[webkit-changes] [206530] trunk/Source/JavaScriptCore

2016-09-28 Thread fpizlo
Title: [206530] trunk/Source/_javascript_Core Revision 206530 Author fpi...@apple.com Date 2016-09-28 12:11:49 -0700 (Wed, 28 Sep 2016) Log Message Store-load fences should be a lot cheaper on ARM https://bugs.webkit.org/show_bug.cgi?id=162461 Rubber stamped by Keith Miller. It turns ou

[webkit-changes] [206539] trunk/Source/JavaScriptCore

2016-09-28 Thread fpizlo
Title: [206539] trunk/Source/_javascript_Core Revision 206539 Author fpi...@apple.com Date 2016-09-28 13:30:44 -0700 (Wed, 28 Sep 2016) Log Message Optimize B3->Air lowering of Fence on ARM https://bugs.webkit.org/show_bug.cgi?id=162342 Reviewed by Geoffrey Garen. This gives us comprehe

[webkit-changes] [206628] trunk/Source/JavaScriptCore

2016-09-29 Thread fpizlo
Title: [206628] trunk/Source/_javascript_Core Revision 206628 Author fpi...@apple.com Date 2016-09-29 17:48:55 -0700 (Thu, 29 Sep 2016) Log Message REGRESSION(r206555): It made Dromaeo/jslib-style-jquery.html crash https://bugs.webkit.org/show_bug.cgi?id=162721 Reviewed by Keith Miller.

[webkit-changes] [206640] trunk

2016-09-30 Thread fpizlo
Title: [206640] trunk Revision 206640 Author fpi...@apple.com Date 2016-09-30 09:59:24 -0700 (Fri, 30 Sep 2016) Log Message Air should have a way of expressing additional instruction flags https://bugs.webkit.org/show_bug.cgi?id=162699 Reviewed by Mark Lam. Source/_javascript_Core:

[webkit-changes] [206642] trunk/Source/JavaScriptCore

2016-09-30 Thread fpizlo
Title: [206642] trunk/Source/_javascript_Core Revision 206642 Author fpi...@apple.com Date 2016-09-30 10:02:46 -0700 (Fri, 30 Sep 2016) Log Message 64-bit LLInt needs to have a concurrency-aware barrier https://bugs.webkit.org/show_bug.cgi?id=162790 Reviewed by Mark Lam. In a concurrent

[webkit-changes] [206682] trunk/Source

2016-09-30 Thread fpizlo
Title: [206682] trunk/Source Revision 206682 Author fpi...@apple.com Date 2016-09-30 15:29:24 -0700 (Fri, 30 Sep 2016) Log Message B3::moveConstants should be able to edit code to minimize the number of constants https://bugs.webkit.org/show_bug.cgi?id=162764 Reviewed by Saam Barati.

[webkit-changes] [206694] trunk/Source/JavaScriptCore

2016-09-30 Thread fpizlo
Title: [206694] trunk/Source/_javascript_Core Revision 206694 Author fpi...@apple.com Date 2016-09-30 17:08:28 -0700 (Fri, 30 Sep 2016) Log Message B3 should support trapping memory accesses https://bugs.webkit.org/show_bug.cgi?id=162689 Reviewed by Geoffrey Garen. This adds a t

[webkit-changes] [206709] trunk/Source/JavaScriptCore

2016-10-01 Thread fpizlo
Title: [206709] trunk/Source/_javascript_Core Revision 206709 Author fpi...@apple.com Date 2016-10-01 14:14:19 -0700 (Sat, 01 Oct 2016) Log Message Get rid of isMarkedOrNewlyAllocated https://bugs.webkit.org/show_bug.cgi?id=162842 Reviewed by Dan Bernstein. This function has bec

[webkit-changes] [206739] trunk

2016-10-03 Thread fpizlo
Title: [206739] trunk Revision 206739 Author fpi...@apple.com Date 2016-10-03 11:36:55 -0700 (Mon, 03 Oct 2016) Log Message B3 trapping memory accesses should be documented https://bugs.webkit.org/show_bug.cgi?id=162845 Reviewed by Geoffrey Garen. Source/_javascript_Core: While

[webkit-changes] [207000] trunk/Source/JavaScriptCore

2016-10-10 Thread fpizlo
Title: [207000] trunk/Source/_javascript_Core Revision 207000 Author fpi...@apple.com Date 2016-10-10 09:45:15 -0700 (Mon, 10 Oct 2016) Log Message B3 should know about mutable pinned registers https://bugs.webkit.org/show_bug.cgi?id=163172 Reviewed by Keith Miller. If we have m

[webkit-changes] [207004] trunk/Source/JavaScriptCore

2016-10-10 Thread fpizlo
Title: [207004] trunk/Source/_javascript_Core Revision 207004 Author fpi...@apple.com Date 2016-10-10 10:12:34 -0700 (Mon, 10 Oct 2016) Log Message Air should expose API for pinning registers https://bugs.webkit.org/show_bug.cgi?id=163175 Reviewed by Keith Miller. You can now ca

[webkit-changes] [207039] trunk/Source/JavaScriptCore

2016-10-10 Thread fpizlo
Title: [207039] trunk/Source/_javascript_Core Revision 207039 Author fpi...@apple.com Date 2016-10-10 20:39:05 -0700 (Mon, 10 Oct 2016) Log Message B3->Air lowering should be able to emit complex leas on x86 https://bugs.webkit.org/show_bug.cgi?id=163234 Reviewed by Saam Barati.

[webkit-changes] [207163] trunk/Source/JavaScriptCore

2016-10-11 Thread fpizlo
Title: [207163] trunk/Source/_javascript_Core Revision 207163 Author fpi...@apple.com Date 2016-10-11 13:37:51 -0700 (Tue, 11 Oct 2016) Log Message B3->Air lowering needs the same defenses in effectiveAddr() that it has in tryAppendLea() https://bugs.webkit.org/show_bug.cgi?id=163264 Rev

[webkit-changes] [207164] trunk/Source/JavaScriptCore

2016-10-11 Thread fpizlo
Title: [207164] trunk/Source/_javascript_Core Revision 207164 Author fpi...@apple.com Date 2016-10-11 13:51:53 -0700 (Tue, 11 Oct 2016) Log Message Air should be able to replace constant materializations with adds https://bugs.webkit.org/show_bug.cgi?id=162749 Reviewed by Yusuke Suzuki.

[webkit-changes] [207179] trunk/Source

2016-10-11 Thread fpizlo
Title: [207179] trunk/Source Revision 207179 Author fpi...@apple.com Date 2016-10-11 16:52:02 -0700 (Tue, 11 Oct 2016) Log Message MarkedBlock should know what objects are live during marking https://bugs.webkit.org/show_bug.cgi?id=162309 Reviewed by Geoffrey Garen. Source/_java

[webkit-changes] [207222] trunk/Source/JavaScriptCore

2016-10-12 Thread fpizlo
Title: [207222] trunk/Source/_javascript_Core Revision 207222 Author fpi...@apple.com Date 2016-10-12 09:56:34 -0700 (Wed, 12 Oct 2016) Log Message Remove JITWriteBarrier.h https://bugs.webkit.org/show_bug.cgi?id=163334 Reviewed by Mark Lam. I guess that the idea of JITWriteBarr

[webkit-changes] [207230] trunk/Source/JavaScriptCore

2016-10-12 Thread fpizlo
Title: [207230] trunk/Source/_javascript_Core Revision 207230 Author fpi...@apple.com Date 2016-10-12 12:01:21 -0700 (Wed, 12 Oct 2016) Log Message REGRESSION (r207179): ASSERTION FAILED: node.cell != previousCell https://bugs.webkit.org/show_bug.cgi?id=163337 Reviewed by Mark Lam.

[webkit-changes] [207263] trunk/Source/JavaScriptCore

2016-10-12 Thread fpizlo
Title: [207263] trunk/Source/_javascript_Core Revision 207263 Author fpi...@apple.com Date 2016-10-12 16:56:34 -0700 (Wed, 12 Oct 2016) Log Message The blackening of CellState is a bad way of tracking if the object is being marked for the first time https://bugs.webkit.org/show_bug.cgi?id

[webkit-changes] [207408] trunk/Source/JavaScriptCore

2016-10-17 Thread fpizlo
Title: [207408] trunk/Source/_javascript_Core Revision 207408 Author fpi...@apple.com Date 2016-10-17 09:19:10 -0700 (Mon, 17 Oct 2016) Log Message Air::IRC needs to place all Tmps on some worklist, even if they have no interference edges https://bugs.webkit.org/show_bug.cgi?id=163509 Re

[webkit-changes] [224349] trunk

2017-11-02 Thread fpizlo
Title: [224349] trunk Revision 224349 Author fpi...@apple.com Date 2017-11-02 12:17:25 -0700 (Thu, 02 Nov 2017) Log Message AI does not correctly model the clobber case of ArithClz32 https://bugs.webkit.org/show_bug.cgi?id=179188 Reviewed by Michael Saboff. JSTests: * stress/arith-clz3

[webkit-changes] [224562] trunk/Source/WTF

2017-11-07 Thread fpizlo
Title: [224562] trunk/Source/WTF Revision 224562 Author fpi...@apple.com Date 2017-11-07 17:30:14 -0800 (Tue, 07 Nov 2017) Log Message Disable isoheaps on iOS Reviewed by Ryosuke Niwa. * wtf/IsoMalloc.h: Modified Paths trunk/Source/WTF/ChangeLog trunk/Source/WTF/wtf/IsoMalloc.h trunk/

[webkit-changes] [225125] trunk/Source/bmalloc

2017-11-23 Thread fpizlo
Title: [225125] trunk/Source/bmalloc Revision 225125 Author fpi...@apple.com Date 2017-11-23 16:47:58 -0800 (Thu, 23 Nov 2017) Log Message Isolated Heaps caused an increase in reported leaks on the bots https://bugs.webkit.org/show_bug.cgi?id=179463 Reviewed by Darin Adler. This

[webkit-changes] [225180] trunk/Source/bmalloc

2017-11-27 Thread fpizlo
Title: [225180] trunk/Source/bmalloc Revision 225180 Author fpi...@apple.com Date 2017-11-27 10:24:56 -0800 (Mon, 27 Nov 2017) Log Message Don't crash in forEachEntry when DebugHeap is enabled. Unreviewed, fixing crashes on leaks bots by removing an assertion. * bmalloc/IsoTLS.cpp: (bma

[webkit-changes] [225315] trunk/Source/JavaScriptCore

2017-11-29 Thread fpizlo
Title: [225315] trunk/Source/_javascript_Core Revision 225315 Author fpi...@apple.com Date 2017-11-29 20:48:52 -0800 (Wed, 29 Nov 2017) Log Message CodeBlockSet::deleteUnmarkedAndUnreferenced can be a little more efficient https://bugs.webkit.org/show_bug.cgi?id=180108 Reviewed by Saam B

[webkit-changes] [196642] trunk

2016-02-16 Thread fpizlo
Title: [196642] trunk Revision 196642 Author fpi...@apple.com Date 2016-02-16 11:12:36 -0800 (Tue, 16 Feb 2016) Log Message FTL should support StringFromCharCode https://bugs.webkit.org/show_bug.cgi?id=154267 Source/_javascript_Core: rdar://problem/24192536 Reviewed by Mark Lam. * dfg/

[webkit-changes] [196652] trunk/Source/JavaScriptCore

2016-02-16 Thread fpizlo
Title: [196652] trunk/Source/_javascript_Core Revision 196652 Author fpi...@apple.com Date 2016-02-16 13:12:04 -0800 (Tue, 16 Feb 2016) Log Message FTL should support NewTypedArray https://bugs.webkit.org/show_bug.cgi?id=154268 Reviewed by Saam Barati. 3% speed-up on pdfjs. This was alr

[webkit-changes] [196684] trunk/Source/JavaScriptCore

2016-02-16 Thread fpizlo
Title: [196684] trunk/Source/_javascript_Core Revision 196684 Author fpi...@apple.com Date 2016-02-16 20:25:57 -0800 (Tue, 16 Feb 2016) Log Message FTL should support NewTypedArray https://bugs.webkit.org/show_bug.cgi?id=154268 Reviewed by Saam Barati. 3% speed-up on pdfjs. This was alr

[webkit-changes] [196685] trunk/Source/JavaScriptCore

2016-02-16 Thread fpizlo
Title: [196685] trunk/Source/_javascript_Core Revision 196685 Author fpi...@apple.com Date 2016-02-16 21:29:34 -0800 (Tue, 16 Feb 2016) Log Message FTL should support CompareEq(String:, String:) https://bugs.webkit.org/show_bug.cgi?id=154269 rdar://problem/24499921 Reviewed by Benjamin P

[webkit-changes] [196686] trunk/Source

2016-02-16 Thread fpizlo
Title: [196686] trunk/Source Revision 196686 Author fpi...@apple.com Date 2016-02-16 22:13:24 -0800 (Tue, 16 Feb 2016) Log Message FTL_USES_B3 should be unconditionally true https://bugs.webkit.org/show_bug.cgi?id=154324 Reviewed by Benjamin Poulain. Source/_javascript_Core: * dfg/DFGC

[webkit-changes] [196731] trunk/Source/JavaScriptCore

2016-02-17 Thread fpizlo
Title: [196731] trunk/Source/_javascript_Core Revision 196731 Author fpi...@apple.com Date 2016-02-17 16:42:36 -0800 (Wed, 17 Feb 2016) Log Message Rename FTLB3Blah to FTLBlah https://bugs.webkit.org/show_bug.cgi?id=154365 Rubber stamped by Geoffrey Garen, Benjamin Poulain, Awesome Kling

[webkit-changes] [196758] trunk/Source/JavaScriptCore

2016-02-18 Thread fpizlo
Title: [196758] trunk/Source/_javascript_Core Revision 196758 Author fpi...@apple.com Date 2016-02-18 08:48:16 -0800 (Thu, 18 Feb 2016) Log Message Unreviewed, fix CMake build. This got messed up when rebasing. * CMakeLists.txt: Modified Paths trunk/Source/_javascript_Core/CMakeLists.t

[webkit-changes] [196759] trunk/Source/JavaScriptCore

2016-02-18 Thread fpizlo
Title: [196759] trunk/Source/_javascript_Core Revision 196759 Author fpi...@apple.com Date 2016-02-18 08:55:58 -0800 (Thu, 18 Feb 2016) Log Message Unreviewed, fix VS build. I didn't know we still did that, but apparently there's a bot for that. * _javascript_Core.vcxproj/_javascript_Cor

[webkit-changes] [196996] trunk/Source/JavaScriptCore

2016-02-23 Thread fpizlo
Title: [196996] trunk/Source/_javascript_Core Revision 196996 Author fpi...@apple.com Date 2016-02-23 14:17:24 -0800 (Tue, 23 Feb 2016) Log Message B3::Value doesn't self-destruct virtually enough (Causes many leaks in LowerDFGToB3::appendOSRExit) https://bugs.webkit.org/show_bug.cgi?id=1

[webkit-changes] [197037] trunk/Source/JavaScriptCore

2016-02-24 Thread fpizlo
Title: [197037] trunk/Source/_javascript_Core Revision 197037 Author fpi...@apple.com Date 2016-02-24 10:49:45 -0800 (Wed, 24 Feb 2016) Log Message Stackmaps have problems with double register constraints https://bugs.webkit.org/show_bug.cgi?id=154643 Reviewed by Geoffrey Garen. This is

[webkit-changes] [197299] trunk/Source/JavaScriptCore

2016-02-28 Thread fpizlo
Title: [197299] trunk/Source/_javascript_Core Revision 197299 Author fpi...@apple.com Date 2016-02-28 12:34:03 -0800 (Sun, 28 Feb 2016) Log Message FTL should lower its abstract heaps to B3 heap ranges https://bugs.webkit.org/show_bug.cgi?id=154782 Reviewed by Saam Barati. The FTL can d

[webkit-changes] [197357] trunk/Source/JavaScriptCore

2016-02-29 Thread fpizlo
Title: [197357] trunk/Source/_javascript_Core Revision 197357 Author fpi...@apple.com Date 2016-02-29 10:05:17 -0800 (Mon, 29 Feb 2016) Log Message FTL should be able to run everything in Octane/regexp https://bugs.webkit.org/show_bug.cgi?id=154266 Reviewed by Saam Barati. Adds FTL supp

[webkit-changes] [197361] trunk/Tools

2016-02-29 Thread fpizlo
Title: [197361] trunk/Tools Revision 197361 Author fpi...@apple.com Date 2016-02-29 11:35:17 -0800 (Mon, 29 Feb 2016) Log Message We've been running Octane/regexp all wrong in run-jsc-benchmarks https://bugs.webkit.org/show_bug.cgi?id=154827 Reviewed by Andreas Kling. Octane v.2 and Jet

[webkit-changes] [197365] trunk/Source/JavaScriptCore

2016-02-29 Thread fpizlo
Title: [197365] trunk/Source/_javascript_Core Revision 197365 Author fpi...@apple.com Date 2016-02-29 14:14:59 -0800 (Mon, 29 Feb 2016) Log Message Make it cheap to #include "JITOperations.h" https://bugs.webkit.org/show_bug.cgi?id=154836 Reviewed by Mark Lam. Prior to this change, this

[webkit-changes] [197366] trunk

2016-02-29 Thread fpizlo
Title: [197366] trunk Revision 197366 Author fpi...@apple.com Date 2016-02-29 14:33:58 -0800 (Mon, 29 Feb 2016) Log Message B3 should have global store elimination https://bugs.webkit.org/show_bug.cgi?id=154658 Reviewed by Benjamin Poulain. Source/_javascript_Core: Implements fairly co

[webkit-changes] [197374] trunk/Source/JavaScriptCore

2016-02-29 Thread fpizlo
Title: [197374] trunk/Source/_javascript_Core Revision 197374 Author fpi...@apple.com Date 2016-02-29 16:39:20 -0800 (Mon, 29 Feb 2016) Log Message SpeculatedType should be easier to edit https://bugs.webkit.org/show_bug.cgi?id=154840 Reviewed by Mark Lam. We used to specify the bitmask

[webkit-changes] [197381] trunk/Source/JavaScriptCore

2016-02-29 Thread fpizlo
Title: [197381] trunk/Source/_javascript_Core Revision 197381 Author fpi...@apple.com Date 2016-02-29 19:18:59 -0800 (Mon, 29 Feb 2016) Log Message regress/script-tests/double-pollution-putbyoffset.js.ftl-eager timed out because of a lock ordering deadlock involving InferredType and CodeB

[webkit-changes] [197408] trunk

2016-03-01 Thread fpizlo
Title: [197408] trunk Revision 197408 Author fpi...@apple.com Date 2016-03-01 13:18:42 -0800 (Tue, 01 Mar 2016) Log Message Turn String.prototype.replace into an intrinsic https://bugs.webkit.org/show_bug.cgi?id=154835 Reviewed by Michael Saboff. Source/_javascript_Core: Octane/regexp

[webkit-changes] [197411] trunk/Source/JavaScriptCore

2016-03-01 Thread fpizlo
Title: [197411] trunk/Source/_javascript_Core Revision 197411 Author fpi...@apple.com Date 2016-03-01 13:40:38 -0800 (Tue, 01 Mar 2016) Log Message Unreviewed, fix CLOOP build. * jit/JITOperations.h: Modified Paths trunk/Source/_javascript_Core/ChangeLog trunk/Source/_javascript_Core/j

[webkit-changes] [197416] trunk

2016-03-01 Thread fpizlo
Title: [197416] trunk Revision 197416 Author fpi...@apple.com Date 2016-03-01 15:35:05 -0800 (Tue, 01 Mar 2016) Log Message FTL should simplify StringReplace with an empty replacement string https://bugs.webkit.org/show_bug.cgi?id=154871 Reviewed by Michael Saboff. This is a simple and

[webkit-changes] [197417] trunk/LayoutTests

2016-03-01 Thread fpizlo
Title: [197417] trunk/LayoutTests Revision 197417 Author fpi...@apple.com Date 2016-03-01 15:40:46 -0800 (Tue, 01 Mar 2016) Log Message FTL should simplify StringReplace with an empty replacement string https://bugs.webkit.org/show_bug.cgi?id=154871 Reviewed by Michael Saboff. Really ad

[webkit-changes] [197465] trunk/LayoutTests

2016-03-02 Thread fpizlo
Title: [197465] trunk/LayoutTests Revision 197465 Author fpi...@apple.com Date 2016-03-02 14:30:49 -0800 (Wed, 02 Mar 2016) Log Message Add a benchmark for string transcoding. Rubber stamped by Saam Barati. I wrote some code like this while working on https://github.com/WebAssembly/desi

[webkit-changes] [197485] trunk/Source/JavaScriptCore

2016-03-02 Thread fpizlo
Title: [197485] trunk/Source/_javascript_Core Revision 197485 Author fpi...@apple.com Date 2016-03-02 18:06:18 -0800 (Wed, 02 Mar 2016) Log Message RegExpPrototype should check for exceptions after calling toString and doing so should not be expensive https://bugs.webkit.org/show_bug.cgi?

[webkit-changes] [197492] trunk/Source/JavaScriptCore

2016-03-02 Thread fpizlo
Title: [197492] trunk/Source/_javascript_Core Revision 197492 Author fpi...@apple.com Date 2016-03-02 21:58:59 -0800 (Wed, 02 Mar 2016) Log Message RegExpExec/RegExpTest should not unconditionally speculate cell https://bugs.webkit.org/show_bug.cgi?id=154901 Reviewed by Benjamin Poulain.

[webkit-changes] [197520] trunk

2016-03-03 Thread fpizlo
Title: [197520] trunk Revision 197520 Author fpi...@apple.com Date 2016-03-03 15:30:49 -0800 (Thu, 03 Mar 2016) Log Message DFG should be able to compile StringReplace https://bugs.webkit.org/show_bug.cgi?id=154979 Reviewed by Benjamin Poulain. Source/_javascript_Core: Adds support for

[webkit-changes] [197542] trunk/Source/JavaScriptCore

2016-03-03 Thread fpizlo
Title: [197542] trunk/Source/_javascript_Core Revision 197542 Author fpi...@apple.com Date 2016-03-03 18:43:53 -0800 (Thu, 03 Mar 2016) Log Message Octane/regexp's Exec function should benefit from array length accessor inlining https://bugs.webkit.org/show_bug.cgi?id=154994 Reviewed by

[webkit-changes] [197547] trunk/LayoutTests

2016-03-03 Thread fpizlo
Title: [197547] trunk/LayoutTests Revision 197547 Author fpi...@apple.com Date 2016-03-03 21:49:23 -0800 (Thu, 03 Mar 2016) Log Message Unreviewed, remove test with flaky timeout that doesn't test anything anymore. This test was relevant back when arguments got torn off; something that we

[webkit-changes] [197549] trunk

2016-03-03 Thread fpizlo
Title: [197549] trunk Revision 197549 Author fpi...@apple.com Date 2016-03-03 22:36:24 -0800 (Thu, 03 Mar 2016) Log Message DFG/FTL should inline accesses to RegExpObject::m_lastIndex https://bugs.webkit.org/show_bug.cgi?id=155003 Reviewed by Benjamin Poulain. Source/_javascript_Core:

[webkit-changes] [197622] trunk/Source/JavaScriptCore

2016-03-05 Thread fpizlo
Title: [197622] trunk/Source/_javascript_Core Revision 197622 Author fpi...@apple.com Date 2016-03-05 16:48:11 -0800 (Sat, 05 Mar 2016) Log Message The most aggressive form of RegExpTest/RegExpExec should speculate more aggressively than just cell https://bugs.webkit.org/show_bug.cgi?id=1

[webkit-changes] [197641] trunk

2016-03-06 Thread fpizlo
Title: [197641] trunk Revision 197641 Author fpi...@apple.com Date 2016-03-06 12:11:09 -0800 (Sun, 06 Mar 2016) Log Message RegExpMatchesArray doesn't know how to have a bad time https://bugs.webkit.org/show_bug.cgi?id=155069 Reviewed by Yusuke Suzuki. Source/_javascript_Core: In trunk

[webkit-changes] [197650] trunk/Source/JavaScriptCore

2016-03-06 Thread fpizlo
Title: [197650] trunk/Source/_javascript_Core Revision 197650 Author fpi...@apple.com Date 2016-03-06 18:22:08 -0800 (Sun, 06 Mar 2016) Log Message Unreviewed, fix build. This was a messed up merge. * ftl/FTLLowerDFGToB3.cpp: (JSC::FTL::DFG::LowerDFGToB3::compileInstanceOf): Modified Pa

[webkit-changes] [197715] trunk/Source/JavaScriptCore

2016-03-07 Thread fpizlo
Title: [197715] trunk/Source/_javascript_Core Revision 197715 Author fpi...@apple.com Date 2016-03-07 16:34:44 -0800 (Mon, 07 Mar 2016) Log Message RegExp.prototype.exec() should call into Yarr at most once https://bugs.webkit.org/show_bug.cgi?id=155139 Reviewed by Saam Barati. For appa

[webkit-changes] [197729] trunk/Source/JavaScriptCore

2016-03-07 Thread fpizlo
Title: [197729] trunk/Source/_javascript_Core Revision 197729 Author fpi...@apple.com Date 2016-03-07 22:53:32 -0800 (Mon, 07 Mar 2016) Log Message createRegExpMatchesArray should allocate substrings more quickly https://bugs.webkit.org/show_bug.cgi?id=155160 Reviewed by Sam Weinig. Thi

[webkit-changes] [197730] trunk/Source/JavaScriptCore

2016-03-07 Thread fpizlo
Title: [197730] trunk/Source/_javascript_Core Revision 197730 Author fpi...@apple.com Date 2016-03-07 22:55:33 -0800 (Mon, 07 Mar 2016) Log Message Reduce the number of instructions needed to record the last regexp result https://bugs.webkit.org/show_bug.cgi?id=155161 Reviewed by Sam Wei

[webkit-changes] [197796] trunk/Source/JavaScriptCore

2016-03-08 Thread fpizlo
Title: [197796] trunk/Source/_javascript_Core Revision 197796 Author fpi...@apple.com Date 2016-03-08 13:15:07 -0800 (Tue, 08 Mar 2016) Log Message Regexp matching should incur less call overhead https://bugs.webkit.org/show_bug.cgi?id=155181 Reviewed by Geoffrey Garen. Previously we ha

[webkit-changes] [197833] trunk

2016-03-08 Thread fpizlo
Title: [197833] trunk Revision 197833 Author fpi...@apple.com Date 2016-03-08 21:16:47 -0800 (Tue, 08 Mar 2016) Log Message DFG should be able to constant-fold strings https://bugs.webkit.org/show_bug.cgi?id=155200 Reviewed by Geoffrey Garen. Source/_javascript_Core: This adds constant

[webkit-changes] [197838] trunk/Source/WTF

2016-03-08 Thread fpizlo
Title: [197838] trunk/Source/WTF Revision 197838 Author fpi...@apple.com Date 2016-03-08 23:29:43 -0800 (Tue, 08 Mar 2016) Log Message Remove failing assertion. There are strings that claim to be atomic but that the compiler thread can totally deal with, like the empty string. Rubber sta

[webkit-changes] [219763] trunk/Source

2017-07-22 Thread fpizlo
Title: [219763] trunk/Source Revision 219763 Author fpi...@apple.com Date 2017-07-22 07:36:18 -0700 (Sat, 22 Jul 2017) Log Message It should be easy to decide how WebKit yields https://bugs.webkit.org/show_bug.cgi?id=174298 Reviewed by Saam Barati. Source/bmalloc: Use sched_yie

[webkit-changes] [219897] trunk/Source/JavaScriptCore

2017-07-25 Thread fpizlo
Title: [219897] trunk/Source/_javascript_Core Revision 219897 Author fpi...@apple.com Date 2017-07-25 18:19:23 -0700 (Tue, 25 Jul 2017) Log Message GC should be fine with trading blocks between destructor and non-destructor blocks https://bugs.webkit.org/show_bug.cgi?id=174811 Reviewed b

[webkit-changes] [219898] trunk/Source

2017-07-25 Thread fpizlo
Title: [219898] trunk/Source Revision 219898 Author fpi...@apple.com Date 2017-07-25 18:58:36 -0700 (Tue, 25 Jul 2017) Log Message B3 should do LICM https://bugs.webkit.org/show_bug.cgi?id=174750 Reviewed by Keith Miller and Saam Barati. Source/_javascript_Core: Added a LICM ph

[webkit-changes] [220045] trunk/Source/WebCore

2017-07-29 Thread fpizlo
Title: [220045] trunk/Source/WebCore Revision 220045 Author fpi...@apple.com Date 2017-07-29 12:36:47 -0700 (Sat, 29 Jul 2017) Log Message Unreviewed, rollout r220044 because it set the bots on fire. It seems that the "-Wunguarded-availability-new" pragma is not widely supported.

[webkit-changes] [220145] trunk/Source/WebCore

2017-08-02 Thread fpizlo
Title: [220145] trunk/Source/WebCore Revision 220145 Author fpi...@apple.com Date 2017-08-02 11:24:19 -0700 (Wed, 02 Aug 2017) Log Message GPUBuffer::length() should return the size of the array buffer backing the GPU buffer, not the rounded-up GPU buffer length https://bugs.webkit.org/sh

[webkit-changes] [220148] trunk/Source

2017-08-02 Thread fpizlo
Title: [220148] trunk/Source Revision 220148 Author fpi...@apple.com Date 2017-08-02 12:57:50 -0700 (Wed, 02 Aug 2017) Log Message We should be OK with the gigacage being disabled on gmalloc https://bugs.webkit.org/show_bug.cgi?id=175082 Reviewed by Michael Saboff. Source/bmalloc:

[webkit-changes] [220154] trunk/Source/bmalloc

2017-08-02 Thread fpizlo
Title: [220154] trunk/Source/bmalloc Revision 220154 Author fpi...@apple.com Date 2017-08-02 14:50:33 -0700 (Wed, 02 Aug 2017) Log Message If Gigacage is disabled, bmalloc should service large aligned memory allocation requests through vmAllocate https://bugs.webkit.org/show_bug.cgi?id=17

[webkit-changes] [220165] trunk/Source

2017-08-02 Thread fpizlo
Title: [220165] trunk/Source Revision 220165 Author fpi...@apple.com Date 2017-08-02 18:32:07 -0700 (Wed, 02 Aug 2017) Log Message All C++ accesses to JSObject::m_butterfly should do caging https://bugs.webkit.org/show_bug.cgi?id=175039 Reviewed by Keith Miller. Source/_javascri

[webkit-changes] [220175] trunk/Source/JavaScriptCore

2017-08-02 Thread fpizlo
Title: [220175] trunk/Source/_javascript_Core Revision 220175 Author fpi...@apple.com Date 2017-08-02 18:57:37 -0700 (Wed, 02 Aug 2017) Log Message Sweeping should only scribble when sweeping to free list https://bugs.webkit.org/show_bug.cgi?id=175105 Reviewed by Saam Barati. I

[webkit-changes] [220184] trunk/Source/JavaScriptCore

2017-08-02 Thread fpizlo
Title: [220184] trunk/Source/_javascript_Core Revision 220184 Author fpi...@apple.com Date 2017-08-02 22:48:59 -0700 (Wed, 02 Aug 2017) Log Message LLInt should do pointer caging https://bugs.webkit.org/show_bug.cgi?id=175036 Reviewed by Keith Miller. Implementing this in the LLInt was

[webkit-changes] [220291] trunk/Source

2017-08-04 Thread fpizlo
Title: [220291] trunk/Source Revision 220291 Author fpi...@apple.com Date 2017-08-04 13:50:51 -0700 (Fri, 04 Aug 2017) Log Message The allocator used to allocate memory for MarkedBlocks and LargeAllocations should not be the Subspace itself https://bugs.webkit.org/show_bug.cgi?id=175141

[webkit-changes] [220322] trunk

2017-08-05 Thread fpizlo
Title: [220322] trunk Revision 220322 Author fpi...@apple.com Date 2017-08-05 21:43:37 -0700 (Sat, 05 Aug 2017) Log Message REGRESSION (r219895-219897): Number of leaks on Open Source went from 9240 to 235983 and is now at 302372 https://bugs.webkit.org/show_bug.cgi?id=175083 Reviewed by

[webkit-changes] [220353] trunk/Source/WTF

2017-08-07 Thread fpizlo
Title: [220353] trunk/Source/WTF Revision 220353 Author fpi...@apple.com Date 2017-08-07 14:53:20 -0700 (Mon, 07 Aug 2017) Log Message Unreviewed, try to fix Windows build. * wtf/Gigacage.cpp: * wtf/Gigacage.h: Modified Paths trunk/Source/WTF/ChangeLog trunk/Source/WTF/wtf/Gigacage.cpp

[webkit-changes] [220368] trunk/Source

2017-08-07 Thread fpizlo
Title: [220368] trunk/Source Revision 220368 Author fpi...@apple.com Date 2017-08-07 16:30:15 -0700 (Mon, 07 Aug 2017) Log Message Baseline JIT should do caging https://bugs.webkit.org/show_bug.cgi?id=175037 Reviewed by Mark Lam. Source/bmalloc: This centralizes the notion of p

[webkit-changes] [220416] trunk/Source

2017-08-08 Thread fpizlo
Title: [220416] trunk/Source Revision 220416 Author fpi...@apple.com Date 2017-08-08 12:44:20 -0700 (Tue, 08 Aug 2017) Log Message Baseline JIT should do caging https://bugs.webkit.org/show_bug.cgi?id=175037 Reviewed by Mark Lam. Source/bmalloc: This centralizes the notion of p

[webkit-changes] [220441] trunk/Source/JavaScriptCore

2017-08-08 Thread fpizlo
Title: [220441] trunk/Source/_javascript_Core Revision 220441 Author fpi...@apple.com Date 2017-08-08 20:48:44 -0700 (Tue, 08 Aug 2017) Log Message ICs should do caging https://bugs.webkit.org/show_bug.cgi?id=175295 Reviewed by Saam Barati. Adds the appropriate cage() calls in o

[webkit-changes] [204856] trunk/Source/JavaScriptCore

2016-08-23 Thread fpizlo
Title: [204856] trunk/Source/_javascript_Core Revision 204856 Author fpi...@apple.com Date 2016-08-23 13:29:35 -0700 (Tue, 23 Aug 2016) Log Message Unreviewed, fix CLoop build. This fixes the CLoop build while still ensuring that Interpreter.h is a project header. * llint/LowLev

[webkit-changes] [204857] trunk/Source/JavaScriptCore

2016-08-23 Thread fpizlo
Title: [204857] trunk/Source/_javascript_Core Revision 204857 Author fpi...@apple.com Date 2016-08-23 13:43:56 -0700 (Tue, 23 Aug 2016) Log Message Spilling of constant tmps should make it easier for the spill code optimizer to rematerialize the constant https://bugs.webkit.org/show_bug.c

[webkit-changes] [204866] trunk/Source/JavaScriptCore

2016-08-23 Thread fpizlo
Title: [204866] trunk/Source/_javascript_Core Revision 204866 Author fpi...@apple.com Date 2016-08-23 16:19:14 -0700 (Tue, 23 Aug 2016) Log Message REGRESSION(204854): ASan is unhappy https://bugs.webkit.org/show_bug.cgi?id=161109 Reviewed by Geoffrey Garen. I messed up RegExpCo

[webkit-changes] [204867] trunk/LayoutTests

2016-08-23 Thread fpizlo
Title: [204867] trunk/LayoutTests Revision 204867 Author fpi...@apple.com Date 2016-08-23 16:21:53 -0700 (Tue, 23 Aug 2016) Log Message Skip some tests: https://bugs.webkit.org/show_bug.cgi?id=161114 svg/carto.net/window.svg fails in debug after r204854 https://bugs.webkit.org/show_bug.cg

[webkit-changes] [204897] trunk/Source/JavaScriptCore

2016-08-24 Thread fpizlo
Title: [204897] trunk/Source/_javascript_Core Revision 204897 Author fpi...@apple.com Date 2016-08-24 09:23:41 -0700 (Wed, 24 Aug 2016) Log Message AssemblyHelpers::emitAllocateWithNonNullAllocator() crashes in the FTL on ARM64 https://bugs.webkit.org/show_bug.cgi?id=161138 rdar://problem

[webkit-changes] [204901] trunk

2016-08-24 Thread fpizlo
Title: [204901] trunk Revision 204901 Author fpi...@apple.com Date 2016-08-24 09:55:50 -0700 (Wed, 24 Aug 2016) Log Message js/regress/put-by-id-transition-with-indexing-header.html and svg/carto.net/window.svg fail in debug after r204854 https://bugs.webkit.org/show_bug.cgi?id=161115 Re

[webkit-changes] [205304] trunk

2016-09-01 Thread fpizlo
Title: [205304] trunk Revision 205304 Author fpi...@apple.com Date 2016-09-01 11:55:50 -0700 (Thu, 01 Sep 2016) Log Message ObjectAllocationSinkingPhase::insertOSRHintsForUpdate() fails to emit updated hints in some cases https://bugs.webkit.org/show_bug.cgi?id=161492 Reviewed by Mark La

[webkit-changes] [205463] trunk/Source/JavaScriptCore

2016-09-05 Thread fpizlo
Title: [205463] trunk/Source/_javascript_Core Revision 205463 Author fpi...@apple.com Date 2016-09-05 18:11:19 -0700 (Mon, 05 Sep 2016) Log Message Unreviewed, fix cloop build. * bytecode/SuperSampler.cpp: Modified Paths trunk/Source/_javascript_Core/ChangeLog trunk/Source/_javascript_

[webkit-changes] [205465] trunk/Source/JavaScriptCore

2016-09-05 Thread fpizlo
Title: [205465] trunk/Source/_javascript_Core Revision 205465 Author fpi...@apple.com Date 2016-09-05 19:16:03 -0700 (Mon, 05 Sep 2016) Log Message Unreviewed, reset generator test results after the butterflies. * Scripts/tests/builtins/expected/_javascript_Core-Builtin.Promise-Combined.

[webkit-changes] [205466] trunk/Source/JavaScriptCore

2016-09-05 Thread fpizlo
Title: [205466] trunk/Source/_javascript_Core Revision 205466 Author fpi...@apple.com Date 2016-09-05 19:39:11 -0700 (Mon, 05 Sep 2016) Log Message Heap::isMarked() should use concurrent lazy flipping https://bugs.webkit.org/show_bug.cgi?id=161613 Reviewed by Michael Catanzaro. I found

[webkit-changes] [205494] trunk/Source/JavaScriptCore

2016-09-06 Thread fpizlo
Title: [205494] trunk/Source/_javascript_Core Revision 205494 Author fpi...@apple.com Date 2016-09-06 11:18:10 -0700 (Tue, 06 Sep 2016) Log Message Typed arrays should use MarkedSpace instead of CopiedSpace https://bugs.webkit.org/show_bug.cgi?id=161100 Reviewed by Geoffrey Garen.

[webkit-changes] [205566] trunk/Source/JavaScriptCore

2016-09-07 Thread fpizlo
Title: [205566] trunk/Source/_javascript_Core Revision 205566 Author fpi...@apple.com Date 2016-09-07 13:21:46 -0700 (Wed, 07 Sep 2016) Log Message Make emitAllocateWithNonNullAllocator's sub32() disallow-scratch-friendly https://bugs.webkit.org/show_bug.cgi?id=161706 Reviewed by Geoffre

[webkit-changes] [205648] trunk/Source/JavaScriptCore

2016-09-08 Thread fpizlo
Title: [205648] trunk/Source/_javascript_Core Revision 205648 Author fpi...@apple.com Date 2016-09-08 09:47:34 -0700 (Thu, 08 Sep 2016) Log Message Typed arrays should use MarkedSpace instead of CopiedSpace https://bugs.webkit.org/show_bug.cgi?id=161100 Reviewed by Geoffrey Garen.

[webkit-changes] [205654] trunk/Source

2016-09-08 Thread fpizlo
Title: [205654] trunk/Source Revision 205654 Author fpi...@apple.com Date 2016-09-08 11:59:02 -0700 (Thu, 08 Sep 2016) Log Message Move JSMap/JSSet over to Auxiliary MarkedSpace https://bugs.webkit.org/show_bug.cgi?id=161744 Reviewed by Saam Barati. Source/_javascript_Core: Thi

[webkit-changes] [205658] trunk/Source/JavaScriptCore

2016-09-08 Thread fpizlo
Title: [205658] trunk/Source/_javascript_Core Revision 205658 Author fpi...@apple.com Date 2016-09-08 13:35:55 -0700 (Thu, 08 Sep 2016) Log Message Heap version should be 32-bit https://bugs.webkit.org/show_bug.cgi?id=161751 Reviewed by Mark Lam. 32-bit devices are probably gett

[webkit-changes] [205683] trunk/Source

2016-09-08 Thread fpizlo
Title: [205683] trunk/Source Revision 205683 Author fpi...@apple.com Date 2016-09-08 18:22:05 -0700 (Thu, 08 Sep 2016) Log Message Heap::isMarked() shouldn't pay the price of concurrent lazy flipping https://bugs.webkit.org/show_bug.cgi?id=161760 Reviewed by Mark Lam. Source/_javascript_

[webkit-changes] [205746] trunk/Source/JavaScriptCore

2016-09-09 Thread fpizlo
Title: [205746] trunk/Source/_javascript_Core Revision 205746 Author fpi...@apple.com Date 2016-09-09 09:50:10 -0700 (Fri, 09 Sep 2016) Log Message HashMapImpl needs to m_buffer.clear() in its constructor https://bugs.webkit.org/show_bug.cgi?id=161796 Reviewed by Keith Miller. T

[webkit-changes] [205767] trunk/Source/JavaScriptCore

2016-09-09 Thread fpizlo
Title: [205767] trunk/Source/_javascript_Core Revision 205767 Author fpi...@apple.com Date 2016-09-09 14:20:02 -0700 (Fri, 09 Sep 2016) Log Message jsc.cpp should call initializeMainThread() to make sure that GC thread assertions work https://bugs.webkit.org/show_bug.cgi?id=161801 Review

[webkit-changes] [205794] trunk/Source

2016-09-11 Thread fpizlo
Title: [205794] trunk/Source Revision 205794 Author fpi...@apple.com Date 2016-09-11 21:03:36 -0700 (Sun, 11 Sep 2016) Log Message FastBitVector should have efficient and easy-to-use vector-vector operations https://bugs.webkit.org/show_bug.cgi?id=161847 Reviewed by Saam Barati.

[webkit-changes] [205810] trunk/Source

2016-09-12 Thread fpizlo
Title: [205810] trunk/Source Revision 205810 Author fpi...@apple.com Date 2016-09-12 09:08:52 -0700 (Mon, 12 Sep 2016) Log Message DFG::forAllKilledOperands() could use a faster bitvector scan in the same-inline-stack fast path https://bugs.webkit.org/show_bug.cgi?id=161849 Reviewed by S

[webkit-changes] [205850] trunk/Source/JavaScriptCore

2016-09-12 Thread fpizlo
Title: [205850] trunk/Source/_javascript_Core Revision 205850 Author fpi...@apple.com Date 2016-09-12 21:33:19 -0700 (Mon, 12 Sep 2016) Log Message MarkedBlock should be able to use flipIfNecessary() as the "I'm not empty" trigger https://bugs.webkit.org/show_bug.cgi?id=161869 Reviewed b

[webkit-changes] [205859] trunk/Source/WTF

2016-09-13 Thread fpizlo
Title: [205859] trunk/Source/WTF Revision 205859 Author fpi...@apple.com Date 2016-09-13 08:59:25 -0700 (Tue, 13 Sep 2016) Log Message ParkingLot is going to have a bad time with threads dying https://bugs.webkit.org/show_bug.cgi?id=161893 Reviewed by Michael Saboff. If a thread

[webkit-changes] [205886] trunk/Source/JavaScriptCore

2016-09-13 Thread fpizlo
Title: [205886] trunk/Source/_javascript_Core Revision 205886 Author fpi...@apple.com Date 2016-09-13 16:19:48 -0700 (Tue, 13 Sep 2016) Log Message Remove Heap::isLive() https://bugs.webkit.org/show_bug.cgi?id=161933 Reviewed by Mark Lam. Before I put any more effort into mainta

<    1   2   3   4   5   6   7   8   9   10   >