- 0442bbe Rolling in r237753 with unreviewed build fix. by msaboff@apple.com · 6 years ago
- cb7b79f Unreviewed, rolling out r237753. by ryanhaddad@apple.com · 6 years ago
- 9ab4f14 Running out of stack space not properly handled in RegExp::compile() and its callers by msaboff@apple.com · 6 years ago
- 52596ba Skip tests on arm/mips that time out now we're running on CLoop by guijemont@igalia.com · 6 years ago
- e23b883 REGRESSION(r237547): Exception handlers should be aware of wide opcodes by tzagallo@apple.com · 6 years ago
- 184eed8 Correctly detect string overflow when using the 'Function' constructor. by mark.lam@apple.com · 6 years ago
- b4566d8 Add support for GetStack FlushedDouble by tzagallo@apple.com · 6 years ago
- 3474dd0 New bytecode format for JSC by tzagallo@apple.com · 6 years ago
- 9907b06 Unreviewed, rolling out r237479 and r237484. by commit-queue@webkit.org · 6 years ago
- 1f8380c New bytecode format for JSC by tzagallo@apple.com · 6 years ago
- 8deb8bd Fix missing edge cases with JSGlobalObjects having a bad time. by mark.lam@apple.com · 6 years ago
- 40010a6 DFGAbstractValue::m_arrayModes expects IndexingMode values, not IndexingType. by mark.lam@apple.com · 6 years ago
- 717bdcd DFGAbstractValue::m_arrayModes expects IndexingMode values, not IndexingType. by mark.lam@apple.com · 6 years ago
- eab405c Unreviewed, rolling out r237254. https://bugs.webkit.org/show_bug.cgi?id=190760 by commit-queue@webkit.org · 6 years ago
- 3bd2341 vmCall should check if we exit before emitting an OSR exit due to exceptions by sbarati@apple.com · 6 years ago
- 1541c5f [ESNext][BigInt] Implement support for "^" by ticaiolima@gmail.com · 6 years ago
- 5ea7781 [BigInt] Add ValueSub into DFG https://bugs.webkit.org/show_bug.cgi?id=186176 by ticaiolima@gmail.com · 6 years ago
- ea92da1 [JSC] JSC should have "parseFunction" to optimize Function constructor by yusukesuzuki@slowstart.org · 6 years ago
- b858a8e Unreviewed, rolling out r237242. https://bugs.webkit.org/show_bug.cgi?id=190701 by commit-queue@webkit.org · 6 years ago
- 4895c9f JSTests: by keith_miller@apple.com · 6 years ago
- 231c825 [BigInt] Add ValueSub into DFG https://bugs.webkit.org/show_bug.cgi?id=186176 by ticaiolima@gmail.com · 6 years ago
- 7dcddc4 [JSC] stress/array-prototype-concat-of-long-spliced-arrays2.js times out on arm and mips by dinfuehr@igalia.com · 6 years ago
- 8138e19 Skip stress/array-prototype-concat-of-long-spliced-arrays2.js on arm and mips/linux by guijemont@igalia.com · 6 years ago
- 67538f2 Emit fjcvtzs on ARM64E on Darwin https://bugs.webkit.org/show_bug.cgi?id=184023 by sbarati@apple.com · 6 years ago
- 51a62eb JSArray::shiftCountWithArrayStorage is wrong when an array has holes by sbarati@apple.com · 6 years ago
- 21687be Unreviewed, rolling out r237054. https://bugs.webkit.org/show_bug.cgi?id=190593 by commit-queue@webkit.org · 6 years ago
- d550398 [JSC] JSON.stringify can accept call-with-no-arguments by yusukesuzuki@slowstart.org · 6 years ago
- 68c3b53 [JSC] JSC should have "parseFunction" to optimize Function constructor by yusukesuzuki@slowstart.org · 6 years ago
- 6816299 Skip JSC test stress/sampling-profiler-richards.js on armv7/linux by guijemont@igalia.com · 6 years ago
- 92b4c6b [ESNext][BigInt] Implement support for "|" by ticaiolima@gmail.com · 6 years ago
- cc1237d Skip test on systems with limited memory by commit-queue@webkit.org · 6 years ago
- 8946412 lowXYZ in FTLLower should always filter the type of the incoming edge by sbarati@apple.com · 6 years ago
- 5c436b2 Make string MaxLength for all WTF and JS strings consistently equal to INT_MAX. by mark.lam@apple.com · 6 years ago
- 5851252 [BigInt] BigInt.proptotype.toString is broken when radix is power of 2 by ticaiolima@gmail.com · 6 years ago
- 9857c83 Function.toString() should also copy the source code Functions that are class definitions. by mark.lam@apple.com · 6 years ago
- f43d3a2 Split NaN-check into separate test by commit-queue@webkit.org · 6 years ago
- bdcd296 Unreviewed, rolling out r236647. https://bugs.webkit.org/show_bug.cgi?id=190124 by commit-queue@webkit.org · 6 years ago
- 7bd12d6 [BigInt] BigInt.proptotype.toString is broken when radix is power of 2 by ticaiolima@gmail.com · 6 years ago
- 7438486 [ESNext][BigInt] Implement support for "&" by ticaiolima@gmail.com · 6 years ago
- e3f0326 JSC test stress/jsc-read.js doesn't support CRLF by ross.kirsling@sony.com · 6 years ago
- 80c907f Verify the contents of AssemblerBuffer on arm64e by sbarati@apple.com · 6 years ago
- bf93b7c Disable test without LLInt on ARMv7 by commit-queue@webkit.org · 6 years ago
- 3e23d83 We should zero unused property storage when rebalancing array storage. by keith_miller@apple.com · 6 years ago
- 6f44821 [JSC] Optimize Array#lastIndexOf https://bugs.webkit.org/show_bug.cgi?id=189780 by yusukesuzuki@slowstart.org · 6 years ago
- 0d9999e0 Calls to baselineCodeBlockForOriginAndBaselineCodeBlock in operationMaterializeObjectInOSR should actually pass in the baseline CodeBlock by sbarati@apple.com · 6 years ago
- 464e11e Array.prototype.indexOf fast path needs to ensure the length is still valid after performing effects by sbarati@apple.com · 6 years ago
- 1f47d24 ArgumentsEliminationPhase should snip basic blocks after proven OSR exits by sbarati@apple.com · 6 years ago
- 23c0119 The sampling should not use Strong<CodeBlock> in its machineLocation field by sbarati@apple.com · 6 years ago
- fbf1df9 [JSC] Optimize Array#indexOf in C++ runtime by yusukesuzuki@slowstart.org · 6 years ago
- 5d2af1a AI rule for MultiPutByOffset executes its effects in the wrong order by sbarati@apple.com · 6 years ago
- 152f360 Ensure that ForInContexts are invalidated if their loop local is over-written. by mark.lam@apple.com · 6 years ago
- 0cba66d We must convert ProfileType to CheckStructureOrEmpty instead of CheckStructure by sbarati@apple.com · 6 years ago
- d9894ed Don't dump OSRAvailabilityData in Graph::dump because a stale Availability may point to a Node that is already freed by sbarati@apple.com · 6 years ago
- a80b9a8 Test for array initialization in arrayProtoFuncSplice. by mark.lam@apple.com · 6 years ago
- cd5b775 Test for IntlObject initialization. by mark.lam@apple.com · 6 years ago
- 61a6ea42 Test for array memcpy'ing when JSGlobalObject::haveABadTime. by mark.lam@apple.com · 6 years ago
- 0d79210 Test for incorrect check in emitPutDerivedConstructorToArrowFunctionContextScope. by mark.lam@apple.com · 6 years ago
- 83d222b == Rolled over to ChangeLog-2018-09-11 == by philn@webkit.org · 6 years ago
- 2357320 Test262 failure with Named Capture Groups - using a reference before the group is defined by msaboff@apple.com · 6 years ago
- c8453c1 [JSC] Remove loadModule function in jsc.cpp by yusukesuzuki@slowstart.org · 6 years ago
- 8a73712 Ensure that handleIntrinsicCall() is only applied on op_call shaped instructions. by mark.lam@apple.com · 6 years ago
- a4a7f3a [DFG] DFG should handle String#toString by yusukesuzuki@slowstart.org · 6 years ago
- 4458472 Improper speculation type for Math.pow(NaN, 0) in Abstract Interpreter by msaboff@apple.com · 6 years ago
- 62d485c Gardening: Move regress-189185.js under JSTests/wasm. by mark.lam@apple.com · 6 years ago
- 011860e JSPropertyNameEnumerator::visitChildren() needs to visit its m_cachedStructureID. by mark.lam@apple.com · 6 years ago
- ac44440 [ESNext] Symbol.prototype.description by ross.kirsling@sony.com · 6 years ago
- 4fc1c6d [32-bit JSC tests] Exception: ReferenceError: Can't find variable: WebAssembly. by david_fenton@apple.com · 6 years ago
- 417f2bc isAsyncGeneratorMethodParseMode() should check for SourceParseMode::AsyncGeneratorWrapperMethodMode. by mark.lam@apple.com · 6 years ago
- 539e546 Skip Test on 32-bit platforms. https://bugs.webkit.org/show_bug.cgi?id=189185. by david_fenton@apple.com · 6 years ago
- d9cd5e3 The watchdog sometimes fails to terminate a script. by mark.lam@apple.com · 6 years ago
- 913ff9a Implement Object.fromEntries https://bugs.webkit.org/show_bug.cgi?id=188481 by yusukesuzuki@slowstart.org · 6 years ago
- 3d4f832 Function object should convert params to string before throw a parsing error by yusukesuzuki@slowstart.org · 6 years ago
- 65619d4 Fix exception check accounting in constructJSWebAssemblyCompileError(). by mark.lam@apple.com · 6 years ago
- 9247f4e Fix exception check accounting in JSDataView::defineOwnProperty(). by mark.lam@apple.com · 6 years ago
- 632affa Add missing exception check in arrayProtoFuncLastIndexOf(). by mark.lam@apple.com · 6 years ago
- 6a89629 convertToRegExpMatchFastGlobal must use KnownString as the child use kind by sbarati@apple.com · 6 years ago
- 16f1ac3 CSE DataViewGet* DFG nodes https://bugs.webkit.org/show_bug.cgi?id=188768 by sbarati@apple.com · 6 years ago
- 3acad9c output of toString() of Generator is wrong by yusukesuzuki@slowstart.org · 6 years ago
- d3bfaa0 Add some missing exception checks in JSRopeString::resolveRopeToAtomicString(). by mark.lam@apple.com · 6 years ago
- 184dd1f [WebAssembly] Parse wasm modules in a streaming fashion by yusukesuzuki@slowstart.org · 6 years ago
- b736a8a Fix exception throwing code so that topCallFrame and topEntryFrame stay true to their names. by mark.lam@apple.com · 6 years ago
- 0edc497 [JSC] Array.prototype.reverse modifies JSImmutableButterfly by yusukesuzuki@slowstart.org · 6 years ago
- e2ce042 Make data-view-access.js run less time to prevent timeouts on 32-bit by sbarati@apple.com · 6 years ago
- 686596e The DFG CFGSimplification phase shouldn’t jettison a block when it’s the target of both branch directions. by mark.lam@apple.com · 6 years ago
- 1c01082 Inline DataView accesses into DFG/FTL by sbarati@apple.com · 6 years ago
- e8dd310 [YARR] Extend size of fixed characters bulk matching in 64bit platform by yusukesuzuki@slowstart.org · 6 years ago
- da6c72e intersectionOfPastValuesAtHead must filter values after they've observed an invalidation point by sbarati@apple.com · 6 years ago
- 859f732 Slicing an ArrayBuffer with a long number returns an ArrayBuffer with byteLength zero by keith_miller@apple.com · 6 years ago
- 3454cfd Date.UTC should not return NaN with only Year param by yusukesuzuki@slowstart.org · 6 years ago
- 41c73df Array.prototype.sort should call @toLength instead of ">>> 0" by keith_miller@apple.com · 6 years ago
- 2bb6a20 Array.prototype.sort should throw TypeError if param is a not callable object by keith_miller@apple.com · 6 years ago
- a779d0e [INTL] Implement hourCycle in DateTimeFormat by commit-queue@webkit.org · 6 years ago
- fc57eb1 [JSC] Record CoW status in ArrayProfile correctly by utatane.tea@gmail.com · 7 years ago
- b68b373 arrayProtoPrivateFuncConcatMemcpy() should handle copying from an Undecided type array. by mark.lam@apple.com · 7 years ago
- db72de3 [INTL] Call Typed Array elements toLocaleString with locale and options by commit-queue@webkit.org · 7 years ago
- 2019b50 [INTL] Intl constructor lengths should be configurable by commit-queue@webkit.org · 7 years ago
- d985fdd Unreviewed, rolling out r234183. https://bugs.webkit.org/show_bug.cgi?id=187983 by commit-queue@webkit.org · 7 years ago
- 2f6b46b [JSC] Record CoW status in ArrayProfile by utatane.tea@gmail.com · 7 years ago
- 80fe9c0 need to didFoldClobberWorld when we constant fold GetByVal by sbarati@apple.com · 7 years ago
- 2071d472 [INTL] Language tags are not canonicalized by commit-queue@webkit.org · 7 years ago