1. 0442bbe Rolling in r237753 with unreviewed build fix. by msaboff@apple.com · 6 years ago
  2. cb7b79f Unreviewed, rolling out r237753. by ryanhaddad@apple.com · 6 years ago
  3. 9ab4f14 Running out of stack space not properly handled in RegExp::compile() and its callers by msaboff@apple.com · 6 years ago
  4. 52596ba Skip tests on arm/mips that time out now we're running on CLoop by guijemont@igalia.com · 6 years ago
  5. e23b883 REGRESSION(r237547): Exception handlers should be aware of wide opcodes by tzagallo@apple.com · 6 years ago
  6. 184eed8 Correctly detect string overflow when using the 'Function' constructor. by mark.lam@apple.com · 6 years ago
  7. b4566d8 Add support for GetStack FlushedDouble by tzagallo@apple.com · 6 years ago
  8. 3474dd0 New bytecode format for JSC by tzagallo@apple.com · 6 years ago
  9. 9907b06 Unreviewed, rolling out r237479 and r237484. by commit-queue@webkit.org · 6 years ago
  10. 1f8380c New bytecode format for JSC by tzagallo@apple.com · 6 years ago
  11. 8deb8bd Fix missing edge cases with JSGlobalObjects having a bad time. by mark.lam@apple.com · 6 years ago
  12. 40010a6 DFGAbstractValue::m_arrayModes expects IndexingMode values, not IndexingType. by mark.lam@apple.com · 6 years ago
  13. 717bdcd DFGAbstractValue::m_arrayModes expects IndexingMode values, not IndexingType. by mark.lam@apple.com · 6 years ago
  14. eab405c Unreviewed, rolling out r237254. https://bugs.webkit.org/show_bug.cgi?id=190760 by commit-queue@webkit.org · 6 years ago
  15. 3bd2341 vmCall should check if we exit before emitting an OSR exit due to exceptions by sbarati@apple.com · 6 years ago
  16. 1541c5f [ESNext][BigInt] Implement support for "^" by ticaiolima@gmail.com · 6 years ago
  17. 5ea7781 [BigInt] Add ValueSub into DFG https://bugs.webkit.org/show_bug.cgi?id=186176 by ticaiolima@gmail.com · 6 years ago
  18. ea92da1 [JSC] JSC should have "parseFunction" to optimize Function constructor by yusukesuzuki@slowstart.org · 6 years ago
  19. b858a8e Unreviewed, rolling out r237242. https://bugs.webkit.org/show_bug.cgi?id=190701 by commit-queue@webkit.org · 6 years ago
  20. 4895c9f JSTests: by keith_miller@apple.com · 6 years ago
  21. 231c825 [BigInt] Add ValueSub into DFG https://bugs.webkit.org/show_bug.cgi?id=186176 by ticaiolima@gmail.com · 6 years ago
  22. 7dcddc4 [JSC] stress/array-prototype-concat-of-long-spliced-arrays2.js times out on arm and mips by dinfuehr@igalia.com · 6 years ago
  23. 8138e19 Skip stress/array-prototype-concat-of-long-spliced-arrays2.js on arm and mips/linux by guijemont@igalia.com · 6 years ago
  24. 67538f2 Emit fjcvtzs on ARM64E on Darwin https://bugs.webkit.org/show_bug.cgi?id=184023 by sbarati@apple.com · 6 years ago
  25. 51a62eb JSArray::shiftCountWithArrayStorage is wrong when an array has holes by sbarati@apple.com · 6 years ago
  26. 21687be Unreviewed, rolling out r237054. https://bugs.webkit.org/show_bug.cgi?id=190593 by commit-queue@webkit.org · 6 years ago
  27. d550398 [JSC] JSON.stringify can accept call-with-no-arguments by yusukesuzuki@slowstart.org · 6 years ago
  28. 68c3b53 [JSC] JSC should have "parseFunction" to optimize Function constructor by yusukesuzuki@slowstart.org · 6 years ago
  29. 6816299 Skip JSC test stress/sampling-profiler-richards.js on armv7/linux by guijemont@igalia.com · 6 years ago
  30. 92b4c6b [ESNext][BigInt] Implement support for "|" by ticaiolima@gmail.com · 6 years ago
  31. cc1237d Skip test on systems with limited memory by commit-queue@webkit.org · 6 years ago
  32. 8946412 lowXYZ in FTLLower should always filter the type of the incoming edge by sbarati@apple.com · 6 years ago
  33. 5c436b2 Make string MaxLength for all WTF and JS strings consistently equal to INT_MAX. by mark.lam@apple.com · 6 years ago
  34. 5851252 [BigInt] BigInt.proptotype.toString is broken when radix is power of 2 by ticaiolima@gmail.com · 6 years ago
  35. 9857c83 Function.toString() should also copy the source code Functions that are class definitions. by mark.lam@apple.com · 6 years ago
  36. f43d3a2 Split NaN-check into separate test by commit-queue@webkit.org · 6 years ago
  37. bdcd296 Unreviewed, rolling out r236647. https://bugs.webkit.org/show_bug.cgi?id=190124 by commit-queue@webkit.org · 6 years ago
  38. 7bd12d6 [BigInt] BigInt.proptotype.toString is broken when radix is power of 2 by ticaiolima@gmail.com · 6 years ago
  39. 7438486 [ESNext][BigInt] Implement support for "&" by ticaiolima@gmail.com · 6 years ago
  40. e3f0326 JSC test stress/jsc-read.js doesn't support CRLF by ross.kirsling@sony.com · 6 years ago
  41. 80c907f Verify the contents of AssemblerBuffer on arm64e by sbarati@apple.com · 6 years ago
  42. bf93b7c Disable test without LLInt on ARMv7 by commit-queue@webkit.org · 6 years ago
  43. 3e23d83 We should zero unused property storage when rebalancing array storage. by keith_miller@apple.com · 6 years ago
  44. 6f44821 [JSC] Optimize Array#lastIndexOf https://bugs.webkit.org/show_bug.cgi?id=189780 by yusukesuzuki@slowstart.org · 6 years ago
  45. 0d9999e0 Calls to baselineCodeBlockForOriginAndBaselineCodeBlock in operationMaterializeObjectInOSR should actually pass in the baseline CodeBlock by sbarati@apple.com · 6 years ago
  46. 464e11e Array.prototype.indexOf fast path needs to ensure the length is still valid after performing effects by sbarati@apple.com · 6 years ago
  47. 1f47d24 ArgumentsEliminationPhase should snip basic blocks after proven OSR exits by sbarati@apple.com · 6 years ago
  48. 23c0119 The sampling should not use Strong<CodeBlock> in its machineLocation field by sbarati@apple.com · 6 years ago
  49. fbf1df9 [JSC] Optimize Array#indexOf in C++ runtime by yusukesuzuki@slowstart.org · 6 years ago
  50. 5d2af1a AI rule for MultiPutByOffset executes its effects in the wrong order by sbarati@apple.com · 6 years ago
  51. 152f360 Ensure that ForInContexts are invalidated if their loop local is over-written. by mark.lam@apple.com · 6 years ago
  52. 0cba66d We must convert ProfileType to CheckStructureOrEmpty instead of CheckStructure by sbarati@apple.com · 6 years ago
  53. d9894ed Don't dump OSRAvailabilityData in Graph::dump because a stale Availability may point to a Node that is already freed by sbarati@apple.com · 6 years ago
  54. a80b9a8 Test for array initialization in arrayProtoFuncSplice. by mark.lam@apple.com · 6 years ago
  55. cd5b775 Test for IntlObject initialization. by mark.lam@apple.com · 6 years ago
  56. 61a6ea42 Test for array memcpy'ing when JSGlobalObject::haveABadTime. by mark.lam@apple.com · 6 years ago
  57. 0d79210 Test for incorrect check in emitPutDerivedConstructorToArrowFunctionContextScope. by mark.lam@apple.com · 6 years ago
  58. 83d222b == Rolled over to ChangeLog-2018-09-11 == by philn@webkit.org · 6 years ago
  59. 2357320 Test262 failure with Named Capture Groups - using a reference before the group is defined by msaboff@apple.com · 6 years ago
  60. c8453c1 [JSC] Remove loadModule function in jsc.cpp by yusukesuzuki@slowstart.org · 6 years ago
  61. 8a73712 Ensure that handleIntrinsicCall() is only applied on op_call shaped instructions. by mark.lam@apple.com · 6 years ago
  62. a4a7f3a [DFG] DFG should handle String#toString by yusukesuzuki@slowstart.org · 6 years ago
  63. 4458472 Improper speculation type for Math.pow(NaN, 0) in Abstract Interpreter by msaboff@apple.com · 6 years ago
  64. 62d485c Gardening: Move regress-189185.js under JSTests/wasm. by mark.lam@apple.com · 6 years ago
  65. 011860e JSPropertyNameEnumerator::visitChildren() needs to visit its m_cachedStructureID. by mark.lam@apple.com · 6 years ago
  66. ac44440 [ESNext] Symbol.prototype.description by ross.kirsling@sony.com · 6 years ago
  67. 4fc1c6d [32-bit JSC tests] Exception: ReferenceError: Can't find variable: WebAssembly. by david_fenton@apple.com · 6 years ago
  68. 417f2bc isAsyncGeneratorMethodParseMode() should check for SourceParseMode::AsyncGeneratorWrapperMethodMode. by mark.lam@apple.com · 6 years ago
  69. 539e546 Skip Test on 32-bit platforms. https://bugs.webkit.org/show_bug.cgi?id=189185. by david_fenton@apple.com · 6 years ago
  70. d9cd5e3 The watchdog sometimes fails to terminate a script. by mark.lam@apple.com · 6 years ago
  71. 913ff9a Implement Object.fromEntries https://bugs.webkit.org/show_bug.cgi?id=188481 by yusukesuzuki@slowstart.org · 6 years ago
  72. 3d4f832 Function object should convert params to string before throw a parsing error by yusukesuzuki@slowstart.org · 6 years ago
  73. 65619d4 Fix exception check accounting in constructJSWebAssemblyCompileError(). by mark.lam@apple.com · 6 years ago
  74. 9247f4e Fix exception check accounting in JSDataView::defineOwnProperty(). by mark.lam@apple.com · 6 years ago
  75. 632affa Add missing exception check in arrayProtoFuncLastIndexOf(). by mark.lam@apple.com · 6 years ago
  76. 6a89629 convertToRegExpMatchFastGlobal must use KnownString as the child use kind by sbarati@apple.com · 6 years ago
  77. 16f1ac3 CSE DataViewGet* DFG nodes https://bugs.webkit.org/show_bug.cgi?id=188768 by sbarati@apple.com · 6 years ago
  78. 3acad9c output of toString() of Generator is wrong by yusukesuzuki@slowstart.org · 6 years ago
  79. d3bfaa0 Add some missing exception checks in JSRopeString::resolveRopeToAtomicString(). by mark.lam@apple.com · 6 years ago
  80. 184dd1f [WebAssembly] Parse wasm modules in a streaming fashion by yusukesuzuki@slowstart.org · 6 years ago
  81. b736a8a Fix exception throwing code so that topCallFrame and topEntryFrame stay true to their names. by mark.lam@apple.com · 6 years ago
  82. 0edc497 [JSC] Array.prototype.reverse modifies JSImmutableButterfly by yusukesuzuki@slowstart.org · 6 years ago
  83. e2ce042 Make data-view-access.js run less time to prevent timeouts on 32-bit by sbarati@apple.com · 6 years ago
  84. 686596e The DFG CFGSimplification phase shouldn’t jettison a block when it’s the target of both branch directions. by mark.lam@apple.com · 6 years ago
  85. 1c01082 Inline DataView accesses into DFG/FTL by sbarati@apple.com · 6 years ago
  86. e8dd310 [YARR] Extend size of fixed characters bulk matching in 64bit platform by yusukesuzuki@slowstart.org · 6 years ago
  87. da6c72e intersectionOfPastValuesAtHead must filter values after they've observed an invalidation point by sbarati@apple.com · 6 years ago
  88. 859f732 Slicing an ArrayBuffer with a long number returns an ArrayBuffer with byteLength zero by keith_miller@apple.com · 6 years ago
  89. 3454cfd Date.UTC should not return NaN with only Year param by yusukesuzuki@slowstart.org · 6 years ago
  90. 41c73df Array.prototype.sort should call @toLength instead of ">>> 0" by keith_miller@apple.com · 6 years ago
  91. 2bb6a20 Array.prototype.sort should throw TypeError if param is a not callable object by keith_miller@apple.com · 6 years ago
  92. a779d0e [INTL] Implement hourCycle in DateTimeFormat by commit-queue@webkit.org · 6 years ago
  93. fc57eb1 [JSC] Record CoW status in ArrayProfile correctly by utatane.tea@gmail.com · 7 years ago
  94. b68b373 arrayProtoPrivateFuncConcatMemcpy() should handle copying from an Undecided type array. by mark.lam@apple.com · 7 years ago
  95. db72de3 [INTL] Call Typed Array elements toLocaleString with locale and options by commit-queue@webkit.org · 7 years ago
  96. 2019b50 [INTL] Intl constructor lengths should be configurable by commit-queue@webkit.org · 7 years ago
  97. d985fdd Unreviewed, rolling out r234183. https://bugs.webkit.org/show_bug.cgi?id=187983 by commit-queue@webkit.org · 7 years ago
  98. 2f6b46b [JSC] Record CoW status in ArrayProfile by utatane.tea@gmail.com · 7 years ago
  99. 80fe9c0 need to didFoldClobberWorld when we constant fold GetByVal by sbarati@apple.com · 7 years ago
  100. 2071d472 [INTL] Language tags are not canonicalized by commit-queue@webkit.org · 7 years ago