[webkit-changes] [233347] trunk/Source/bmalloc

Title: [233347] trunk/Source/bmalloc Revision 233347 Author msab...@apple.com Date 2018-06-28 18:40:26 -0700 (Thu, 28 Jun 2018) Log Message Disable IsoHeaps when Gigacage is off https://bugs.webkit.org/show_bug.cgi?id=187160 Reviewed by Saam Barati. If Gigacage is disabled, it may be du

[webkit-changes] [233547] trunk/Source/bmalloc

Title: [233547] trunk/Source/bmalloc Revision 233547 Author msab...@apple.com Date 2018-07-05 16:12:04 -0700 (Thu, 05 Jul 2018) Log Message Disable IsoHeaps when Gigacage is off https://bugs.webkit.org/show_bug.cgi?id=187160 Reviewed by Saam Barati. Updated determineMallocFallbackState

[webkit-changes] [233674] trunk/JSTests

Title: [233674] trunk/JSTests Revision 233674 Author msab...@apple.com Date 2018-07-09 18:18:39 -0700 (Mon, 09 Jul 2018) Log Message REGRESSION (ICU-62100.0.1): JSC test mozilla-tests.yaml/ecma/String/15.5.4.12-3.js is failing https://bugs.webkit.org/show_bug.cgi?id=187495 Reviewed by Sa

[webkit-changes] [233690] trunk

Title: [233690] trunk Revision 233690 Author msab...@apple.com Date 2018-07-10 10:34:34 -0700 (Tue, 10 Jul 2018) Log Message YARR: . doesn't match non-BMP Unicode characters in some cases https://bugs.webkit.org/show_bug.cgi?id=187248 Reviewed by Geoffrey Garen. JSTests: New regression

[webkit-changes] [233716] trunk

Title: [233716] trunk Revision 233716 Author msab...@apple.com Date 2018-07-10 17:35:02 -0700 (Tue, 10 Jul 2018) Log Message DFG JIT: compileMathIC produces incorrect machine code https://bugs.webkit.org/show_bug.cgi?id=187537 Reviewed by Saam Barati. JSTests: Added new test case. * s

[webkit-changes] [233773] trunk/Source/bmalloc

Title: [233773] trunk/Source/bmalloc Revision 233773 Author msab...@apple.com Date 2018-07-12 11:27:26 -0700 (Thu, 12 Jul 2018) Log Message Disable IsoHeaps when Gigacage is off https://bugs.webkit.org/show_bug.cgi?id=187160 Reviewed by Saam Barati. Relanding change sets 233547 and 2335

[webkit-changes] [234075] trunk

Title: [234075] trunk Revision 234075 Author msab...@apple.com Date 2018-07-20 16:48:16 -0700 (Fri, 20 Jul 2018) Log Message DFG AbstractInterpreter: CheckArray filters array modes for DirectArguments/ScopedArguments using only NonArray https://bugs.webkit.org/show_bug.cgi?id=187827 rdar:

[webkit-changes] [223142] trunk/Source/JavaScriptCore

Title: [223142] trunk/Source/_javascript_Core Revision 223142 Author msab...@apple.com Date 2017-10-10 14:10:17 -0700 (Tue, 10 Oct 2017) Log Message Unreviewed build fix. Removed unused lambda capture. * yarr/YarrPattern.cpp: (JSC::Yarr::CharacterClassConstructor::appendInverted): Modi

[webkit-changes] [223197] trunk/Source/JavaScriptCore

Title: [223197] trunk/Source/_javascript_Core Revision 223197 Author msab...@apple.com Date 2017-10-11 12:13:59 -0700 (Wed, 11 Oct 2017) Log Message Update _javascript_Core/ucd/CaseFolding.txt to Unicode database 10.0 https://bugs.webkit.org/show_bug.cgi?id=178106 Reviewed by Keith Mille

[webkit-changes] [223201] trunk/JSTests

Title: [223201] trunk/JSTests Revision 223201 Author msab...@apple.com Date 2017-10-11 12:24:40 -0700 (Wed, 11 Oct 2017) Log Message Disable test262 named capture group tests with direct unicode names and with references before definitions https://bugs.webkit.org/show_bug.cgi?id=178177 R

[webkit-changes] [223219] trunk/Source/WTF

Title: [223219] trunk/Source/WTF Revision 223219 Author msab...@apple.com Date 2017-10-11 17:33:36 -0700 (Wed, 11 Oct 2017) Log Message [JSC] Add ability to build with ARMV8 ILP32 ABI https://bugs.webkit.org/show_bug.cgi?id=178194 Reviewed by Saam Barati. For ARMV8 32 bit ABI, use JSVAL

[webkit-changes] [223724] trunk

Title: [223724] trunk Revision 223724 Author msab...@apple.com Date 2017-10-19 16:26:06 -0700 (Thu, 19 Oct 2017) Log Message Test262: RegExp/property-escapes/generated/Emoji_Component.js fails with current RegExp Unicode Properties implementation https://bugs.webkit.org/show_bug.cgi?id=17

[webkit-changes] [223923] trunk/Source/JavaScriptCore

Title: [223923] trunk/Source/_javascript_Core Revision 223923 Author msab...@apple.com Date 2017-10-24 14:31:01 -0700 (Tue, 24 Oct 2017) Log Message Allow OjbC Weak References when building TestAPI https://bugs.webkit.org/show_bug.cgi?id=178748 Reviewed by Saam Barati. Set TestAPI build

[webkit-changes] [223926] trunk/Source/WTF

Title: [223926] trunk/Source/WTF Revision 223926 Author msab...@apple.com Date 2017-10-24 14:48:10 -0700 (Tue, 24 Oct 2017) Log Message WTF: Eliminated PLATFORM checks for HAVE_MACH_EXCEPTIONS https://bugs.webkit.org/show_bug.cgi?id=178747 Reviewed by Saam Barati. Removed unnecessary PL

[webkit-changes] [223937] trunk/Source/JavaScriptCore

Title: [223937] trunk/Source/_javascript_Core Revision 223937 Author msab...@apple.com Date 2017-10-24 15:59:51 -0700 (Tue, 24 Oct 2017) Log Message Allow OjbC Weak References when building TestAPI https://bugs.webkit.org/show_bug.cgi?id=178748 Reviewed by Dan Bernstein. Set TestAPI bui

[webkit-changes] [223980] trunk/Source/JavaScriptCore

Title: [223980] trunk/Source/_javascript_Core Revision 223980 Author msab...@apple.com Date 2017-10-25 14:12:38 -0700 (Wed, 25 Oct 2017) Log Message REGRESSION(r223937): Use of -fobjc-weak causes build failures with older compilers https://bugs.webkit.org/show_bug.cgi?id=178825 Reviewed

[webkit-changes] [224072] trunk

Title: [224072] trunk Revision 224072 Author msab...@apple.com Date 2017-10-26 17:31:50 -0700 (Thu, 26 Oct 2017) Log Message REGRESSION(r222601): We fail to properly backtrack into a sub pattern of a parenthesis with non-zero minimum https://bugs.webkit.org/show_bug.cgi?id=178890 Reviewe

[webkit-changes] [179728] trunk/Source/JavaScriptCore

Title: [179728] trunk/Source/_javascript_Core Revision 179728 Author msab...@apple.com Date 2015-02-05 17:12:00 -0800 (Thu, 05 Feb 2015) Log Message CodeCache is not thread safe when adding the same source from two different threads https://bugs.webkit.org/show_bug.cgi?id=141275 Reviewed

[webkit-changes] [179882] trunk/Source/JavaScriptCore

Title: [179882] trunk/Source/_javascript_Core Revision 179882 Author msab...@apple.com Date 2015-02-10 13:59:54 -0800 (Tue, 10 Feb 2015) Log Message Crash in JSC::FTL::LowerDFGToLLVM::compileCompareStrictEq https://bugs.webkit.org/show_bug.cgi?id=139398 Reviewed by Filip Pizlo. Due to C

[webkit-changes] [180060] trunk

Title: [180060] trunk Revision 180060 Author msab...@apple.com Date 2015-02-13 10:57:57 -0800 (Fri, 13 Feb 2015) Log Message Google doc spreadsheet reproducibly crashes when sorting https://bugs.webkit.org/show_bug.cgi?id=141098 Reviewed by Oliver Hunt. Source/_javascript_Core: Moved t

[webkit-changes] [180083] trunk/Source/JavaScriptCore

Title: [180083] trunk/Source/_javascript_Core Revision 180083 Author msab...@apple.com Date 2015-02-13 14:46:50 -0800 (Fri, 13 Feb 2015) Log Message REGRESSION(r180060) New js/regress-141098 test crashes when LLInt is disabled. https://bugs.webkit.org/show_bug.cgi?id=141577 Reviewed by B

[webkit-changes] [180184] trunk/Source/JavaScriptCore

Title: [180184] trunk/Source/_javascript_Core Revision 180184 Author msab...@apple.com Date 2015-02-16 16:08:17 -0800 (Mon, 16 Feb 2015) Log Message REGRESSION(r180060): C Loop crashes https://bugs.webkit.org/show_bug.cgi?id=141671 Reviewed by Geoffrey Garen. Fixed a typo that only affe

[webkit-changes] [180247] trunk/Source/JavaScriptCore

Title: [180247] trunk/Source/_javascript_Core Revision 180247 Author msab...@apple.com Date 2015-02-17 18:38:16 -0800 (Tue, 17 Feb 2015) Log Message CrashTracer: DFG_CRASH beneath JSC::FTL::LowerDFGToLLVM::compileNode https://bugs.webkit.org/show_bug.cgi?id=141730 Reviewed by Geoffrey Ga

[webkit-changes] [180270] trunk/Source/JavaScriptCore

Title: [180270] trunk/Source/_javascript_Core Revision 180270 Author msab...@apple.com Date 2015-02-18 10:23:14 -0800 (Wed, 18 Feb 2015) Log Message Unreviewed, Restoring the C LOOP insta-crash fix in r180184. Fixed a typo that only affected the C Loop in the prologue() macro in LowLevel

[webkit-changes] [180317] trunk/Source/JavaScriptCore

Title: [180317] trunk/Source/_javascript_Core Revision 180317 Author msab...@apple.com Date 2015-02-18 15:52:16 -0800 (Wed, 18 Feb 2015) Log Message Rollout r180247 & r180249 from trunk https://bugs.webkit.org/show_bug.cgi?id=141773 Reviewed by Filip Pizlo. Theses changes makes sense to

[webkit-changes] [180423] trunk

Title: [180423] trunk Revision 180423 Author msab...@apple.com Date 2015-02-20 10:38:57 -0800 (Fri, 20 Feb 2015) Log Message DFG JIT needs to check for stack overflow at the start of Program and Eval execution https://bugs.webkit.org/show_bug.cgi?id=141676 Reviewed by Filip Pizlo. Sourc

[webkit-changes] [180453] trunk/LayoutTests

Title: [180453] trunk/LayoutTests Revision 180453 Author msab...@apple.com Date 2015-02-20 14:21:47 -0800 (Fri, 20 Feb 2015) Log Message Layout Test js/regress-141098.html is failing on 32-bit Machines https://bugs.webkit.org/show_bug.cgi?id=141848 Reviewed by Geoffrey Garen. It appears

[webkit-changes] [180660] trunk

Title: [180660] trunk Revision 180660 Author msab...@apple.com Date 2015-02-25 22:05:02 -0800 (Wed, 25 Feb 2015) Log Message Web Inspector: CRASH when debugger pauses inside a Promise handler https://bugs.webkit.org/show_bug.cgi?id=141396 Reviewed by Mark Lam. Source/_javascript_Core:

[webkit-changes] [180684] trunk/Source/JavaScriptCore

Title: [180684] trunk/Source/_javascript_Core Revision 180684 Author msab...@apple.com Date 2015-02-26 10:36:43 -0800 (Thu, 26 Feb 2015) Log Message [Win] Debug-only _javascript_Core failures https://bugs.webkit.org/show_bug.cgi?id=142045 Rubber stamped by Filip Pizlo. Reduced loop coun

[webkit-changes] [180787] trunk/Tools

Title: [180787] trunk/Tools Revision 180787 Author msab...@apple.com Date 2015-02-27 15:32:03 -0800 (Fri, 27 Feb 2015) Log Message Add ability for run-jsc-benchmarks to set library path from test binary when run on a build bot https://bugs.webkit.org/show_bug.cgi?id=142112 Reviewed by Fi

[webkit-changes] [180992] trunk/Source/JavaScriptCore

Title: [180992] trunk/Source/_javascript_Core Revision 180992 Author msab...@apple.com Date 2015-03-03 21:33:37 -0800 (Tue, 03 Mar 2015) Log Message DelayedReleaseScope drops locks during GC which can cause a thread switch and code reentry https://bugs.webkit.org/show_bug.cgi?id=141275 R

[webkit-changes] [175426] trunk/Source/JavaScriptCore

Title: [175426] trunk/Source/_javascript_Core Revision 175426 Author msab...@apple.com Date 2014-10-31 14:27:10 -0700 (Fri, 31 Oct 2014) Log Message Add scope operand to op_push_with_scope, op_push_name_scope and op_pop_scope https://bugs.webkit.org/show_bug.cgi?id=138252 Reviewed by Geo

[webkit-changes] [175442] trunk/Tools

Title: [175442] trunk/Tools Revision 175442 Author msab...@apple.com Date 2014-10-31 17:23:29 -0700 (Fri, 31 Oct 2014) Log Message No way to specify target os or architecture when using the --no-copy option with run-jsc-stress-tests https://bugs.webkit.org/show_bug.cgi?id=138268 Reviewed

[webkit-changes] [175471] trunk/Source/JavaScriptCore

Title: [175471] trunk/Source/_javascript_Core Revision 175471 Author msab...@apple.com Date 2014-11-03 09:56:29 -0800 (Mon, 03 Nov 2014) Log Message Add scope operand to op_resolve_scope https://bugs.webkit.org/show_bug.cgi?id=138253 Reviewed by Mark Lam. Added scope operand to op_resol

[webkit-changes] [175508] trunk/Source/JavaScriptCore

Title: [175508] trunk/Source/_javascript_Core Revision 175508 Author msab...@apple.com Date 2014-11-03 19:36:28 -0800 (Mon, 03 Nov 2014) Log Message Add "get scope" byte code https://bugs.webkit.org/show_bug.cgi?id=138326 Reviewed by Mark Lam. Added op_get_scope. Added implementations

[webkit-changes] [175509] trunk/Source/JavaScriptCore

Title: [175509] trunk/Source/_javascript_Core Revision 175509 Author msab...@apple.com Date 2014-11-03 19:53:18 -0800 (Mon, 03 Nov 2014) Log Message Update scope related slow path code to use scope register added to opcodes https://bugs.webkit.org/show_bug.cgi?id=138254 Reviewed by Mark

[webkit-changes] [175586] trunk/LayoutTests

Title: [175586] trunk/LayoutTests Revision 175586 Author msab...@apple.com Date 2014-11-04 16:26:08 -0800 (Tue, 04 Nov 2014) Log Message Disable flakey dfg-int8array.js and dfg-int16array.js tests for ARM64 https://bugs.webkit.org/show_bug.cgi?id=138379 Reviewed by Mark Lam. Disabled th

[webkit-changes] [175587] trunk/Source/JavaScriptCore

Title: [175587] trunk/Source/_javascript_Core Revision 175587 Author msab...@apple.com Date 2014-11-04 16:29:21 -0800 (Tue, 04 Nov 2014) Log Message Disable flakey float32-repeat-out-of-bounds.js and int8-repeat-out-of-bounds.js tests for ARM64 https://bugs.webkit.org/show_bug.cgi?id=1383

[webkit-changes] [175590] trunk/PerformanceTests/SunSpider

Title: [175590] trunk/PerformanceTests/SunSpider Revision 175590 Author msab...@apple.com Date 2014-11-04 16:53:55 -0800 (Tue, 04 Nov 2014) Log Message Disable failing v8-deltablue.js for ARM https://bugs.webkit.org/show_bug.cgi?id=138382 Reviewed by Geoffrey Garen. This test is failing

[webkit-changes] [175644] trunk/Source/JavaScriptCore

Title: [175644] trunk/Source/_javascript_Core Revision 175644 Author msab...@apple.com Date 2014-11-05 15:20:28 -0800 (Wed, 05 Nov 2014) Log Message Disable flakey float32-repeat-out-of-bounds.js and int8-repeat-out-of-bounds.js tests for ARM64 https://bugs.webkit.org/show_bug.cgi?id=1383

[webkit-changes] [175706] trunk/Source

Title: [175706] trunk/Source Revision 175706 Author msab...@apple.com Date 2014-11-06 11:47:17 -0800 (Thu, 06 Nov 2014) Log Message REGRESSION (r174985-174986): Site display disappears https://bugs.webkit.org/show_bug.cgi?id=138082 Reviewed by Geoffrey Garen. Source/_javascript_Core:

[webkit-changes] [175762] trunk/Source/JavaScriptCore

Title: [175762] trunk/Source/_javascript_Core Revision 175762 Author msab...@apple.com Date 2014-11-07 13:58:43 -0800 (Fri, 07 Nov 2014) Log Message Update scope related slow path code to use scope register added to opcodes https://bugs.webkit.org/show_bug.cgi?id=138254 Reviewed by Mark

[webkit-changes] [175834] trunk/LayoutTests

Title: [175834] trunk/LayoutTests Revision 175834 Author msab...@apple.com Date 2014-11-10 15:23:49 -0800 (Mon, 10 Nov 2014) Log Message Add test for fix of REGRESSION (r174985-174986): Site display disappears https://bugs.webkit.org/show_bug.cgi?id=138470 Reviewed by Geoffrey Garen. Th

[webkit-changes] [175845] trunk/Source/JavaScriptCore

Title: [175845] trunk/Source/_javascript_Core Revision 175845 Author msab...@apple.com Date 2014-11-10 19:05:25 -0800 (Mon, 10 Nov 2014) Log Message Add scope operand to op_create_lexical_environment https://bugs.webkit.org/show_bug.cgi?id=138588 Reviewed by Geoffrey Garen. Added a seco

[webkit-changes] [175998] trunk/Source/JavaScriptCore

Title: [175998] trunk/Source/_javascript_Core Revision 175998 Author msab...@apple.com Date 2014-11-11 18:33:43 -0800 (Tue, 11 Nov 2014) Log Message Use scope register when processing op_resolve_scope in LLInt and Baseline JIT https://bugs.webkit.org/show_bug.cgi?id=138637 Reviewed by Ma

[webkit-changes] [176005] trunk/Source/JavaScriptCore

Title: [176005] trunk/Source/_javascript_Core Revision 176005 Author msab...@apple.com Date 2014-11-11 22:00:42 -0800 (Tue, 11 Nov 2014) Log Message Change DFG to use scope operand for op_resolve_scope https://bugs.webkit.org/show_bug.cgi?id=138651 Reviewed by Geoffrey Garen. Changed to

[webkit-changes] [176109] trunk/Source/JavaScriptCore

Title: [176109] trunk/Source/_javascript_Core Revision 176109 Author msab...@apple.com Date 2014-11-13 17:07:48 -0800 (Thu, 13 Nov 2014) Log Message Add scope operand to op_new_func* byte codes https://bugs.webkit.org/show_bug.cgi?id=138707 Reviewed by Mark Lam. Added scope operand to o

[webkit-changes] [176479] trunk

Title: [176479] trunk Revision 176479 Author msab...@apple.com Date 2014-11-21 15:41:26 -0800 (Fri, 21 Nov 2014) Log Message Allocate local ScopeChain register https://bugs.webkit.org/show_bug.cgi?id=138793 Reviewed by Geoffrey Garen. Source/_javascript_Core: Now we allocate the scope

[webkit-changes] [176506] trunk/Source/JavaScriptCore

Title: [176506] trunk/Source/_javascript_Core Revision 176506 Author msab...@apple.com Date 2014-11-22 11:07:26 -0800 (Sat, 22 Nov 2014) Log Message r176455: ASSERT(!m_vector.isEmpty()) in IntendedStructureChain.cpp(143) https://bugs.webkit.org/show_bug.cgi?id=139000 Reviewed by Darin Ad

[webkit-changes] [176624] trunk/Source/JavaScriptCore

Title: [176624] trunk/Source/_javascript_Core Revision 176624 Author msab...@apple.com Date 2014-12-01 18:50:15 -0800 (Mon, 01 Dec 2014) Log Message Crash (integer overflow) beneath ByteCodeParser::handleGetById typing in search field on weather.com https://bugs.webkit.org/show_bug.cgi?id

[webkit-changes] [176625] trunk/Source/JavaScriptCore

Title: [176625] trunk/Source/_javascript_Core Revision 176625 Author msab...@apple.com Date 2014-12-01 20:09:24 -0800 (Mon, 01 Dec 2014) Log Message Remove GetMyScope node from DFG https://bugs.webkit.org/show_bug.cgi?id=139166 Reviewed by Oliver Hunt. Eliminated GetMyScope DFG node typ

[webkit-changes] [176700] trunk/Source/JavaScriptCore

Title: [176700] trunk/Source/_javascript_Core Revision 176700 Author msab...@apple.com Date 2014-12-02 16:49:19 -0800 (Tue, 02 Dec 2014) Log Message Change CallFrame::globalThisValue() to not use CallFrame::scope() https://bugs.webkit.org/show_bug.cgi?id=139202 Reviewed by Mark Lam. Cha

[webkit-changes] [176771] trunk/Source/JavaScriptCore

Title: [176771] trunk/Source/_javascript_Core Revision 176771 Author msab...@apple.com Date 2014-12-03 17:59:40 -0800 (Wed, 03 Dec 2014) Log Message REGRESSION (r176479): DFG ASSERTION beneath emitOSRExitCall running Kraken/imaging-gaussian-blur.js.ftl-no-cjit-osr-validation and other tes

[webkit-changes] [172429] trunk/Source/JavaScriptCore

Title: [172429] trunk/Source/_javascript_Core Revision 172429 Author msab...@apple.com Date 2014-08-11 20:20:04 -0700 (Mon, 11 Aug 2014) Log Message Eliminate {push,pop}CalleeSaves in favor of individual pushes & pops https://bugs.webkit.org/show_bug.cgi?id=127155 Reviewed by Geoffrey Ga

[webkit-changes] [172665] trunk/Source/JavaScriptCore

Title: [172665] trunk/Source/_javascript_Core Revision 172665 Author msab...@apple.com Date 2014-08-15 18:45:40 -0700 (Fri, 15 Aug 2014) Log Message Change callToJavaScript and callToNativeFunction so their callFrames match the native calling conventions https://bugs.webkit.org/show_bug.c

[webkit-changes] [172792] trunk/Source/JavaScriptCore

Title: [172792] trunk/Source/_javascript_Core Revision 172792 Author msab...@apple.com Date 2014-08-19 17:36:13 -0700 (Tue, 19 Aug 2014) Log Message Crash in jsc-layout-tests.yaml/js/script-tests/reentrant-caching.js https://bugs.webkit.org/show_bug.cgi?id=136080 Reviewed by Mark Lam. U

[webkit-changes] [172807] trunk/Source/JavaScriptCore

Title: [172807] trunk/Source/_javascript_Core Revision 172807 Author msab...@apple.com Date 2014-08-20 13:28:24 -0700 (Wed, 20 Aug 2014) Log Message REGRESSION: Web Inspector crashes when reloading apple.com with Timeline recording active https://bugs.webkit.org/show_bug.cgi?id=136034 Re

[webkit-changes] [172867] trunk/Source/JavaScriptCore

Title: [172867] trunk/Source/_javascript_Core Revision 172867 Author msab...@apple.com Date 2014-08-22 12:54:30 -0700 (Fri, 22 Aug 2014) Log Message REGRESSION(r163179): Sporadic crash in js/dom/line-column-numbers.html test https://bugs.webkit.org/show_bug.cgi?id=136111 Reviewed by Fili

[webkit-changes] [172932] trunk/Source/JavaScriptCore

Title: [172932] trunk/Source/_javascript_Core Revision 172932 Author msab...@apple.com Date 2014-08-25 12:32:40 -0700 (Mon, 25 Aug 2014) Log Message After r172867 another crash in in js/dom/line-column-numbers.html https://bugs.webkit.org/show_bug.cgi?id=136192 Reviewed by Geoffrey Garen

[webkit-changes] [172959] trunk/Source/JavaScriptCore

Title: [172959] trunk/Source/_javascript_Core Revision 172959 Author msab...@apple.com Date 2014-08-26 08:55:01 -0700 (Tue, 26 Aug 2014) Log Message REGRESSION(r172794) + 32Bit build: ASSERT failures in for-in-tests.js tests. https://bugs.webkit.org/show_bug.cgi?id=136165 Reviewed by Mar

[webkit-changes] [172962] trunk/Source/JavaScriptCore

Title: [172962] trunk/Source/_javascript_Core Revision 172962 Author msab...@apple.com Date 2014-08-26 10:34:21 -0700 (Tue, 26 Aug 2014) Log Message REGRESSION(r172794) + 32Bit build: for-in-base-reassigned-later-and-change-structure.js fail with NaN result https://bugs.webkit.org/show_bu

[webkit-changes] [172978] trunk/Source/JavaScriptCore

Title: [172978] trunk/Source/_javascript_Core Revision 172978 Author msab...@apple.com Date 2014-08-26 15:08:42 -0700 (Tue, 26 Aug 2014) Log Message [Win] 64-bit _javascript_Core crashes on launch https://bugs.webkit.org/show_bug.cgi?id=136241 Reviewed by Mark Lam. * llint/LowLevelInter

[webkit-changes] [173178] trunk

Title: [173178] trunk Revision 173178 Author msab...@apple.com Date 2014-09-02 09:52:35 -0700 (Tue, 02 Sep 2014) Log Message Out of bounds write in vmEntryToJavaScript / JSC::JITCode::execute https://bugs.webkit.org/show_bug.cgi?id=136305 Reviewed by Filip Pizlo. Source/_javascript_Core

[webkit-changes] [173282] trunk/Source/JavaScriptCore

Title: [173282] trunk/Source/_javascript_Core Revision 173282 Author msab...@apple.com Date 2014-09-04 14:23:38 -0700 (Thu, 04 Sep 2014) Log Message REGRESSION(r173031): crashes during run-layout-jsc on x86/Linux https://bugs.webkit.org/show_bug.cgi?id=136436 Reviewed by Geoffrey Garen.

[webkit-changes] [173312] trunk/Source/JavaScriptCore

Title: [173312] trunk/Source/_javascript_Core Revision 173312 Author msab...@apple.com Date 2014-09-05 09:17:17 -0700 (Fri, 05 Sep 2014) Log Message ARM: Add more coverage to ARMv7 disassembler https://bugs.webkit.org/show_bug.cgi?id=136565 Reviewed by Mark Lam. Added ARMV7 disassembler

[webkit-changes] [173330] trunk/LayoutTests

Title: [173330] trunk/LayoutTests Revision 173330 Author msab...@apple.com Date 2014-09-05 13:05:32 -0700 (Fri, 05 Sep 2014) Log Message ARM32 iOS: JSC Test math.js fails https://bugs.webkit.org/show_bug.cgi?id=136261 Reviewed by Geoffrey Garen. Split out the failing tests to a new test

[webkit-changes] [173541] trunk/Source

Title: [173541] trunk/Source Revision 173541 Author msab...@apple.com Date 2014-09-11 14:52:33 -0700 (Thu, 11 Sep 2014) Log Message Move JSScope out of JSFunction into separate JSCallee class https://bugs.webkit.org/show_bug.cgi?id=136725 Reviewed by Oliver Hunt. Created new JSCallee cl

[webkit-changes] [173550] trunk/Tools

Title: [173550] trunk/Tools Revision 173550 Author msab...@apple.com Date 2014-09-11 18:04:05 -0700 (Thu, 11 Sep 2014) Log Message lldb_webkit.py:btjs doesn't work with release builds https://bugs.webkit.org/show_bug.cgi?id=136760 Reviewed by Jer Noble. If we can't get a result calling

[webkit-changes] [173567] trunk/Source/JavaScriptCore

Title: [173567] trunk/Source/_javascript_Core Revision 173567 Author msab...@apple.com Date 2014-09-12 10:54:05 -0700 (Fri, 12 Sep 2014) Log Message Remove unneeded declarations from JSCallee.h https://bugs.webkit.org/show_bug.cgi?id=136783 Reviewed by Mark Lam. * runtime/JSCallee.h: (J

[webkit-changes] [173600] trunk/Source/JavaScriptCore

Title: [173600] trunk/Source/_javascript_Core Revision 173600 Author msab...@apple.com Date 2014-09-12 22:21:44 -0700 (Fri, 12 Sep 2014) Log Message Add JSCallee to program and eval CallFrames https://bugs.webkit.org/show_bug.cgi?id=136785 Reviewed by Mark Lam. Populated Callee slot for

[webkit-changes] [173601] trunk/Source/JavaScriptCore

Title: [173601] trunk/Source/_javascript_Core Revision 173601 Author msab...@apple.com Date 2014-09-13 09:26:04 -0700 (Sat, 13 Sep 2014) Log Message Merge JSGlobalObject::reset() into ::init() https://bugs.webkit.org/show_bug.cgi?id=136800 Reviewed by Oliver Hunt. Moved the contents of

[webkit-changes] [173636] trunk/Source/JavaScriptCore

Title: [173636] trunk/Source/_javascript_Core Revision 173636 Author msab...@apple.com Date 2014-09-15 15:58:54 -0700 (Mon, 15 Sep 2014) Log Message Create a JSCallee for GlobalExec object https://bugs.webkit.org/show_bug.cgi?id=136840 Reviewed by Geoffrey Garen. Added m_globalCallee, i

[webkit-changes] [173706] trunk/Source/JavaScriptCore

Title: [173706] trunk/Source/_javascript_Core Revision 173706 Author msab...@apple.com Date 2014-09-17 15:34:14 -0700 (Wed, 17 Sep 2014) Log Message Change CallFrame to use Callee instead of JSScope to implement vm() https://bugs.webkit.org/show_bug.cgi?id=136894 Reviewed by Geoffrey Gar

[webkit-changes] [169973] trunk/Source/JavaScriptCore

Title: [169973] trunk/Source/_javascript_Core Revision 169973 Author msab...@apple.com Date 2014-06-14 10:43:32 -0700 (Sat, 14 Jun 2014) Log Message operationCreateArguments could cause a GC during OSR exit https://bugs.webkit.org/show_bug.cgi?id=133905 Reviewed by Filip Pizlo. Defer GC

[webkit-changes] [170011] trunk/Source/JavaScriptCore

Title: [170011] trunk/Source/_javascript_Core Revision 170011 Author msab...@apple.com Date 2014-06-16 09:40:56 -0700 (Mon, 16 Jun 2014) Log Message Convert ASSERT in inlineFunctionForCapabilityLevel to early return https://bugs.webkit.org/show_bug.cgi?id=133903 Reviewed by Mark Hahnenbe

[webkit-changes] [170421] trunk/Source/JavaScriptCore

Title: [170421] trunk/Source/_javascript_Core Revision 170421 Author msab...@apple.com Date 2014-06-24 23:45:50 -0700 (Tue, 24 Jun 2014) Log Message Add support routines to provide descriptive _javascript_ backtraces https://bugs.webkit.org/show_bug.cgi?id=134278 Reviewed by Mark Lam. *

[webkit-changes] [170432] trunk/Tools

Title: [170432] trunk/Tools Revision 170432 Author msab...@apple.com Date 2014-06-25 10:34:52 -0700 (Wed, 25 Jun 2014) Log Message Provide _javascript_ aware backtrace script for lldb https://bugs.webkit.org/show_bug.cgi?id=134276 Reviewed by Jer Noble. * lldb/lldb_webkit.py: (__lldb_in

[webkit-changes] [170556] branches/ftlopt/Source/JavaScriptCore

Title: [170556] branches/ftlopt/Source/_javascript_Core Revision 170556 Author msab...@apple.com Date 2014-06-27 14:57:25 -0700 (Fri, 27 Jun 2014) Log Message Unreviewed build fix after r169795. Fixed ASSERT for 32 bit build. * dfg/DFGSpeculativeJIT.cpp: (JSC::DFG::SpeculativeJIT::silen

[webkit-changes] [170586] trunk/LayoutTests

Title: [170586] trunk/LayoutTests Revision 170586 Author msab...@apple.com Date 2014-06-30 10:37:06 -0700 (Mon, 30 Jun 2014) Log Message Reduce memory required for js/typedarray-zero-size.js https://bugs.webkit.org/show_bug.cgi?id=134448 Reviewed by Darin Adler. Making the loop count do

[webkit-changes] [170591] trunk/LayoutTests

Title: [170591] trunk/LayoutTests Revision 170591 Author msab...@apple.com Date 2014-06-30 11:22:25 -0700 (Mon, 30 Jun 2014) Log Message Reduce memory required for js/typedarray-zero-size.js https://bugs.webkit.org/show_bug.cgi?id=134448 Reviewed by Mark Hahnenberg. Reduce the loop coun

[webkit-changes] [170601] trunk

Title: [170601] trunk Revision 170601 Author msab...@apple.com Date 2014-06-30 15:12:17 -0700 (Mon, 30 Jun 2014) Log Message Add option to run-jsc-stress-testes to filter out tests that use large heaps https://bugs.webkit.org/show_bug.cgi?id=134458 Reviewed by Filip Pizlo. Source/_java

[webkit-changes] [170602] trunk/LayoutTests

Title: [170602] trunk/LayoutTests Revision 170602 Author msab...@apple.com Date 2014-06-30 15:13:37 -0700 (Mon, 30 Jun 2014) Log Message js/script-tests/function-apply-many-args.js fails on ARM https://bugs.webkit.org/show_bug.cgi?id=126588 Reviewed by Mark Lam. Removed three test cases

[webkit-changes] [167599] trunk/Source/JavaScriptCore

Title: [167599] trunk/Source/_javascript_Core Revision 167599 Author msab...@apple.com Date 2014-04-21 11:10:41 -0700 (Mon, 21 Apr 2014) Log Message REGRESSION(r167591): ARM64 and ARM traditional builds broken https://bugs.webkit.org/show_bug.cgi?id=131935 Reviewed by Mark Hahnenberg. A

[webkit-changes] [167782] trunk/Source/JavaScriptCore

Title: [167782] trunk/Source/_javascript_Core Revision 167782 Author msab...@apple.com Date 2014-04-24 17:14:14 -0700 (Thu, 24 Apr 2014) Log Message REGRESSION: Apparent hang of PCE.js Mac OS System 7.0.1 on ARM64 devices https://bugs.webkit.org/show_bug.cgi?id=132147 Reviewed by Mark La

[webkit-changes] [167819] trunk/Tools

Title: [167819] trunk/Tools Revision 167819 Author msab...@apple.com Date 2014-04-25 13:34:47 -0700 (Fri, 25 Apr 2014) Log Message Crash in platform/mac/accessibility/table-visible-rows.html https://bugs.webkit.org/show_bug.cgi?id=132146 Reviewed by Mark Lam. Changed to use a local JSVa

[webkit-changes] [167913] trunk/Tools

Title: [167913] trunk/Tools Revision 167913 Author msab...@apple.com Date 2014-04-28 17:31:45 -0700 (Mon, 28 Apr 2014) Log Message Crash in platform/mac/accessibility/table-visible-rows.html https://bugs.webkit.org/show_bug.cgi?id=132146 Reviewed by Filip Pizlo. Instead of creating a lo

[webkit-changes] [167917] trunk/Source/JavaScriptCore

Title: [167917] trunk/Source/_javascript_Core Revision 167917 Author msab...@apple.com Date 2014-04-28 18:36:14 -0700 (Mon, 28 Apr 2014) Log Message REGRESSION(r153142) ASSERT from CodeBlock::dumpBytecode dumping String Switch Jump Tables https://bugs.webkit.org/show_bug.cgi?id=132315 Re

[webkit-changes] [167953] trunk/Source/WTF

Title: [167953] trunk/Source/WTF Revision 167953 Author msab...@apple.com Date 2014-04-29 13:28:37 -0700 (Tue, 29 Apr 2014) Log Message For DARWIN platforms, use system temporary directory for DataLog output https://bugs.webkit.org/show_bug.cgi?id=132346 Reviewed by Geoffrey Garen. Adde

[webkit-changes] [168197] trunk/Source/JavaScriptCore

Title: [168197] trunk/Source/_javascript_Core Revision 168197 Author msab...@apple.com Date 2014-05-02 15:24:37 -0700 (Fri, 02 May 2014) Log Message "arm64 function not 4-byte aligned" warnings when building JSC https://bugs.webkit.org/show_bug.cgi?id=132495 Reviewed by Geoffrey Garen.

[webkit-changes] [168319] trunk/Source/JavaScriptCore

Title: [168319] trunk/Source/_javascript_Core Revision 168319 Author msab...@apple.com Date 2014-05-05 15:09:00 -0700 (Mon, 05 May 2014) Log Message REGRESSION: RELEASE_ASSERT in CodeBlock::baselineVersion @ cnn.com https://bugs.webkit.org/show_bug.cgi?id=132581 Reviewed by Filip Pizlo.

[webkit-changes] [168396] trunk/Source/JavaScriptCore

Title: [168396] trunk/Source/_javascript_Core Revision 168396 Author msab...@apple.com Date 2014-05-06 17:34:34 -0700 (Tue, 06 May 2014) Log Message Add test for deleteAllCompiledCode https://bugs.webkit.org/show_bug.cgi?id=132632 Reviewed by Phil Pizlo. Added two new hooks to jsc, one

[webkit-changes] [168406] trunk/Source/JavaScriptCore

Title: [168406] trunk/Source/_javascript_Core Revision 168406 Author msab...@apple.com Date 2014-05-06 21:01:25 -0700 (Tue, 06 May 2014) Log Message Unreviewd build fix for C-LOOP after r168396. * runtime/TestRunnerUtils.cpp: (JSC::optimizeNextInvocation): Wrapped actual call inside #if

[webkit-changes] [168983] trunk/Source/JavaScriptCore

Title: [168983] trunk/Source/_javascript_Core Revision 168983 Author msab...@apple.com Date 2014-05-16 15:09:51 -0700 (Fri, 16 May 2014) Log Message Crash in JSC::Yarr::YarrGenerator<(JSC::Yarr::YarrJITCompileMode)0>::generatePatternCharacterFixed() due to WTF::CrashOnOverflow::overflowed

[webkit-changes] [169217] trunk/Tools

Title: [169217] trunk/Tools Revision 169217 Author msab...@apple.com Date 2014-05-22 14:11:55 -0700 (Thu, 22 May 2014) Log Message Add option to run-jsc-stress-tests to use installed jsc https://bugs.webkit.org/show_bug.cgi?id=133102 Reviewed by Geoffrey Garen. Added --no-copy option to

[webkit-changes] [169241] trunk/Tools

Title: [169241] trunk/Tools Revision 169241 Author msab...@apple.com Date 2014-05-22 20:27:36 -0700 (Thu, 22 May 2014) Log Message Eliminate n/total progress update from run-jsc-stress-tests output to file https://bugs.webkit.org/show_bug.cgi?id=133191 Reviewed by Geoffrey Garen. Change

[webkit-changes] [169265] trunk/Tools

Title: [169265] trunk/Tools Revision 169265 Author msab...@apple.com Date 2014-05-23 11:05:57 -0700 (Fri, 23 May 2014) Log Message REGRESSION (r169241) Crash running run-jsc-stress-tests on EFL ARM https://bugs.webkit.org/show_bug.cgi?id=133223 Reviewed by Geoffrey Garen. Change runAndM

[webkit-changes] [169293] trunk/Tools

Title: [169293] trunk/Tools Revision 169293 Author msab...@apple.com Date 2014-05-23 17:13:43 -0700 (Fri, 23 May 2014) Log Message REGRESSION(r169265): sh: line 0: cd: ../.vm https://bugs.webkit.org/show_bug.cgi?id=133242 Rubber stamped by Geoffrey Garen. Added missing shell escapes '\'

[webkit-changes] [169396] trunk/Tools

Title: [169396] trunk/Tools Revision 169396 Author msab...@apple.com Date 2014-05-27 11:53:07 -0700 (Tue, 27 May 2014) Log Message REGRESSION(r169265): sh: line 0: cd: ../.vm https://bugs.webkit.org/show_bug.cgi?id=133242 Rubber stamped by Oliver Hunt. Changed runAndMonitorTestRunnerCom

[webkit-changes] [169489] trunk/Tools

Title: [169489] trunk/Tools Revision 169489 Author msab...@apple.com Date 2014-05-30 11:19:21 -0700 (Fri, 30 May 2014) Log Message Change run-jsc-stress-tests to not resolve jsc path locally when creating a bundle https://bugs.webkit.org/show_bug.cgi?id=133409 Reviewed by Filip Pizlo. H

[webkit-changes] [169751] trunk

Title: [169751] trunk Revision 169751 Author msab...@apple.com Date 2014-06-10 10:58:03 -0700 (Tue, 10 Jun 2014) Log Message In a certain app state, Array.prototype.filter() returns incorrect results https://bugs.webkit.org/show_bug.cgi?id=133577 Reviewed by Oliver Hunt. Source/_javasc

<    4   5   6   7   8   9   10   >