- 45da760 classInfo should take a VM so it is not materialized from the object on each call by keith_miller@apple.com · 8 years ago
- d561664 JSArray::tryCreateUninitialized should be called JSArray::tryCreateForInitializationPrivate by msaboff@apple.com · 8 years ago
- 5b8aea1 https://bugs.webkit.org/show_bug.cgi?id=167247 by sbarati@apple.com · 8 years ago
- 741818a IntlObject uses JSArray::tryCreateUninitialized in an unsafe way by msaboff@apple.com · 8 years ago
- a88b5ac JSArray has some object scanning races by fpizlo@apple.com · 8 years ago
- 9a17595 The write barrier should be down with TSO by fpizlo@apple.com · 9 years ago
- 22104f5 Unreviewed, rolling out r206522. by ryanhaddad@apple.com · 9 years ago
- c53123e Unreviewed, rolling out r206506. https://bugs.webkit.org/show_bug.cgi?id=162682 by commit-queue@webkit.org · 9 years ago
- 71ae5a4 Adopt #pragma once in JavaScriptCore by commit-queue@webkit.org · 9 years ago
- 4a748b1 [DFG] Introduce IsCellWithType node and unify IsJSArray, IsRegExpObject and newly added IsProxyObject by utatane.tea@gmail.com · 9 years ago
- bc16ddb Butterflies should be allocated in Auxiliary MarkedSpace instead of CopiedSpace and we should rewrite as much of the GC as needed to make this not a regression by fpizlo@apple.com · 9 years ago
- d775568 Move some JSObject and JSArray inline functions to their respective Inlines.h files. by mark.lam@apple.com · 9 years ago
- 595eebd Unreviewed, roll out r204901, r204897, r204866, r204856, r204854. by fpizlo@apple.com · 9 years ago
- aa6cc56 Butterflies should be allocated in Auxiliary MarkedSpace instead of CopiedSpace and we should rewrite as much of the GC as needed to make this not a regression by fpizlo@apple.com · 9 years ago
- 130c849 [JSC] Array.prototype.join() fails some conformance tests by benjamin@webkit.org · 9 years ago
- d9fda1b Unreviewed, rolling out r203131. https://bugs.webkit.org/show_bug.cgi?id=159698 by ryanhaddad@apple.com · 9 years ago
- fe0742e [JSC] Array.prototype.join() fails some conformance tests by commit-queue@webkit.org · 9 years ago
- 5bed6f6 Add support for Symbol.isConcatSpreadable (round 2) by keith_miller@apple.com · 9 years ago
- 44738ec Stack overflow crashes with deep or cyclic proxy prototype chains by sbarati@apple.com · 9 years ago
- 41d899b Rollout r200426 since it causes PLT regressions. by keith_miller@apple.com · 9 years ago
- f4a459e Unreviewed, reland r200149 since the rollout had inconclusive PLT AB testing results. by keith_miller@apple.com · 9 years ago
- ad6a310 Unreviewed, Revert r199397 due to PLT regressions by keith_miller@apple.com · 9 years ago
- 8736ef1 isJSArray should use ArrayType rather than the ClassInfo by keith_miller@apple.com · 9 years ago
- 32fbcb7 [ES6] Add support for Symbol.isConcatSpreadable. by keith_miller@apple.com · 9 years ago
- 8891e6f Unreviewed, rolling out r199128 and r199141. by commit-queue@webkit.org · 9 years ago
- 0c18a97 [ES6] Add support for Symbol.isConcatSpreadable. by keith_miller@apple.com · 9 years ago
- 2e6603a Unreviewed, rollout r198808. The patch causes crashes on 32-bit and appears to be a JSBench regression. by keith_miller@apple.com · 9 years ago
- 1acb996 [ES6] Add support for Symbol.isConcatSpreadable. by keith_miller@apple.com · 9 years ago
- 272243a Crash in stress/regexp-matches-array-slow-put.js due to stomping on memory when having bad time by msaboff@apple.com · 9 years ago
- 78b50c6 [ES6] Implement Reflect.set without receiver support by utatane.tea@gmail.com · 9 years ago
- f76f1b4 [ES6] Support Reflect.construct https://bugs.webkit.org/show_bug.cgi?id=147330 by utatane.tea@gmail.com · 9 years ago
- d5e9b42 Array.concat should be fast for integer or double arrays by rniwa@webkit.org · 10 years ago
- 7efa84c 2015-06-24 Darin Adler <darin@apple.com> by darin@apple.com · 10 years ago
- 406c2f8 [JSC] Pre-bake final Structure for RegExp matches arrays. by akling@apple.com · 10 years ago
- 5958530 [JSC] Speed up new array construction in Array.prototype.splice(). by akling@apple.com · 10 years ago
- 2fa4973 Array.slice should have a fast path like Array.splice by rniwa@webkit.org · 10 years ago
- c8f3687 Large array shouldn't be slow https://bugs.webkit.org/show_bug.cgi?id=144617 by fpizlo@apple.com · 10 years ago
- 4d2809b It shouldn't take 1846 lines of code and 5 FIXMEs to sort an array. by ggaren@apple.com · 10 years ago
- 50b0712 Unreviewed, rolling out r183288. https://bugs.webkit.org/show_bug.cgi?id=144189 by commit-queue@webkit.org · 10 years ago
- eb0dff3 It shouldn't take 1846 lines of code and 5 FIXMEs to sort an array. by ggaren@apple.com · 10 years ago
- 4b9e000 Don't segregate heap objects based on Structure immortality. by akling@apple.com · 10 years ago
- bcfd39e op_call_varargs should only load the length once by fpizlo@apple.com · 10 years ago
- 74485fb Varargs frame set-up should be factored out for use by other JITs by fpizlo@apple.com · 10 years ago
- c98b79c Use plain JSArray for RegExp matches instead of a lazily populated custom object. by akling@apple.com · 10 years ago
- 36ecb85 Allocate the whole RegExpMatchesArray backing store up front. by akling@apple.com · 11 years ago
- ff27eed Merge r169628 from ftlopt. by fpizlo@apple.com · 11 years ago
- a3572b4 JSArray::shiftCountWith* could be more efficient by mhahnenberg@apple.com · 11 years ago
- beef452 Discern between NaNs that would be safe to tag and NaNs that need some purification before tagging by fpizlo@apple.com · 11 years ago
- b382e6d Rename hasFastArrayStorage to be more appropriate by dbatyai.u-szeged@partner.samsung.com · 11 years ago
- 2f5c83b Spread operator has a bad time when applied to call function by oliver@apple.com · 11 years ago
- b70e41b fourthTier: Change JSStack to grow from high to low addresses by msaboff@apple.com · 12 years ago
- 61ff98c https://bugs.webkit.org/show_bug.cgi?id=120139 by barraclough@apple.com · 12 years ago
- 372fa82 DFG should inline new typedArray() by fpizlo@apple.com · 12 years ago
- 174570f https://bugs.webkit.org/show_bug.cgi?id=120093 by barraclough@apple.com · 12 years ago
- 10ae2d0 Foo::s_info should be Foo::info(), so that you can change how the s_info is actually linked by fpizlo@apple.com · 12 years ago
- ab7b609 Some cleanup in JSValue::get https://bugs.webkit.org/show_bug.cgi?id=119343 by barraclough@apple.com · 12 years ago
- a03796a fourthTier: It should be possible to record heap operations (both FastMalloc and JSC GC) by oliver@apple.com · 12 years ago
- 9a9a4b5 Renamed JSGlobalData to VM https://bugs.webkit.org/show_bug.cgi?id=114777 by ggaren@apple.com · 12 years ago
- a009962 Force debug builds to do bounds checks on contiguous property storage by oliver@apple.com · 12 years ago
- 51b41da Replace numerous manual CRASH's in JSC with RELEASE_ASSERT by oliver@apple.com · 12 years ago
- 0d5d62c If array allocation profiling causes a new_array to allocate double arrays, then the holes should end up being correctly initialized by fpizlo@apple.com · 12 years ago
- a4fe7ab Renamed ...InlineMethods.h files to ...Inlines.h. by mark.lam@apple.com · 12 years ago
- 75c91a7 JSC should infer when indexed storage contains only integers or doubles by fpizlo@apple.com · 12 years ago
- a34ff7d Indentation of JSArray.h is wrong https://bugs.webkit.org/show_bug.cgi?id=101314 by fpizlo@apple.com · 12 years ago
- 0e9910a JSC should infer when indexed storage is contiguous, and optimize for it by fpizlo@apple.com · 13 years ago
- 2cebeda Array.splice should be fast when it is used to remove elements other than the very first by fpizlo@apple.com · 13 years ago
- b5e0730 Address a FIXME in JSArray::sort by fpizlo@apple.com · 13 years ago
- a1c33e2 Add ability for JSArray::unshiftCount to unshift in middle of an array by msaboff@apple.com · 13 years ago
- 658e5eb CHECK_ARRAY_CONSISTENCY isn't being used or tested, so we should remove it by fpizlo@apple.com · 13 years ago
- 1c4a32c If a prototype has indexed setters and its instances have indexed storage, then all put_by_val's should have a bad time by fpizlo@apple.com · 13 years ago
- d8dd053 JSC should have property butterflies by fpizlo@apple.com · 13 years ago
- 3fbbc4f JSArray::putDirectIndex should by default behave like JSObject::putDirect by fpizlo@apple.com · 13 years ago
- e553197 Undo Qt build fix guess, since it breaks other builds. by ggaren@apple.com · 13 years ago
- ac41be1 Try to fix the Qt build: add an #include to JSArray.h, since by ggaren@apple.com · 13 years ago
- 2b1d81e JSArray has methods that are neither used nor defined by fpizlo@apple.com · 13 years ago
- 6c89cd3 DFG::operationNewArray is unnecessarily slow, and may use the wrong array by fpizlo@apple.com · 13 years ago
- 38d3c75 Introduce PropertyName class https://bugs.webkit.org/show_bug.cgi?id=86241 by barraclough@apple.com · 13 years ago
- e3313a5 Inline the JSArray constructor https://bugs.webkit.org/show_bug.cgi?id=84416 by benjamin@webkit.org · 13 years ago
- 01a43ea Remove m_subclassData from JSArray, move the attribute to subclass as needed by benjamin@webkit.org · 13 years ago
- 83c15267 Do not abuse ArrayStorage's m_length for testing array consistency by benjamin@webkit.org · 13 years ago
- 0c59caf Replace static_cast with jsCast when casting JSCell subclasses in JSC by oliver@apple.com · 13 years ago
- 4c11ee0 HashMap<>::add should return a more descriptive object by caio.oliveira@openbossa.org · 13 years ago
- 1052f50 Array.prototype functions should throw if delete fails by barraclough@apple.com · 13 years ago
- b1db28d8 putByIndex should throw in strict mode by barraclough@apple.com · 13 years ago
- cd37404 Split JSArray's [[Put]] & [[DefineOwnProperty]] traps. by barraclough@apple.com · 13 years ago
- 87ff87d Implement fast path for op_new_array in the baseline JIT by mhahnenberg@apple.com · 13 years ago
- bd5ac22 Allocations from CopiedBlocks should always be 8-byte aligned by mhahnenberg@apple.com · 13 years ago
- 7bbcaab JSC should be a triple-tier VM by fpizlo@apple.com · 13 years ago
- e089d62 Roll out r108309, r108323, and r108326 by aroben@apple.com · 13 years ago
- 091129f JSC should be a triple-tier VM by fpizlo@apple.com · 13 years ago
- 2922922 Unreviewed, rolling out http://trac.webkit.org/changeset/108291 by fpizlo@apple.com · 13 years ago
- d249ef8 Implement fast path for op_new_array in the baseline JIT by mhahnenberg@apple.com · 13 years ago
- e2ea07b Source/JavaScriptCore: <<<<<<< .mine by barraclough@apple.com · 13 years ago
- c274832 Split MarkedSpace into destructor and destructor-free subspaces by mhahnenberg@apple.com · 13 years ago
- 59415ea Replace JSArray destructor with finalizer by mhahnenberg@apple.com · 13 years ago
- 5d0b30a Implement a new allocator for backing stores by mhahnenberg@apple.com · 13 years ago
- f0dd2d9 JavaScriptCore: Mark all exported symbols in the header file automatically. by morrita@google.com · 13 years ago
- cd7d2b0 Source/JavaScriptCore: Do not allow Array length to be set if it is non-configurable by barraclough@apple.com · 13 years ago
- 166c907 https://bugs.webkit.org/show_bug.cgi?id=75789 by barraclough@apple.com · 13 years ago
- 5e4d2f1 unshift/pop fifo may consume excessive memory by barraclough@apple.com · 13 years ago