[webkit-changes] [173601] trunk/Source/JavaScriptCore

Title: [173601] trunk/Source/_javascript_Core Revision 173601 Author msab...@apple.com Date 2014-09-13 09:26:04 -0700 (Sat, 13 Sep 2014) Log Message Merge JSGlobalObject::reset() into ::init() https://bugs.webkit.org/show_bug.cgi?id=136800 Reviewed by Oliver Hunt. Moved the contents of

[webkit-changes] [173600] trunk/Source/JavaScriptCore

Title: [173600] trunk/Source/_javascript_Core Revision 173600 Author msab...@apple.com Date 2014-09-12 22:21:44 -0700 (Fri, 12 Sep 2014) Log Message Add JSCallee to program and eval CallFrames https://bugs.webkit.org/show_bug.cgi?id=136785 Reviewed by Mark Lam. Populated Callee slot for

[webkit-changes] [173567] trunk/Source/JavaScriptCore

Title: [173567] trunk/Source/_javascript_Core Revision 173567 Author msab...@apple.com Date 2014-09-12 10:54:05 -0700 (Fri, 12 Sep 2014) Log Message Remove unneeded declarations from JSCallee.h https://bugs.webkit.org/show_bug.cgi?id=136783 Reviewed by Mark Lam. * runtime/JSCallee.h: (J

[webkit-changes] [173550] trunk/Tools

Title: [173550] trunk/Tools Revision 173550 Author msab...@apple.com Date 2014-09-11 18:04:05 -0700 (Thu, 11 Sep 2014) Log Message lldb_webkit.py:btjs doesn't work with release builds https://bugs.webkit.org/show_bug.cgi?id=136760 Reviewed by Jer Noble. If we can't get a result calling

[webkit-changes] [173541] trunk/Source

Title: [173541] trunk/Source Revision 173541 Author msab...@apple.com Date 2014-09-11 14:52:33 -0700 (Thu, 11 Sep 2014) Log Message Move JSScope out of JSFunction into separate JSCallee class https://bugs.webkit.org/show_bug.cgi?id=136725 Reviewed by Oliver Hunt. Created new JSCallee cl

[webkit-changes] [173330] trunk/LayoutTests

Title: [173330] trunk/LayoutTests Revision 173330 Author msab...@apple.com Date 2014-09-05 13:05:32 -0700 (Fri, 05 Sep 2014) Log Message ARM32 iOS: JSC Test math.js fails https://bugs.webkit.org/show_bug.cgi?id=136261 Reviewed by Geoffrey Garen. Split out the failing tests to a new test

[webkit-changes] [173312] trunk/Source/JavaScriptCore

Title: [173312] trunk/Source/_javascript_Core Revision 173312 Author msab...@apple.com Date 2014-09-05 09:17:17 -0700 (Fri, 05 Sep 2014) Log Message ARM: Add more coverage to ARMv7 disassembler https://bugs.webkit.org/show_bug.cgi?id=136565 Reviewed by Mark Lam. Added ARMV7 disassembler

[webkit-changes] [173282] trunk/Source/JavaScriptCore

Title: [173282] trunk/Source/_javascript_Core Revision 173282 Author msab...@apple.com Date 2014-09-04 14:23:38 -0700 (Thu, 04 Sep 2014) Log Message REGRESSION(r173031): crashes during run-layout-jsc on x86/Linux https://bugs.webkit.org/show_bug.cgi?id=136436 Reviewed by Geoffrey Garen.

[webkit-changes] [173178] trunk

Title: [173178] trunk Revision 173178 Author msab...@apple.com Date 2014-09-02 09:52:35 -0700 (Tue, 02 Sep 2014) Log Message Out of bounds write in vmEntryToJavaScript / JSC::JITCode::execute https://bugs.webkit.org/show_bug.cgi?id=136305 Reviewed by Filip Pizlo. Source/_javascript_Core

[webkit-changes] [172978] trunk/Source/JavaScriptCore

Title: [172978] trunk/Source/_javascript_Core Revision 172978 Author msab...@apple.com Date 2014-08-26 15:08:42 -0700 (Tue, 26 Aug 2014) Log Message [Win] 64-bit _javascript_Core crashes on launch https://bugs.webkit.org/show_bug.cgi?id=136241 Reviewed by Mark Lam. * llint/LowLevelInter

[webkit-changes] [172962] trunk/Source/JavaScriptCore

Title: [172962] trunk/Source/_javascript_Core Revision 172962 Author msab...@apple.com Date 2014-08-26 10:34:21 -0700 (Tue, 26 Aug 2014) Log Message REGRESSION(r172794) + 32Bit build: for-in-base-reassigned-later-and-change-structure.js fail with NaN result https://bugs.webkit.org/show_bu

[webkit-changes] [172959] trunk/Source/JavaScriptCore

Title: [172959] trunk/Source/_javascript_Core Revision 172959 Author msab...@apple.com Date 2014-08-26 08:55:01 -0700 (Tue, 26 Aug 2014) Log Message REGRESSION(r172794) + 32Bit build: ASSERT failures in for-in-tests.js tests. https://bugs.webkit.org/show_bug.cgi?id=136165 Reviewed by Mar

[webkit-changes] [172932] trunk/Source/JavaScriptCore

Title: [172932] trunk/Source/_javascript_Core Revision 172932 Author msab...@apple.com Date 2014-08-25 12:32:40 -0700 (Mon, 25 Aug 2014) Log Message After r172867 another crash in in js/dom/line-column-numbers.html https://bugs.webkit.org/show_bug.cgi?id=136192 Reviewed by Geoffrey Garen

[webkit-changes] [172867] trunk/Source/JavaScriptCore

Title: [172867] trunk/Source/_javascript_Core Revision 172867 Author msab...@apple.com Date 2014-08-22 12:54:30 -0700 (Fri, 22 Aug 2014) Log Message REGRESSION(r163179): Sporadic crash in js/dom/line-column-numbers.html test https://bugs.webkit.org/show_bug.cgi?id=136111 Reviewed by Fili

[webkit-changes] [172807] trunk/Source/JavaScriptCore

Title: [172807] trunk/Source/_javascript_Core Revision 172807 Author msab...@apple.com Date 2014-08-20 13:28:24 -0700 (Wed, 20 Aug 2014) Log Message REGRESSION: Web Inspector crashes when reloading apple.com with Timeline recording active https://bugs.webkit.org/show_bug.cgi?id=136034 Re

[webkit-changes] [172792] trunk/Source/JavaScriptCore

Title: [172792] trunk/Source/_javascript_Core Revision 172792 Author msab...@apple.com Date 2014-08-19 17:36:13 -0700 (Tue, 19 Aug 2014) Log Message Crash in jsc-layout-tests.yaml/js/script-tests/reentrant-caching.js https://bugs.webkit.org/show_bug.cgi?id=136080 Reviewed by Mark Lam. U

[webkit-changes] [172665] trunk/Source/JavaScriptCore

Title: [172665] trunk/Source/_javascript_Core Revision 172665 Author msab...@apple.com Date 2014-08-15 18:45:40 -0700 (Fri, 15 Aug 2014) Log Message Change callToJavaScript and callToNativeFunction so their callFrames match the native calling conventions https://bugs.webkit.org/show_bug.c

[webkit-changes] [172429] trunk/Source/JavaScriptCore

Title: [172429] trunk/Source/_javascript_Core Revision 172429 Author msab...@apple.com Date 2014-08-11 20:20:04 -0700 (Mon, 11 Aug 2014) Log Message Eliminate {push,pop}CalleeSaves in favor of individual pushes & pops https://bugs.webkit.org/show_bug.cgi?id=127155 Reviewed by Geoffrey Ga

[webkit-changes] [170602] trunk/LayoutTests

Title: [170602] trunk/LayoutTests Revision 170602 Author msab...@apple.com Date 2014-06-30 15:13:37 -0700 (Mon, 30 Jun 2014) Log Message js/script-tests/function-apply-many-args.js fails on ARM https://bugs.webkit.org/show_bug.cgi?id=126588 Reviewed by Mark Lam. Removed three test cases

[webkit-changes] [170601] trunk

Title: [170601] trunk Revision 170601 Author msab...@apple.com Date 2014-06-30 15:12:17 -0700 (Mon, 30 Jun 2014) Log Message Add option to run-jsc-stress-testes to filter out tests that use large heaps https://bugs.webkit.org/show_bug.cgi?id=134458 Reviewed by Filip Pizlo. Source/_java

[webkit-changes] [170591] trunk/LayoutTests

Title: [170591] trunk/LayoutTests Revision 170591 Author msab...@apple.com Date 2014-06-30 11:22:25 -0700 (Mon, 30 Jun 2014) Log Message Reduce memory required for js/typedarray-zero-size.js https://bugs.webkit.org/show_bug.cgi?id=134448 Reviewed by Mark Hahnenberg. Reduce the loop coun

[webkit-changes] [170586] trunk/LayoutTests

Title: [170586] trunk/LayoutTests Revision 170586 Author msab...@apple.com Date 2014-06-30 10:37:06 -0700 (Mon, 30 Jun 2014) Log Message Reduce memory required for js/typedarray-zero-size.js https://bugs.webkit.org/show_bug.cgi?id=134448 Reviewed by Darin Adler. Making the loop count do

[webkit-changes] [170556] branches/ftlopt/Source/JavaScriptCore

Title: [170556] branches/ftlopt/Source/_javascript_Core Revision 170556 Author msab...@apple.com Date 2014-06-27 14:57:25 -0700 (Fri, 27 Jun 2014) Log Message Unreviewed build fix after r169795. Fixed ASSERT for 32 bit build. * dfg/DFGSpeculativeJIT.cpp: (JSC::DFG::SpeculativeJIT::silen

[webkit-changes] [170432] trunk/Tools

Title: [170432] trunk/Tools Revision 170432 Author msab...@apple.com Date 2014-06-25 10:34:52 -0700 (Wed, 25 Jun 2014) Log Message Provide _javascript_ aware backtrace script for lldb https://bugs.webkit.org/show_bug.cgi?id=134276 Reviewed by Jer Noble. * lldb/lldb_webkit.py: (__lldb_in

[webkit-changes] [170421] trunk/Source/JavaScriptCore

Title: [170421] trunk/Source/_javascript_Core Revision 170421 Author msab...@apple.com Date 2014-06-24 23:45:50 -0700 (Tue, 24 Jun 2014) Log Message Add support routines to provide descriptive _javascript_ backtraces https://bugs.webkit.org/show_bug.cgi?id=134278 Reviewed by Mark Lam. *

[webkit-changes] [170011] trunk/Source/JavaScriptCore

Title: [170011] trunk/Source/_javascript_Core Revision 170011 Author msab...@apple.com Date 2014-06-16 09:40:56 -0700 (Mon, 16 Jun 2014) Log Message Convert ASSERT in inlineFunctionForCapabilityLevel to early return https://bugs.webkit.org/show_bug.cgi?id=133903 Reviewed by Mark Hahnenbe

[webkit-changes] [169973] trunk/Source/JavaScriptCore

Title: [169973] trunk/Source/_javascript_Core Revision 169973 Author msab...@apple.com Date 2014-06-14 10:43:32 -0700 (Sat, 14 Jun 2014) Log Message operationCreateArguments could cause a GC during OSR exit https://bugs.webkit.org/show_bug.cgi?id=133905 Reviewed by Filip Pizlo. Defer GC

[webkit-changes] [169751] trunk

Title: [169751] trunk Revision 169751 Author msab...@apple.com Date 2014-06-10 10:58:03 -0700 (Tue, 10 Jun 2014) Log Message In a certain app state, Array.prototype.filter() returns incorrect results https://bugs.webkit.org/show_bug.cgi?id=133577 Reviewed by Oliver Hunt. Source/_javasc

[webkit-changes] [169489] trunk/Tools

Title: [169489] trunk/Tools Revision 169489 Author msab...@apple.com Date 2014-05-30 11:19:21 -0700 (Fri, 30 May 2014) Log Message Change run-jsc-stress-tests to not resolve jsc path locally when creating a bundle https://bugs.webkit.org/show_bug.cgi?id=133409 Reviewed by Filip Pizlo. H

[webkit-changes] [169396] trunk/Tools

Title: [169396] trunk/Tools Revision 169396 Author msab...@apple.com Date 2014-05-27 11:53:07 -0700 (Tue, 27 May 2014) Log Message REGRESSION(r169265): sh: line 0: cd: ../.vm https://bugs.webkit.org/show_bug.cgi?id=133242 Rubber stamped by Oliver Hunt. Changed runAndMonitorTestRunnerCom

[webkit-changes] [169293] trunk/Tools

Title: [169293] trunk/Tools Revision 169293 Author msab...@apple.com Date 2014-05-23 17:13:43 -0700 (Fri, 23 May 2014) Log Message REGRESSION(r169265): sh: line 0: cd: ../.vm https://bugs.webkit.org/show_bug.cgi?id=133242 Rubber stamped by Geoffrey Garen. Added missing shell escapes '\'

[webkit-changes] [169265] trunk/Tools

Title: [169265] trunk/Tools Revision 169265 Author msab...@apple.com Date 2014-05-23 11:05:57 -0700 (Fri, 23 May 2014) Log Message REGRESSION (r169241) Crash running run-jsc-stress-tests on EFL ARM https://bugs.webkit.org/show_bug.cgi?id=133223 Reviewed by Geoffrey Garen. Change runAndM

[webkit-changes] [169241] trunk/Tools

Title: [169241] trunk/Tools Revision 169241 Author msab...@apple.com Date 2014-05-22 20:27:36 -0700 (Thu, 22 May 2014) Log Message Eliminate n/total progress update from run-jsc-stress-tests output to file https://bugs.webkit.org/show_bug.cgi?id=133191 Reviewed by Geoffrey Garen. Change

[webkit-changes] [169217] trunk/Tools

Title: [169217] trunk/Tools Revision 169217 Author msab...@apple.com Date 2014-05-22 14:11:55 -0700 (Thu, 22 May 2014) Log Message Add option to run-jsc-stress-tests to use installed jsc https://bugs.webkit.org/show_bug.cgi?id=133102 Reviewed by Geoffrey Garen. Added --no-copy option to

[webkit-changes] [168983] trunk/Source/JavaScriptCore

Title: [168983] trunk/Source/_javascript_Core Revision 168983 Author msab...@apple.com Date 2014-05-16 15:09:51 -0700 (Fri, 16 May 2014) Log Message Crash in JSC::Yarr::YarrGenerator<(JSC::Yarr::YarrJITCompileMode)0>::generatePatternCharacterFixed() due to WTF::CrashOnOverflow::overflowed

[webkit-changes] [168406] trunk/Source/JavaScriptCore

Title: [168406] trunk/Source/_javascript_Core Revision 168406 Author msab...@apple.com Date 2014-05-06 21:01:25 -0700 (Tue, 06 May 2014) Log Message Unreviewd build fix for C-LOOP after r168396. * runtime/TestRunnerUtils.cpp: (JSC::optimizeNextInvocation): Wrapped actual call inside #if

[webkit-changes] [168396] trunk/Source/JavaScriptCore

Title: [168396] trunk/Source/_javascript_Core Revision 168396 Author msab...@apple.com Date 2014-05-06 17:34:34 -0700 (Tue, 06 May 2014) Log Message Add test for deleteAllCompiledCode https://bugs.webkit.org/show_bug.cgi?id=132632 Reviewed by Phil Pizlo. Added two new hooks to jsc, one

[webkit-changes] [168319] trunk/Source/JavaScriptCore

Title: [168319] trunk/Source/_javascript_Core Revision 168319 Author msab...@apple.com Date 2014-05-05 15:09:00 -0700 (Mon, 05 May 2014) Log Message REGRESSION: RELEASE_ASSERT in CodeBlock::baselineVersion @ cnn.com https://bugs.webkit.org/show_bug.cgi?id=132581 Reviewed by Filip Pizlo.

[webkit-changes] [168197] trunk/Source/JavaScriptCore

Title: [168197] trunk/Source/_javascript_Core Revision 168197 Author msab...@apple.com Date 2014-05-02 15:24:37 -0700 (Fri, 02 May 2014) Log Message "arm64 function not 4-byte aligned" warnings when building JSC https://bugs.webkit.org/show_bug.cgi?id=132495 Reviewed by Geoffrey Garen.

[webkit-changes] [167953] trunk/Source/WTF

Title: [167953] trunk/Source/WTF Revision 167953 Author msab...@apple.com Date 2014-04-29 13:28:37 -0700 (Tue, 29 Apr 2014) Log Message For DARWIN platforms, use system temporary directory for DataLog output https://bugs.webkit.org/show_bug.cgi?id=132346 Reviewed by Geoffrey Garen. Adde

[webkit-changes] [167917] trunk/Source/JavaScriptCore

Title: [167917] trunk/Source/_javascript_Core Revision 167917 Author msab...@apple.com Date 2014-04-28 18:36:14 -0700 (Mon, 28 Apr 2014) Log Message REGRESSION(r153142) ASSERT from CodeBlock::dumpBytecode dumping String Switch Jump Tables https://bugs.webkit.org/show_bug.cgi?id=132315 Re

[webkit-changes] [167913] trunk/Tools

Title: [167913] trunk/Tools Revision 167913 Author msab...@apple.com Date 2014-04-28 17:31:45 -0700 (Mon, 28 Apr 2014) Log Message Crash in platform/mac/accessibility/table-visible-rows.html https://bugs.webkit.org/show_bug.cgi?id=132146 Reviewed by Filip Pizlo. Instead of creating a lo

[webkit-changes] [167819] trunk/Tools

Title: [167819] trunk/Tools Revision 167819 Author msab...@apple.com Date 2014-04-25 13:34:47 -0700 (Fri, 25 Apr 2014) Log Message Crash in platform/mac/accessibility/table-visible-rows.html https://bugs.webkit.org/show_bug.cgi?id=132146 Reviewed by Mark Lam. Changed to use a local JSVa

[webkit-changes] [167782] trunk/Source/JavaScriptCore

Title: [167782] trunk/Source/_javascript_Core Revision 167782 Author msab...@apple.com Date 2014-04-24 17:14:14 -0700 (Thu, 24 Apr 2014) Log Message REGRESSION: Apparent hang of PCE.js Mac OS System 7.0.1 on ARM64 devices https://bugs.webkit.org/show_bug.cgi?id=132147 Reviewed by Mark La

[webkit-changes] [167599] trunk/Source/JavaScriptCore

Title: [167599] trunk/Source/_javascript_Core Revision 167599 Author msab...@apple.com Date 2014-04-21 11:10:41 -0700 (Mon, 21 Apr 2014) Log Message REGRESSION(r167591): ARM64 and ARM traditional builds broken https://bugs.webkit.org/show_bug.cgi?id=131935 Reviewed by Mark Hahnenberg. A

[webkit-changes] [167112] trunk/Source/JavaScriptCore

Title: [167112] trunk/Source/_javascript_Core Revision 167112 Author msab...@apple.com Date 2014-04-10 22:19:08 -0700 (Thu, 10 Apr 2014) Log Message Crash beneath DFG JIT code @ video.disney.com https://bugs.webkit.org/show_bug.cgi?id=131447 Reviewed by Geoffrey Garen. The 32-bit path o

[webkit-changes] [166754] trunk/Source/WebKit2

Title: [166754] trunk/Source/WebKit2 Revision 166754 Author msab...@apple.com Date 2014-04-03 16:51:47 -0700 (Thu, 03 Apr 2014) Log Message REGRESSION: PCE.js is 20x slower in WebKit2 because timers are throttled https://bugs.webkit.org/show_bug.cgi?id=131189 Reviewed by Geoffrey Garen.

[webkit-changes] [166554] trunk/Source/JavaScriptCore

Title: [166554] trunk/Source/_javascript_Core Revision 166554 Author msab...@apple.com Date 2014-03-31 18:10:35 -0700 (Mon, 31 Mar 2014) Log Message REGRESSION(r166415): JSObject{Get,Set}Private() don't work with proxies objects https://bugs.webkit.org/show_bug.cgi?id=130992 Reviewed by

[webkit-changes] [166415] trunk

Title: [166415] trunk Revision 166415 Author msab...@apple.com Date 2014-03-28 11:10:39 -0700 (Fri, 28 Mar 2014) Log Message Unreviewed, rolling r166248 back in. Turns out r166070 didn't cause a 2% performance loss in page load times Reverted changeset: Unreviewed, rolling out r166126.

[webkit-changes] [166404] trunk/Source/WebCore

Title: [166404] trunk/Source/WebCore Revision 166404 Author msab...@apple.com Date 2014-03-28 07:08:05 -0700 (Fri, 28 Mar 2014) Log Message Unreviewed, rolling r166249 back in. Turns out r166070 didn't cause a 2% performance loss in page load times Reverted changeset: Unreviewed, rolli

[webkit-changes] [166249] trunk/Source/WebCore

Title: [166249] trunk/Source/WebCore Revision 166249 Author msab...@apple.com Date 2014-03-25 13:43:27 -0700 (Tue, 25 Mar 2014) Log Message Unreviewed, rolling out r166070. Rollout r166070 due to 2% performance loss in page load times Reverted changeset: "Change CodeGeneratorJS.pm spec

[webkit-changes] [166248] trunk

Title: [166248] trunk Revision 166248 Author msab...@apple.com Date 2014-03-25 13:40:34 -0700 (Tue, 25 Mar 2014) Log Message Unreviewed, rolling out r166126. Rollout r166126 in prepartion to roll out prerequisite r166070 Reverted changeset: "toThis() on a JSWorkerGlobalScope should ret

[webkit-changes] [166126] trunk

Title: [166126] trunk Revision 166126 Author msab...@apple.com Date 2014-03-22 16:06:37 -0700 (Sat, 22 Mar 2014) Log Message toThis() on a JSWorkerGlobalScope should return a JSProxy and not undefined https://bugs.webkit.org/show_bug.cgi?id=130554 Reviewed by Geoffrey Garen. Source/_jav

[webkit-changes] [166070] trunk/Source/WebCore

Title: [166070] trunk/Source/WebCore Revision 166070 Author msab...@apple.com Date 2014-03-21 10:29:03 -0700 (Fri, 21 Mar 2014) Log Message Change CodeGeneratorJS.pm special cases for "DOMWindow" to be general purpose https://bugs.webkit.org/show_bug.cgi?id=130553 Reviewed by Geoffrey Ga

[webkit-changes] [165855] trunk/Source/JavaScriptCore

Title: [165855] trunk/Source/_javascript_Core Revision 165855 Author msab...@apple.com Date 2014-03-18 16:53:49 -0700 (Tue, 18 Mar 2014) Log Message Update RegExp Tracing code https://bugs.webkit.org/show_bug.cgi?id=130381 Reviewed by Andreas Kling. Updated the regular _expression_ trac

[webkit-changes] [165797] trunk/Source/JavaScriptCore

Title: [165797] trunk/Source/_javascript_Core Revision 165797 Author msab...@apple.com Date 2014-03-17 20:46:10 -0700 (Mon, 17 Mar 2014) Log Message V8 regexp spends most of its time in operationGetById https://bugs.webkit.org/show_bug.cgi?id=130380 Reviewed by Filip Pizlo. Added String

[webkit-changes] [165687] trunk/Source

Title: [165687] trunk/Source Revision 165687 Author msab...@apple.com Date 2014-03-15 17:44:51 -0700 (Sat, 15 Mar 2014) Log Message It should be possible to adjust DFG and FTL compiler thread priorities https://bugs.webkit.org/show_bug.cgi?id=130288 Reviewed by Filip Pizlo. Added abilit

[webkit-changes] [165320] trunk/Source/JavaScriptCore

Title: [165320] trunk/Source/_javascript_Core Revision 165320 Author msab...@apple.com Date 2014-03-07 19:33:44 -0800 (Fri, 07 Mar 2014) Log Message .cfi directives in LowLevelInterpreter.cpp are providing no benefit https://bugs.webkit.org/show_bug.cgi?id=129945 Reviewed by Mark Lam. R

[webkit-changes] [165293] trunk/Source/JavaScriptCore

Title: [165293] trunk/Source/_javascript_Core Revision 165293 Author msab...@apple.com Date 2014-03-07 14:22:46 -0800 (Fri, 07 Mar 2014) Log Message Clarify how we deal with "special" registers https://bugs.webkit.org/show_bug.cgi?id=129806 Already reviewed change being relanded. Reland

[webkit-changes] [165225] trunk/Source/WTF

Title: [165225] trunk/Source/WTF Revision 165225 Author msab...@apple.com Date 2014-03-06 15:40:48 -0800 (Thu, 06 Mar 2014) Log Message JSC should disable the JIT when building for ARMv7k https://bugs.webkit.org/show_bug.cgi?id=129829 Reviewed by Oliver Hunt. Added WTF_CPU_APPLE_ARMV7K

[webkit-changes] [165121] trunk

Title: [165121] trunk Revision 165121 Author msab...@apple.com Date 2014-03-05 13:01:35 -0800 (Wed, 05 Mar 2014) Log Message JSDataViewPrototype::getData() and setData() crash on platforms that don't allow unaligned accesses https://bugs.webkit.org/show_bug.cgi?id=129746 Reviewed by Fili

[webkit-changes] [165038] trunk/Source/JavaScriptCore

Title: [165038] trunk/Source/_javascript_Core Revision 165038 Author msab...@apple.com Date 2014-03-03 22:38:09 -0800 (Mon, 03 Mar 2014) Log Message AbstractMacroAssembler::CachedTempRegister should start out invalid https://bugs.webkit.org/show_bug.cgi?id=129657 Reviewed by Filip Pizlo.

[webkit-changes] [165021] trunk/Source/JavaScriptCore

Title: [165021] trunk/Source/_javascript_Core Revision 165021 Author msab...@apple.com Date 2014-03-03 16:49:19 -0800 (Mon, 03 Mar 2014) Log Message Crash in JIT code while watching a video @ storyboard.tumblr.com https://bugs.webkit.org/show_bug.cgi?id=129635 Reviewed by Filip Pizlo. C

[webkit-changes] [164827] trunk/Source/JavaScriptCore

Title: [164827] trunk/Source/_javascript_Core Revision 164827 Author msab...@apple.com Date 2014-02-27 13:35:14 -0800 (Thu, 27 Feb 2014) Log Message Unreviewed build fix for Mac tools after r164814 * Configurations/ToolExecutable.xcconfig: - Added _javascript_Core.framework/PrivateHeader

[webkit-changes] [164653] trunk/Source/JavaScriptCore

Title: [164653] trunk/Source/_javascript_Core Revision 164653 Author msab...@apple.com Date 2014-02-25 09:53:33 -0800 (Tue, 25 Feb 2014) Log Message JIT Engines use the wrong stack limit for stack checks https://bugs.webkit.org/show_bug.cgi?id=129314 Reviewed by Filip Pizlo. Change the

[webkit-changes] [164445] trunk/Source/JavaScriptCore

Title: [164445] trunk/Source/_javascript_Core Revision 164445 Author msab...@apple.com Date 2014-02-20 14:07:13 -0800 (Thu, 20 Feb 2014) Log Message REGRESSION (r164417): ASSERTION FAILED: isBranch() in X86 32 bit build https://bugs.webkit.org/show_bug.cgi?id=129118 Reviewed by Filip Piz

[webkit-changes] [164390] trunk/Source/JavaScriptCore

Title: [164390] trunk/Source/_javascript_Core Revision 164390 Author msab...@apple.com Date 2014-02-19 14:42:08 -0800 (Wed, 19 Feb 2014) Log Message Unreviewed build fix after r164374 * llint/LLIntOfflineAsmConfig.h: Added #define OFFLINE_ASM_X86_WIN 0 for ENABLE(LLINT_C_LOOP). Modified

[webkit-changes] [164069] trunk/Source/JavaScriptCore

Title: [164069] trunk/Source/_javascript_Core Revision 164069 Author msab...@apple.com Date 2014-02-13 15:35:08 -0800 (Thu, 13 Feb 2014) Log Message Change FTL stack check to use VM's stackLimit https://bugs.webkit.org/show_bug.cgi?id=128561 Reviewed by Filip Pizlo. Changes FTL function

[webkit-changes] [164039] trunk/Source/JavaScriptCore

Title: [164039] trunk/Source/_javascript_Core Revision 164039 Author msab...@apple.com Date 2014-02-13 10:45:09 -0800 (Thu, 13 Feb 2014) Log Message CStack Branch: VM::currentReturnThunkPC appears to be unused and should be removed https://bugs.webkit.org/show_bug.cgi?id=127205 Reviewed

[webkit-changes] [163964] trunk/Source/JavaScriptCore

Title: [163964] trunk/Source/_javascript_Core Revision 163964 Author msab...@apple.com Date 2014-02-12 10:40:35 -0800 (Wed, 12 Feb 2014) Log Message Adjust VM::stackLimit based on the size of the largest FTL stack produced https://bugs.webkit.org/show_bug.cgi?id=128562 Reviewed by Mark L

[webkit-changes] [163859] trunk/Source

Title: [163859] trunk/Source Revision 163859 Author msab...@apple.com Date 2014-02-10 21:43:48 -0800 (Mon, 10 Feb 2014) Log Message Re-enable ARM Thumb2 disassembler https://bugs.webkit.org/show_bug.cgi?id=128577 Reviewed by Filip Pizlo. Source/_javascript_Core: Changed signature of t

[webkit-changes] [163838] trunk/Source/JavaScriptCore

Title: [163838] trunk/Source/_javascript_Core Revision 163838 Author msab...@apple.com Date 2014-02-10 16:47:34 -0800 (Mon, 10 Feb 2014) Log Message Fail FTL compilation if the required stack is too big https://bugs.webkit.org/show_bug.cgi?id=128560 Reviewed by Filip Pizlo. Added StackS

[webkit-changes] [163595] trunk/Source/JavaScriptCore

Title: [163595] trunk/Source/_javascript_Core Revision 163595 Author msab...@apple.com Date 2014-02-06 18:03:26 -0800 (Thu, 06 Feb 2014) Log Message Workaround REGRESSION(r163195-r163227): Crash beneath NSErrorUserInfoFromJSException when installing AppleInternal.mpkg https://bugs.webkit.

[webkit-changes] [163342] trunk/Source/JavaScriptCore

Title: [163342] trunk/Source/_javascript_Core Revision 163342 Author msab...@apple.com Date 2014-02-03 16:37:51 -0800 (Mon, 03 Feb 2014) Log Message REGRESSION (r163011-r163031): Web Inspector: Latest nightly crashes when showing the Web Inspector https://bugs.webkit.org/show_bug.cgi?id=1

[webkit-changes] [163241] trunk/Source/JavaScriptCore

Title: [163241] trunk/Source/_javascript_Core Revision 163241 Author msab...@apple.com Date 2014-02-01 07:30:41 -0800 (Sat, 01 Feb 2014) Log Message REGRESSION (r163027?): CrashTracer: [USER] com.apple.WebKit.WebContent.Development at com.apple._javascript_Core: JSC::ArrayProfile::compute

[webkit-changes] [163214] trunk/Source

Title: [163214] trunk/Source Revision 163214 Author msab...@apple.com Date 2014-01-31 15:53:52 -0800 (Fri, 31 Jan 2014) Log Message REGRESSION: Crash in sanitizeStackForVMImpl when scrolling @ lifehacker.com.au https://bugs.webkit.org/show_bug.cgi?id=128017 Reviewed by Filip Pizlo. Move

[webkit-changes] [162934] branches/jsCStack/Source/JavaScriptCore

Title: [162934] branches/jsCStack/Source/_javascript_Core Revision 162934 Author msab...@apple.com Date 2014-01-28 09:07:38 -0800 (Tue, 28 Jan 2014) Log Message CStack Branch: Some LLInt symbols not declared extern "C" https://bugs.webkit.org/show_bug.cgi?id=127782 Reviewed by Geoffrey G

[webkit-changes] [162900] branches/jsCStack/Source/WebKit/mac/postprocess-headers.sh

Title: [162900] branches/jsCStack/Source/WebKit/mac/postprocess-headers.sh Revision 162900 Author msab...@apple.com Date 2014-01-27 18:12:14 -0800 (Mon, 27 Jan 2014) Log Message Set exectueable property to match trunk. Property Changed branches/jsCStack/Source/WebKit/mac/postprocess-hea

[webkit-changes] [162861] branches/jsCStack/Source/JavaScriptCore

Title: [162861] branches/jsCStack/Source/_javascript_Core Revision 162861 Author msab...@apple.com Date 2014-01-27 13:03:05 -0800 (Mon, 27 Jan 2014) Log Message CStack Branch: [X86-32] testapi crashes in gatherConservativeRoots() https://bugs.webkit.org/show_bug.cgi?id=127699 Reviewed by

[webkit-changes] [162705] branches/jsCStack/Source/JavaScriptCore

Title: [162705] branches/jsCStack/Source/_javascript_Core Revision 162705 Author msab...@apple.com Date 2014-01-24 10:06:47 -0800 (Fri, 24 Jan 2014) Log Message CStack Branch: Get ARM working https://bugs.webkit.org/show_bug.cgi?id=127510 Reviewed by Geoffrey Garen. Fixed nativeCallTram

[webkit-changes] [162703] branches/jsCStack/Source/JavaScriptCore

Title: [162703] branches/jsCStack/Source/_javascript_Core Revision 162703 Author msab...@apple.com Date 2014-01-24 09:33:54 -0800 (Fri, 24 Jan 2014) Log Message Merge trunk change set r162701. Modified Paths branches/jsCStack/Source/_javascript_Core/ChangeLog branches/jsCStack/Source/_j

[webkit-changes] [162701] trunk/Source/JavaScriptCore

Title: [162701] trunk/Source/_javascript_Core Revision 162701 Author msab...@apple.com Date 2014-01-24 08:34:24 -0800 (Fri, 24 Jan 2014) Log Message ARM Offline assembler temporary register allocator has duplicate register when building fat binaries https://bugs.webkit.org/show_bug.cgi?id

[webkit-changes] [162539] branches/jsCStack/Source/WTF

Title: [162539] branches/jsCStack/Source/WTF Revision 162539 Author msab...@apple.com Date 2014-01-22 11:21:59 -0800 (Wed, 22 Jan 2014) Log Message Merge trunk r160838 2013-12-18 Daniel Bates WTF, _javascript_Core fails to build with trunk clang: operators new, new[], delete, delete[

[webkit-changes] [162521] branches/jsCStack/Source/JavaScriptCore

Title: [162521] branches/jsCStack/Source/_javascript_Core Revision 162521 Author msab...@apple.com Date 2014-01-22 09:19:17 -0800 (Wed, 22 Jan 2014) Log Message CStack Branch: Fix DFG for X86-32 https://bugs.webkit.org/show_bug.cgi?id=127407 Reviewed by Filip Pizlo. Made DFG calling con

[webkit-changes] [162520] branches/jsCStack/Source/JavaScriptCore

Title: [162520] branches/jsCStack/Source/_javascript_Core Revision 162520 Author msab...@apple.com Date 2014-01-22 08:52:51 -0800 (Wed, 22 Jan 2014) Log Message Unreviewed build fix for non FTL platforms. * ftl/FTLValueRange.cpp: Encapsulated code within #if ENABLE(FTL_JIT) / #endif Mod

[webkit-changes] [162242] branches/jsCStack/Source/JavaScriptCore

Title: [162242] branches/jsCStack/Source/_javascript_Core Revision 162242 Author msab...@apple.com Date 2014-01-17 21:10:15 -0800 (Fri, 17 Jan 2014) Log Message CStack Branch: Fix Baseline JIT for X86-32 https://bugs.webkit.org/show_bug.cgi?id=127201 Reviewed by Geoffrey Garen. Most of

[webkit-changes] [162240] branches/jsCStack/Source/JavaScriptCore

Title: [162240] branches/jsCStack/Source/_javascript_Core Revision 162240 Author msab...@apple.com Date 2014-01-17 21:05:34 -0800 (Fri, 17 Jan 2014) Log Message CStack Branch: X86-32 Fix LLInt https://bugs.webkit.org/show_bug.cgi?id=127071 Reviewed by Filip Pizlo. This fixes X86-32 comp

[webkit-changes] [161913] branches/jsCStack/Source/JavaScriptCore

Title: [161913] branches/jsCStack/Source/_javascript_Core Revision 161913 Author msab...@apple.com Date 2014-01-13 15:23:52 -0800 (Mon, 13 Jan 2014) Log Message CStack Branch: Fix unwind on branch for X86-64 https://bugs.webkit.org/show_bug.cgi?id=126932 Reviewed by Geoffrey Garen. Adde

[webkit-changes] [161686] trunk/Source/JavaScriptCore

Title: [161686] trunk/Source/_javascript_Core Revision 161686 Author msab...@apple.com Date 2014-01-10 15:47:12 -0800 (Fri, 10 Jan 2014) Log Message REGRESSION(C stack work): stack traces no longer work in CrashTracer, lldb, and other tools https://bugs.webkit.org/show_bug.cgi?id=126764

[webkit-changes] [161531] branches/jsCStack/Source/JavaScriptCore

Title: [161531] branches/jsCStack/Source/_javascript_Core Revision 161531 Author msab...@apple.com Date 2014-01-08 17:55:32 -0800 (Wed, 08 Jan 2014) Log Message CStack: stack frame gets unaligned before call to operationVMHandleException https://bugs.webkit.org/show_bug.cgi?id=126673 Rev

[webkit-changes] [161504] branches/jsCStack/Source/JavaScriptCore

Title: [161504] branches/jsCStack/Source/_javascript_Core Revision 161504 Author msab...@apple.com Date 2014-01-08 08:15:29 -0800 (Wed, 08 Jan 2014) Log Message CStack Branch: ARM64 DFG produces the wrong answer for X % 0 https://bugs.webkit.org/show_bug.cgi?id=126612 Reviewed by Geoffre

[webkit-changes] [161439] branches/jsCStack/Source/JavaScriptCore

Title: [161439] branches/jsCStack/Source/_javascript_Core Revision 161439 Author msab...@apple.com Date 2014-01-07 11:30:34 -0800 (Tue, 07 Jan 2014) Log Message CStack Branch: ARM64 Crash running ecma/FunctionObjects/15.3.1.1-3.js https://bugs.webkit.org/show_bug.cgi?id=126585 Reviewed b

[webkit-changes] [161431] branches/jsCStack/Source/JavaScriptCore

Title: [161431] branches/jsCStack/Source/_javascript_Core Revision 161431 Author msab...@apple.com Date 2014-01-07 09:57:17 -0800 (Tue, 07 Jan 2014) Log Message CStack Branch: Disable JIT stack alignment check for ARM64 https://bugs.webkit.org/show_bug.cgi?id=126550 Unreviewed comment on

[webkit-changes] [161407] branches/jsCStack/Source/JavaScriptCore

Title: [161407] branches/jsCStack/Source/_javascript_Core Revision 161407 Author msab...@apple.com Date 2014-01-06 22:09:59 -0800 (Mon, 06 Jan 2014) Log Message CStack Branch: ARM64 Crash in llint_function_for_call_arity_check running 3d-raytrace.js https://bugs.webkit.org/show_bug.cgi?id

[webkit-changes] [161405] branches/jsCStack/Source/JavaScriptCore

Title: [161405] branches/jsCStack/Source/_javascript_Core Revision 161405 Author msab...@apple.com Date 2014-01-06 22:07:52 -0800 (Mon, 06 Jan 2014) Log Message CStack Branch: Fix nativeForGenerator() for non-X86 platforms https://bugs.webkit.org/show_bug.cgi?id=126551 Reviewed by Geoffr

[webkit-changes] [161400] branches/jsCStack/Source/JavaScriptCore

Title: [161400] branches/jsCStack/Source/_javascript_Core Revision 161400 Author msab...@apple.com Date 2014-01-06 20:58:47 -0800 (Mon, 06 Jan 2014) Log Message Merge of trunk r160493 2013-12-11 Filip Pizlo ARM64: Hang running pdfjs test, suspect DFG generated code for "in" h

[webkit-changes] [161390] branches/jsCStack/Source/JavaScriptCore

Title: [161390] branches/jsCStack/Source/_javascript_Core Revision 161390 Author msab...@apple.com Date 2014-01-06 17:55:49 -0800 (Mon, 06 Jan 2014) Log Message CStack Branch: Disable JIT stack alignment check for ARM64 https://bugs.webkit.org/show_bug.cgi?id=126550 Reviewed by Mark Lam.

[webkit-changes] [161326] branches/jsCStack/Source/JavaScriptCore

Title: [161326] branches/jsCStack/Source/_javascript_Core Revision 161326 Author msab...@apple.com Date 2014-01-05 17:29:24 -0800 (Sun, 05 Jan 2014) Log Message CStack Branch: ARM64 Fix other prologue and epilogue macros in LLInt https://bugs.webkit.org/show_bug.cgi?id=126507 Reviewed by

[webkit-changes] [161318] branches/jsCStack/Source/JavaScriptCore

Title: [161318] branches/jsCStack/Source/_javascript_Core Revision 161318 Author msab...@apple.com Date 2014-01-04 23:29:27 -0800 (Sat, 04 Jan 2014) Log Message CStack Branch: ARM64 needs push/pop pair macro assembler instructions https://bugs.webkit.org/show_bug.cgi?id=126474 Reviewed b

[webkit-changes] [161312] branches/jsCStack/Source/JavaScriptCore

Title: [161312] branches/jsCStack/Source/_javascript_Core Revision 161312 Author msab...@apple.com Date 2014-01-04 10:30:32 -0800 (Sat, 04 Jan 2014) Log Message CStack Branch: slowPathFor() should emit an epilogue instead of popping the callFrameRegister https://bugs.webkit.org/show_bug.c

<    1   2   3   4   5   6   7   8   9   10   >