1. f10d072 DFG should trigger rage conversion from double to contiguous if it sees a GetByVal on Double being used in an integer context by fpizlo@apple.com · 12 years ago
  2. 5f5ee86 Copying phase should use work lists by mhahnenberg@apple.com · 12 years ago
  3. 621fdbe JSObject::copyButterfly doesn't handle undecided indexing types correctly by mhahnenberg@apple.com · 12 years ago
  4. e77cbc8 Structure should be able to easily tell if the prototype chain might intercept a store by fpizlo@apple.com · 12 years ago
  5. a4fe7ab Renamed ...InlineMethods.h files to ...Inlines.h. by mark.lam@apple.com · 12 years ago
  6. 75c91a7 JSC should infer when indexed storage contains only integers or doubles by fpizlo@apple.com · 12 years ago
  7. 02e39c7 Copying collection shouldn't require O(live bytes) memory overhead by mhahnenberg@apple.com · 13 years ago
  8. 0aac150 Removed ASSERT_CLASS_FITS_IN_CELL https://bugs.webkit.org/show_bug.cgi?id=97634 by ggaren@apple.com · 13 years ago
  9. 0e9910a JSC should infer when indexed storage is contiguous, and optimize for it by fpizlo@apple.com · 13 years ago
  10. ee55405 Rename first/second to key/value in HashMap iterators by benjamin@webkit.org · 13 years ago
  11. 20b4bfc Removed the assumption that "final" objects have a fixed number of inline slots by ggaren@apple.com · 13 years ago
  12. 98796c3 JSObject::ensureArrayStorage() ignores the possibility that extensions have been prevented by fpizlo@apple.com · 13 years ago
  13. 4aef724 Generalize JSGlobalThis as JSProxy https://bugs.webkit.org/show_bug.cgi?id=97716 by barraclough@apple.com · 13 years ago
  14. 544a81b Regression: put beyond vector length prefers prototype setters to sparse properties by barraclough@apple.com · 13 years ago
  15. 51bdc90 Remove JSObject::unwrappedGlobalObject(), JSObject::unwrappedObject() by barraclough@apple.com · 13 years ago
  16. b46d57b4 instanceof should not get the prototype for non-default HasInstance by barraclough@apple.com · 13 years ago
  17. 658e5eb CHECK_ARRAY_CONSISTENCY isn't being used or tested, so we should remove it by fpizlo@apple.com · 13 years ago
  18. 1c4a32c If a prototype has indexed setters and its instances have indexed storage, then all put_by_val's should have a bad time by fpizlo@apple.com · 13 years ago
  19. 2e0fea1 JSObject.cpp and JSArray.cpp have inconsistent tests for the invalid array index case by fpizlo@apple.com · 13 years ago
  20. 6ee5c9d Following the Butterfly refactoring, the comment for lastArraySize was not updated by fpizlo@apple.com · 13 years ago
  21. 9cedb5d All of the things in SparseArrayValueMap should be out-of-line by fpizlo@apple.com · 13 years ago
  22. 4ef04bf [Qt][Win] REGRESSION(r128400): It broke the build by loislo@chromium.org · 13 years ago
  23. d8dd053 JSC should have property butterflies by fpizlo@apple.com · 13 years ago
  24. 762e2c6 Improve JSC use of Strings after the UString->String change by benjamin@webkit.org · 13 years ago
  25. cff06e4 Replace JSC::UString by WTF::String by benjamin@webkit.org · 13 years ago
  26. 338a70dc JSC GC object copying APIs should allow for greater flexibility by fpizlo@apple.com · 13 years ago
  27. 0e8fce1 Remove JSObject::m_inheritorID https://bugs.webkit.org/show_bug.cgi?id=88378 by mhahnenberg@apple.com · 13 years ago
  28. 961a956 Property storage should grow in reverse address direction, to support butterflies by fpizlo@apple.com · 13 years ago
  29. 26e27a6 Fast path of storage resize should be removed from property storage reallocation, since it is only useful for arrays by fpizlo@apple.com · 13 years ago
  30. d68b1f8 Inline property storage should not be wasted when it is exhausted by fpizlo@apple.com · 13 years ago
  31. 3bcb211 DFG should optimize ResolveGlobal https://bugs.webkit.org/show_bug.cgi?id=89617 by fpizlo@apple.com · 13 years ago
  32. b75911b DFG should be able to set watchpoints on global variables by fpizlo@apple.com · 13 years ago
  33. 88d5373 Unreviewed, rolling out r120172. by zandobersek@gmail.com · 13 years ago
  34. b6c5eeb DFG should be able to set watchpoints on global variables by fpizlo@apple.com · 13 years ago
  35. ce7e7ef Property names of the built-in object cannot be retrieved by commit-queue@webkit.org · 13 years ago
  36. 9dd771c Unreviewed roll out r119795. This broke jquery/core.html by barraclough@apple.com · 13 years ago
  37. 64b74e0 DFG should inline prototype chain accesses, and do the right things if the by barraclough@apple.com · 13 years ago
  38. 799e44e Assigning to a static property should not change iteration order by barraclough@apple.com · 13 years ago
  39. 115e664 Reverted r119567, the fix for <http://webkit.org/b/88378>, because it broke the 32-bit build. by mitz@apple.com · 13 years ago
  40. c48fc1b Remove JSObject::m_inheritorID https://bugs.webkit.org/show_bug.cgi?id=88378 by barraclough@apple.com · 13 years ago
  41. 79c51ee DFG should have control flow graph simplification by fpizlo@apple.com · 13 years ago
  42. 921c823 GC in the middle of JSObject::allocatePropertyStorage can cause badness by mhahnenberg@apple.com · 13 years ago
  43. 38d3c75 Introduce PropertyName class https://bugs.webkit.org/show_bug.cgi?id=86241 by barraclough@apple.com · 13 years ago
  44. a0426fa ROLLING OUT r114255 by barraclough@apple.com · 13 years ago
  45. 825f980 It should be possible to create an inheritorID for the global this object without crashing by fpizlo@apple.com · 13 years ago
  46. 462a44b GC in the middle of JSObject::allocatePropertyStorage can cause badness by mhahnenberg@apple.com · 13 years ago
  47. 0c59caf Replace static_cast with jsCast when casting JSCell subclasses in JSC by oliver@apple.com · 13 years ago
  48. b1db28d8 putByIndex should throw in strict mode by barraclough@apple.com · 13 years ago
  49. 3b0c043 Writable attribute not set correctly when redefining an accessor to a data descriptor by barraclough@apple.com · 13 years ago
  50. dca6b2e [[Get]]/[[Put]] for primitives should not wrap on strict accessor call by barraclough@apple.com · 13 years ago
  51. 2f2c38e Should be able to reconfigure a non-configurable property as read-only by barraclough@apple.com · 13 years ago
  52. 7f154b8 [[Put]] should throw if prototype chain contains a readonly property. by barraclough@apple.com · 13 years ago
  53. 4f5c0c0 Move special __proto__ property to Object.prototype by barraclough@apple.com · 13 years ago
  54. 4e82263 Rename Bump* to Copy* https://bugs.webkit.org/show_bug.cgi?id=78573 by mhahnenberg@apple.com · 13 years ago
  55. e2ea07b Source/JavaScriptCore: <<<<<<< .mine by barraclough@apple.com · 13 years ago
  56. 2441d33 https://bugs.webkit.org/show_bug.cgi?id=78434 by barraclough@apple.com · 13 years ago
  57. 1b59d1e Move special __proto__ property to Object.prototype by barraclough@apple.com · 13 years ago
  58. c274832 Split MarkedSpace into destructor and destructor-free subspaces by mhahnenberg@apple.com · 13 years ago
  59. 81aa89f Remove JSObject defineGetter/defineSetter lookupGetter/lookupSetter by barraclough@apple.com · 13 years ago
  60. 09a5568 Clean up putDirect https://bugs.webkit.org/show_bug.cgi?id=76232 by barraclough@apple.com · 13 years ago
  61. 0fa5bea Use copying collector for out-of-line JSObject property storage by mhahnenberg@apple.com · 13 years ago
  62. 64be5e9 JSValue::toString() should return a JSString* instead of a UString by ggaren@apple.com · 13 years ago
  63. e3d31e0 Unreviewed, rolling out r105676. by macpherson@chromium.org · 13 years ago
  64. 4108def Use copying collector for out-of-line JSObject property storage by mhahnenberg@apple.com · 13 years ago
  65. 18b6b0e ../JavaScriptCore: [Chromium] JSExportMacros.h should be visible. by barraclough@apple.com · 13 years ago
  66. a14090f https://bugs.webkit.org/show_bug.cgi?id=76141 by barraclough@apple.com · 13 years ago
  67. c709a12 Allow accessor get/set property to be set to undefined by barraclough@apple.com · 13 years ago
  68. bebfe4d Merge 'Getter'/'Setter' attributes into 'Accessor' by barraclough@apple.com · 13 years ago
  69. beb7f22 Use SameValue to compare property descriptor values by barraclough@apple.com · 13 years ago
  70. 166c907 https://bugs.webkit.org/show_bug.cgi?id=75789 by barraclough@apple.com · 13 years ago
  71. c58d54d De-virtualize destructors https://bugs.webkit.org/show_bug.cgi?id=74331 by mhahnenberg@apple.com · 13 years ago
  72. 0fab96d JSC testapi is crashing on Windows https://bugs.webkit.org/show_bug.cgi?id=74233 by mhahnenberg@apple.com · 13 years ago
  73. 135f051 Add jsCast to replace static_cast https://bugs.webkit.org/show_bug.cgi?id=72071 by mhahnenberg@apple.com · 13 years ago
  74. 9e0c4ef Disabling assertions breaks the debug build by mitz@apple.com · 13 years ago
  75. 7f2f7e5 De-virtualize JSObject::getOwnPropertyDescriptor by mhahnenberg@apple.com · 13 years ago
  76. 8c9572d De-virtualize JSObject::defineOwnProperty by mhahnenberg@apple.com · 13 years ago
  77. 1446802 De-virtualize JSObject::putWithAttributes by mhahnenberg@apple.com · 13 years ago
  78. 7a50ecd Reduce the number of putWithAttributes by weinig@apple.com · 13 years ago
  79. 069ad17 De-virtualize JSObject::hasInstance by mhahnenberg@apple.com · 13 years ago
  80. 2a9dcb6 De-virtualize JSObject::hasInstance by ossy@webkit.org · 13 years ago
  81. 2358ae1 De-virtualize JSObject::getPropertyNames by mhahnenberg@apple.com · 13 years ago
  82. c583a80 De-virtualize JSObject::hasInstance by mhahnenberg@apple.com · 13 years ago
  83. b039de0 De-virtualize JSObject::className https://bugs.webkit.org/show_bug.cgi?id=71428 by mhahnenberg@apple.com · 13 years ago
  84. 5726238 De-virtualize JSObject::getOwnPropertyNames by mhahnenberg@apple.com · 13 years ago
  85. f16c8be Implement __lookupGetter__/__lookupSetter__ in terms of getPropertyDescriptor by weinig@apple.com · 13 years ago
  86. 84223e7 De-virtualize JSObject::defineSetter by mhahnenberg@apple.com · 13 years ago
  87. 6e506e6 De-virtualize JSObject::defaultValue by mhahnenberg@apple.com · 13 years ago
  88. 76fa275 Remove need for virtual JSObject::unwrappedObject by weinig@apple.com · 13 years ago
  89. 74958c7 De-virtualize JSObject::defineGetter by mhahnenberg@apple.com · 13 years ago
  90. c93887c De-virtualize JSCell::toThisObject https://bugs.webkit.org/show_bug.cgi?id=70958 by mhahnenberg@apple.com · 14 years ago
  91. 5c103b0 Remove getOwnPropertySlotVirtual https://bugs.webkit.org/show_bug.cgi?id=70741 by mhahnenberg@apple.com · 14 years ago
  92. c0f87c1 Remove deletePropertyVirtual https://bugs.webkit.org/show_bug.cgi?id=70738 by mhahnenberg@apple.com · 14 years ago
  93. 3951278 Remove putVirtual https://bugs.webkit.org/show_bug.cgi?id=70740 by mhahnenberg@apple.com · 14 years ago
  94. 6f0c32e Rename static getOwnPropertySlot to getOwnPropertySlotByIndex by mhahnenberg@apple.com · 14 years ago
  95. 1f60e7a Add finalizer to JSObject https://bugs.webkit.org/show_bug.cgi?id=70336 by mhahnenberg@apple.com · 14 years ago
  96. 8a10db9 Rename static deleteProperty to deletePropertyByIndex by mhahnenberg@apple.com · 14 years ago
  97. 69e904a Poisoning of strict caller,arguments inappropriately poisoning "in" by barraclough@apple.com · 14 years ago
  98. 4f33efe Rename static put to putByIndex https://bugs.webkit.org/show_bug.cgi?id=70281 by mhahnenberg@apple.com · 14 years ago
  99. fac7a85 Reverted r997709, this caused test failures. by barraclough@apple.com · 14 years ago
  100. d314939 Source/JavaScriptCore: Rename deregister* to unregister* by barraclough@apple.com · 14 years ago