[webkit-changes] [236382] trunk

Title: [236382] trunk Revision 236382 Author sbar...@apple.com Date 2018-09-22 00:28:39 -0700 (Sat, 22 Sep 2018) Log Message The sampling should not use Strong in its machineLocation field https://bugs.webkit.org/show_bug.cgi?id=189319 Reviewed by Filip Pizlo. JSTests: * stress/samplin

[webkit-changes] [236224] trunk/Source/JavaScriptCore

Title: [236224] trunk/Source/_javascript_Core Revision 236224 Author sbar...@apple.com Date 2018-09-19 14:09:14 -0700 (Wed, 19 Sep 2018) Log Message CheckStructureOrEmpty should pass in a tempGPR to emitStructureCheck since it may jump over that code https://bugs.webkit.org/show_bug.cgi?i

[webkit-changes] [236223] trunk

Title: [236223] trunk Revision 236223 Author sbar...@apple.com Date 2018-09-19 14:00:08 -0700 (Wed, 19 Sep 2018) Log Message AI rule for MultiPutByOffset executes its effects in the wrong order https://bugs.webkit.org/show_bug.cgi?id=189757 Reviewed by Michael Saboff. JSTests: * stres

[webkit-changes] [236089] trunk

Title: [236089] trunk Revision 236089 Author sbar...@apple.com Date 2018-09-17 15:21:32 -0700 (Mon, 17 Sep 2018) Log Message We must convert ProfileType to CheckStructureOrEmpty instead of CheckStructure https://bugs.webkit.org/show_bug.cgi?id=189676 Reviewed by Michael Saboff. JSTests

[webkit-changes] [236022] trunk

Title: [236022] trunk Revision 236022 Author sbar...@apple.com Date 2018-09-14 16:47:55 -0700 (Fri, 14 Sep 2018) Log Message Don't dump OSRAvailabilityData in Graph::dump because a stale Availability may point to a Node that is already freed https://bugs.webkit.org/show_bug.cgi?id=189628

[webkit-changes] [235538] trunk

Title: [235538] trunk Revision 235538 Author sbar...@apple.com Date 2018-08-31 00:45:02 -0700 (Fri, 31 Aug 2018) Log Message convertToRegExpMatchFastGlobal must use KnownString as the child use kind https://bugs.webkit.org/show_bug.cgi?id=189173 Reviewed by Michael Saboff. JSTests: *

[webkit-changes] [235527] trunk/Source/JavaScriptCore

Title: [235527] trunk/Source/_javascript_Core Revision 235527 Author sbar...@apple.com Date 2018-08-30 15:37:34 -0700 (Thu, 30 Aug 2018) Log Message Switch int8_t to GPRReg in StructureStubInfo because sizeof(GPRReg) == sizeof(int8_t) https://bugs.webkit.org/show_bug.cgi?id=189166 Review

[webkit-changes] [235517] trunk/Source/JavaScriptCore

Title: [235517] trunk/Source/_javascript_Core Revision 235517 Author sbar...@apple.com Date 2018-08-30 12:46:56 -0700 (Thu, 30 Aug 2018) Log Message InlineAccess should do StringLength https://bugs.webkit.org/show_bug.cgi?id=158911 Reviewed by Yusuke Suzuki. This patch extends InlineAcc

[webkit-changes] [235515] trunk

Title: [235515] trunk Revision 235515 Author sbar...@apple.com Date 2018-08-30 12:27:56 -0700 (Thu, 30 Aug 2018) Log Message CSE DataViewGet* DFG nodes https://bugs.webkit.org/show_bug.cgi?id=188768 Reviewed by Yusuke Suzuki. JSTests: * microbenchmarks/dataview-cse.js: Added. (assert):

[webkit-changes] [235261] trunk/Source

Title: [235261] trunk/Source Revision 235261 Author sbar...@apple.com Date 2018-08-23 16:57:03 -0700 (Thu, 23 Aug 2018) Log Message JSRunLoopTimer may run part of a member function after it's destroyed https://bugs.webkit.org/show_bug.cgi?id=188426 Reviewed by Mark Lam. Source/_javascri

[webkit-changes] [235189] trunk/JSTests

Title: [235189] trunk/JSTests Revision 235189 Author sbar...@apple.com Date 2018-08-22 11:53:27 -0700 (Wed, 22 Aug 2018) Log Message Make data-view-access.js run less time to prevent timeouts on 32-bit * microbenchmarks/data-view-accesses.js: Modified Paths trunk/JSTests/ChangeLog trun

[webkit-changes] [235107] trunk/Source

Title: [235107] trunk/Source Revision 235107 Author sbar...@apple.com Date 2018-08-21 00:27:26 -0700 (Tue, 21 Aug 2018) Log Message JSRunLoopTimer may run part of a member function after it's destroyed https://bugs.webkit.org/show_bug.cgi?id=188426 Reviewed by Mark Lam. Source/_javascri

[webkit-changes] [235106] trunk

Title: [235106] trunk Revision 235106 Author sbar...@apple.com Date 2018-08-20 23:05:21 -0700 (Mon, 20 Aug 2018) Log Message Inline DataView accesses into DFG/FTL https://bugs.webkit.org/show_bug.cgi?id=188573 Reviewed by Michael Saboff. JSTests: * microbenchmarks/data-view-accesses-2

[webkit-changes] [235007] trunk

Title: [235007] trunk Revision 235007 Author sbar...@apple.com Date 2018-08-17 19:05:09 -0700 (Fri, 17 Aug 2018) Log Message intersectionOfPastValuesAtHead must filter values after they've observed an invalidation point https://bugs.webkit.org/show_bug.cgi?id=188707 Reviewed by Mark Lam

[webkit-changes] [234879] trunk

Title: [234879] trunk Revision 234879 Author sbar...@apple.com Date 2018-08-14 21:08:08 -0700 (Tue, 14 Aug 2018) Log Message HashMap, V> asserts when V is not zero for its empty value https://bugs.webkit.org/show_bug.cgi?id=188582 Reviewed by Sam Weinig. Source/_javascript_Core: * runt

[webkit-changes] [234733] trunk/Source

Title: [234733] trunk/Source Revision 234733 Author sbar...@apple.com Date 2018-08-09 13:13:27 -0700 (Thu, 09 Aug 2018) Log Message memoryFootprint should return size_t not optional https://bugs.webkit.org/show_bug.cgi?id=188444 Reviewed by Simon Fraser. Source/WebCore: * page/cocoa/Re

[webkit-changes] [234686] trunk/Source/WebCore

Title: [234686] trunk/Source/WebCore Revision 234686 Author sbar...@apple.com Date 2018-08-07 21:41:29 -0700 (Tue, 07 Aug 2018) Log Message ResourceUsageOverlay should use physical footprint for its "Footprint" label https://bugs.webkit.org/show_bug.cgi?id=188395 Reviewed by Simon Fraser

[webkit-changes] [234576] trunk/Source/JavaScriptCore

Title: [234576] trunk/Source/_javascript_Core Revision 234576 Author sbar...@apple.com Date 2018-08-03 23:27:23 -0700 (Fri, 03 Aug 2018) Log Message Give the `jsc` shell the JIT entitlement https://bugs.webkit.org/show_bug.cgi?id=188324 Reviewed by Dan Bernstein. This should help us in

[webkit-changes] [234528] trunk/Source

Title: [234528] trunk/Source Revision 234528 Author sbar...@apple.com Date 2018-08-02 17:14:11 -0700 (Thu, 02 Aug 2018) Log Message Source/_javascript_Core: Reading instructionPointer from PlatformRegisters may fail when using pointer profiling https://bugs.webkit.org/show_bug.cgi?id=1882

[webkit-changes] [234328] trunk/Source/bmalloc

Title: [234328] trunk/Source/bmalloc Revision 234328 Author sbar...@apple.com Date 2018-07-27 14:20:22 -0700 (Fri, 27 Jul 2018) Log Message Explicitly handle memlimit_active < 0 https://bugs.webkit.org/show_bug.cgi?id=188125 Reviewed by Mark Lam. This may come up during development when

[webkit-changes] [234326] trunk/Source

Title: [234326] trunk/Source Revision 234326 Author sbar...@apple.com Date 2018-07-27 13:35:05 -0700 (Fri, 27 Jul 2018) Log Message Use SPI to compute the jetsam limit on iOS instead of hardcoding 840MB https://bugs.webkit.org/show_bug.cgi?id=188091 Reviewed by Simon Fraser. Source/bma

[webkit-changes] [234185] trunk/Source/bmalloc

Title: [234185] trunk/Source/bmalloc Revision 234185 Author sbar...@apple.com Date 2018-07-24 19:09:46 -0700 (Tue, 24 Jul 2018) Log Message Revert back to using phys_footprint to calculate isUnderMemoryPressure() https://bugs.webkit.org/show_bug.cgi?id=187919 Reviewed by Simon Fraser.

[webkit-changes] [234171] trunk/Source/JavaScriptCore

Title: [234171] trunk/Source/_javascript_Core Revision 234171 Author sbar...@apple.com Date 2018-07-24 14:42:20 -0700 (Tue, 24 Jul 2018) Log Message Make VM::canUseJIT an inlined function https://bugs.webkit.org/show_bug.cgi?id=187583 Reviewed by Mark Lam. We know the answer to this que

[webkit-changes] [234128] trunk

Title: [234128] trunk Revision 234128 Author sbar...@apple.com Date 2018-07-23 18:32:20 -0700 (Mon, 23 Jul 2018) Log Message need to didFoldClobberWorld when we constant fold GetByVal https://bugs.webkit.org/show_bug.cgi?id=187917 Reviewed by Yusuke Suzuki. JSTests: * stress/get-by-va

[webkit-changes] [234060] trunk

Title: [234060] trunk Revision 234060 Author sbar...@apple.com Date 2018-07-20 12:16:29 -0700 (Fri, 20 Jul 2018) Log Message CompareEq should be using KnownOtherUse instead of OtherUse https://bugs.webkit.org/show_bug.cgi?id=186814 Reviewed by Filip Pizlo. JSTests: * stress/compare-eq

[webkit-changes] [234022] trunk/Source/JavaScriptCore

Title: [234022] trunk/Source/_javascript_Core Revision 234022 Author sbar...@apple.com Date 2018-07-19 21:47:51 -0700 (Thu, 19 Jul 2018) Log Message Conservatively make Object.assign's fast path do a two phase protocol of loading everything then storing everything to try to prevent a cras

[webkit-changes] [233701] trunk/LayoutTests

Title: [233701] trunk/LayoutTests Revision 233701 Author sbar...@apple.com Date 2018-07-10 15:00:43 -0700 (Tue, 10 Jul 2018) Log Message Layout Test editing/selection/navigation-clears-editor-state.html is flaky https://bugs.webkit.org/show_bug.cgi?id=187389 Rubber-stamped by Ryosuke Ni

[webkit-changes] [233581] trunk/LayoutTests

Title: [233581] trunk/LayoutTests Revision 233581 Author sbar...@apple.com Date 2018-07-06 10:44:35 -0700 (Fri, 06 Jul 2018) Log Message Layout Test editing/selection/navigation-clears-editor-state.html is flaky https://bugs.webkit.org/show_bug.cgi?id=187389 Reviewed by Mark Lam. * edit

[webkit-changes] [233555] trunk/LayoutTests

Title: [233555] trunk/LayoutTests Revision 233555 Author sbar...@apple.com Date 2018-07-05 18:35:31 -0700 (Thu, 05 Jul 2018) Log Message [mac-wk1] Layout Test editing/selection/navigation-clears-editor-state.html is a flaky failure https://bugs.webkit.org/show_bug.cgi?id=187309 Reviewed

[webkit-changes] [233540] trunk/Source/JavaScriptCore

Title: [233540] trunk/Source/_javascript_Core Revision 233540 Author sbar...@apple.com Date 2018-07-05 14:35:09 -0700 (Thu, 05 Jul 2018) Log Message ProgramExecutable may be collected as we checkSyntax on it https://bugs.webkit.org/show_bug.cgi?id=187359 Reviewed by Mark Lam. The bug w

[webkit-changes] [233383] trunk/Source/JavaScriptCore

Title: [233383] trunk/Source/_javascript_Core Revision 233383 Author sbar...@apple.com Date 2018-06-29 17:55:57 -0700 (Fri, 29 Jun 2018) Log Message Unreviewed. Try to fix Windows build after r233377 * builtins/BuiltinExecutables.cpp: (JSC::BuiltinExecutables::createExecutable): Modifie

[webkit-changes] [233378] trunk/Source/JavaScriptCore

Title: [233378] trunk/Source/_javascript_Core Revision 233378 Author sbar...@apple.com Date 2018-06-29 17:05:36 -0700 (Fri, 29 Jun 2018) Log Message Don't use tracePoints in JS/Wasm entry https://bugs.webkit.org/show_bug.cgi?id=187196 Reviewed by Mark Lam. This puts VM entry and Wasm en

[webkit-changes] [233377] trunk

Title: [233377] trunk Revision 233377 Author sbar...@apple.com Date 2018-06-29 16:40:25 -0700 (Fri, 29 Jun 2018) Log Message We shouldn't recurse into the parser when gathering metadata about various function offsets https://bugs.webkit.org/show_bug.cgi?id=184074 Reviewed by Mark Lam.

[webkit-changes] [233291] trunk/Source/JavaScriptCore

Title: [233291] trunk/Source/_javascript_Core Revision 233291 Author sbar...@apple.com Date 2018-06-27 17:18:50 -0700 (Wed, 27 Jun 2018) Log Message Add some more register state information when we crash in repatchPutById https://bugs.webkit.org/show_bug.cgi?id=187112 Reviewed by Mark La

[webkit-changes] [233236] trunk

Title: [233236] trunk Revision 233236 Author sbar...@apple.com Date 2018-06-26 18:08:25 -0700 (Tue, 26 Jun 2018) Log Message JSImmutableButterfly can't be allocated from a subspace with HeapCell::Kind::Auxiliary https://bugs.webkit.org/show_bug.cgi?id=186878 Reviewed by Filip Pizlo. So

[webkit-changes] [233216] trunk/Source/bmalloc

Title: [233216] trunk/Source/bmalloc Revision 233216 Author sbar...@apple.com Date 2018-06-26 12:39:17 -0700 (Tue, 26 Jun 2018) Log Message Unreviewed followup. Fix the watchos build after r233192. This patch also correct the changelog entry below to have the correct bug and title info.

[webkit-changes] [233192] trunk/Source/bmalloc

Title: [233192] trunk/Source/bmalloc Revision 233192 Author sbar...@apple.com Date 2018-06-26 00:38:06 -0700 (Tue, 26 Jun 2018) Log Message Wasm: Any function argument of type Void should be a validation error https://bugs.webkit.org/show_bug.cgi?id=186794 Reviewed by Keith Miller. We

[webkit-changes] [233184] trunk

Title: [233184] trunk Revision 233184 Author sbar...@apple.com Date 2018-06-25 16:56:35 -0700 (Mon, 25 Jun 2018) Log Message JSImmutableButterfly can't be allocated from a subspace with HeapCell::Kind::Auxiliary https://bugs.webkit.org/show_bug.cgi?id=186878 Reviewed by Mark Lam. Sourc

[webkit-changes] [233098] trunk/Source/JavaScriptCore

Title: [233098] trunk/Source/_javascript_Core Revision 233098 Author sbar...@apple.com Date 2018-06-22 14:02:01 -0700 (Fri, 22 Jun 2018) Log Message ensureWritableX should only convert away from CoW when it will succeed https://bugs.webkit.org/show_bug.cgi?id=186898 Reviewed by Keith Mil

[webkit-changes] [233065] trunk/Source/JavaScriptCore

Title: [233065] trunk/Source/_javascript_Core Revision 233065 Author sbar...@apple.com Date 2018-06-21 15:57:09 -0700 (Thu, 21 Jun 2018) Log Message Do some CoW cleanup https://bugs.webkit.org/show_bug.cgi?id=186896 Reviewed by Mark Lam. * bytecode/UnlinkedCodeBlock.h: (JSC::UnlinkedCod

[webkit-changes] [233000] trunk

Title: [233000] trunk Revision 233000 Author sbar...@apple.com Date 2018-06-19 18:11:45 -0700 (Tue, 19 Jun 2018) Log Message DirectArguments::create needs to initialize to undefined instead of the empty value https://bugs.webkit.org/show_bug.cgi?id=186818 Reviewed by Filip Pizlo. JSTes

[webkit-changes] [232970] trunk

Title: [232970] trunk Revision 232970 Author sbar...@apple.com Date 2018-06-19 11:48:27 -0700 (Tue, 19 Jun 2018) Log Message Wasm: Any function argument of type Void should be a validation error https://bugs.webkit.org/show_bug.cgi?id=186794 Reviewed by Keith Miller. JSTests: * wasm/B

[webkit-changes] [232900] trunk/Source/JavaScriptCore

Title: [232900] trunk/Source/_javascript_Core Revision 232900 Author sbar...@apple.com Date 2018-06-15 19:53:32 -0700 (Fri, 15 Jun 2018) Log Message Annotate shrinkFootprintWhenIdle with NS_AVAILABLE https://bugs.webkit.org/show_bug.cgi?id=186687 Reviewed by Keith Miller. * API/JSVirtu

[webkit-changes] [232890] trunk/Source/JavaScriptCore

Title: [232890] trunk/Source/_javascript_Core Revision 232890 Author sbar...@apple.com Date 2018-06-15 12:57:50 -0700 (Fri, 15 Jun 2018) Log Message Make ForceOSRExit CFG pruning in bytecode parser more aggressive by making the original block to ignore be the plan's osrEntryBytecodeIndex

[webkit-changes] [232867] trunk/Tools

Title: [232867] trunk/Tools Revision 232867 Author sbar...@apple.com Date 2018-06-14 23:28:17 -0700 (Thu, 14 Jun 2018) Log Message sun spider compile time benchmark fails in run-jsc-benchmarks with JSC_validateOptions=1 https://bugs.webkit.org/show_bug.cgi?id=186647 Reviewed by Yusuke Su

[webkit-changes] [232800] trunk/Source/JavaScriptCore

Title: [232800] trunk/Source/_javascript_Core Revision 232800 Author sbar...@apple.com Date 2018-06-13 12:04:10 -0700 (Wed, 13 Jun 2018) Log Message CFGSimplificationPhase should de-dupe jettisonedBlocks https://bugs.webkit.org/show_bug.cgi?id=186583 Reviewed by Filip Pizlo. When making

[webkit-changes] [232788] trunk/Source/JavaScriptCore

Title: [232788] trunk/Source/_javascript_Core Revision 232788 Author sbar...@apple.com Date 2018-06-12 23:24:58 -0700 (Tue, 12 Jun 2018) Log Message Remove JSVirtualMachine shrinkFootprint when clients move to shrinkFootprintWhenIdle https://bugs.webkit.org/show_bug.cgi?id=186071 Reviewe

[webkit-changes] [232742] trunk/Source/JavaScriptCore

Title: [232742] trunk/Source/_javascript_Core Revision 232742 Author sbar...@apple.com Date 2018-06-11 22:05:49 -0700 (Mon, 11 Jun 2018) Log Message Reduce graph size by replacing terminal nodes in blocks that have a ForceOSRExit with Unreachable https://bugs.webkit.org/show_bug.cgi?id=18

[webkit-changes] [232741] trunk/Source

Title: [232741] trunk/Source Revision 232741 Author sbar...@apple.com Date 2018-06-11 22:05:09 -0700 (Mon, 11 Jun 2018) Log Message The NaturalLoops algorithm only works when the list of blocks in a loop is de-duplicated https://bugs.webkit.org/show_bug.cgi?id=184829 Reviewed by Michael

[webkit-changes] [232602] trunk/Source/JavaScriptCore

Title: [232602] trunk/Source/_javascript_Core Revision 232602 Author sbar...@apple.com Date 2018-06-07 15:06:43 -0700 (Thu, 07 Jun 2018) Log Message TierUpCheckInjectionPhase systematically never puts the outer-most loop in an inner loop's vector of outer loops https://bugs.webkit.org/sho

[webkit-changes] [232578] trunk

Title: [232578] trunk Revision 232578 Author sbar...@apple.com Date 2018-06-07 01:44:59 -0700 (Thu, 07 Jun 2018) Log Message Make DFG to FTL OSR entry code more sane by removing bad RELEASE_ASSERTS and making it trigger compiles in outer loops before inner ones https://bugs.webkit.org/sho

[webkit-changes] [232562] trunk

Title: [232562] trunk Revision 232562 Author sbar...@apple.com Date 2018-06-06 17:01:31 -0700 (Wed, 06 Jun 2018) Log Message generateConditionsForInstanceOf needs to see if the object has a poly proto structure before assuming it has a constant prototype https://bugs.webkit.org/show_bug.c

[webkit-changes] [232517] trunk/Tools

Title: [232517] trunk/Tools Revision 232517 Author sbar...@apple.com Date 2018-06-05 11:54:10 -0700 (Tue, 05 Jun 2018) Log Message run-testmem should have a dry run option and an option to parse the stdout of executing the dry run https://bugs.webkit.org/show_bug.cgi?id=186293 Reviewed b

[webkit-changes] [232490] trunk/Source/JavaScriptCore

Title: [232490] trunk/Source/_javascript_Core Revision 232490 Author sbar...@apple.com Date 2018-06-04 18:12:58 -0700 (Mon, 04 Jun 2018) Log Message Set the activeLength of all ScratchBuffers to zero when exiting the VM https://bugs.webkit.org/show_bug.cgi?id=186284 Reviewed by Keith Mi

[webkit-changes] [232384] trunk/Source/JavaScriptCore

Title: [232384] trunk/Source/_javascript_Core Revision 232384 Author sbar...@apple.com Date 2018-05-31 20:06:25 -0700 (Thu, 31 May 2018) Log Message PutStructure AI rule needs to call didFoldClobberStructures when the incoming value's structure set is clear https://bugs.webkit.org/show_bu

[webkit-changes] [232385] trunk

Title: [232385] trunk Revision 232385 Author sbar...@apple.com Date 2018-05-31 20:07:28 -0700 (Thu, 31 May 2018) Log Message Cache toString results for CoW arrays https://bugs.webkit.org/show_bug.cgi?id=186160 Reviewed by Keith Miller. JSTests: * microbenchmarks/to-string-on-cow-array.

[webkit-changes] [232383] trunk/Source/JavaScriptCore

Title: [232383] trunk/Source/_javascript_Core Revision 232383 Author sbar...@apple.com Date 2018-05-31 17:43:19 -0700 (Thu, 31 May 2018) Log Message JSImmutableButterfly should align its variable storage https://bugs.webkit.org/show_bug.cgi?id=186159 Reviewed by Mark Lam. I'm also makin

[webkit-changes] [232334] trunk

Title: [232334] trunk Revision 232334 Author sbar...@apple.com Date 2018-05-30 20:57:59 -0700 (Wed, 30 May 2018) Log Message DFG combined liveness needs to say that the machine CodeBlock's arguments are live https://bugs.webkit.org/show_bug.cgi?id=186121 Reviewed by Keith Miller. JSTes

[webkit-changes] [232294] trunk/Source/JavaScriptCore

Title: [232294] trunk/Source/_javascript_Core Revision 232294 Author sbar...@apple.com Date 2018-05-30 09:20:58 -0700 (Wed, 30 May 2018) Log Message AI for Atomics.load() is too conservative in always clobbering world https://bugs.webkit.org/show_bug.cgi?id=185738 Reviewed by Yusuke Suz

[webkit-changes] [232286] trunk/Source/JavaScriptCore

Title: [232286] trunk/Source/_javascript_Core Revision 232286 Author sbar...@apple.com Date 2018-05-29 21:36:07 -0700 (Tue, 29 May 2018) Log Message Add a version of JSVirtualMachine shrinkFootprint that runs when the VM goes idle https://bugs.webkit.org/show_bug.cgi?id=186064 Reviewed b

[webkit-changes] [232279] trunk/Source/JavaScriptCore

Title: [232279] trunk/Source/_javascript_Core Revision 232279 Author sbar...@apple.com Date 2018-05-29 16:48:35 -0700 (Tue, 29 May 2018) Log Message shrinkFootprint needs to request a full collection https://bugs.webkit.org/show_bug.cgi?id=186069 Reviewed by Mark Lam. * runtime/VM.cpp:

[webkit-changes] [232269] trunk

Title: [232269] trunk Revision 232269 Author sbar...@apple.com Date 2018-05-29 11:56:05 -0700 (Tue, 29 May 2018) Log Message JSC should put bmalloc's scavenger into mini mode https://bugs.webkit.org/show_bug.cgi?id=185988 Reviewed by Michael Saboff. Source/bmalloc: We expose an API for

[webkit-changes] [232210] trunk

Title: [232210] trunk Revision 232210 Author sbar...@apple.com Date 2018-05-25 15:47:59 -0700 (Fri, 25 May 2018) Log Message Make JSC have a mini mode that kicks in when the JIT is disabled https://bugs.webkit.org/show_bug.cgi?id=185931 Reviewed by Mark Lam. Source/_javascript_Core: Th

[webkit-changes] [232075] trunk/Source/JavaScriptCore

Title: [232075] trunk/Source/_javascript_Core Revision 232075 Author sbar...@apple.com Date 2018-05-22 12:47:39 -0700 (Tue, 22 May 2018) Log Message DFG::LICMPhase should attempt to hoist edge type checks if hoisting the whole node fails https://bugs.webkit.org/show_bug.cgi?id=144525 Rev

[webkit-changes] [231938] trunk/Source/JavaScriptCore

Title: [231938] trunk/Source/_javascript_Core Revision 231938 Author sbar...@apple.com Date 2018-05-17 18:41:58 -0700 (Thu, 17 May 2018) Log Message Remove shrinkFootprint test from apitests since it's flaky https://bugs.webkit.org/show_bug.cgi?id=185754 Reviewed by Mark Lam. This test

[webkit-changes] [231930] trunk/Source/JavaScriptCore

Title: [231930] trunk/Source/_javascript_Core Revision 231930 Author sbar...@apple.com Date 2018-05-17 16:20:31 -0700 (Thu, 17 May 2018) Log Message defaultConstructorSourceCode needs to makeSource every time it's called https://bugs.webkit.org/show_bug.cgi?id=185753 Rubber-stamped by Ma

[webkit-changes] [231904] trunk/Source/JavaScriptCore

Title: [231904] trunk/Source/_javascript_Core Revision 231904 Author sbar...@apple.com Date 2018-05-17 09:16:59 -0700 (Thu, 17 May 2018) Log Message Unreviewed. Fix the build after my attempted build fix broke the build. * builtins/BuiltinExecutables.cpp: (JSC::BuiltinExecutables::defaul

[webkit-changes] [231901] trunk/Source/JavaScriptCore

Title: [231901] trunk/Source/_javascript_Core Revision 231901 Author sbar...@apple.com Date 2018-05-17 09:03:27 -0700 (Thu, 17 May 2018) Log Message Unreviewed. Try to fix windows build. * builtins/BuiltinExecutables.cpp: (JSC::BuiltinExecutables::defaultConstructorSourceCode): Modified

[webkit-changes] [231889] trunk/Source/JavaScriptCore

Title: [231889] trunk/Source/_javascript_Core Revision 231889 Author sbar...@apple.com Date 2018-05-16 22:21:41 -0700 (Wed, 16 May 2018) Log Message UnlinkedFunctionExecutable doesn't need a parent source override field since it's only used for default class constructors https://bugs.webk

[webkit-changes] [231888] trunk/Source/JavaScriptCore

Title: [231888] trunk/Source/_javascript_Core Revision 231888 Author sbar...@apple.com Date 2018-05-16 22:21:22 -0700 (Wed, 16 May 2018) Log Message VM::shrinkFootprint should call collectNow(Sync) instead of collectSync so it also eagerly sweeps https://bugs.webkit.org/show_bug.cgi?id=18

[webkit-changes] [231882] trunk

Title: [231882] trunk Revision 231882 Author sbar...@apple.com Date 2018-05-16 18:49:24 -0700 (Wed, 16 May 2018) Log Message Constant fold CheckTypeInfoFlags on ImplementsDefaultHasInstance https://bugs.webkit.org/show_bug.cgi?id=185670 Reviewed by Yusuke Suzuki. JSTests: * microbenchm

[webkit-changes] [231703] trunk/Source/JavaScriptCore

Title: [231703] trunk/Source/_javascript_Core Revision 231703 Author sbar...@apple.com Date 2018-05-11 09:08:42 -0700 (Fri, 11 May 2018) Log Message Don't use inferred types when the JIT is disabled https://bugs.webkit.org/show_bug.cgi?id=185539 Reviewed by Yusuke Suzuki. There are many

[webkit-changes] [231695] trunk/Source

Title: [231695] trunk/Source Revision 231695 Author sbar...@apple.com Date 2018-05-11 00:57:21 -0700 (Fri, 11 May 2018) Log Message Don't allocate value profiles when the JIT is disabled https://bugs.webkit.org/show_bug.cgi?id=185525 Reviewed by Michael Saboff. Source/_javascript_Core:

[webkit-changes] [231589] trunk/Source/JavaScriptCore

Title: [231589] trunk/Source/_javascript_Core Revision 231589 Author sbar...@apple.com Date 2018-05-09 13:11:31 -0700 (Wed, 09 May 2018) Log Message Add JSVirtualMachine SPI to shrink the memory footprint of the VM https://bugs.webkit.org/show_bug.cgi?id=185441 Reviewed by Keith Miller.

[webkit-changes] [231477] trunk/Source/JavaScriptCore

Title: [231477] trunk/Source/_javascript_Core Revision 231477 Author sbar...@apple.com Date 2018-05-07 21:18:25 -0700 (Mon, 07 May 2018) Log Message Make a compact version of VariableEnvironment that UnlinkedFunctionExecutable stores and hash-cons these compact environments as we make the

[webkit-changes] [231345] trunk

Title: [231345] trunk Revision 231345 Author sbar...@apple.com Date 2018-05-03 21:33:53 -0700 (Thu, 03 May 2018) Log Message Don't prevent CreateThis being folded to NewObject when the structure is poly proto https://bugs.webkit.org/show_bug.cgi?id=185177 Reviewed by Filip Pizlo. JSTest

[webkit-changes] [231193] trunk

Title: [231193] trunk Revision 231193 Author sbar...@apple.com Date 2018-04-30 23:04:33 -0700 (Mon, 30 Apr 2018) Log Message ToString constant folds without preserving checks, causing us to break assumptions that the code would OSR exit https://bugs.webkit.org/show_bug.cgi?id=185149 Rev

[webkit-changes] [231145] trunk

Title: [231145] trunk Revision 231145 Author sbar...@apple.com Date 2018-04-28 18:17:06 -0700 (Sat, 28 Apr 2018) Log Message We don't model regexp effects properly https://bugs.webkit.org/show_bug.cgi?id=185059 Reviewed by Filip Pizlo. JSTests: * stress/regexp-exec-test-effectful-last

[webkit-changes] [231041] trunk/Source/WebKit

Title: [231041] trunk/Source/WebKit Revision 231041 Author sbar...@apple.com Date 2018-04-25 20:33:58 -0700 (Wed, 25 Apr 2018) Log Message dlopen the bundle's executable before calling -[NSBundle load] since that will also do a bunch of other things we don't need https://bugs.webkit.org/s

[webkit-changes] [230977] trunk

Title: [230977] trunk Revision 230977 Author sbar...@apple.com Date 2018-04-24 16:19:25 -0700 (Tue, 24 Apr 2018) Log Message Keep around a pre-warmed process when doing process swap on navigation https://bugs.webkit.org/show_bug.cgi?id=184765 Reviewed by Ryosuke Niwa and Brady Eidson.

[webkit-changes] [230938] trunk/Source/WebKit

Title: [230938] trunk/Source/WebKit Revision 230938 Author sbar...@apple.com Date 2018-04-23 19:03:27 -0700 (Mon, 23 Apr 2018) Log Message Keep around a pre-warmed process when doing process swap on navigation https://bugs.webkit.org/show_bug.cgi?id=184765 Reviewed by Ryosuke Niwa. This

[webkit-changes] [230711] trunk

Title: [230711] trunk Revision 230711 Author sbar...@apple.com Date 2018-04-17 08:57:32 -0700 (Tue, 17 Apr 2018) Log Message Add system trace points for process launch and for initializeWebProcess https://bugs.webkit.org/show_bug.cgi?id=184669 Reviewed by Simon Fraser. Source/_javascrip

[webkit-changes] [230623] trunk/Source/bmalloc

Title: [230623] trunk/Source/bmalloc Revision 230623 Author sbar...@apple.com Date 2018-04-12 23:52:36 -0700 (Thu, 12 Apr 2018) Log Message Lessen partial scavenge interval on x86-64 https://bugs.webkit.org/show_bug.cgi?id=184577 Rubber-stamped by Filip Pizlo. I initially made the scave

[webkit-changes] [230587] trunk/Source/bmalloc

Title: [230587] trunk/Source/bmalloc Revision 230587 Author sbar...@apple.com Date 2018-04-12 11:35:17 -0700 (Thu, 12 Apr 2018) Log Message Raise the partial scavenge interval even more on x86-64 https://bugs.webkit.org/show_bug.cgi?id=184551 Rubber-stamped by Filip Pizlo. The JetStream

[webkit-changes] [230553] trunk/Source/bmalloc

Title: [230553] trunk/Source/bmalloc Revision 230553 Author sbar...@apple.com Date 2018-04-11 19:44:06 -0700 (Wed, 11 Apr 2018) Log Message raise partial scavenge interval on x86-64 https://bugs.webkit.org/show_bug.cgi?id=184521 Rubber-stamped by Filip Pizlo. This patch is an attempt to

[webkit-changes] [230515] trunk/Source/bmalloc

Title: [230515] trunk/Source/bmalloc Revision 230515 Author sbar...@apple.com Date 2018-04-10 21:57:43 -0700 (Tue, 10 Apr 2018) Log Message IsoHeapImpl::scavenge* needs to grab the lock https://bugs.webkit.org/show_bug.cgi?id=184461 Reviewed by Filip Pizlo. Another thread could be modif

[webkit-changes] [230501] trunk/Source/bmalloc

Title: [230501] trunk/Source/bmalloc Revision 230501 Author sbar...@apple.com Date 2018-04-10 16:34:42 -0700 (Tue, 10 Apr 2018) Log Message bmalloc should do partial scavenges more frequently https://bugs.webkit.org/show_bug.cgi?id=184176 Reviewed by Filip Pizlo. This patch adds the abi

[webkit-changes] [230360] trunk/Source

Title: [230360] trunk/Source Revision 230360 Author sbar...@apple.com Date 2018-04-06 17:00:34 -0700 (Fri, 06 Apr 2018) Log Message Source/bmalloc: bmalloc virtual allocation API should not treat memory it vends as dirty with respect to how it drives the scavenger https://bugs.webkit.org/

[webkit-changes] [230317] trunk/Source/bmalloc

Title: [230317] trunk/Source/bmalloc Revision 230317 Author sbar...@apple.com Date 2018-04-05 18:29:26 -0700 (Thu, 05 Apr 2018) Log Message IsoHeapImpl not IsoHeapImplBase should add itself to AllIsoHeaps https://bugs.webkit.org/show_bug.cgi?id=184174 Reviewed by Filip Pizlo. Otherwise,

[webkit-changes] [230222] trunk/Source/bmalloc

Title: [230222] trunk/Source/bmalloc Revision 230222 Author sbar...@apple.com Date 2018-04-03 13:41:26 -0700 (Tue, 03 Apr 2018) Log Message totalPhysicalSize calculation when splitting a range must account for double rounding effects https://bugs.webkit.org/show_bug.cgi?id=184275 Reviewe

[webkit-changes] [230187] trunk/Source

Title: [230187] trunk/Source Revision 230187 Author sbar...@apple.com Date 2018-04-02 14:09:45 -0700 (Mon, 02 Apr 2018) Log Message bmalloc should compute its own estimate of its footprint https://bugs.webkit.org/show_bug.cgi?id=184121 Reviewed by Filip Pizlo. Source/bmalloc: This patc

[webkit-changes] [230005] trunk/Source/bmalloc

Title: [230005] trunk/Source/bmalloc Revision 230005 Author sbar...@apple.com Date 2018-03-27 13:52:35 -0700 (Tue, 27 Mar 2018) Log Message memoryStatus() is wrong in certain testing scenarios on iOS https://bugs.webkit.org/show_bug.cgi?id=184050 Rubber-stamped by Mark Lam. This switch

[webkit-changes] [229969] trunk/Source/JavaScriptCore

Title: [229969] trunk/Source/_javascript_Core Revision 229969 Author sbar...@apple.com Date 2018-03-25 23:38:44 -0700 (Sun, 25 Mar 2018) Log Message Fix typo in JSC option name https://bugs.webkit.org/show_bug.cgi?id=184001 Reviewed by Mark Lam. enableJITDebugAssetions => enableJITDebug

[webkit-changes] [229962] trunk/Source/JavaScriptCore

Title: [229962] trunk/Source/_javascript_Core Revision 229962 Author sbar...@apple.com Date 2018-03-25 11:26:32 -0700 (Sun, 25 Mar 2018) Log Message r228149 accidentally removed code that resets m_emptyCursor at the end of a GC https://bugs.webkit.org/show_bug.cgi?id=183995 Reviewed by F

[webkit-changes] [229775] trunk

Title: [229775] trunk Revision 229775 Author sbar...@apple.com Date 2018-03-20 14:59:33 -0700 (Tue, 20 Mar 2018) Log Message We need to do proper bookkeeping of exitOK when inserting constants when sinking NewArrayBuffer https://bugs.webkit.org/show_bug.cgi?id=183795 Reviewed by JF Bast

[webkit-changes] [229161] trunk

Title: [229161] trunk Revision 229161 Author sbar...@apple.com Date 2018-03-01 21:00:06 -0800 (Thu, 01 Mar 2018) Log Message We need to clear cached structures when having a bad time https://bugs.webkit.org/show_bug.cgi?id=183256 Reviewed by Mark Lam. JSTests: * stress/having-a-bad-ti

[webkit-changes] [229036] trunk

Title: [229036] trunk Revision 229036 Author sbar...@apple.com Date 2018-02-26 12:42:39 -0800 (Mon, 26 Feb 2018) Log Message validateStackAccess should not validate if the offset is within the stack bounds https://bugs.webkit.org/show_bug.cgi?id=183067 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [228968] trunk

Title: [228968] trunk Revision 228968 Author sbar...@apple.com Date 2018-02-23 16:48:32 -0800 (Fri, 23 Feb 2018) Log Message Make Number.isInteger an intrinsic https://bugs.webkit.org/show_bug.cgi?id=183088 Reviewed by JF Bastien. JSTests: * stress/number-is-integer-intrinsic.js: Added

[webkit-changes] [228952] trunk/Source/JavaScriptCore

Title: [228952] trunk/Source/_javascript_Core Revision 228952 Author sbar...@apple.com Date 2018-02-23 10:35:56 -0800 (Fri, 23 Feb 2018) Log Message ArgumentsEliminationPhase has a branch on GetByOffset that should be an assert https://bugs.webkit.org/show_bug.cgi?id=182982 Reviewed by Y

[webkit-changes] [228860] trunk

Title: [228860] trunk Revision 228860 Author sbar...@apple.com Date 2018-02-20 22:56:11 -0800 (Tue, 20 Feb 2018) Log Message DFG::VarargsForwardingPhase should eliminate getting argument length https://bugs.webkit.org/show_bug.cgi?id=182959 Reviewed by Keith Miller. JSTests: * microben

<    1   2   3   4   5   6   7   8   9   10   >