple.com Date 2014-02-20 11:40:04 -0800 (Thu, 20 Feb 2014) Log Message Dynamically generated JSExport protocols added to a class results in a crash https://bugs.webkit.org/show_bug.cgi?id=129108 Reviewed

[webkit-changes] [164443] trunk/Source/JavaScriptCore

Title: [164443] trunk/Source/_javascript_Core Revision 164443 Author mhahnenb...@apple.com Date 2014-02-20 12:57:20 -0800 (Thu, 20 Feb 2014) Log Message Replace uses of deprecated POSIX index() with strchr() in ObjcRuntimeExtras.h https://bugs.webkit.org/show_bug.cgi?id=128610 Reviewed

[webkit-changes] [164447] trunk/Source/JavaScriptCore

Title: [164447] trunk/Source/_javascript_Core Revision 164447 Author mhahnenb...@apple.com Date 2014-02-20 14:53:21 -0800 (Thu, 20 Feb 2014) Log Message Add a JSC option to disable EdenCollections https://bugs.webkit.org/show_bug.cgi?id=128849 Reviewed by Mark Lam. This will help

[webkit-changes] [164448] trunk/Source/JavaScriptCore

Title: [164448] trunk/Source/_javascript_Core Revision 164448 Author mhahnenb...@apple.com Date 2014-02-20 14:55:11 -0800 (Thu, 20 Feb 2014) Log Message CopiedBlock::pin can call into fastFree while forbidden https://bugs.webkit.org/show_bug.cgi?id=128654 Reviewed by Oliver Hunt. A

[webkit-changes] [164371] trunk

Title: [164371] trunk Revision 164371 Author mhahnenb...@apple.com Date 2014-02-19 10:41:27 -0800 (Wed, 19 Feb 2014) Log Message Dedicated worker crash caused by global DFG worklists + GC https://bugs.webkit.org/show_bug.cgi?id=128537 Reviewed by Filip Pizlo. Source/_javascript_Core:

[webkit-changes] [164128] trunk/Source/JavaScriptCore

Title: [164128] trunk/Source/_javascript_Core Revision 164128 Author mhahnenb...@apple.com Date 2014-02-14 13:17:50 -0800 (Fri, 14 Feb 2014) Log Message Baseline JIT should have a fast path to bypass the write barrier on op_enter https://bugs.webkit.org/show_bug.cgi?id=128832 Reviewed

[webkit-changes] [164134] trunk/Tools

Title: [164134] trunk/Tools Revision 164134 Author mhahnenb...@apple.com Date 2014-02-14 14:28:36 -0800 (Fri, 14 Feb 2014) Log Message jsc-cli should allow scripts to access argv https://bugs.webkit.org/show_bug.cgi?id=127486 Reviewed by Oliver Hunt. *

[webkit-changes] [164136] trunk/Source/JavaScriptCore

Title: [164136] trunk/Source/_javascript_Core Revision 164136 Author mhahnenb...@apple.com Date 2014-02-14 14:44:52 -0800 (Fri, 14 Feb 2014) Log Message ASSERT(isValidAllocation(bytes)) when ObjC API creates custom errors https://bugs.webkit.org/show_bug.cgi?id=128840 Reviewed by Joseph

[webkit-changes] [164137] trunk/Tools

Title: [164137] trunk/Tools Revision 164137 Author mhahnenb...@apple.com Date 2014-02-14 15:09:45 -0800 (Fri, 14 Feb 2014) Log Message Save ARGV in a local to avoid repeated lookups Rubber stamped by Joseph Pecoraro. * jsc-cli/jsc-cli/CLIInstance.m: (-[CLIInstance

[webkit-changes] [164147] trunk/Source/JavaScriptCore

Title: [164147] trunk/Source/_javascript_Core Revision 164147 Author mhahnenb...@apple.com Date 2014-02-14 17:27:53 -0800 (Fri, 14 Feb 2014) Log Message -[JSManagedValue value] needs to be protected by the API lock https://bugs.webkit.org/show_bug.cgi?id=128857 Reviewed by Mark Lam. *

[webkit-changes] [164063] trunk/Source/JavaScriptCore

Title: [164063] trunk/Source/_javascript_Core Revision 164063 Author mhahnenb...@apple.com Date 2014-02-13 15:07:12 -0800 (Thu, 13 Feb 2014) Log Message Add some RELEASE_ASSERTs to catch JSLock bugs earlier https://bugs.webkit.org/show_bug.cgi?id=128762 Reviewed by Mark Lam. *

[webkit-changes] [164088] trunk/Source/JavaScriptCore

Title: [164088] trunk/Source/_javascript_Core Revision 164088 Author mhahnenb...@apple.com Date 2014-02-13 18:36:44 -0800 (Thu, 13 Feb 2014) Log Message JSManagedValue::dealloc modifies NSMapTable while iterating it https://bugs.webkit.org/show_bug.cgi?id=128713 Reviewed by Geoffrey

[webkit-changes] [164009] trunk/Source/JavaScriptCore

Title: [164009] trunk/Source/_javascript_Core Revision 164009 Author mhahnenb...@apple.com Date 2014-02-12 20:24:41 -0800 (Wed, 12 Feb 2014) Log Message DelayedReleaseScope in MarkedAllocator::tryAllocateHelper is wrong https://bugs.webkit.org/show_bug.cgi?id=128641 Reviewed by Michael

  1   2   3   4   5   >