Google Git
Sign in
webkit / WebKit / 6ada3cd2e0d9b9e450b5e021e0e5526f55f59df8 / JSTests / ChangeLog
  1. fd79f2a Skip memcpy-typed-loop timing out on ARMv7 pending investigation by commit-queue@webkit.org · 5 years ago
  2. 38af2d1 Wasm B3IRGenerator should use arguments for control data. by keith_miller@apple.com · 5 years ago
  3. 6659f04 Modify JSTests/stress/string-overflow-createError-*.js tests to allow an OOME result. by mark.lam@apple.com · 5 years ago
  4. 6cdbec3 Unreviewed, roll out r250878 https://bugs.webkit.org/show_bug.cgi?id=202656 by ysuzuki@apple.com · 5 years ago
  5. fd69199 [JSC] GetterSetter should be JSCell, not JSObject by ysuzuki@apple.com · 5 years ago
  6. 9a273f9 JSON.parse incorrectly handles array proxies by commit-queue@webkit.org · 5 years ago
  7. b588acc Update test262 (2019.10.08). by ross.kirsling@sony.com · 5 years ago
  8. e205d30 Allow OSR exit to the LLInt https://bugs.webkit.org/show_bug.cgi?id=197993 by sbarati@apple.com · 5 years ago
  9. 03e28d9 Unreviewed, rolling out r250750. by jlewis3@apple.com · 5 years ago
  10. 1c67393c4 Allow OSR exit to the LLInt https://bugs.webkit.org/show_bug.cgi?id=197993 by sbarati@apple.com · 5 years ago
  11. 2ed1621 Revert regexp test skip on armv7l and mips by commit-queue@webkit.org · 5 years ago
  12. 9a43942 DoubleToStringConverter::ToExponential() should null terminate its string. by mark.lam@apple.com · 5 years ago
  13. fcfff83 [JSC] AsyncGenerator should have internal fields by ysuzuki@apple.com · 5 years ago
  14. 07632a5 ObjectAllocationSinkingPhase shouldn't insert hints for allocations which are no longer valid by sbarati@apple.com · 5 years ago
  15. 401f877 skip test until we figure out why it's timing out by keith_miller@apple.com · 5 years ago
  16. b109cb1 Mark toctou test as skipped on debug builds by keith_miller@apple.com · 5 years ago
  17. da0f3b0 2019-10-01 Keith Miller <keith_miller@apple.com> by keith_miller@apple.com · 5 years ago
  18. c8293ae [YARR] Properly handle surrogates when matching back references by msaboff@apple.com · 5 years ago
  19. 8e7bd48 Add support for the Wasm multi-value proposal by keith_miller@apple.com · 5 years ago
  20. 8f5e145 Make assertion in JSObject::putOwnDataProperty more precise by tzagallo@apple.com · 5 years ago
  21. a1d55ed [JSC] HeapSnapshotBuilder m_rootData should be protected with a lock too by ysuzuki@apple.com · 5 years ago
  22. 757c0aa Inline caching is wrong for custom accessors and custom values by sbarati@apple.com · 5 years ago
  23. 83cec39 [JSC] AI folds CompareEq wrongly when it sees proven Boolean and Number by ysuzuki@apple.com · 5 years ago
  24. 782a6d3 [JSC] Keep JSString::value(ExecState*)'s result as String instead of `const String&` by ysuzuki@apple.com · 5 years ago
  25. f002d6a Non-standard Error properties should not be enumerable by commit-queue@webkit.org · 5 years ago
  26. f0e1606 [JSC] DFG recursive-tail-call optimization should not emit jump to call-frame with varargs by ysuzuki@apple.com · 5 years ago
  27. 2de8d5c toExponential, toFixed, and toPrecision should allow arguments up to 100 by commit-queue@webkit.org · 5 years ago
  28. f35a280 [ES6] Come up with a test for Proxy.[[GetOwnProperty]] that tests the isExtensible error when the result of the trap is undefined by commit-queue@webkit.org · 5 years ago
  29. 75bda5d [BigInt] Add ValueBitRShift into DFG by ticaiolima@gmail.com · 5 years ago
  30. 07ae07a Array methods should throw TypeError upon attempting to modify a string by ross.kirsling@sony.com · 5 years ago
  31. b2f1f5d Lazy JSGlobalObject property materialization should not use putDirectWithoutTransition. by mark.lam@apple.com · 5 years ago
  32. 40bfc8f Skip stress/regexp-unicode-surrogate-pair-increment-should-involve-length-check.js into ARMv7 and MIPS by ticaiolima@gmail.com · 5 years ago
  33. 5c27346 [JSC] Int52Rep(DoubleRepAnyIntUse) should not call operation function by ysuzuki@apple.com · 5 years ago
  34. d0a4532 stress/test-out-of-memory.js is not throwing OOM into ARMv7 and MIPS by ticaiolima@gmail.com · 5 years ago
  35. 5516377 AccessCase should strongly visit its dependencies while on stack by tzagallo@apple.com · 5 years ago
  36. fd0662b Unreviewed. Make toctou-having-a-bad-time-new-array.js run for less time because it's timing out on the debug bots. by sbarati@apple.com · 5 years ago
  37. d3c7bf2 [JSC] DFG op_call_varargs should not assume that one-previous-local of freeReg is usable by ysuzuki@apple.com · 5 years ago
  38. eb3431e Syntax checker should report duplicate __proto__ properties by tzagallo@apple.com · 5 years ago
  39. ba01184 TOCTOU bug in havingABadTime related assertion in DFGSpeculativeJIT by sbarati@apple.com · 5 years ago
  40. 0b68624 Phantom insertion phase may disagree with arguments forwarding about live ranges by sbarati@apple.com · 5 years ago
  41. 8bb1b39 [JSC] Generator should have internal fields by ysuzuki@apple.com · 5 years ago
  42. 70541f2 Follow-up after String.codePointAt optimization by ysuzuki@apple.com · 5 years ago
  43. c74483a [JSC] CheckArray+NonArray is not filtering out Array in AI by ysuzuki@apple.com · 5 years ago
  44. 31e1106 CheckArray on DirectArguments/ScopedArguments does not filter out slow put array storage by sbarati@apple.com · 5 years ago
  45. a6e772a Wasm StreamingParser should validate that number of functions matches number of declarations by tzagallo@apple.com · 5 years ago
  46. 83c81c4 [JSC] Perform check again when we found non-BMP characters by msaboff@apple.com · 5 years ago
  47. 286c161 [JSC] Add missing syntax errors for await in function parameter default expressions by ross.kirsling@sony.com · 5 years ago
  48. f925568 JSObject::putInlineSlow should not ignore "__proto__" for Proxy by sbarati@apple.com · 5 years ago
  49. 1ccd381 Date.prototype.toJSON does not execute steps 1-2 by commit-queue@webkit.org · 6 years ago
  50. 8977785 Harden JSC against the abuse of runtime options. by mark.lam@apple.com · 6 years ago
  51. b064c65 [JSC] Add StringCodePointAt intrinsic by ysuzuki@apple.com · 6 years ago
  52. 5f331cf JSC crashes due to stack overflow while building RegExp by msaboff@apple.com · 6 years ago
  53. e752dfc [WebAssembly] Use StreamingParser in existing Wasm::BBQPlan by ysuzuki@apple.com · 6 years ago
  54. 70f090f OSR entry into wasm misses some contexts by keith_miller@apple.com · 6 years ago
  55. 46e0abe [JSC] Promise resolve/reject functions should be created more efficiently by ysuzuki@apple.com · 6 years ago
  56. ed922b1 Unreviewed JSC test gardening. by zandobersek@gmail.com · 6 years ago
  57. 098a9c4 The jsc shell should allow disabling of the Gigacage for testing purposes. by mark.lam@apple.com · 6 years ago
  58. 21a1899 Gardening: temporarily skipping these tests until the fix can be reviewed and landed. by mark.lam@apple.com · 6 years ago
  59. cc7eb42 Gardening: speculative test fix to green bots [attempt #2]. by mark.lam@apple.com · 6 years ago
  60. 7753ac9 Gardening: speculative test fix to green bots. by mark.lam@apple.com · 6 years ago
  61. 2105d73 Math.round() produces wrong result for value prior to 0.5 by ross.kirsling@sony.com · 6 years ago
  62. f2a4669 Move web-assembly-constructors-should-not-override-global-object-property.js below JSTests/wasm/stress. by mark.lam@apple.com · 6 years ago
  63. b5e3d9c Fix bmalloc::Allocator:tryAllocate() to return null on failure to allocate. by mark.lam@apple.com · 6 years ago
  64. 9f3cbc5 LazyClassStructure::setConstructor should not store the constructor to the global object by tzagallo@apple.com · 6 years ago
  65. 69de458 [JSC] Do not use FTLOutput::weakPointer directly by ysuzuki@apple.com · 6 years ago
  66. 48d4e53 [JSC] Make Promise implementation faster by ysuzuki@apple.com · 6 years ago
  67. 21dd6b2 Assertions in JSArrayBufferView::byteOffset() are only valid for the mutator thread. by mark.lam@apple.com · 6 years ago
  68. 7ca9ffd [JSC] Generate new.target register only when it is used by ysuzuki@apple.com · 6 years ago
  69. 13850ac [JSC] DFG ByteCodeParser should not copy JIT-related part of SimpleJumpTable by ysuzuki@apple.com · 6 years ago
  70. cb9424d [JSC] DFG inlining CheckBadCell slow path does not assume result VirtualRegister can be invalid by ysuzuki@apple.com · 6 years ago
  71. b034dfc [JSC] Repatch should construct CallCases and CasesValue at the same time by ysuzuki@apple.com · 6 years ago
  72. 89ed7dd [JSC] ObjectAllocationSinkingPhase wrongly deals with always-taken branches during interpretation by ysuzuki@apple.com · 6 years ago
  73. e0790c6 DFG/FTL: We should prefetch structures and do a loadLoadFence before doing PrototypeChainIsSane checks. by mark.lam@apple.com · 6 years ago
  74. 7a19435 Placate exception check validation in DFG's operationHasGenericProperty(). by mark.lam@apple.com · 6 years ago
  75. e0b02a6 constructFunctionSkippingEvalEnabledCheck() should use tryMakeString() and check for OOM. by mark.lam@apple.com · 6 years ago
  76. 9b5e50f [JSC] Ensure x?.y ?? z is fast https://bugs.webkit.org/show_bug.cgi?id=200875 by ross.kirsling@sony.com · 6 years ago
  77. 1e5d583 Remove MaximalFlushInsertionPhase https://bugs.webkit.org/show_bug.cgi?id=201036 by tzagallo@apple.com · 6 years ago
  78. 8741ff7 [WASM-References] Do not overwrite argument registers in jsCallEntrypoint by justin_michaud@apple.com · 6 years ago
  79. b89e3c3 Add missing exception check in canonicalizeLocaleList by justin_michaud@apple.com · 6 years ago
  80. a1514c9 Wasm::FunctionParser is failing to enforce maxFunctionLocals. by mark.lam@apple.com · 6 years ago
  81. 36fd3c6 JSTests/stress/optional-chaining should not call shouldThrowTypeError in a loop by ross.kirsling@sony.com · 6 years ago
  82. 566a707 [JSC] incorrent JIT lead to StackOverflow by msaboff@apple.com · 6 years ago
  83. f9b1533 Identify memcpy loops in b3 https://bugs.webkit.org/show_bug.cgi?id=200181 by justin_michaud@apple.com · 6 years ago
  84. d0ee47a [JSC] Array.prototype.toString should not get "join" function each time by ysuzuki@apple.com · 6 years ago
  85. cbfbade Fix InBounds speculation of typed array PutByVal and add extra step to integer range optimization to search for equality relationships on the RHS value by justin_michaud@apple.com · 6 years ago
  86. 63cfefa Proxy constructor should throw if handler is revoked Proxy by commit-queue@webkit.org · 6 years ago
  87. b4f2f73 [JSC] OSR entry to Wasm OMG https://bugs.webkit.org/show_bug.cgi?id=200362 by ysuzuki@apple.com · 6 years ago
  88. ce4cde2 Date.prototype.toJSON throws if toISOString returns an object by commit-queue@webkit.org · 6 years ago
  89. 34ece71 [JSC] DFG DataView get/set optimization should take care of the case little-endian flag is JSEmpty by ysuzuki@apple.com · 6 years ago
  90. 3058c5c Webkit jsc Crash in RegExp::matchInline (this=<optimized out> by msaboff@apple.com · 6 years ago
  91. d7e78ba [JSC] Correct a->an in error messages and API docblocks by ross.kirsling@sony.com · 6 years ago
  92. 2af340f [ESNext] Implement optional chaining by ross.kirsling@sony.com · 6 years ago
  93. 319a1a0 [ESNext] Support hashbang. https://bugs.webkit.org/show_bug.cgi?id=200865 by ross.kirsling@sony.com · 6 years ago
  94. 92a68b5 [JSC] DFG ToNumber should support Boolean in fixup by ysuzuki@apple.com · 6 years ago
  95. c4e8f09 More missing exception checks in string comparison operators. by mark.lam@apple.com · 6 years ago
  96. ca7fc1a CodeBlock destructor should clear all of its watchpoints. by mark.lam@apple.com · 6 years ago
  97. 43813ff Fix InBounds speculation of typed array PutByVal and add extra step to integer range optimization to search for equality relationships on the RHS value by justin_michaud@apple.com · 6 years ago
  98. 2c0ed11 [Re-land] ProxyObject should not be allow to access its target's private properties. by mark.lam@apple.com · 6 years ago
  99. a1d761f [JSC] Promise.prototype.finally should accept non-promise objects by ysuzuki@apple.com · 6 years ago
  100. 0029182 Promise constructor should check argument before [[Construct]] by commit-queue@webkit.org · 6 years ago