- f10d072 DFG should trigger rage conversion from double to contiguous if it sees a GetByVal on Double being used in an integer context by fpizlo@apple.com · 12 years ago
- 5f5ee86 Copying phase should use work lists by mhahnenberg@apple.com · 12 years ago
- 621fdbe JSObject::copyButterfly doesn't handle undecided indexing types correctly by mhahnenberg@apple.com · 12 years ago
- e77cbc8 Structure should be able to easily tell if the prototype chain might intercept a store by fpizlo@apple.com · 12 years ago
- a4fe7ab Renamed ...InlineMethods.h files to ...Inlines.h. by mark.lam@apple.com · 12 years ago
- 75c91a7 JSC should infer when indexed storage contains only integers or doubles by fpizlo@apple.com · 12 years ago
- 02e39c7 Copying collection shouldn't require O(live bytes) memory overhead by mhahnenberg@apple.com · 13 years ago
- 0aac150 Removed ASSERT_CLASS_FITS_IN_CELL https://bugs.webkit.org/show_bug.cgi?id=97634 by ggaren@apple.com · 13 years ago
- 0e9910a JSC should infer when indexed storage is contiguous, and optimize for it by fpizlo@apple.com · 13 years ago
- ee55405 Rename first/second to key/value in HashMap iterators by benjamin@webkit.org · 13 years ago
- 20b4bfc Removed the assumption that "final" objects have a fixed number of inline slots by ggaren@apple.com · 13 years ago
- 98796c3 JSObject::ensureArrayStorage() ignores the possibility that extensions have been prevented by fpizlo@apple.com · 13 years ago
- 4aef724 Generalize JSGlobalThis as JSProxy https://bugs.webkit.org/show_bug.cgi?id=97716 by barraclough@apple.com · 13 years ago
- 544a81b Regression: put beyond vector length prefers prototype setters to sparse properties by barraclough@apple.com · 13 years ago
- 51bdc90 Remove JSObject::unwrappedGlobalObject(), JSObject::unwrappedObject() by barraclough@apple.com · 13 years ago
- b46d57b4 instanceof should not get the prototype for non-default HasInstance by barraclough@apple.com · 13 years ago
- 658e5eb CHECK_ARRAY_CONSISTENCY isn't being used or tested, so we should remove it by fpizlo@apple.com · 13 years ago
- 1c4a32c If a prototype has indexed setters and its instances have indexed storage, then all put_by_val's should have a bad time by fpizlo@apple.com · 13 years ago
- 2e0fea1 JSObject.cpp and JSArray.cpp have inconsistent tests for the invalid array index case by fpizlo@apple.com · 13 years ago
- 6ee5c9d Following the Butterfly refactoring, the comment for lastArraySize was not updated by fpizlo@apple.com · 13 years ago
- 9cedb5d All of the things in SparseArrayValueMap should be out-of-line by fpizlo@apple.com · 13 years ago
- 4ef04bf [Qt][Win] REGRESSION(r128400): It broke the build by loislo@chromium.org · 13 years ago
- d8dd053 JSC should have property butterflies by fpizlo@apple.com · 13 years ago
- 762e2c6 Improve JSC use of Strings after the UString->String change by benjamin@webkit.org · 13 years ago
- cff06e4 Replace JSC::UString by WTF::String by benjamin@webkit.org · 13 years ago
- 338a70dc JSC GC object copying APIs should allow for greater flexibility by fpizlo@apple.com · 13 years ago
- 0e8fce1 Remove JSObject::m_inheritorID https://bugs.webkit.org/show_bug.cgi?id=88378 by mhahnenberg@apple.com · 13 years ago
- 961a956 Property storage should grow in reverse address direction, to support butterflies by fpizlo@apple.com · 13 years ago
- 26e27a6 Fast path of storage resize should be removed from property storage reallocation, since it is only useful for arrays by fpizlo@apple.com · 13 years ago
- d68b1f8 Inline property storage should not be wasted when it is exhausted by fpizlo@apple.com · 13 years ago
- 3bcb211 DFG should optimize ResolveGlobal https://bugs.webkit.org/show_bug.cgi?id=89617 by fpizlo@apple.com · 13 years ago
- b75911b DFG should be able to set watchpoints on global variables by fpizlo@apple.com · 13 years ago
- 88d5373 Unreviewed, rolling out r120172. by zandobersek@gmail.com · 13 years ago
- b6c5eeb DFG should be able to set watchpoints on global variables by fpizlo@apple.com · 13 years ago
- ce7e7ef Property names of the built-in object cannot be retrieved by commit-queue@webkit.org · 13 years ago
- 9dd771c Unreviewed roll out r119795. This broke jquery/core.html by barraclough@apple.com · 13 years ago
- 64b74e0 DFG should inline prototype chain accesses, and do the right things if the by barraclough@apple.com · 13 years ago
- 799e44e Assigning to a static property should not change iteration order by barraclough@apple.com · 13 years ago
- 115e664 Reverted r119567, the fix for <http://webkit.org/b/88378>, because it broke the 32-bit build. by mitz@apple.com · 13 years ago
- c48fc1b Remove JSObject::m_inheritorID https://bugs.webkit.org/show_bug.cgi?id=88378 by barraclough@apple.com · 13 years ago
- 79c51ee DFG should have control flow graph simplification by fpizlo@apple.com · 13 years ago
- 921c823 GC in the middle of JSObject::allocatePropertyStorage can cause badness by mhahnenberg@apple.com · 13 years ago
- 38d3c75 Introduce PropertyName class https://bugs.webkit.org/show_bug.cgi?id=86241 by barraclough@apple.com · 13 years ago
- a0426fa ROLLING OUT r114255 by barraclough@apple.com · 13 years ago
- 825f980 It should be possible to create an inheritorID for the global this object without crashing by fpizlo@apple.com · 13 years ago
- 462a44b GC in the middle of JSObject::allocatePropertyStorage can cause badness by mhahnenberg@apple.com · 13 years ago
- 0c59caf Replace static_cast with jsCast when casting JSCell subclasses in JSC by oliver@apple.com · 13 years ago
- b1db28d8 putByIndex should throw in strict mode by barraclough@apple.com · 13 years ago
- 3b0c043 Writable attribute not set correctly when redefining an accessor to a data descriptor by barraclough@apple.com · 13 years ago
- dca6b2e [[Get]]/[[Put]] for primitives should not wrap on strict accessor call by barraclough@apple.com · 13 years ago
- 2f2c38e Should be able to reconfigure a non-configurable property as read-only by barraclough@apple.com · 13 years ago
- 7f154b8 [[Put]] should throw if prototype chain contains a readonly property. by barraclough@apple.com · 13 years ago
- 4f5c0c0 Move special __proto__ property to Object.prototype by barraclough@apple.com · 13 years ago
- 4e82263 Rename Bump* to Copy* https://bugs.webkit.org/show_bug.cgi?id=78573 by mhahnenberg@apple.com · 13 years ago
- e2ea07b Source/JavaScriptCore: <<<<<<< .mine by barraclough@apple.com · 13 years ago
- 2441d33 https://bugs.webkit.org/show_bug.cgi?id=78434 by barraclough@apple.com · 13 years ago
- 1b59d1e Move special __proto__ property to Object.prototype by barraclough@apple.com · 13 years ago
- c274832 Split MarkedSpace into destructor and destructor-free subspaces by mhahnenberg@apple.com · 13 years ago
- 81aa89f Remove JSObject defineGetter/defineSetter lookupGetter/lookupSetter by barraclough@apple.com · 13 years ago
- 09a5568 Clean up putDirect https://bugs.webkit.org/show_bug.cgi?id=76232 by barraclough@apple.com · 13 years ago
- 0fa5bea Use copying collector for out-of-line JSObject property storage by mhahnenberg@apple.com · 13 years ago
- 64be5e9 JSValue::toString() should return a JSString* instead of a UString by ggaren@apple.com · 13 years ago
- e3d31e0 Unreviewed, rolling out r105676. by macpherson@chromium.org · 13 years ago
- 4108def Use copying collector for out-of-line JSObject property storage by mhahnenberg@apple.com · 13 years ago
- 18b6b0e ../JavaScriptCore: [Chromium] JSExportMacros.h should be visible. by barraclough@apple.com · 13 years ago
- a14090f https://bugs.webkit.org/show_bug.cgi?id=76141 by barraclough@apple.com · 13 years ago
- c709a12 Allow accessor get/set property to be set to undefined by barraclough@apple.com · 13 years ago
- bebfe4d Merge 'Getter'/'Setter' attributes into 'Accessor' by barraclough@apple.com · 13 years ago
- beb7f22 Use SameValue to compare property descriptor values by barraclough@apple.com · 13 years ago
- 166c907 https://bugs.webkit.org/show_bug.cgi?id=75789 by barraclough@apple.com · 13 years ago
- c58d54d De-virtualize destructors https://bugs.webkit.org/show_bug.cgi?id=74331 by mhahnenberg@apple.com · 13 years ago
- 0fab96d JSC testapi is crashing on Windows https://bugs.webkit.org/show_bug.cgi?id=74233 by mhahnenberg@apple.com · 13 years ago
- 135f051 Add jsCast to replace static_cast https://bugs.webkit.org/show_bug.cgi?id=72071 by mhahnenberg@apple.com · 13 years ago
- 9e0c4ef Disabling assertions breaks the debug build by mitz@apple.com · 13 years ago
- 7f2f7e5 De-virtualize JSObject::getOwnPropertyDescriptor by mhahnenberg@apple.com · 13 years ago
- 8c9572d De-virtualize JSObject::defineOwnProperty by mhahnenberg@apple.com · 13 years ago
- 1446802 De-virtualize JSObject::putWithAttributes by mhahnenberg@apple.com · 13 years ago
- 7a50ecd Reduce the number of putWithAttributes by weinig@apple.com · 13 years ago
- 069ad17 De-virtualize JSObject::hasInstance by mhahnenberg@apple.com · 13 years ago
- 2a9dcb6 De-virtualize JSObject::hasInstance by ossy@webkit.org · 13 years ago
- 2358ae1 De-virtualize JSObject::getPropertyNames by mhahnenberg@apple.com · 13 years ago
- c583a80 De-virtualize JSObject::hasInstance by mhahnenberg@apple.com · 13 years ago
- b039de0 De-virtualize JSObject::className https://bugs.webkit.org/show_bug.cgi?id=71428 by mhahnenberg@apple.com · 13 years ago
- 5726238 De-virtualize JSObject::getOwnPropertyNames by mhahnenberg@apple.com · 13 years ago
- f16c8be Implement __lookupGetter__/__lookupSetter__ in terms of getPropertyDescriptor by weinig@apple.com · 13 years ago
- 84223e7 De-virtualize JSObject::defineSetter by mhahnenberg@apple.com · 13 years ago
- 6e506e6 De-virtualize JSObject::defaultValue by mhahnenberg@apple.com · 13 years ago
- 76fa275 Remove need for virtual JSObject::unwrappedObject by weinig@apple.com · 13 years ago
- 74958c7 De-virtualize JSObject::defineGetter by mhahnenberg@apple.com · 13 years ago
- c93887c De-virtualize JSCell::toThisObject https://bugs.webkit.org/show_bug.cgi?id=70958 by mhahnenberg@apple.com · 14 years ago
- 5c103b0 Remove getOwnPropertySlotVirtual https://bugs.webkit.org/show_bug.cgi?id=70741 by mhahnenberg@apple.com · 14 years ago
- c0f87c1 Remove deletePropertyVirtual https://bugs.webkit.org/show_bug.cgi?id=70738 by mhahnenberg@apple.com · 14 years ago
- 3951278 Remove putVirtual https://bugs.webkit.org/show_bug.cgi?id=70740 by mhahnenberg@apple.com · 14 years ago
- 6f0c32e Rename static getOwnPropertySlot to getOwnPropertySlotByIndex by mhahnenberg@apple.com · 14 years ago
- 1f60e7a Add finalizer to JSObject https://bugs.webkit.org/show_bug.cgi?id=70336 by mhahnenberg@apple.com · 14 years ago
- 8a10db9 Rename static deleteProperty to deletePropertyByIndex by mhahnenberg@apple.com · 14 years ago
- 69e904a Poisoning of strict caller,arguments inappropriately poisoning "in" by barraclough@apple.com · 14 years ago
- 4f33efe Rename static put to putByIndex https://bugs.webkit.org/show_bug.cgi?id=70281 by mhahnenberg@apple.com · 14 years ago
- fac7a85 Reverted r997709, this caused test failures. by barraclough@apple.com · 14 years ago
- d314939 Source/JavaScriptCore: Rename deregister* to unregister* by barraclough@apple.com · 14 years ago