[webkit-changes] [213745] trunk

Title: [213745] trunk Revision 213745 Author sbar...@apple.com Date 2017-03-10 18:04:37 -0800 (Fri, 10 Mar 2017) Log Message WebAssembly: Make more demos run https://bugs.webkit.org/show_bug.cgi?id=165510 Reviewed by Keith Miller. JSTests: * wasm/Builder.js:

[webkit-changes] [213653] trunk

Title: [213653] trunk Revision 213653 Author sbar...@apple.com Date 2017-03-09 11:18:34 -0800 (Thu, 09 Mar 2017) Log Message WebAssembly: Make the Unity AngryBots demo run https://bugs.webkit.org/show_bug.cgi?id=169268 Reviewed by Keith Miller. JSTests: *

[webkit-changes] [213506] trunk

Title: [213506] trunk Revision 213506 Author sbar...@apple.com Date 2017-03-06 23:38:41 -0800 (Mon, 06 Mar 2017) Log Message WebAssembly: Implement the WebAssembly.instantiate API https://bugs.webkit.org/show_bug.cgi?id=165982 Reviewed by Keith Miller. JSTests: *

[webkit-changes] [213484] trunk/JSTests

Title: [213484] trunk/JSTests Revision 213484 Author sbar...@apple.com Date 2017-03-06 18:10:14 -0800 (Mon, 06 Mar 2017) Log Message Unreviewed. Fix test expected error message. * wasm/js-api/element.js: (assert.throws): Modified Paths trunk/JSTests/ChangeLog

[webkit-changes] [213465] trunk

Title: [213465] trunk Revision 213465 Author sbar...@apple.com Date 2017-03-06 13:44:20 -0800 (Mon, 06 Mar 2017) Log Message WebAssembly: implement init_expr for Element https://bugs.webkit.org/show_bug.cgi?id=165888 Reviewed by Keith Miller. JSTests: *

[webkit-changes] [213233] trunk/Source/JavaScriptCore

Title: [213233] trunk/Source/_javascript_Core Revision 213233 Author sbar...@apple.com Date 2017-03-01 11:13:37 -0800 (Wed, 01 Mar 2017) Log Message Implement a mega-disassembler that'll be used in the FTL https://bugs.webkit.org/show_bug.cgi?id=168685 Reviewed by Mark Lam. This patch

[webkit-changes] [213171] trunk/Source/JavaScriptCore

Title: [213171] trunk/Source/_javascript_Core Revision 213171 Author sbar...@apple.com Date 2017-02-28 13:30:43 -0800 (Tue, 28 Feb 2017) Log Message Arm64 disassembler prints "ars" instead of "asr" https://bugs.webkit.org/show_bug.cgi?id=168923 Rubber stamped by Michael Saboff. *

[webkit-changes] [212962] trunk/Source/JavaScriptCore

Title: [212962] trunk/Source/_javascript_Core Revision 212962 Author sbar...@apple.com Date 2017-02-24 11:36:35 -0800 (Fri, 24 Feb 2017) Log Message Unreviewed. Remove inaccurate copy-paste comment from r212939. * dfg/DFGOperations.cpp: Modified Paths

[webkit-changes] [212939] trunk

Title: [212939] trunk Revision 212939 Author sbar...@apple.com Date 2017-02-23 20:07:30 -0800 (Thu, 23 Feb 2017) Log Message Intrinsicify parseInt https://bugs.webkit.org/show_bug.cgi?id=168627 Reviewed by Filip Pizlo. JSTests: * stress/parse-int-intrinsic.js: Added. (assert):

[webkit-changes] [212921] trunk/Source/JavaScriptCore

Title: [212921] trunk/Source/_javascript_Core Revision 212921 Author sbar...@apple.com Date 2017-02-23 13:25:15 -0800 (Thu, 23 Feb 2017) Log Message Make Briggs fixpoint validation run only with validateGraphAtEachPhase https://bugs.webkit.org/show_bug.cgi?id=168795 Rubber stamped by

[webkit-changes] [212911] trunk/Tools

Title: [212911] trunk/Tools Revision 212911 Author sbar...@apple.com Date 2017-02-23 11:56:56 -0800 (Thu, 23 Feb 2017) Log Message Speculative fix for jsc timing out tests https://bugs.webkit.org/show_bug.cgi?id=168791 Rubber Stamped by Keith Miller. Play musical chairs with IRC and

[webkit-changes] [212851] trunk/Source/JavaScriptCore

Title: [212851] trunk/Source/_javascript_Core Revision 212851 Author sbar...@apple.com Date 2017-02-22 13:52:13 -0800 (Wed, 22 Feb 2017) Log Message Add biased coloring to Briggs and IRC https://bugs.webkit.org/show_bug.cgi?id=168611 Reviewed by Filip Pizlo. This patch implements

[webkit-changes] [212775] trunk/Source/JavaScriptCore

Title: [212775] trunk/Source/_javascript_Core Revision 212775 Author sbar...@apple.com Date 2017-02-21 15:57:03 -0800 (Tue, 21 Feb 2017) Log Message Air should have a disassembly mode that dumps IR and assembly intermixed https://bugs.webkit.org/show_bug.cgi?id=168629 Reviewed by Filip

[webkit-changes] [212177] trunk

Title: [212177] trunk Revision 212177 Author sbar...@apple.com Date 2017-02-10 20:05:06 -0800 (Fri, 10 Feb 2017) Log Message Object allocation sinking phase doesn't properly handle control flow when emitting a PutHint of a materialized object into a PromotedHeapLocation of a still sunken

[webkit-changes] [211896] trunk/Source/JavaScriptCore

Title: [211896] trunk/Source/_javascript_Core Revision 211896 Author sbar...@apple.com Date 2017-02-08 13:21:45 -0800 (Wed, 08 Feb 2017) Log Message Air IRC might spill a terminal that produces a value after the terminal https://bugs.webkit.org/show_bug.cgi?id=167919 Reviewed by Filip

[webkit-changes] [211743] trunk/PerformanceTests

Title: [211743] trunk/PerformanceTests Revision 211743 Author sbar...@apple.com Date 2017-02-06 12:06:52 -0800 (Mon, 06 Feb 2017) Log Message Make ARES-6 work from the CLI again https://bugs.webkit.org/show_bug.cgi?id=167895 Reviewed by Michael Saboff. * ARES-6/driver.js:

[webkit-changes] [211642] trunk/Source/JavaScriptCore

Title: [211642] trunk/Source/_javascript_Core Revision 211642 Author sbar...@apple.com Date 2017-02-03 12:00:53 -0800 (Fri, 03 Feb 2017) Log Message When OSR entering to the baseline JIT from the LLInt for a ProgramCodeBlock we can skip compiling a lot of the program

[webkit-changes] [211316] trunk/Source/JavaScriptCore

Title: [211316] trunk/Source/_javascript_Core Revision 211316 Author sbar...@apple.com Date 2017-01-27 17:04:06 -0800 (Fri, 27 Jan 2017) Log Message Make the CLI for the sampling profiler better for inlined call site indices https://bugs.webkit.org/show_bug.cgi?id=167482 Reviewed by

[webkit-changes] [211195] trunk

Title: [211195] trunk Revision 211195 Author sbar...@apple.com Date 2017-01-25 18:38:41 -0800 (Wed, 25 Jan 2017) Log Message WebAssembly JS API: coerce return values from imports https://bugs.webkit.org/show_bug.cgi?id=165480 Reviewed by Yusuke Suzuki. JSTests: *

[webkit-changes] [211070] trunk

Title: [211070] trunk Revision 211070 Author sbar...@apple.com Date 2017-01-23 16:15:21 -0800 (Mon, 23 Jan 2017) Log Message https://bugs.webkit.org/show_bug.cgi?id=167247 JSC: operationSpreadGeneric uses the wrong global object for the builtin function and slow_path_spread consults the

[webkit-changes] [210971] trunk/Source/JavaScriptCore

Title: [210971] trunk/Source/_javascript_Core Revision 210971 Author sbar...@apple.com Date 2017-01-20 10:10:55 -0800 (Fri, 20 Jan 2017) Log Message We should flash a safepoint before each DFG/FTL phase https://bugs.webkit.org/show_bug.cgi?id=167234 Reviewed by Filip Pizlo. The recent

[webkit-changes] [210745] trunk/Source/JavaScriptCore

Title: [210745] trunk/Source/_javascript_Core Revision 210745 Author sbar...@apple.com Date 2017-01-13 15:30:45 -0800 (Fri, 13 Jan 2017) Log Message Initialize the ArraySpecies watchpoint as Clear and transition to IsWatched once slice is called for the first time

[webkit-changes] [210695] trunk

Title: [210695] trunk Revision 210695 Author sbar...@apple.com Date 2017-01-12 20:03:47 -0800 (Thu, 12 Jan 2017) Log Message Add a slice intrinsic to the DFG/FTL https://bugs.webkit.org/show_bug.cgi?id=166707 Reviewed by Filip Pizlo. JSTests: * stress/array-slice-intrinsic.js: Added.

[webkit-changes] [210694] trunk/Source/JavaScriptCore

Title: [210694] trunk/Source/_javascript_Core Revision 210694 Author sbar...@apple.com Date 2017-01-12 19:12:09 -0800 (Thu, 12 Jan 2017) Log Message Concurrent GC has a bug where we would detect a race but fail to rescan the object https://bugs.webkit.org/show_bug.cgi?id=166960

[webkit-changes] [210476] trunk

Title: [210476] trunk Revision 210476 Author sbar...@apple.com Date 2017-01-06 23:53:07 -0800 (Fri, 06 Jan 2017) Log Message Add a slice intrinsic to the DFG/FTL https://bugs.webkit.org/show_bug.cgi?id=166707 Reviewed by Filip Pizlo. JSTests: * stress/array-slice-intrinsic.js: Added.

[webkit-changes] [210285] trunk/JSTests

Title: [210285] trunk/JSTests Revision 210285 Author sbar...@apple.com Date 2017-01-04 13:31:50 -0800 (Wed, 04 Jan 2017) Log Message stress/spread-calling.js timing out on the bots https://bugs.webkit.org/show_bug.cgi?id=166689 Reviewed by Mark Lam. * stress/spread-calling.js:

[webkit-changes] [210276] trunk

Title: [210276] trunk Revision 210276 Author sbar...@apple.com Date 2017-01-04 11:11:23 -0800 (Wed, 04 Jan 2017) Log Message We don't properly handle exceptions inside the nativeCallTrampoline macro in the LLInt https://bugs.webkit.org/show_bug.cgi?id=163720 Reviewed by Mark Lam.

[webkit-changes] [210228] trunk

Title: [210228] trunk Revision 210228 Author sbar...@apple.com Date 2017-01-02 16:32:05 -0800 (Mon, 02 Jan 2017) Log Message WebAssembly: Some loads don't take into account the offset https://bugs.webkit.org/show_bug.cgi?id=166616 Reviewed by Keith Miller. JSTests: *

[webkit-changes] [210204] trunk/JSTests

Title: [210204] trunk/JSTests Revision 210204 Author sbar...@apple.com Date 2016-12-29 10:28:08 -0800 (Thu, 29 Dec 2016) Log Message WebAssembly: Rebase spec-tests now that wabt has been updated to produce certain kinds of invalid modules https://bugs.webkit.org/show_bug.cgi?id=166491

[webkit-changes] [210203] trunk

Title: [210203] trunk Revision 210203 Author sbar...@apple.com Date 2016-12-28 19:10:04 -0800 (Wed, 28 Dec 2016) Log Message WebAssembly: Don't allow duplicate export names https://bugs.webkit.org/show_bug.cgi?id=166490 Reviewed by Keith Miller. JSTests: * wasm.yaml: *

[webkit-changes] [210202] trunk/Source/JavaScriptCore

Title: [210202] trunk/Source/_javascript_Core Revision 210202 Author sbar...@apple.com Date 2016-12-28 16:18:44 -0800 (Wed, 28 Dec 2016) Log Message Unreviewed. Fix jsc.cpp build error. * jsc.cpp: (functionTestWasmModuleFunctions): Modified Paths

[webkit-changes] [210201] trunk

Title: [210201] trunk Revision 210201 Author sbar...@apple.com Date 2016-12-28 16:06:52 -0800 (Wed, 28 Dec 2016) Log Message WebAssembly: Implement grow_memory and current_memory https://bugs.webkit.org/show_bug.cgi?id=166448 Reviewed by Keith Miller. JSTests: I rewrote some of the

[webkit-changes] [210126] trunk

Title: [210126] trunk Revision 210126 Author sbar...@apple.com Date 2016-12-22 17:32:30 -0800 (Thu, 22 Dec 2016) Log Message WebAssembly: Make calling Wasm functions that returns or takes an i64 as a parameter an early exception https://bugs.webkit.org/show_bug.cgi?id=166437 Reviewed

[webkit-changes] [210115] trunk

Title: [210115] trunk Revision 210115 Author sbar...@apple.com Date 2016-12-22 14:40:39 -0800 (Thu, 22 Dec 2016) Log Message WebAssembly: Make the spec-tests/address.wast.js test pass https://bugs.webkit.org/show_bug.cgi?id=166429 Reviewed by Keith Miller. JSTests: * wasm.yaml:

[webkit-changes] [210114] trunk/Tools

Title: [210114] trunk/Tools Revision 210114 Author sbar...@apple.com Date 2016-12-22 14:29:27 -0800 (Thu, 22 Dec 2016) Log Message WebAssembly: Silence the output of the spec-tests https://bugs.webkit.org/show_bug.cgi?id=166417 Reviewed by Mark Lam. * Scripts/run-jsc-stress-tests:

[webkit-changes] [210102] trunk

Title: [210102] trunk Revision 210102 Author sbar...@apple.com Date 2016-12-22 10:31:04 -0800 (Thu, 22 Dec 2016) Log Message WebAssembly: Make the spec-tests/start.wast.js test pass https://bugs.webkit.org/show_bug.cgi?id=166416 Reviewed by Yusuke Suzuki. JSTests: * wasm.yaml:

[webkit-changes] [210047] trunk/Source/JavaScriptCore

Title: [210047] trunk/Source/_javascript_Core Revision 210047 Author sbar...@apple.com Date 2016-12-20 16:29:36 -0800 (Tue, 20 Dec 2016) Log Message WebAssembly: We should compile wasm functions in parallel https://bugs.webkit.org/show_bug.cgi?id=165993 Reviewed by Keith Miller. This

[webkit-changes] [209980] trunk/JSTests

Title: [209980] trunk/JSTests Revision 209980 Author sbar...@apple.com Date 2016-12-19 00:19:01 -0800 (Mon, 19 Dec 2016) Log Message WebAssembly: Make running Wasm tests take less time by reducing some tests' iteration count and by splitting some tests into different files

[webkit-changes] [209979] trunk

Title: [209979] trunk Revision 209979 Author sbar...@apple.com Date 2016-12-18 23:22:42 -0800 (Sun, 18 Dec 2016) Log Message WebAssembly: Implement the WebAssembly.compile and WebAssembly.validate https://bugs.webkit.org/show_bug.cgi?id=165936 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [209966] trunk/Source/JavaScriptCore

Title: [209966] trunk/Source/_javascript_Core Revision 209966 Author sbar...@apple.com Date 2016-12-17 10:44:17 -0800 (Sat, 17 Dec 2016) Log Message WebAssembly: WasmB3IRGenerator uses WarmAny as a ValueRep but expects the incoming value to be a register

[webkit-changes] [209963] trunk/Source/JavaScriptCore

Title: [209963] trunk/Source/_javascript_Core Revision 209963 Author sbar...@apple.com Date 2016-12-17 09:14:03 -0800 (Sat, 17 Dec 2016) Log Message WebAssembly: Change a RELEASE_ASSERT_NOT_REACHED to a jit.breakpoint() for now to allow us to run some wasm benchmarks

[webkit-changes] [209955] trunk/Source/JavaScriptCore

Title: [209955] trunk/Source/_javascript_Core Revision 209955 Author sbar...@apple.com Date 2016-12-16 19:19:48 -0800 (Fri, 16 Dec 2016) Log Message WebAssembly: We still have some incorrect parsing productions inside unreachable code https://bugs.webkit.org/show_bug.cgi?id=165981

[webkit-changes] [209953] trunk/Source/JavaScriptCore

Title: [209953] trunk/Source/_javascript_Core Revision 209953 Author sbar...@apple.com Date 2016-12-16 17:07:38 -0800 (Fri, 16 Dec 2016) Log Message B3::DoubleToFloatReduction will accidentally convince itself it converted a Phi from Double to Float and then convert uses of that Phi into

[webkit-changes] [209928] trunk

Title: [209928] trunk Revision 209928 Author sbar...@apple.com Date 2016-12-16 11:24:06 -0800 (Fri, 16 Dec 2016) Log Message WebAssembly: WasmB3IRGenerator should throw exceptions instead of crash https://bugs.webkit.org/show_bug.cgi?id=165834 Reviewed by Keith Miller. JSTests: *

[webkit-changes] [209850] trunk

Title: [209850] trunk Revision 209850 Author sbar...@apple.com Date 2016-12-14 19:30:44 -0800 (Wed, 14 Dec 2016) Log Message WebAssembly: Add various low hanging fruit that will allow us to run the LLVM torture tests in Wasm https://bugs.webkit.org/show_bug.cgi?id=165883 Reviewed by

[webkit-changes] [209785] trunk

Title: [209785] trunk Revision 209785 Author sbar...@apple.com Date 2016-12-13 17:31:43 -0800 (Tue, 13 Dec 2016) Log Message WebAssembly: implement the elements section https://bugs.webkit.org/show_bug.cgi?id=165715 Reviewed by Keith Miller. JSTests: * wasm/Builder.js:

[webkit-changes] [209771] trunk

Title: [209771] trunk Revision 209771 Author sbar...@apple.com Date 2016-12-13 12:32:40 -0800 (Tue, 13 Dec 2016) Log Message WebAssembly: implement the table section and table import https://bugs.webkit.org/show_bug.cgi?id=165716 Reviewed by Keith Miller. JSTests: * wasm/Builder.js:

[webkit-changes] [209722] trunk/Source/JavaScriptCore

Title: [209722] trunk/Source/_javascript_Core Revision 209722 Author sbar...@apple.com Date 2016-12-12 12:55:23 -0800 (Mon, 12 Dec 2016) Log Message Unreviewed. Try to fix the cloop build. * interpreter/StackVisitor.cpp: (JSC::StackVisitor::Frame::calleeSaveRegisters): *

[webkit-changes] [209702] trunk/Source/JavaScriptCore

Title: [209702] trunk/Source/_javascript_Core Revision 209702 Author sbar...@apple.com Date 2016-12-11 23:44:40 -0800 (Sun, 11 Dec 2016) Log Message Unreviewed. Try to fix the linux build. * runtime/StackFrame.h: Modified Paths trunk/Source/_javascript_Core/ChangeLog

[webkit-changes] [209696] trunk

Title: [209696] trunk Revision 209696 Author sbar...@apple.com Date 2016-12-11 19:11:18 -0800 (Sun, 11 Dec 2016) Log Message We should be able to throw exceptions from Wasm code and when Wasm frames are on the stack https://bugs.webkit.org/show_bug.cgi?id=165429 Reviewed by Keith

[webkit-changes] [209433] trunk/Source

Title: [209433] trunk/Source Revision 209433 Author sbar...@apple.com Date 2016-12-06 16:27:58 -0800 (Tue, 06 Dec 2016) Log Message Remove old Wasm object model https://bugs.webkit.org/show_bug.cgi?id=165481 Reviewed by Keith Miller and Mark Lam. Source/_javascript_Core: It's

[webkit-changes] [209312] trunk/Source/JavaScriptCore

Title: [209312] trunk/Source/_javascript_Core Revision 209312 Author sbar...@apple.com Date 2016-12-04 13:23:56 -0800 (Sun, 04 Dec 2016) Log Message We should have a Wasm callee https://bugs.webkit.org/show_bug.cgi?id=165163 Reviewed by Keith Miller. This patch adds JSWebAssemblyCallee

[webkit-changes] [209112] trunk/Source/JavaScriptCore

Title: [209112] trunk/Source/_javascript_Core Revision 209112 Author sbar...@apple.com Date 2016-11-29 19:09:10 -0800 (Tue, 29 Nov 2016) Log Message We should support CreateThis in the FTL https://bugs.webkit.org/show_bug.cgi?id=164904 Reviewed by Geoffrey Garen. *

[webkit-changes] [208843] trunk

Title: [208843] trunk Revision 208843 Author sbar...@apple.com Date 2016-11-17 01:05:11 -0800 (Thu, 17 Nov 2016) Log Message Remove async/await compile time flag and enable tests https://bugs.webkit.org/show_bug.cgi?id=164828 Reviewed by Yusuke Suzuki. .: *

[webkit-changes] [208752] trunk/JSTests

Title: [208752] trunk/JSTests Revision 208752 Author sbar...@apple.com Date 2016-11-15 13:51:41 -0800 (Tue, 15 Nov 2016) Log Message Debug JSC test timeout: stress/has-own-property-name-cache-symbols-and-strings.js.ftl-no-cjit-small-pool https://bugs.webkit.org/show_bug.cgi?id=163012

[webkit-changes] [208619] trunk/Source/JavaScriptCore

Title: [208619] trunk/Source/_javascript_Core Revision 208619 Author sbar...@apple.com Date 2016-11-11 15:42:47 -0800 (Fri, 11 Nov 2016) Log Message Unreviewed try to fix windows build after https://bugs.webkit.org/show_bug.cgi?id=164650 * dfg/DFGByteCodeParser.cpp:

[webkit-changes] [208614] trunk

Title: [208614] trunk Revision 208614 Author sbar...@apple.com Date 2016-11-11 15:03:41 -0800 (Fri, 11 Nov 2016) Log Message We recursively grab a lock in the DFGBytecodeParser causing us to deadlock https://bugs.webkit.org/show_bug.cgi?id=164650 Reviewed by Geoffrey Garen. JSTests: *

[webkit-changes] [208496] trunk

Title: [208496] trunk Revision 208496 Author sbar...@apple.com Date 2016-11-09 15:23:21 -0800 (Wed, 09 Nov 2016) Log Message Math.min()/Math.max() with no arguments is lowered incorrectly in the BytecodeParser https://bugs.webkit.org/show_bug.cgi?id=164464 Reviewed by Darin Adler.

[webkit-changes] [208483] trunk

Title: [208483] trunk Revision 208483 Author sbar...@apple.com Date 2016-11-09 14:02:20 -0800 (Wed, 09 Nov 2016) Log Message TypeProfiler and running GC collection on another thread don't play nicely with each other https://bugs.webkit.org/show_bug.cgi?id=164441 Reviewed by Geoffrey

[webkit-changes] [208326] trunk

Title: [208326] trunk Revision 208326 Author sbar...@apple.com Date 2016-11-03 07:39:47 -0700 (Thu, 03 Nov 2016) Log Message Asking for a value profile prediction should be defensive against not finding a value profile https://bugs.webkit.org/show_bug.cgi?id=164306 Reviewed by Mark Lam.

[webkit-changes] [208311] trunk

Title: [208311] trunk Revision 208311 Author sbar...@apple.com Date 2016-11-02 16:15:33 -0700 (Wed, 02 Nov 2016) Log Message Allocation elimination of rest parameter doesn't take into account indexed properties on Array.prototype/Object.prototype

[webkit-changes] [208235] trunk

Title: [208235] trunk Revision 208235 Author sbar...@apple.com Date 2016-11-01 13:03:03 -0700 (Tue, 01 Nov 2016) Log Message We should be able to eliminate rest parameter allocations https://bugs.webkit.org/show_bug.cgi?id=163925 Reviewed by Filip Pizlo. JSTests: *

[webkit-changes] [208208] trunk

Title: [208208] trunk Revision 208208 Author sbar...@apple.com Date 2016-10-31 19:56:30 -0700 (Mon, 31 Oct 2016) Log Message We should be able to eliminate rest parameter allocations https://bugs.webkit.org/show_bug.cgi?id=163925 Reviewed by Filip Pizlo. JSTests: *

[webkit-changes] [208185] trunk/Source/JavaScriptCore

Title: [208185] trunk/Source/_javascript_Core Revision 208185 Author sbar...@apple.com Date 2016-10-31 15:51:36 -0700 (Mon, 31 Oct 2016) Log Message GetByOffset rule is has incorrect assumptions inside arguments elimination phase https://bugs.webkit.org/show_bug.cgi?id=164239 Reviewed

[webkit-changes] [208160] trunk/JSTests

Title: [208160] trunk/JSTests Revision 208160 Author sbar...@apple.com Date 2016-10-31 10:26:36 -0700 (Mon, 31 Oct 2016) Log Message Debug JSC test microbenchmarks/pure-get-by-id-cse-2.js timing out https://bugs.webkit.org/show_bug.cgi?id=164227 Unreviewed timeout fix. *

[webkit-changes] [208117] trunk

Title: [208117] trunk Revision 208117 Author sbar...@apple.com Date 2016-10-29 18:38:22 -0700 (Sat, 29 Oct 2016) Log Message We should have a way of profiling when a get_by_id is pure and to emit a PureGetById in the DFG/FTL https://bugs.webkit.org/show_bug.cgi?id=163305 Reviewed by

[webkit-changes] [207697] trunk

Title: [207697] trunk Revision 207697 Author sbar...@apple.com Date 2016-10-21 15:38:22 -0700 (Fri, 21 Oct 2016) Log Message SpeculativeJIT::compileTryGetById needs to pass in NeedsToSpill along both the cell speculation and untyped speculation path

[webkit-changes] [207433] trunk/JSTests

Title: [207433] trunk/JSTests Revision 207433 Author sbar...@apple.com Date 2016-10-17 14:44:43 -0700 (Mon, 17 Oct 2016) Log Message Add more tests for the double->String conversion in ValueAdd constant folding https://bugs.webkit.org/show_bug.cgi?id=163517 Reviewed by Yusuke Suzuki. *

[webkit-changes] [207425] trunk/Source/JavaScriptCore

Title: [207425] trunk/Source/_javascript_Core Revision 207425 Author sbar...@apple.com Date 2016-10-17 13:34:15 -0700 (Mon, 17 Oct 2016) Log Message Build fix for HasOwnPropertyCache::Entry caused slowdown by introducing a constructor that doesn't use move semantics for the RefPtr

[webkit-changes] [207377] trunk

Title: [207377] trunk Revision 207377 Author sbar...@apple.com Date 2016-10-15 13:56:24 -0700 (Sat, 15 Oct 2016) Log Message Assertion failed under operationToLowerCase with a rope with zero length https://bugs.webkit.org/show_bug.cgi?id=163314 Reviewed by Mark Lam. JSTests: *

[webkit-changes] [207186] trunk/Source/JavaScriptCore

Title: [207186] trunk/Source/_javascript_Core Revision 207186 Author sbar...@apple.com Date 2016-10-11 20:14:56 -0700 (Tue, 11 Oct 2016) Log Message HasOwnPropertyCache needs to ref the UniquedStringImpls it sees https://bugs.webkit.org/show_bug.cgi?id=163255 Reviewed by Geoffrey Garen.

[webkit-changes] [207060] trunk

Title: [207060] trunk Revision 207060 Author sbar...@apple.com Date 2016-10-11 00:28:08 -0700 (Tue, 11 Oct 2016) Log Message ValueAdd should be constant folded if the operands are constant String,Primitive or Primitive,String https://bugs.webkit.org/show_bug.cgi?id=163182 Reviewed by

[webkit-changes] [207017] trunk

Title: [207017] trunk Revision 207017 Author sbar...@apple.com Date 2016-10-10 13:33:46 -0700 (Mon, 10 Oct 2016) Log Message compileCheckStringIdent in the FTL is wrong https://bugs.webkit.org/show_bug.cgi?id=163215 Reviewed by Mark Lam and Filip Pizlo. lowStringIdent() returns the

[webkit-changes] [206955] trunk/Source/JavaScriptCore

Title: [206955] trunk/Source/_javascript_Core Revision 206955 Author sbar...@apple.com Date 2016-10-08 11:32:12 -0700 (Sat, 08 Oct 2016) Log Message HasIndexedProperty clobberize rule is wrong for Array::ForceOSRExit https://bugs.webkit.org/show_bug.cgi?id=159942 Reviewed by Filip

[webkit-changes] [206885] trunk/Source/JavaScriptCore

Title: [206885] trunk/Source/_javascript_Core Revision 206885 Author sbar...@apple.com Date 2016-10-06 15:40:37 -0700 (Thu, 06 Oct 2016) Log Message HasOwnPropertyCache flattening dictionaries is causing insane memory usage with the uBlock Safari extension

[webkit-changes] [206841] trunk/Source/JavaScriptCore

Title: [206841] trunk/Source/_javascript_Core Revision 206841 Author sbar...@apple.com Date 2016-10-05 17:50:59 -0700 (Wed, 05 Oct 2016) Log Message PCToCodeOriginMap builder should use labelIgnoringWatchpoints() inside the DFG https://bugs.webkit.org/show_bug.cgi?id=162936 Reviewed by

[webkit-changes] [206804] trunk

Title: [206804] trunk Revision 206804 Author sbar...@apple.com Date 2016-10-04 23:16:15 -0700 (Tue, 04 Oct 2016) Log Message String.prototype.toLowerCase should be a DFG/FTL intrinsic https://bugs.webkit.org/show_bug.cgi?id=162887 Reviewed by Filip Pizlo and Yusuke Suzuki. JSTests: *

[webkit-changes] [206767] trunk/Source/JavaScriptCore

Title: [206767] trunk/Source/_javascript_Core Revision 206767 Author sbar...@apple.com Date 2016-10-04 02:19:48 -0700 (Tue, 04 Oct 2016) Log Message Follow up fix to GetMapBucket and MapHash speculating on child node types. To fix this, on 32-bit platforms, we do not speculate on the

[webkit-changes] [206763] trunk/Source/JavaScriptCore

Title: [206763] trunk/Source/_javascript_Core Revision 206763 Author sbar...@apple.com Date 2016-10-03 17:35:52 -0700 (Mon, 03 Oct 2016) Log Message GetMapBucket node should speculate on the type of its 'key' child https://bugs.webkit.org/show_bug.cgi?id=161638 Reviewed by Filip Pizlo.

[webkit-changes] [206746] trunk

Title: [206746] trunk Revision 206746 Author sbar...@apple.com Date 2016-10-03 13:49:34 -0700 (Mon, 03 Oct 2016) Log Message MapHash should speculate on the type of its child node https://bugs.webkit.org/show_bug.cgi?id=161922 Reviewed by Filip Pizlo. JSTests: *

[webkit-changes] [206647] trunk

Title: [206647] trunk Revision 206647 Author sbar...@apple.com Date 2016-09-30 11:44:16 -0700 (Fri, 30 Sep 2016) Log Message Arrow functions should not allow duplicate parameter names https://bugs.webkit.org/show_bug.cgi?id=162741 Reviewed by Filip Pizlo. JSTests: * test262.yaml:

[webkit-changes] [206646] trunk/JSTests

Title: [206646] trunk/JSTests Revision 206646 Author sbar...@apple.com Date 2016-09-30 11:39:59 -0700 (Fri, 30 Sep 2016) Log Message Make some microbenchmarks run for less time. Rubber stamped by Filip Pizlo. * microbenchmarks/bound-function-construction-performance.js: (foo): *

[webkit-changes] [206590] trunk

Title: [206590] trunk Revision 206590 Author sbar...@apple.com Date 2016-09-29 11:03:23 -0700 (Thu, 29 Sep 2016) Log Message We don't properly propagate non-simple-parameter-list when parsing a setter https://bugs.webkit.org/show_bug.cgi?id=160483 Reviewed by Joseph Pecoraro. JSTests:

[webkit-changes] [206573] trunk

Title: [206573] trunk Revision 206573 Author sbar...@apple.com Date 2016-09-28 18:29:03 -0700 (Wed, 28 Sep 2016) Log Message stringProtoFuncRepeatCharacter will return `null` when it should not https://bugs.webkit.org/show_bug.cgi?id=161944 Reviewed by Yusuke Suzuki. JSTests: *

[webkit-changes] [206149] trunk

Title: [206149] trunk Revision 206149 Author sbar...@apple.com Date 2016-09-20 08:56:42 -0700 (Tue, 20 Sep 2016) Log Message JSTests: Unreviewed, added test for x86 32-bit failure for HasOwnProperty node in DFG. * stress/has-own-property-called-on-non-object.js: Added. (let.objs):

[webkit-changes] [206136] trunk

Title: [206136] trunk Revision 206136 Author sbar...@apple.com Date 2016-09-19 18:05:50 -0700 (Mon, 19 Sep 2016) Log Message Make HasOwnProperty faster https://bugs.webkit.org/show_bug.cgi?id=161708 Reviewed by Geoffrey Garen. JSTests: * microbenchmarks/has-own-property-name-cache.js:

[webkit-changes] [205848] trunk

Title: [205848] trunk Revision 205848 Author sbar...@apple.com Date 2016-09-12 19:57:37 -0700 (Mon, 12 Sep 2016) Log Message Speed up Function.prototype.bind a bit by making it a builtin https://bugs.webkit.org/show_bug.cgi?id=161879 Reviewed by Filip Pizlo. JSTests: *

[webkit-changes] [205842] trunk

Title: [205842] trunk Revision 205842 Author sbar...@apple.com Date 2016-09-12 17:14:59 -0700 (Mon, 12 Sep 2016) Log Message HashMapImpl should take into account m_deleteCount in its load factor and it should be able to rehash the table to be smaller

[webkit-changes] [205822] trunk/Source

Title: [205822] trunk/Source Revision 205822 Author sbar...@apple.com Date 2016-09-12 14:13:09 -0700 (Mon, 12 Sep 2016) Log Message Add WebKit support for an option in Safari's debug menu similar to "Get Bytecode Profile" but for the Sampling Profiler's data

[webkit-changes] [205819] trunk

Title: [205819] trunk Revision 205819 Author sbar...@apple.com Date 2016-09-12 14:04:25 -0700 (Mon, 12 Sep 2016) Log Message MapHash should do constant folding when it has a constant argument and its legal to hash that value https://bugs.webkit.org/show_bug.cgi?id=161639 Reviewed by

[webkit-changes] [205753] trunk/Source/JavaScriptCore

Title: [205753] trunk/Source/_javascript_Core Revision 205753 Author sbar...@apple.com Date 2016-09-09 11:04:19 -0700 (Fri, 09 Sep 2016) Log Message Make hasOwnProperty ALWAYS_INLINE https://bugs.webkit.org/show_bug.cgi?id=161775 Reviewed by Ryosuke Niwa. Speedometer spends around 2.5%

[webkit-changes] [205675] trunk

Title: [205675] trunk Revision 205675 Author sbar...@apple.com Date 2016-09-08 16:19:38 -0700 (Thu, 08 Sep 2016) Log Message We should inline operationConvertJSValueToBoolean into JIT code https://bugs.webkit.org/show_bug.cgi?id=161729 Reviewed by Filip Pizlo. JSTests: *

[webkit-changes] [205535] trunk

Title: [205535] trunk Revision 205535 Author sbar...@apple.com Date 2016-09-06 19:48:35 -0700 (Tue, 06 Sep 2016) Log Message ProxyObject's structure should not have ObjectPrototype as its prototype and it should not have special behavior for intercepting "__proto__"

[webkit-changes] [205523] trunk/Source/JavaScriptCore

Title: [205523] trunk/Source/_javascript_Core Revision 205523 Author sbar...@apple.com Date 2016-09-06 16:55:09 -0700 (Tue, 06 Sep 2016) Log Message Unreviewed build fix for 32-bit platforms after r205520. * dfg/DFGSpeculativeJIT.h: (JSC::DFG::SpeculativeJIT::callOperation): Deleted.

[webkit-changes] [205522] trunk/Source/JavaScriptCore

Title: [205522] trunk/Source/_javascript_Core Revision 205522 Author sbar...@apple.com Date 2016-09-06 16:51:24 -0700 (Tue, 06 Sep 2016) Log Message Member call on NULL pointer in _javascript_Core/dfg/DFGAbstractInterpretterInlines.h https://bugs.webkit.org/show_bug.cgi?id=160870

[webkit-changes] [205283] trunk/Source/JavaScriptCore

Title: [205283] trunk/Source/_javascript_Core Revision 205283 Author sbar...@apple.com Date 2016-09-01 01:22:21 -0700 (Thu, 01 Sep 2016) Log Message JITMathIC was misusing maxJumpReplacementSize https://bugs.webkit.org/show_bug.cgi?id=161356 Reviewed by Benjamin Poulain. JITMathIC was

[webkit-changes] [205107] trunk/Source/JavaScriptCore

Title: [205107] trunk/Source/_javascript_Core Revision 205107 Author sbar...@apple.com Date 2016-08-28 16:31:46 -0700 (Sun, 28 Aug 2016) Log Message Make SpeculatedType a 64-bit integer https://bugs.webkit.org/show_bug.cgi?id=161268 Reviewed by Filip Pizlo and Benjamin Poulain. I'm

[webkit-changes] [204882] trunk

Title: [204882] trunk Revision 204882 Author sbar...@apple.com Date 2016-08-23 20:39:33 -0700 (Tue, 23 Aug 2016) Log Message It should be easy to run ES6SampleBench from the jsc shell https://bugs.webkit.org/show_bug.cgi?id=161085 Reviewed by Yusuke Suzuki. PerformanceTests: This

[webkit-changes] [204861] trunk/Source/JavaScriptCore

Title: [204861] trunk/Source/_javascript_Core Revision 204861 Author sbar...@apple.com Date 2016-08-23 15:16:46 -0700 (Tue, 23 Aug 2016) Log Message strict mode eval should not fire the var injection watch point https://bugs.webkit.org/show_bug.cgi?id=161104 Reviewed by Geoffrey Garen.

[webkit-changes] [204840] trunk/Source/JavaScriptCore

Title: [204840] trunk/Source/_javascript_Core Revision 204840 Author sbar...@apple.com Date 2016-08-23 10:32:52 -0700 (Tue, 23 Aug 2016) Log Message JIT::updateTopCallframe() in the baseline JIT should use PC instead of PC+1 https://bugs.webkit.org/show_bug.cgi?id=158955 Reviewed by

<    4   5   6   7   8   9   10   11   12   >