1. 45da760 classInfo should take a VM so it is not materialized from the object on each call by keith_miller@apple.com · 8 years ago
  2. d561664 JSArray::tryCreateUninitialized should be called JSArray::tryCreateForInitializationPrivate by msaboff@apple.com · 8 years ago
  3. 5b8aea1 https://bugs.webkit.org/show_bug.cgi?id=167247 by sbarati@apple.com · 8 years ago
  4. 741818a IntlObject uses JSArray::tryCreateUninitialized in an unsafe way by msaboff@apple.com · 8 years ago
  5. a88b5ac JSArray has some object scanning races by fpizlo@apple.com · 8 years ago
  6. 9a17595 The write barrier should be down with TSO by fpizlo@apple.com · 9 years ago
  7. 22104f5 Unreviewed, rolling out r206522. by ryanhaddad@apple.com · 9 years ago
  8. c53123e Unreviewed, rolling out r206506. https://bugs.webkit.org/show_bug.cgi?id=162682 by commit-queue@webkit.org · 9 years ago
  9. 71ae5a4 Adopt #pragma once in JavaScriptCore by commit-queue@webkit.org · 9 years ago
  10. 4a748b1 [DFG] Introduce IsCellWithType node and unify IsJSArray, IsRegExpObject and newly added IsProxyObject by utatane.tea@gmail.com · 9 years ago
  11. bc16ddb Butterflies should be allocated in Auxiliary MarkedSpace instead of CopiedSpace and we should rewrite as much of the GC as needed to make this not a regression by fpizlo@apple.com · 9 years ago
  12. d775568 Move some JSObject and JSArray inline functions to their respective Inlines.h files. by mark.lam@apple.com · 9 years ago
  13. 595eebd Unreviewed, roll out r204901, r204897, r204866, r204856, r204854. by fpizlo@apple.com · 9 years ago
  14. aa6cc56 Butterflies should be allocated in Auxiliary MarkedSpace instead of CopiedSpace and we should rewrite as much of the GC as needed to make this not a regression by fpizlo@apple.com · 9 years ago
  15. 130c849 [JSC] Array.prototype.join() fails some conformance tests by benjamin@webkit.org · 9 years ago
  16. d9fda1b Unreviewed, rolling out r203131. https://bugs.webkit.org/show_bug.cgi?id=159698 by ryanhaddad@apple.com · 9 years ago
  17. fe0742e [JSC] Array.prototype.join() fails some conformance tests by commit-queue@webkit.org · 9 years ago
  18. 5bed6f6 Add support for Symbol.isConcatSpreadable (round 2) by keith_miller@apple.com · 9 years ago
  19. 44738ec Stack overflow crashes with deep or cyclic proxy prototype chains by sbarati@apple.com · 9 years ago
  20. 41d899b Rollout r200426 since it causes PLT regressions. by keith_miller@apple.com · 9 years ago
  21. f4a459e Unreviewed, reland r200149 since the rollout had inconclusive PLT AB testing results. by keith_miller@apple.com · 9 years ago
  22. ad6a310 Unreviewed, Revert r199397 due to PLT regressions by keith_miller@apple.com · 9 years ago
  23. 8736ef1 isJSArray should use ArrayType rather than the ClassInfo by keith_miller@apple.com · 9 years ago
  24. 32fbcb7 [ES6] Add support for Symbol.isConcatSpreadable. by keith_miller@apple.com · 9 years ago
  25. 8891e6f Unreviewed, rolling out r199128 and r199141. by commit-queue@webkit.org · 9 years ago
  26. 0c18a97 [ES6] Add support for Symbol.isConcatSpreadable. by keith_miller@apple.com · 9 years ago
  27. 2e6603a Unreviewed, rollout r198808. The patch causes crashes on 32-bit and appears to be a JSBench regression. by keith_miller@apple.com · 9 years ago
  28. 1acb996 [ES6] Add support for Symbol.isConcatSpreadable. by keith_miller@apple.com · 9 years ago
  29. 272243a Crash in stress/regexp-matches-array-slow-put.js due to stomping on memory when having bad time by msaboff@apple.com · 9 years ago
  30. 78b50c6 [ES6] Implement Reflect.set without receiver support by utatane.tea@gmail.com · 9 years ago
  31. f76f1b4 [ES6] Support Reflect.construct https://bugs.webkit.org/show_bug.cgi?id=147330 by utatane.tea@gmail.com · 9 years ago
  32. d5e9b42 Array.concat should be fast for integer or double arrays by rniwa@webkit.org · 10 years ago
  33. 7efa84c 2015-06-24 Darin Adler <darin@apple.com> by darin@apple.com · 10 years ago
  34. 406c2f8 [JSC] Pre-bake final Structure for RegExp matches arrays. by akling@apple.com · 10 years ago
  35. 5958530 [JSC] Speed up new array construction in Array.prototype.splice(). by akling@apple.com · 10 years ago
  36. 2fa4973 Array.slice should have a fast path like Array.splice by rniwa@webkit.org · 10 years ago
  37. c8f3687 Large array shouldn't be slow https://bugs.webkit.org/show_bug.cgi?id=144617 by fpizlo@apple.com · 10 years ago
  38. 4d2809b It shouldn't take 1846 lines of code and 5 FIXMEs to sort an array. by ggaren@apple.com · 10 years ago
  39. 50b0712 Unreviewed, rolling out r183288. https://bugs.webkit.org/show_bug.cgi?id=144189 by commit-queue@webkit.org · 10 years ago
  40. eb0dff3 It shouldn't take 1846 lines of code and 5 FIXMEs to sort an array. by ggaren@apple.com · 10 years ago
  41. 4b9e000 Don't segregate heap objects based on Structure immortality. by akling@apple.com · 10 years ago
  42. bcfd39e op_call_varargs should only load the length once by fpizlo@apple.com · 10 years ago
  43. 74485fb Varargs frame set-up should be factored out for use by other JITs by fpizlo@apple.com · 10 years ago
  44. c98b79c Use plain JSArray for RegExp matches instead of a lazily populated custom object. by akling@apple.com · 10 years ago
  45. 36ecb85 Allocate the whole RegExpMatchesArray backing store up front. by akling@apple.com · 11 years ago
  46. ff27eed Merge r169628 from ftlopt. by fpizlo@apple.com · 11 years ago
  47. a3572b4 JSArray::shiftCountWith* could be more efficient by mhahnenberg@apple.com · 11 years ago
  48. beef452 Discern between NaNs that would be safe to tag and NaNs that need some purification before tagging by fpizlo@apple.com · 11 years ago
  49. b382e6d Rename hasFastArrayStorage to be more appropriate by dbatyai.u-szeged@partner.samsung.com · 11 years ago
  50. 2f5c83b Spread operator has a bad time when applied to call function by oliver@apple.com · 11 years ago
  51. b70e41b fourthTier: Change JSStack to grow from high to low addresses by msaboff@apple.com · 12 years ago
  52. 61ff98c https://bugs.webkit.org/show_bug.cgi?id=120139 by barraclough@apple.com · 12 years ago
  53. 372fa82 DFG should inline new typedArray() by fpizlo@apple.com · 12 years ago
  54. 174570f https://bugs.webkit.org/show_bug.cgi?id=120093 by barraclough@apple.com · 12 years ago
  55. 10ae2d0 Foo::s_info should be Foo::info(), so that you can change how the s_info is actually linked by fpizlo@apple.com · 12 years ago
  56. ab7b609 Some cleanup in JSValue::get https://bugs.webkit.org/show_bug.cgi?id=119343 by barraclough@apple.com · 12 years ago
  57. a03796a fourthTier: It should be possible to record heap operations (both FastMalloc and JSC GC) by oliver@apple.com · 12 years ago
  58. 9a9a4b5 Renamed JSGlobalData to VM https://bugs.webkit.org/show_bug.cgi?id=114777 by ggaren@apple.com · 12 years ago
  59. a009962 Force debug builds to do bounds checks on contiguous property storage by oliver@apple.com · 12 years ago
  60. 51b41da Replace numerous manual CRASH's in JSC with RELEASE_ASSERT by oliver@apple.com · 12 years ago
  61. 0d5d62c If array allocation profiling causes a new_array to allocate double arrays, then the holes should end up being correctly initialized by fpizlo@apple.com · 12 years ago
  62. a4fe7ab Renamed ...InlineMethods.h files to ...Inlines.h. by mark.lam@apple.com · 12 years ago
  63. 75c91a7 JSC should infer when indexed storage contains only integers or doubles by fpizlo@apple.com · 12 years ago
  64. a34ff7d Indentation of JSArray.h is wrong https://bugs.webkit.org/show_bug.cgi?id=101314 by fpizlo@apple.com · 12 years ago
  65. 0e9910a JSC should infer when indexed storage is contiguous, and optimize for it by fpizlo@apple.com · 13 years ago
  66. 2cebeda Array.splice should be fast when it is used to remove elements other than the very first by fpizlo@apple.com · 13 years ago
  67. b5e0730 Address a FIXME in JSArray::sort by fpizlo@apple.com · 13 years ago
  68. a1c33e2 Add ability for JSArray::unshiftCount to unshift in middle of an array by msaboff@apple.com · 13 years ago
  69. 658e5eb CHECK_ARRAY_CONSISTENCY isn't being used or tested, so we should remove it by fpizlo@apple.com · 13 years ago
  70. 1c4a32c If a prototype has indexed setters and its instances have indexed storage, then all put_by_val's should have a bad time by fpizlo@apple.com · 13 years ago
  71. d8dd053 JSC should have property butterflies by fpizlo@apple.com · 13 years ago
  72. 3fbbc4f JSArray::putDirectIndex should by default behave like JSObject::putDirect by fpizlo@apple.com · 13 years ago
  73. e553197 Undo Qt build fix guess, since it breaks other builds. by ggaren@apple.com · 13 years ago
  74. ac41be1 Try to fix the Qt build: add an #include to JSArray.h, since by ggaren@apple.com · 13 years ago
  75. 2b1d81e JSArray has methods that are neither used nor defined by fpizlo@apple.com · 13 years ago
  76. 6c89cd3 DFG::operationNewArray is unnecessarily slow, and may use the wrong array by fpizlo@apple.com · 13 years ago
  77. 38d3c75 Introduce PropertyName class https://bugs.webkit.org/show_bug.cgi?id=86241 by barraclough@apple.com · 13 years ago
  78. e3313a5 Inline the JSArray constructor https://bugs.webkit.org/show_bug.cgi?id=84416 by benjamin@webkit.org · 13 years ago
  79. 01a43ea Remove m_subclassData from JSArray, move the attribute to subclass as needed by benjamin@webkit.org · 13 years ago
  80. 83c15267 Do not abuse ArrayStorage's m_length for testing array consistency by benjamin@webkit.org · 13 years ago
  81. 0c59caf Replace static_cast with jsCast when casting JSCell subclasses in JSC by oliver@apple.com · 13 years ago
  82. 4c11ee0 HashMap<>::add should return a more descriptive object by caio.oliveira@openbossa.org · 13 years ago
  83. 1052f50 Array.prototype functions should throw if delete fails by barraclough@apple.com · 13 years ago
  84. b1db28d8 putByIndex should throw in strict mode by barraclough@apple.com · 13 years ago
  85. cd37404 Split JSArray's [[Put]] & [[DefineOwnProperty]] traps. by barraclough@apple.com · 13 years ago
  86. 87ff87d Implement fast path for op_new_array in the baseline JIT by mhahnenberg@apple.com · 13 years ago
  87. bd5ac22 Allocations from CopiedBlocks should always be 8-byte aligned by mhahnenberg@apple.com · 13 years ago
  88. 7bbcaab JSC should be a triple-tier VM by fpizlo@apple.com · 13 years ago
  89. e089d62 Roll out r108309, r108323, and r108326 by aroben@apple.com · 13 years ago
  90. 091129f JSC should be a triple-tier VM by fpizlo@apple.com · 13 years ago
  91. 2922922 Unreviewed, rolling out http://trac.webkit.org/changeset/108291 by fpizlo@apple.com · 13 years ago
  92. d249ef8 Implement fast path for op_new_array in the baseline JIT by mhahnenberg@apple.com · 13 years ago
  93. e2ea07b Source/JavaScriptCore: <<<<<<< .mine by barraclough@apple.com · 13 years ago
  94. c274832 Split MarkedSpace into destructor and destructor-free subspaces by mhahnenberg@apple.com · 13 years ago
  95. 59415ea Replace JSArray destructor with finalizer by mhahnenberg@apple.com · 13 years ago
  96. 5d0b30a Implement a new allocator for backing stores by mhahnenberg@apple.com · 13 years ago
  97. f0dd2d9 JavaScriptCore: Mark all exported symbols in the header file automatically. by morrita@google.com · 13 years ago
  98. cd7d2b0 Source/JavaScriptCore: Do not allow Array length to be set if it is non-configurable by barraclough@apple.com · 13 years ago
  99. 166c907 https://bugs.webkit.org/show_bug.cgi?id=75789 by barraclough@apple.com · 13 years ago
  100. 5e4d2f1 unshift/pop fifo may consume excessive memory by barraclough@apple.com · 13 years ago