Google Git
Sign in
webkit / WebKit / 23315d6b05bf5d25c0327818f3d311b99aa12409 / Source / JavaScriptCore / dfg / DFGFixupPhase.cpp
  1. 23315d6 Getter and setter on super are called with wrong "this" object by sbarati@apple.com · 9 years ago
  2. 806e80d Add support for delete by value to the DFG by keith_miller@apple.com · 9 years ago
  3. f4a459e Unreviewed, reland r200149 since the rollout had inconclusive PLT AB testing results. by keith_miller@apple.com · 9 years ago
  4. d1a5d2f ToThis should be able to be eliminated in Constant Folding by keith_miller@apple.com · 9 years ago
  5. 88d9c89 [JSC] Unify Math.pow() accross all tiers by benjamin@webkit.org · 9 years ago
  6. ad6a310 Unreviewed, Revert r199397 due to PLT regressions by keith_miller@apple.com · 9 years ago
  7. 6994044 [ES] Implement RegExp.prototype.@@replace and use it for String.prototype.replace by msaboff@apple.com · 9 years ago
  8. 086f8f6 calling super() a second time in a constructor should throw by gskachkov@gmail.com · 9 years ago
  9. 16582bf Unreviewed, rolling out r200083. https://bugs.webkit.org/show_bug.cgi?id=157033 by gskachkov@gmail.com · 9 years ago
  10. 5428bd7 calling super() a second time in a constructor should throw by gskachkov@gmail.com · 9 years ago
  11. 39e9c98 Renaming SpecInt32, SpecInt52, MachineInt to SpecInt32Only, SpecInt52Only, AnyInt. by mark.lam@apple.com · 9 years ago
  12. c2b8c09 [INTL] Implement String.prototype.localeCompare in ECMA-402 by fpizlo@apple.com · 9 years ago
  13. ee8d7db [JSC] Integer Multiply of a number by itself does not need negative zero support by commit-queue@webkit.org · 9 years ago
  14. 36c5288 [JSC] Add primitive String support to compare operators by commit-queue@webkit.org · 9 years ago
  15. 2c87b1a Re-landing: ES6: Implement RegExp.prototype[@@search]. by mark.lam@apple.com · 9 years ago
  16. e5673c8 Unreviewed, rolling out r199712. https://bugs.webkit.org/show_bug.cgi?id=156741 by gskachkov@gmail.com · 9 years ago
  17. fb655db calling super() a second time in a constructor should throw by gskachkov@gmail.com · 9 years ago
  18. e67fd78 implement dynamic scope accesses in the DFG/FTL by sbarati@apple.com · 9 years ago
  19. 485f539 We should support delete in the DFG by keith_miller@apple.com · 9 years ago
  20. fab33f4 [JSC] DFG should support relational comparisons of Number and Other by commit-queue@webkit.org · 9 years ago
  21. 6839aeb Unreviewed, rolling out r199502 and r199511. by commit-queue@webkit.org · 9 years ago
  22. ca06bc6 ES6: Implement RegExp.prototype[@@search]. by mark.lam@apple.com · 9 years ago
  23. 32fbcb7 [ES6] Add support for Symbol.isConcatSpreadable. by keith_miller@apple.com · 9 years ago
  24. 42c2642 Remove NewArrowFunction from DFG IR by gskachkov@gmail.com · 9 years ago
  25. 7deaba8 tryGetById should be supported by the DFG/FTL by keith_miller@apple.com · 9 years ago
  26. e086f37 UInt32ToNumber should have an Int52 path by commit-queue@webkit.org · 9 years ago
  27. 032f672 Rename ArrayMode::supportsLength to supportsSelfLength by keith_miller@apple.com · 9 years ago
  28. 8891e6f Unreviewed, rolling out r199128 and r199141. by commit-queue@webkit.org · 9 years ago
  29. b6d2765 [JSC] UInt32ToNumber should be NodeMustGenerate by commit-queue@webkit.org · 9 years ago
  30. 0c18a97 [ES6] Add support for Symbol.isConcatSpreadable. by keith_miller@apple.com · 9 years ago
  31. 39303e0 JSC should use a shadow stack version of CHICKEN so that debuggers have the option of retrieving tail-deleted frames by fpizlo@apple.com · 9 years ago
  32. 280ef00 by fpizlo@apple.com · 9 years ago
  33. 9b9f43e [JSC] Add truncate operation (rounding to zero) by utatane.tea@gmail.com · 9 years ago
  34. 2e6603a Unreviewed, rollout r198808. The patch causes crashes on 32-bit and appears to be a JSBench regression. by keith_miller@apple.com · 9 years ago
  35. 1acb996 [ES6] Add support for Symbol.isConcatSpreadable. by keith_miller@apple.com · 9 years ago
  36. 794ada6 We should FTL compile code when the debugger is enabled by sbarati@apple.com · 9 years ago
  37. 5e29b76 Replace all of the various non-working and non-compiling sampling profiler hacks with a single super hack by fpizlo@apple.com · 9 years ago
  38. 47c2f14 Add support for setting Function.name from computed properties. by mark.lam@apple.com · 9 years ago
  39. 95ef649 Remove the Baker barrier from JSC https://bugs.webkit.org/show_bug.cgi?id=155479 by fpizlo@apple.com · 9 years ago
  40. 31527f5 [JSC] Pick how to OSR Enter to FTL at runtime instead of compile time by benjamin@webkit.org · 9 years ago
  41. 024424c DFG should be able to constant-fold strings by fpizlo@apple.com · 9 years ago
  42. 9133174 DFG should know how to speculate StringOrOther by fpizlo@apple.com · 9 years ago
  43. 7518ba2 RegExpMatchesArray doesn't know how to have a bad time by fpizlo@apple.com · 9 years ago
  44. 7fdfeed The most aggressive form of RegExpTest/RegExpExec should speculate more aggressively than just cell by fpizlo@apple.com · 9 years ago
  45. ef51514 DFG/FTL should inline accesses to RegExpObject::m_lastIndex by fpizlo@apple.com · 9 years ago
  46. 409f5be Octane/regexp's Exec function should benefit from array length accessor inlining by fpizlo@apple.com · 9 years ago
  47. 239b078 RegExpExec/RegExpTest should not unconditionally speculate cell by fpizlo@apple.com · 9 years ago
  48. e799b86 Turn String.prototype.replace into an intrinsic by fpizlo@apple.com · 9 years ago
  49. 9971c63 [DFG][FTL][B3] Support floor and ceil by utatane.tea@gmail.com · 9 years ago
  50. 56806b3 Folding of OverridesHasInstance DFG nodes shoud happen in constant folding not fixup by keith_miller@apple.com · 9 years ago
  51. f4256ed [JSC] Remove the overflow check on ArithAbs when possible by commit-queue@webkit.org · 9 years ago
  52. 47c16d7 FTL should support StringFromCharCode by fpizlo@apple.com · 9 years ago
  53. 44616d0 Should not predict OtherObj for ToThis with primitive types under strict mode by utatane.tea@gmail.com · 9 years ago
  54. 151fe10 The StringFromCharCode DFG intrinsic should support untyped operands. by mark.lam@apple.com · 9 years ago
  55. fb6b216 Use DFG Graph::binary/unaryArithShouldSpeculateInt32/MachineInt() functions consistently. by mark.lam@apple.com · 9 years ago
  56. 03a3e38 Rolling out: Rename StringFromCharCode to StringFromSingleCharCode. by mark.lam@apple.com · 9 years ago
  57. b6d53e0 Rename StringFromCharCode to StringFromSingleCharCode. by mark.lam@apple.com · 9 years ago
  58. cb11fe4 [ES6] Add support for Symbol.hasInstance by keith_miller@apple.com · 9 years ago
  59. 9d9fd32 [ES6] Handle new_generator_func / new_generator_func_exp in DFG / FTL by utatane.tea@gmail.com · 9 years ago
  60. 5b2a13c Unreviewed, rolling out r194135. https://bugs.webkit.org/show_bug.cgi?id=152333 by commit-queue@webkit.org · 9 years ago
  61. 8e614fa [ES6] Handle new_generator_func / new_generator_func_exp in DFG / FTL by utatane.tea@gmail.com · 9 years ago
  62. c000865 Polymorphic operand types for DFG and FTL bit operators. by mark.lam@apple.com · 9 years ago
  63. d2fca0a Math.random should have an intrinsic thunk and it should be later handled as a DFG Node by utatane.tea@gmail.com · 9 years ago
  64. 46e290b We should not employ the snippet code in the DFG if no OSR exit was previously encountered. by mark.lam@apple.com · 9 years ago
  65. 324bf75 Roll out r193974 and follow-up fixes as it caused JSC crashes by cdumez@apple.com · 9 years ago
  66. 6b861f6 [ES6] Add support for Symbol.hasInstance by keith_miller@apple.com · 9 years ago
  67. 224ce4d Polymorphic operand types for DFG and FTL div. by mark.lam@apple.com · 9 years ago
  68. b2610c0 [ES6] "super" and "this" should be lexically bound inside an arrow function and should live in a JSLexicalEnvironment by commit-queue@webkit.org · 9 years ago
  69. 8874943 REGRESSION(r193584): Causes heap use-after-free crashes in Web Inspector tests with AddressSanitizer (Requested by ddkilzer on #webkit). by ddkilzer@apple.com · 9 years ago
  70. bdff720 [ES6] "super" and "this" should be lexically bound inside an arrow function and should live in a JSLexicalEnvironment by commit-queue@webkit.org · 9 years ago
  71. 35398ea Having a bad time has a really awful time when it runs at the same time as the JIT by fpizlo@apple.com · 9 years ago
  72. 1d93614 Polymorphic operand types for DFG and FTL mul. by mark.lam@apple.com · 9 years ago
  73. 68b8bce Unreviewed, rolling out r192876. by carlosgc@webkit.org · 9 years ago
  74. 20ef49d [ES6] "super" and "this" should be lexically bound inside an arrow function and should live in a JSLexicalEnvironment by commit-queue@webkit.org · 9 years ago
  75. 855d560 implement op_get_rest_length so that we can allocate the rest array with the right size from the start by sbarati@apple.com · 9 years ago
  76. c0722da [ES6] Add support for rest parameters by sbarati@apple.com · 9 years ago
  77. 102cbf2 Use the JITAddGenerator snippet in the DFG. by mark.lam@apple.com · 9 years ago
  78. 8b5e9cd Fix endless OSR exits when creating a rope that contains an object that ToPrimitive's to a number. by keith_miller@apple.com · 9 years ago
  79. 287d64c [ES6] Add DFG/FTL support for accessor put operations by utatane.tea@gmail.com · 9 years ago
  80. adc002e Unreviewed, rolling out r191500. https://bugs.webkit.org/show_bug.cgi?id=150526 by commit-queue@webkit.org · 9 years ago
  81. 436a19b [ES6] Add DFG/FTL support for accessor put operations by utatane.tea@gmail.com · 9 years ago
  82. 7524909 Use JITSubGenerator to support UntypedUse operands for op_sub in the DFG. by mark.lam@apple.com · 9 years ago
  83. 59bba5d Add Intrinsic Getters and use them to fix performance on the getters of TypedArray properties. by keith_miller@apple.com · 9 years ago
  84. 8dde06b GC should have a Baker barrier for concurrent copying by fpizlo@apple.com · 9 years ago
  85. 382ef65 Introduce SymbolUse optimization into CompareEq and CompareStrictEq by utatane.tea@gmail.com · 9 years ago
  86. a3dc753 [ES6] Implement tail calls in the DFG by msaboff@apple.com · 10 years ago
  87. 1283577 JSC should infer property types https://bugs.webkit.org/show_bug.cgi?id=148610 by fpizlo@apple.com · 10 years ago
  88. b7a50a3 The put_by_id IC store barrier contract should benefit transition over replace by fpizlo@apple.com · 10 years ago
  89. 060e751 Block scoped variables should be visible across scripts by saambarati1@gmail.com · 10 years ago
  90. 2b150e78 DFG::StrCat isn't really effectful by fpizlo@apple.com · 10 years ago
  91. f29186e Node::origin should be able to tell you if it's OK to exit by fpizlo@apple.com · 10 years ago
  92. 1010733 DFG::FixupPhase should use the lambda form of m_graph.doToChildren() rather than the old macro by fpizlo@apple.com · 10 years ago
  93. b3b187c DFG string concatenation shouldn't be playing fast and loose with effects and OSR exit by fpizlo@apple.com · 10 years ago
  94. 7289af3 DFG should have a KnownBooleanUse for cases where we are required to know that the child is a boolean and it's not OK to speculate by fpizlo@apple.com · 10 years ago
  95. 32b8d0a [JSC] Optimize more cases of something-compared-to-null/undefined by benjamin@webkit.org · 10 years ago
  96. a4201b0 [ES6] Implement ES6 arrow function syntax. Arrow function specific features. Lexical bind of this by commit-queue@webkit.org · 10 years ago
  97. 5c3fb3a [JSC] Add support for GetByVal on arrays of Undecided shape by benjamin@webkit.org · 10 years ago
  98. fccd136 Introduce get_by_id like IC into get_by_val when the given name is String or Symbol by utatane.tea@gmail.com · 10 years ago
  99. 04f5575 Regression(r188105): Seems to have caused crashes during PLT on some iPads by cdumez@apple.com · 10 years ago
  100. bc3598b Introduce get_by_id like IC into get_by_val when the given name is String or Symbol by utatane.tea@gmail.com · 10 years ago