[webkit-changes] [244579] trunk

Title: [244579] trunk Revision 244579 Author sbar...@apple.com Date 2019-04-23 19:14:23 -0700 (Tue, 23 Apr 2019) Log Message LICM incorrectly assumes it'll never insert a node which provably OSR exits https://bugs.webkit.org/show_bug.cgi?id=196721 Reviewed by Filip Pizlo. JSTests: * s

[webkit-changes] [244480] trunk

Title: [244480] trunk Revision 244480 Author sbar...@apple.com Date 2019-04-19 17:37:43 -0700 (Fri, 19 Apr 2019) Log Message AbstractValue can represent more than int52 https://bugs.webkit.org/show_bug.cgi?id=197118 Reviewed by Michael Saboff. JSTests: * stress/abstract-value-can-incl

[webkit-changes] [244433] trunk/Source/JavaScriptCore

Title: [244433] trunk/Source/_javascript_Core Revision 244433 Author sbar...@apple.com Date 2019-04-18 13:44:47 -0700 (Thu, 18 Apr 2019) Log Message Remove useConcurrentBarriers option https://bugs.webkit.org/show_bug.cgi?id=197066 Reviewed by Michael Saboff. This isn't a helpful option

[webkit-changes] [244401] trunk/Source/JavaScriptCore

Title: [244401] trunk/Source/_javascript_Core Revision 244401 Author sbar...@apple.com Date 2019-04-17 14:35:06 -0700 (Wed, 17 Apr 2019) Log Message Remove deprecated JSScript SPI https://bugs.webkit.org/show_bug.cgi?id=194909 Reviewed by Keith Miller. * API/JSAPIGlobalObject.mm: (JSC:

[webkit-changes] [244324] trunk

Title: [244324] trunk Revision 244324 Author sbar...@apple.com Date 2019-04-15 19:41:38 -0700 (Mon, 15 Apr 2019) Log Message Modify how we do SetArgument when we inline varargs calls https://bugs.webkit.org/show_bug.cgi?id=196712 Reviewed by Michael Saboff. JSTests: * stress/get-stack

[webkit-changes] [244314] trunk

Title: [244314] trunk Revision 244314 Author sbar...@apple.com Date 2019-04-15 17:39:26 -0700 (Mon, 15 Apr 2019) Log Message SafeToExecute for GetByOffset/GetGetterByOffset/PutByOffset is using the wrong child for the base https://bugs.webkit.org/show_bug.cgi?id=196945 Reviewed by Filip

[webkit-changes] [244287] trunk/Source/JavaScriptCore

Title: [244287] trunk/Source/_javascript_Core Revision 244287 Author sbar...@apple.com Date 2019-04-15 13:44:33 -0700 (Mon, 15 Apr 2019) Log Message mergeOSREntryValue is wrong when the incoming value does not match up with the flush format https://bugs.webkit.org/show_bug.cgi?id=196918

[webkit-changes] [244238] trunk

Title: [244238] trunk Revision 244238 Author sbar...@apple.com Date 2019-04-12 20:04:18 -0700 (Fri, 12 Apr 2019) Log Message r244079 logically broke shouldSpeculateInt52 https://bugs.webkit.org/show_bug.cgi?id=196884 Reviewed by Yusuke Suzuki. JSTests: * microbenchmarks/int52-rand-func

[webkit-changes] [244237] trunk/Source/JavaScriptCore

Title: [244237] trunk/Source/_javascript_Core Revision 244237 Author sbar...@apple.com Date 2019-04-12 17:05:27 -0700 (Fri, 12 Apr 2019) Log Message Unreviewed. Build fix after r244233. * assembler/CPU.cpp: Modified Paths trunk/Source/_javascript_Core/ChangeLog trunk/Source/_javascript

[webkit-changes] [244233] trunk/Source

Title: [244233] trunk/Source Revision 244233 Author sbar...@apple.com Date 2019-04-12 16:26:43 -0700 (Fri, 12 Apr 2019) Log Message Sometimes we need to user fewer CPUs in our threading calculations https://bugs.webkit.org/show_bug.cgi?id=196794 Reviewed by Yusuke Suzuki. Source/_javas

[webkit-changes] [244206] trunk

Title: [244206] trunk Revision 244206 Author sbar...@apple.com Date 2019-04-11 18:04:32 -0700 (Thu, 11 Apr 2019) Log Message Remove invalid assertion in operationInstanceOfCustom https://bugs.webkit.org/show_bug.cgi?id=196842 Reviewed by Michael Saboff. JSTests: * stress/operationInst

[webkit-changes] [244193] trunk/Source/JavaScriptCore

Title: [244193] trunk/Source/_javascript_Core Revision 244193 Author sbar...@apple.com Date 2019-04-11 13:47:16 -0700 (Thu, 11 Apr 2019) Log Message Rename SetArgument to SetArgumentDefinitely https://bugs.webkit.org/show_bug.cgi?id=196828 Reviewed by Yusuke Suzuki. This is in preparati

[webkit-changes] [244185] trunk

Title: [244185] trunk Revision 244185 Author sbar...@apple.com Date 2019-04-10 23:26:37 -0700 (Wed, 10 Apr 2019) Log Message AbstractValue::validateOSREntryValue is wrong for Int52 constants https://bugs.webkit.org/show_bug.cgi?id=196801 Reviewed by Yusuke Suzuki. JSTests: * stress/ab

[webkit-changes] [244178] trunk/Source/JavaScriptCore

Title: [244178] trunk/Source/_javascript_Core Revision 244178 Author sbar...@apple.com Date 2019-04-10 18:31:51 -0700 (Wed, 10 Apr 2019) Log Message ArithSub over Int52 has shouldCheckOverflow as always true https://bugs.webkit.org/show_bug.cgi?id=196796 Reviewed by Yusuke Suzuki. AI wa

[webkit-changes] [244163] trunk/Source/JavaScriptCore

Title: [244163] trunk/Source/_javascript_Core Revision 244163 Author sbar...@apple.com Date 2019-04-10 16:02:11 -0700 (Wed, 10 Apr 2019) Log Message Work around an arm64_32 LLVM miscompile bug https://bugs.webkit.org/show_bug.cgi?id=196788 Reviewed by Yusuke Suzuki. * runtime/CachedType

[webkit-changes] [244079] trunk

Title: [244079] trunk Revision 244079 Author sbar...@apple.com Date 2019-04-09 09:06:48 -0700 (Tue, 09 Apr 2019) Log Message Clean up Int52 code and some bugs in it https://bugs.webkit.org/show_bug.cgi?id=196639 Reviewed by Yusuke Suzuki. JSTests: * stress/spec-any-int-as-double-produ

[webkit-changes] [244040] trunk

Title: [244040] trunk Revision 244040 Author sbar...@apple.com Date 2019-04-08 13:46:39 -0700 (Mon, 08 Apr 2019) Log Message WebAssembly.RuntimeError missing exception check https://bugs.webkit.org/show_bug.cgi?id=196700 Reviewed by Yusuke Suzuki. JSTests: * wasm/js-api/runtime-error-

[webkit-changes] [243960] trunk/Tools

Title: [243960] trunk/Tools Revision 243960 Author sbar...@apple.com Date 2019-04-05 19:05:11 -0700 (Fri, 05 Apr 2019) Log Message Make compare-results understand MotionMark https://bugs.webkit.org/show_bug.cgi?id=19 Reviewed by Yusuke Suzuki. * Scripts/compare-results: (PLT5Results

[webkit-changes] [243920] trunk/JSTests

Title: [243920] trunk/JSTests Revision 243920 Author sbar...@apple.com Date 2019-04-04 17:28:21 -0700 (Thu, 04 Apr 2019) Log Message Unreviewed. Make the test from r243906 catch the thrown exceptions. * stress/inferred-types-regex-matches-array.js: Modified Paths trunk/JSTests/ChangeLo

[webkit-changes] [243907] trunk/Source/JavaScriptCore

Title: [243907] trunk/Source/_javascript_Core Revision 243907 Author sbar...@apple.com Date 2019-04-04 14:39:16 -0700 (Thu, 04 Apr 2019) Log Message Unreviewed, build fix for CLoop after r243886 * interpreter/Interpreter.cpp: (JSC::UnwindFunctor::copyCalleeSavesToEntryFrameCalleeSavesBuf

[webkit-changes] [243906] trunk/JSTests

Title: [243906] trunk/JSTests Revision 243906 Author sbar...@apple.com Date 2019-04-04 14:13:26 -0700 (Thu, 04 Apr 2019) Log Message createRegExpMatchesArray does not respect inferred types https://bugs.webkit.org/show_bug.cgi?id=193287 Reviewed by Yusuke Suzuki. This checks in the test

[webkit-changes] [243886] trunk

Title: [243886] trunk Revision 243886 Author sbar...@apple.com Date 2019-04-04 11:54:16 -0700 (Thu, 04 Apr 2019) Log Message Teach Call ICs how to call Wasm https://bugs.webkit.org/show_bug.cgi?id=196387 Reviewed by Filip Pizlo. JSTests: * wasm/function-tests/stack-trace.js: Source/_j

[webkit-changes] [243744] trunk/Source/JavaScriptCore

Title: [243744] trunk/Source/_javascript_Core Revision 243744 Author sbar...@apple.com Date 2019-04-02 08:58:34 -0700 (Tue, 02 Apr 2019) Log Message Add a ValueRepReduction phase https://bugs.webkit.org/show_bug.cgi?id=196234 Reviewed by Filip Pizlo. This patch adds a ValueRepReduction

[webkit-changes] [243639] trunk

Title: [243639] trunk Revision 243639 Author sbar...@apple.com Date 2019-03-28 21:42:42 -0700 (Thu, 28 Mar 2019) Log Message BackwardsGraph needs to consider back edges as the backward's root successor https://bugs.webkit.org/show_bug.cgi?id=195991 Reviewed by Filip Pizlo. JSTests: * s

[webkit-changes] [243597] trunk

Title: [243597] trunk Revision 243597 Author sbar...@apple.com Date 2019-03-27 18:47:29 -0700 (Wed, 27 Mar 2019) Log Message JetStream 2 should not report time values as scores https://bugs.webkit.org/show_bug.cgi?id=196334 Reviewed by Yusuke Suzuki. PerformanceTests: * JetStream2/JetS

[webkit-changes] [243596] trunk

Title: [243596] trunk Revision 243596 Author sbar...@apple.com Date 2019-03-27 18:06:01 -0700 (Wed, 27 Mar 2019) Log Message validateOSREntryValue with Int52 should box the value being checked into double format https://bugs.webkit.org/show_bug.cgi?id=196313 Reviewed by Yusuke Suzuki.

[webkit-changes] [243541] trunk

Title: [243541] trunk Revision 243541 Author sbar...@apple.com Date 2019-03-27 08:22:28 -0700 (Wed, 27 Mar 2019) Log Message Unreviewed. Fix individual benchmark description urls to go to in-depth.html instead of about.html PerformanceTests: * JetStream2/JetStreamDriver.js: (Driver.prot

[webkit-changes] [243530] trunk/Source/JavaScriptCore

Title: [243530] trunk/Source/_javascript_Core Revision 243530 Author sbar...@apple.com Date 2019-03-26 17:08:46 -0700 (Tue, 26 Mar 2019) Log Message FTL: Emit code to validate AI's state when running the compiled code https://bugs.webkit.org/show_bug.cgi?id=195924 Reviewed by Filip Pizl

[webkit-changes] [243458] trunk/Websites/browserbench.org

Title: [243458] trunk/Websites/browserbench.org Revision 243458 Author sbar...@apple.com Date 2019-03-25 14:14:50 -0700 (Mon, 25 Mar 2019) Log Message Update browserbench.org/JetStream2.0 to the latest version. Rubber-stamped by Filip Pizlo. * JetStream2.0: Replaced with ../../Performan

[webkit-changes] [243455] trunk/PerformanceTests

Title: [243455] trunk/PerformanceTests Revision 243455 Author sbar...@apple.com Date 2019-03-25 14:03:15 -0700 (Mon, 25 Mar 2019) Log Message Update the blurb describing JetStream2 and fix a broken link in the in-depth page. Rubber-stamped by Filip Pizlo. * JetStream2/in-depth.html: * J

[webkit-changes] [243278] trunk

Title: [243278] trunk Revision 243278 Author sbar...@apple.com Date 2019-03-20 22:43:08 -0700 (Wed, 20 Mar 2019) Log Message DFG::AbstractValue::validateOSREntry is wrong when isHeapTop and the incoming value is Empty https://bugs.webkit.org/show_bug.cgi?id=195721 Reviewed by Filip Pizlo

[webkit-changes] [243277] trunk

Title: [243277] trunk Revision 243277 Author sbar...@apple.com Date 2019-03-20 22:41:21 -0700 (Wed, 20 Mar 2019) Log Message typeOfDoubleSum is wrong for when NaN can be produced https://bugs.webkit.org/show_bug.cgi?id=196030 Reviewed by Filip Pizlo. JSTests: * stress/double-add-sub-mu

[webkit-changes] [243268] trunk/Source/JavaScriptCore

Title: [243268] trunk/Source/_javascript_Core Revision 243268 Author sbar...@apple.com Date 2019-03-20 17:40:04 -0700 (Wed, 20 Mar 2019) Log Message GetCallee does not report the correct type in AI https://bugs.webkit.org/show_bug.cgi?id=195981 Reviewed by Yusuke Suzuki. I found this as

[webkit-changes] [243206] trunk/Source/JavaScriptCore

Title: [243206] trunk/Source/_javascript_Core Revision 243206 Author sbar...@apple.com Date 2019-03-20 09:17:44 -0700 (Wed, 20 Mar 2019) Log Message AI rule for ValueBitNot/ValueBitXor/ValueBitAnd/ValueBitOr is wrong https://bugs.webkit.org/show_bug.cgi?id=195980 Reviewed by Yusuke Suzuk

[webkit-changes] [243176] trunk/Source/JavaScriptCore

Title: [243176] trunk/Source/_javascript_Core Revision 243176 Author sbar...@apple.com Date 2019-03-19 15:53:40 -0700 (Tue, 19 Mar 2019) Log Message Prune code after ForceOSRExit https://bugs.webkit.org/show_bug.cgi?id=195913 Reviewed by Keith Miller. I removed our original implementati

[webkit-changes] [243162] trunk/Source/JavaScriptCore

Title: [243162] trunk/Source/_javascript_Core Revision 243162 Author sbar...@apple.com Date 2019-03-19 12:45:42 -0700 (Tue, 19 Mar 2019) Log Message Style fix: remove C style cast in Instruction.h https://bugs.webkit.org/show_bug.cgi?id=195917 Reviewed by Filip Pizlo. * bytecode/Instruc

[webkit-changes] [243117] trunk/Websites/browserbench.org

Title: [243117] trunk/Websites/browserbench.org Revision 243117 Author sbar...@apple.com Date 2019-03-18 17:10:30 -0700 (Mon, 18 Mar 2019) Log Message Unreviewed. Rename JetStream directory to JetStream1.1 * JetStream: Removed. * JetStream1.1: Copied from Websites/browserbench.org/JetStr

[webkit-changes] [243100] trunk

Title: [243100] trunk Revision 243100 Author sbar...@apple.com Date 2019-03-18 14:17:55 -0700 (Mon, 18 Mar 2019) Log Message Add a plan file for JetStream 2 https://bugs.webkit.org/show_bug.cgi?id=190734 Reviewed by Mark Lam. PerformanceTests: Make the delay when starting via run-bench

[webkit-changes] [242989] trunk

Title: [242989] trunk Revision 242989 Author sbar...@apple.com Date 2019-03-14 21:31:52 -0700 (Thu, 14 Mar 2019) Log Message We can't remove code after ForceOSRExit until after FixupPhase https://bugs.webkit.org/show_bug.cgi?id=186916 Reviewed by Yusuke Suzuki. JSTests: * stress/movhi

[webkit-changes] [242982] trunk/Source/JavaScriptCore

Title: [242982] trunk/Source/_javascript_Core Revision 242982 Author sbar...@apple.com Date 2019-03-14 18:28:49 -0700 (Thu, 14 Mar 2019) Log Message JSScript should have an accessor saying if it's cached or not https://bugs.webkit.org/show_bug.cgi?id=195783 Reviewed by Michael Saboff. *

[webkit-changes] [242980] trunk/Source/JavaScriptCore

Title: [242980] trunk/Source/_javascript_Core Revision 242980 Author sbar...@apple.com Date 2019-03-14 18:10:41 -0700 (Thu, 14 Mar 2019) Log Message Remove retain cycle from JSScript and also don't keep the cache file descriptor open so many JSScripts can be cached in a loop https://bugs.

[webkit-changes] [242954] trunk

Title: [242954] trunk Revision 242954 Author sbar...@apple.com Date 2019-03-14 12:27:28 -0700 (Thu, 14 Mar 2019) Log Message Fixup uses KnownInt32 incorrectly in some nodes https://bugs.webkit.org/show_bug.cgi?id=195279 Reviewed by Yusuke Suzuki. JSTests: * stress/known-int32-cant-be-

[webkit-changes] [242658] trunk/Tools

Title: [242658] trunk/Tools Revision 242658 Author sbar...@apple.com Date 2019-03-08 15:20:15 -0800 (Fri, 08 Mar 2019) Log Message Add a compare-results script to compare benchmark results https://bugs.webkit.org/show_bug.cgi?id=195486 Reviewed by Geoffrey Garen. This patch adds a scri

[webkit-changes] [242613] trunk/Source/JavaScriptCore

Title: [242613] trunk/Source/_javascript_Core Revision 242613 Author sbar...@apple.com Date 2019-03-07 14:41:17 -0800 (Thu, 07 Mar 2019) Log Message CompactVariableMap::Handle's copy operator= leaks the previous data https://bugs.webkit.org/show_bug.cgi?id=195398 Reviewed by Yusuke Suzuk

[webkit-changes] [242585] trunk/Source/JavaScriptCore

Title: [242585] trunk/Source/_javascript_Core Revision 242585 Author sbar...@apple.com Date 2019-03-06 18:03:39 -0800 (Wed, 06 Mar 2019) Log Message JSScript should keep the cache file locked for the duration of its existence and should truncate the cache when it is out of date https://bu

[webkit-changes] [242569] trunk

Title: [242569] trunk Revision 242569 Author sbar...@apple.com Date 2019-03-06 14:57:08 -0800 (Wed, 06 Mar 2019) Log Message Air::reportUsedRegisters must padInterference https://bugs.webkit.org/show_bug.cgi?id=195303 Reviewed by Keith Miller. JSTests: * stress/optional-def-arg-width-

[webkit-changes] [242519] trunk

Title: [242519] trunk Revision 242519 Author sbar...@apple.com Date 2019-03-05 16:20:07 -0800 (Tue, 05 Mar 2019) Log Message op_switch_char broken for rope strings after JSRopeString layout rewrite https://bugs.webkit.org/show_bug.cgi?id=195339 Reviewed by Yusuke Suzuki. JSTests: * st

[webkit-changes] [242373] trunk/PerformanceTests

Title: [242373] trunk/PerformanceTests Revision 242373 Author sbar...@apple.com Date 2019-03-04 12:33:57 -0800 (Mon, 04 Mar 2019) Log Message Add a detailed summary page for JetStream 2 https://bugs.webkit.org/show_bug.cgi?id=195014 Rubber-stamped by Darin Adler. * JetStream2/JetStream.

[webkit-changes] [242301] trunk/Source/JavaScriptCore

Title: [242301] trunk/Source/_javascript_Core Revision 242301 Author sbar...@apple.com Date 2019-03-01 17:33:17 -0800 (Fri, 01 Mar 2019) Log Message Create SPI to crash if a JSC VM is created https://bugs.webkit.org/show_bug.cgi?id=195231 Reviewed by Mark Lam. * API/JSVirtualMachine.mm

[webkit-changes] [242247] trunk/Source/JavaScriptCore

Title: [242247] trunk/Source/_javascript_Core Revision 242247 Author sbar...@apple.com Date 2019-02-28 17:44:22 -0800 (Thu, 28 Feb 2019) Log Message Unreviewed. Attempt windows build fix after r242239. * runtime/CachedTypes.cpp: (JSC::tagFromSourceCodeType): Modified Paths trunk/Source

[webkit-changes] [242239] trunk/Source/JavaScriptCore

Title: [242239] trunk/Source/_javascript_Core Revision 242239 Author sbar...@apple.com Date 2019-02-28 15:58:12 -0800 (Thu, 28 Feb 2019) Log Message Make JSScript:cacheBytecodeWithError update the cache when the script changes https://bugs.webkit.org/show_bug.cgi?id=194912 Reviewed by Ma

[webkit-changes] [242068] trunk/Source/JavaScriptCore

Title: [242068] trunk/Source/_javascript_Core Revision 242068 Author sbar...@apple.com Date 2019-02-25 19:16:44 -0800 (Mon, 25 Feb 2019) Log Message testb3 and testair should test O0/O1/O2 https://bugs.webkit.org/show_bug.cgi?id=194637 Reviewed by Mark Lam. This patch makes it so that w

[webkit-changes] [241929] trunk/Source/JavaScriptCore

Title: [241929] trunk/Source/_javascript_Core Revision 241929 Author sbar...@apple.com Date 2019-02-21 20:21:54 -0800 (Thu, 21 Feb 2019) Log Message Update JSScript SPI based on feedback https://bugs.webkit.org/show_bug.cgi?id=194517 Reviewed by Keith Miller. This patch updates the JSSc

[webkit-changes] [241657] trunk/Source/JavaScriptCore

Title: [241657] trunk/Source/_javascript_Core Revision 241657 Author sbar...@apple.com Date 2019-02-17 20:40:14 -0800 (Sun, 17 Feb 2019) Log Message WasmB3IRGenerator models some effects incorrectly https://bugs.webkit.org/show_bug.cgi?id=194038 Reviewed by Keith Miller. * wasm/WasmB3IR

[webkit-changes] [241655] trunk

Title: [241655] trunk Revision 241655 Author sbar...@apple.com Date 2019-02-17 17:27:22 -0800 (Sun, 17 Feb 2019) Log Message Deadlock when adding a Structure property transition and then doing incremental marking https://bugs.webkit.org/show_bug.cgi?id=194767 Reviewed by Mark Lam. JSTes

[webkit-changes] [241579] trunk

Title: [241579] trunk Revision 241579 Author sbar...@apple.com Date 2019-02-15 00:26:17 -0800 (Fri, 15 Feb 2019) Log Message [WebAssembly] Write a new register allocator for Air O0 and make BBQ use it https://bugs.webkit.org/show_bug.cgi?id=194036 Reviewed by Yusuke Suzuki. JSTests: *

[webkit-changes] [241577] trunk/Source/JavaScriptCore

Title: [241577] trunk/Source/_javascript_Core Revision 241577 Author sbar...@apple.com Date 2019-02-14 22:37:50 -0800 (Thu, 14 Feb 2019) Log Message lowerStackArgs should lower Lea32/64 on ARM64 to Add https://bugs.webkit.org/show_bug.cgi?id=194656 Reviewed by Yusuke Suzuki. On arm64, L

[webkit-changes] [241571] trunk

Title: [241571] trunk Revision 241571 Author sbar...@apple.com Date 2019-02-14 16:06:30 -0800 (Thu, 14 Feb 2019) Log Message Cache the results of BytecodeGenerator::getVariablesUnderTDZ https://bugs.webkit.org/show_bug.cgi?id=194583 Reviewed by Yusuke Suzuki. JSTests: * microbenchmark

[webkit-changes] [241475] trunk/Source/JavaScriptCore

Title: [241475] trunk/Source/_javascript_Core Revision 241475 Author sbar...@apple.com Date 2019-02-13 14:36:36 -0800 (Wed, 13 Feb 2019) Log Message AirIRGenerator::addSwitch switch patchpoint needs to model clobbering the scratch register https://bugs.webkit.org/show_bug.cgi?id=194610 R

[webkit-changes] [241340] trunk/Source/JavaScriptCore

Title: [241340] trunk/Source/_javascript_Core Revision 241340 Author sbar...@apple.com Date 2019-02-12 22:34:44 -0800 (Tue, 12 Feb 2019) Log Message JSScript needs to retain its cache path NSURL* https://bugs.webkit.org/show_bug.cgi?id=194577 Reviewed by Tim Horton. * API/JSScript.mm: (

[webkit-changes] [241254] trunk/Source/JavaScriptCore

Title: [241254] trunk/Source/_javascript_Core Revision 241254 Author sbar...@apple.com Date 2019-02-10 19:25:52 -0800 (Sun, 10 Feb 2019) Log Message BBQ-Air: Emit better code for switch https://bugs.webkit.org/show_bug.cgi?id=194053 Reviewed by Yusuke Suzuki. Instead of emitting a linea

[webkit-changes] [241228] trunk

Title: [241228] trunk Revision 241228 Author sbar...@apple.com Date 2019-02-08 19:05:40 -0800 (Fri, 08 Feb 2019) Log Message Nodes that rely on being dominated by CheckInBounds should have a child edge to it https://bugs.webkit.org/show_bug.cgi?id=194334 Reviewed by Mark Lam. JSTests:

[webkit-changes] [241193] trunk/PerformanceTests

Title: [241193] trunk/PerformanceTests Revision 241193 Author sbar...@apple.com Date 2019-02-08 01:54:50 -0800 (Fri, 08 Feb 2019) Log Message Update JetStream2 CLI to not print "ms" since we now just print the score values https://bugs.webkit.org/show_bug.cgi?id=193981 Reviewed by Yusuke

[webkit-changes] [240448] trunk/Source/JavaScriptCore

Title: [240448] trunk/Source/_javascript_Core Revision 240448 Author sbar...@apple.com Date 2019-01-24 14:07:33 -0800 (Thu, 24 Jan 2019) Log Message Update ARM64EHash https://bugs.webkit.org/show_bug.cgi?id=193776 Reviewed by Mark Lam. See radar for details. * assembler/AssemblerBuffe

[webkit-changes] [240447] trunk

Title: [240447] trunk Revision 240447 Author sbar...@apple.com Date 2019-01-24 13:30:55 -0800 (Thu, 24 Jan 2019) Log Message Object Allocation Sinking phase can move a node that walks the stack into a place where the InlineCallFrame is no longer valid https://bugs.webkit.org/show_bug.cgi?

[webkit-changes] [240269] trunk

Title: [240269] trunk Revision 240269 Author sbar...@apple.com Date 2019-01-22 11:41:10 -0800 (Tue, 22 Jan 2019) Log Message Unreviewed. Rollout r240223. It regressed JetStream2 by 1%. JSTests: * stress/arith-abs-to-arith-negate-range-optimizaton.js: (testUncheckedBetweenIntMinInclusive

[webkit-changes] [240229] trunk

Title: [240229] trunk Revision 240229 Author sbar...@apple.com Date 2019-01-20 22:13:08 -0800 (Sun, 20 Jan 2019) Log Message DFG: When inlining DataView set* intrinsics we need to set undefined as our result https://bugs.webkit.org/show_bug.cgi?id=193644 Reviewed by Yusuke Suzuki. JSTe

[webkit-changes] [240223] trunk

Title: [240223] trunk Revision 240223 Author sbar...@apple.com Date 2019-01-20 19:54:17 -0800 (Sun, 20 Jan 2019) Log Message JSTests: MovHint must merge NodeBytecodeUsesAsValue for its child https://bugs.webkit.org/show_bug.cgi?id=186916 Reviewed by Yusuke Suzuki. * stress/arith-abs-to

[webkit-changes] [240192] trunk/PerformanceTests

Title: [240192] trunk/PerformanceTests Revision 240192 Author sbar...@apple.com Date 2019-01-18 19:05:09 -0800 (Fri, 18 Jan 2019) Log Message Use scores everywhere in JetStream2's UI https://bugs.webkit.org/show_bug.cgi?id=193593 Reviewed by Keith Miller. * JetStream2/JetStreamDriver.js

[webkit-changes] [240114] trunk

Title: [240114] trunk Revision 240114 Author sbar...@apple.com Date 2019-01-17 09:50:27 -0800 (Thu, 17 Jan 2019) Log Message StringObjectUse should not be a structure check for the original string object structure https://bugs.webkit.org/show_bug.cgi?id=193483 Reviewed by Yusuke Suzuki.

[webkit-changes] [239882] trunk

Title: [239882] trunk Revision 239882 Author sbar...@apple.com Date 2019-01-11 16:26:06 -0800 (Fri, 11 Jan 2019) Log Message DFG combined liveness can be wrong for terminal basic blocks https://bugs.webkit.org/show_bug.cgi?id=193304 Reviewed by Yusuke Suzuki. JSTests: * stress/dfg-com

[webkit-changes] [239810] trunk/Websites/browserbench.org

Title: [239810] trunk/Websites/browserbench.org Revision 239810 Author sbar...@apple.com Date 2019-01-09 17:38:56 -0800 (Wed, 09 Jan 2019) Log Message Merge the latest version of JetStream2.0 to browserbench.org. Rubber-stamped by Ryosuke Niwa. * JetStream2.0: Copied from PerformanceTes

[webkit-changes] [239364] trunk/Source/JavaScriptCore

Title: [239364] trunk/Source/_javascript_Core Revision 239364 Author sbar...@apple.com Date 2018-12-18 18:27:00 -0800 (Tue, 18 Dec 2018) Log Message Update ARM64EHash https://bugs.webkit.org/show_bug.cgi?id=192823 Reviewed by Mark Lam. * assembler/ARM64Assembler.h: (JSC::ARM64Assembler

[webkit-changes] [239340] trunk/Source/JavaScriptCore

Title: [239340] trunk/Source/_javascript_Core Revision 239340 Author sbar...@apple.com Date 2018-12-18 10:40:28 -0800 (Tue, 18 Dec 2018) Log Message Unreviewed. Appease a build error where we weren't using a variable defined in an "if" * dfg/DFGAbstractInterpreterInlines.h: (JSC::DFG::Ab

[webkit-changes] [239322] trunk/Source

Title: [239322] trunk/Source Revision 239322 Author sbar...@apple.com Date 2018-12-17 22:33:58 -0800 (Mon, 17 Dec 2018) Log Message Enable HTTP and HTTPS proxies on iOS and make it a property of the NSURLSession https://bugs.webkit.org/show_bug.cgi?id=192374 Reviewed by Alex Christensen

[webkit-changes] [239195] trunk/Source

Title: [239195] trunk/Source Revision 239195 Author sbar...@apple.com Date 2018-12-13 20:05:41 -0800 (Thu, 13 Dec 2018) Log Message The JSC shell should listen for memory pressure events and respond to them https://bugs.webkit.org/show_bug.cgi?id=192647 Reviewed by Keith Miller. Source/

[webkit-changes] [239023] trunk/Source

Title: [239023] trunk/Source Revision 239023 Author sbar...@apple.com Date 2018-12-09 17:56:16 -0800 (Sun, 09 Dec 2018) Log Message Enable HTTP and HTTPS proxies on iOS and make it a property of the NSURLSession https://bugs.webkit.org/show_bug.cgi?id=192374 Reviewed by Alex Christensen

[webkit-changes] [238969] trunk

Title: [238969] trunk Revision 238969 Author sbar...@apple.com Date 2018-12-07 14:35:05 -0800 (Fri, 07 Dec 2018) Log Message WKWebProcessPlugInLoadDelegate should have API for saying which rendering events it wants to listen for https://bugs.webkit.org/show_bug.cgi?id=192473 Reviewed by

[webkit-changes] [238596] trunk

Title: [238596] trunk Revision 238596 Author sbar...@apple.com Date 2018-11-27 18:03:20 -0800 (Tue, 27 Nov 2018) Log Message r238510 broke scopes of size zero https://bugs.webkit.org/show_bug.cgi?id=192033 Reviewed by Keith Miller. JSTests: * stress/r238510-bad-loop.js: Added. (foo):

[webkit-changes] [238511] trunk

Title: [238511] trunk Revision 238511 Author sbar...@apple.com Date 2018-11-26 12:29:33 -0800 (Mon, 26 Nov 2018) Log Message InPlaceAbstractState::endBasicBlock rule for SetLocal should filter the value based on the flush format https://bugs.webkit.org/show_bug.cgi?id=191956 Reviewed by

[webkit-changes] [238510] trunk

Title: [238510] trunk Revision 238510 Author sbar...@apple.com Date 2018-11-26 12:14:41 -0800 (Mon, 26 Nov 2018) Log Message Object allocation sinking phase needs to iterate each scope offset instead of just iterating the symbol table's hashmap when handling an activation https://bugs.web

[webkit-changes] [238437] trunk

Title: [238437] trunk Revision 238437 Author sbar...@apple.com Date 2018-11-21 19:43:30 -0800 (Wed, 21 Nov 2018) Log Message DFGSpeculativeJIT should not &= exitOK with mayExit(node) https://bugs.webkit.org/show_bug.cgi?id=191897 Reviewed by Mark Lam. JSTests: * stress/exitok-is-not-t

[webkit-changes] [238436] trunk

Title: [238436] trunk Revision 238436 Author sbar...@apple.com Date 2018-11-21 19:39:54 -0800 (Wed, 21 Nov 2018) Log Message Fix assertion in KnownCellUse inside SpeculativeJIT::speculate https://bugs.webkit.org/show_bug.cgi?id=191895 Reviewed by Mark Lam. JSTests: * stress/known-cell

[webkit-changes] [238411] trunk

Title: [238411] trunk Revision 238411 Author sbar...@apple.com Date 2018-11-20 21:15:31 -0800 (Tue, 20 Nov 2018) Log Message Merging an IC variant may lead to the IC status containing overlapping structure sets https://bugs.webkit.org/show_bug.cgi?id=191869 Reviewed by Mark Lam. JSTest

[webkit-changes] [238297] trunk

Title: [238297] trunk Revision 238297 Author sbar...@apple.com Date 2018-11-16 12:42:51 -0800 (Fri, 16 Nov 2018) Log Message KnownCellUse should also have SpecCellCheck as its type filter https://bugs.webkit.org/show_bug.cgi?id=191729 Reviewed by Filip Pizlo. JSTests: * stress/known-c

[webkit-changes] [238162] trunk

Title: [238162] trunk Revision 238162 Author sbar...@apple.com Date 2018-11-13 20:57:33 -0800 (Tue, 13 Nov 2018) Log Message TypeProfileLog::processLogEntries should stash away any pending exceptions and re-apply them to the VM https://bugs.webkit.org/show_bug.cgi?id=191600 Reviewed by M

[webkit-changes] [238163] trunk/Source/JavaScriptCore

Title: [238163] trunk/Source/_javascript_Core Revision 238163 Author sbar...@apple.com Date 2018-11-13 20:58:17 -0800 (Tue, 13 Nov 2018) Log Message ProxyObject should check for VMInquiry and return early before throwing a stack overflow exception https://bugs.webkit.org/show_bug.cgi?id=1

[webkit-changes] [238109] trunk/Source/JavaScriptCore

Title: [238109] trunk/Source/_javascript_Core Revision 238109 Author sbar...@apple.com Date 2018-11-12 14:10:38 -0800 (Mon, 12 Nov 2018) Log Message Unreviewed. Rollout 238026: It caused ~8% JetStream 2 regressions on some iOS devices https://bugs.webkit.org/show_bug.cgi?id=191555 * byt

[webkit-changes] [237297] trunk

Title: [237297] trunk Revision 237297 Author sbar...@apple.com Date 2018-10-19 13:03:54 -0700 (Fri, 19 Oct 2018) Log Message vmCall should check if we exit before emitting an OSR exit due to exceptions https://bugs.webkit.org/show_bug.cgi?id=190740 Reviewed by Mark Lam. JSTests: * str

[webkit-changes] [237136] trunk

Title: [237136] trunk Revision 237136 Author sbar...@apple.com Date 2018-10-15 12:47:09 -0700 (Mon, 15 Oct 2018) Log Message Emit fjcvtzs on ARM64E on Darwin https://bugs.webkit.org/show_bug.cgi?id=184023 Reviewed by Yusuke Suzuki and Filip Pizlo. JSTests: * stress/double-to-int32-NaN.

[webkit-changes] [237129] trunk

Title: [237129] trunk Revision 237129 Author sbar...@apple.com Date 2018-10-15 12:14:42 -0700 (Mon, 15 Oct 2018) Log Message JSArray::shiftCountWithArrayStorage is wrong when an array has holes https://bugs.webkit.org/show_bug.cgi?id=190262 Reviewed by Mark Lam. JSTests: * stress/arra

[webkit-changes] [236824] trunk

Title: [236824] trunk Revision 236824 Author sbar...@apple.com Date 2018-10-03 20:29:57 -0700 (Wed, 03 Oct 2018) Log Message lowXYZ in FTLLower should always filter the type of the incoming edge https://bugs.webkit.org/show_bug.cgi?id=189939 Reviewed by Michael Saboff. JSTests: * stre

[webkit-changes] [236589] trunk

Title: [236589] trunk Revision 236589 Author sbar...@apple.com Date 2018-09-27 22:34:38 -0700 (Thu, 27 Sep 2018) Log Message Verify the contents of AssemblerBuffer on arm64e https://bugs.webkit.org/show_bug.cgi?id=190057 Reviewed by Mark Lam. JSTests: * stress/regress-189132.js: Sour

[webkit-changes] [236588] branches/safari-606-branch/Source/JavaScriptCore

Title: [236588] branches/safari-606-branch/Source/_javascript_Core Revision 236588 Author sbar...@apple.com Date 2018-09-27 22:07:15 -0700 (Thu, 27 Sep 2018) Log Message Cherry-pick r236585. rdar://problem/44848947 DFG::OSRExit::m_patchableCodeOffset should not be an int https://

[webkit-changes] [236586] branches/safari-606-branch/Source/JavaScriptCore

Title: [236586] branches/safari-606-branch/Source/_javascript_Core Revision 236586 Author sbar...@apple.com Date 2018-09-27 21:58:56 -0700 (Thu, 27 Sep 2018) Log Message Cherry-pick r236584. rdar://problem/44848936 Don't use int offsets in StructureStubInfo https://bugs.webkit.org/

[webkit-changes] [236585] trunk/Source/JavaScriptCore

Title: [236585] trunk/Source/_javascript_Core Revision 236585 Author sbar...@apple.com Date 2018-09-27 21:46:50 -0700 (Thu, 27 Sep 2018) Log Message DFG::OSRExit::m_patchableCodeOffset should not be an int https://bugs.webkit.org/show_bug.cgi?id=190066 Reviewed by Mark Lam. * dfg/DFGJI

[webkit-changes] [236584] trunk/Source/JavaScriptCore

Title: [236584] trunk/Source/_javascript_Core Revision 236584 Author sbar...@apple.com Date 2018-09-27 21:27:10 -0700 (Thu, 27 Sep 2018) Log Message Don't use int offsets in StructureStubInfo https://bugs.webkit.org/show_bug.cgi?id=190064 Reviewed by Mark Lam. * bytecode/InlineAccess.c

[webkit-changes] [236495] trunk

Title: [236495] trunk Revision 236495 Author sbar...@apple.com Date 2018-09-25 20:14:09 -0700 (Tue, 25 Sep 2018) Log Message Calls to baselineCodeBlockForOriginAndBaselineCodeBlock in operationMaterializeObjectInOSR should actually pass in the baseline CodeBlock https://bugs.webkit.org/sh

[webkit-changes] [236437] trunk

Title: [236437] trunk Revision 236437 Author sbar...@apple.com Date 2018-09-24 16:05:54 -0700 (Mon, 24 Sep 2018) Log Message Array.prototype.indexOf fast path needs to ensure the length is still valid after performing effects https://bugs.webkit.org/show_bug.cgi?id=189922 Reviewed by Ma

[webkit-changes] [236421] trunk

Title: [236421] trunk Revision 236421 Author sbar...@apple.com Date 2018-09-24 13:12:26 -0700 (Mon, 24 Sep 2018) Log Message ArgumentsEliminationPhase should snip basic blocks after proven OSR exits https://bugs.webkit.org/show_bug.cgi?id=189682 Reviewed by Mark Lam. JSTests: * stress

<    1   2   3   4   5   6   7   8   9   10   >