- f4256ed [JSC] Remove the overflow check on ArithAbs when possible by commit-queue@webkit.org · 9 years ago
- 47c16d7 FTL should support StringFromCharCode by fpizlo@apple.com · 9 years ago
- 44616d0 Should not predict OtherObj for ToThis with primitive types under strict mode by utatane.tea@gmail.com · 9 years ago
- 151fe10 The StringFromCharCode DFG intrinsic should support untyped operands. by mark.lam@apple.com · 9 years ago
- fb6b216 Use DFG Graph::binary/unaryArithShouldSpeculateInt32/MachineInt() functions consistently. by mark.lam@apple.com · 9 years ago
- 03a3e38 Rolling out: Rename StringFromCharCode to StringFromSingleCharCode. by mark.lam@apple.com · 9 years ago
- b6d53e0 Rename StringFromCharCode to StringFromSingleCharCode. by mark.lam@apple.com · 9 years ago
- cb11fe4 [ES6] Add support for Symbol.hasInstance by keith_miller@apple.com · 9 years ago
- 9d9fd32 [ES6] Handle new_generator_func / new_generator_func_exp in DFG / FTL by utatane.tea@gmail.com · 9 years ago
- 5b2a13c Unreviewed, rolling out r194135. https://bugs.webkit.org/show_bug.cgi?id=152333 by commit-queue@webkit.org · 9 years ago
- 8e614fa [ES6] Handle new_generator_func / new_generator_func_exp in DFG / FTL by utatane.tea@gmail.com · 9 years ago
- c000865 Polymorphic operand types for DFG and FTL bit operators. by mark.lam@apple.com · 9 years ago
- d2fca0a Math.random should have an intrinsic thunk and it should be later handled as a DFG Node by utatane.tea@gmail.com · 9 years ago
- 46e290b We should not employ the snippet code in the DFG if no OSR exit was previously encountered. by mark.lam@apple.com · 9 years ago
- 324bf75 Roll out r193974 and follow-up fixes as it caused JSC crashes by cdumez@apple.com · 9 years ago
- 6b861f6 [ES6] Add support for Symbol.hasInstance by keith_miller@apple.com · 9 years ago
- 224ce4d Polymorphic operand types for DFG and FTL div. by mark.lam@apple.com · 9 years ago
- b2610c0 [ES6] "super" and "this" should be lexically bound inside an arrow function and should live in a JSLexicalEnvironment by commit-queue@webkit.org · 9 years ago
- 8874943 REGRESSION(r193584): Causes heap use-after-free crashes in Web Inspector tests with AddressSanitizer (Requested by ddkilzer on #webkit). by ddkilzer@apple.com · 9 years ago
- bdff720 [ES6] "super" and "this" should be lexically bound inside an arrow function and should live in a JSLexicalEnvironment by commit-queue@webkit.org · 9 years ago
- 35398ea Having a bad time has a really awful time when it runs at the same time as the JIT by fpizlo@apple.com · 9 years ago
- 1d93614 Polymorphic operand types for DFG and FTL mul. by mark.lam@apple.com · 9 years ago
- 68b8bce Unreviewed, rolling out r192876. by carlosgc@webkit.org · 9 years ago
- 20ef49d [ES6] "super" and "this" should be lexically bound inside an arrow function and should live in a JSLexicalEnvironment by commit-queue@webkit.org · 9 years ago
- 855d560 implement op_get_rest_length so that we can allocate the rest array with the right size from the start by sbarati@apple.com · 9 years ago
- c0722da [ES6] Add support for rest parameters by sbarati@apple.com · 9 years ago
- 102cbf2 Use the JITAddGenerator snippet in the DFG. by mark.lam@apple.com · 9 years ago
- 8b5e9cd Fix endless OSR exits when creating a rope that contains an object that ToPrimitive's to a number. by keith_miller@apple.com · 9 years ago
- 287d64c [ES6] Add DFG/FTL support for accessor put operations by utatane.tea@gmail.com · 9 years ago
- adc002e Unreviewed, rolling out r191500. https://bugs.webkit.org/show_bug.cgi?id=150526 by commit-queue@webkit.org · 9 years ago
- 436a19b [ES6] Add DFG/FTL support for accessor put operations by utatane.tea@gmail.com · 9 years ago
- 7524909 Use JITSubGenerator to support UntypedUse operands for op_sub in the DFG. by mark.lam@apple.com · 9 years ago
- 59bba5d Add Intrinsic Getters and use them to fix performance on the getters of TypedArray properties. by keith_miller@apple.com · 9 years ago
- 8dde06b GC should have a Baker barrier for concurrent copying by fpizlo@apple.com · 9 years ago
- 382ef65 Introduce SymbolUse optimization into CompareEq and CompareStrictEq by utatane.tea@gmail.com · 9 years ago
- a3dc753 [ES6] Implement tail calls in the DFG by msaboff@apple.com · 10 years ago
- 1283577 JSC should infer property types https://bugs.webkit.org/show_bug.cgi?id=148610 by fpizlo@apple.com · 10 years ago
- b7a50a3 The put_by_id IC store barrier contract should benefit transition over replace by fpizlo@apple.com · 10 years ago
- 060e751 Block scoped variables should be visible across scripts by saambarati1@gmail.com · 10 years ago
- 2b150e78 DFG::StrCat isn't really effectful by fpizlo@apple.com · 10 years ago
- f29186e Node::origin should be able to tell you if it's OK to exit by fpizlo@apple.com · 10 years ago
- 1010733 DFG::FixupPhase should use the lambda form of m_graph.doToChildren() rather than the old macro by fpizlo@apple.com · 10 years ago
- b3b187c DFG string concatenation shouldn't be playing fast and loose with effects and OSR exit by fpizlo@apple.com · 10 years ago
- 7289af3 DFG should have a KnownBooleanUse for cases where we are required to know that the child is a boolean and it's not OK to speculate by fpizlo@apple.com · 10 years ago
- 32b8d0a [JSC] Optimize more cases of something-compared-to-null/undefined by benjamin@webkit.org · 10 years ago
- a4201b0 [ES6] Implement ES6 arrow function syntax. Arrow function specific features. Lexical bind of this by commit-queue@webkit.org · 10 years ago
- 5c3fb3a [JSC] Add support for GetByVal on arrays of Undecided shape by benjamin@webkit.org · 10 years ago
- fccd136 Introduce get_by_id like IC into get_by_val when the given name is String or Symbol by utatane.tea@gmail.com · 10 years ago
- 04f5575 Regression(r188105): Seems to have caused crashes during PLT on some iPads by cdumez@apple.com · 10 years ago
- bc3598b Introduce get_by_id like IC into get_by_val when the given name is String or Symbol by utatane.tea@gmail.com · 10 years ago
- b282e22 Remove native call inlining https://bugs.webkit.org/show_bug.cgi?id=147417 by basile_clement@apple.com · 10 years ago
- 902685c Strict Equality on objects should only check that one of the two sides is an object. by commit-queue@webkit.org · 10 years ago
- ea361c1 [DFG] Avoid OSR exit in the middle of string concatenation by utatane.tea@gmail.com · 10 years ago
- 318af07 Simplify unboxing of double JSValues known to be not NaN and not Int32 by fpizlo@apple.com · 10 years ago
- c02ed48 Unreviewed, rolling out r185216. https://bugs.webkit.org/show_bug.cgi?id=145666 by commit-queue@webkit.org · 10 years ago
- e4484c5 Simplify unboxing of double JSValues known to be not NaN and not Int32 by fpizlo@apple.com · 10 years ago
- bf92809 [JSC] Add undefined->double conversion to DoubleRep by benjamin@webkit.org · 10 years ago
- 8268d39 Introduce UniquedStringImpl and SymbolImpl to separate symbolic strings from AtomicStringImpl by utatane.tea@gmail.com · 10 years ago
- bb89cd5 CPS rethreading should really get rid of GetLocals by fpizlo@apple.com · 10 years ago
- 8f62599 [JSC] When entering a CheckTierUp without OSREntry, force the CheckTierUp for the outer loops with OSR Entry by benjamin@webkit.org · 10 years ago
- d8846b1 Add a Int-or-Boolean speculation to Branch by fpizlo@apple.com · 10 years ago
- 49b1d72 Insert store barriers late so that IR transformations don't have to worry about them by fpizlo@apple.com · 10 years ago
- d620863 Unreviewed, rolling out r184415. https://bugs.webkit.org/show_bug.cgi?id=145096 by commit-queue@webkit.org · 10 years ago
- 593cd92 Insert store barriers late so that IR transformations don't have to worry about them by fpizlo@apple.com · 10 years ago
- 8e8d6fd Remove StoreBarrierWithNullCheck, nobody ever generates this. by fpizlo@apple.com · 10 years ago
- 33ea5ee PutGlobalVar should reference the global object it's storing into by fpizlo@apple.com · 10 years ago
- 661530a Extend the SaneChain optimization to Contiguous arrays by fpizlo@apple.com · 10 years ago
- cb58408 [JSC] Add basic DFG/FTL support for Math.round by benjamin@webkit.org · 10 years ago
- 141cdcc Sane chain and string watchpoints should be set in FixupPhase or the backend rather than WatchpointCollectionPhase by fpizlo@apple.com · 10 years ago
- 22c4534 PutGlobalVar shouldn't have an unconditional store barrier by fpizlo@apple.com · 10 years ago
- 2ca1f7b Allow CreateActivation sinking https://bugs.webkit.org/show_bug.cgi?id=144300 by basile_clement@apple.com · 10 years ago
- b8823d5 TypeOf should be fast https://bugs.webkit.org/show_bug.cgi?id=144396 by fpizlo@apple.com · 10 years ago
- 9f46ddc [JSC] Remove RageConvert array conversion by benjamin@webkit.org · 10 years ago
- 163291d DFG should not use or preserve Phantoms during transformations by fpizlo@apple.com · 10 years ago
- d878633 Source/JavaScriptCore: by akling@apple.com · 10 years ago
- 7425419 Rationalize DFG DCE handling of nodes that perform checks that propagate through AI by fpizlo@apple.com · 10 years ago
- e324d43 [JSC] Implement Math.clz32(), remove Number.clz() by benjamin@webkit.org · 10 years ago
- 88ab4e7 Allow function allocation sinking https://bugs.webkit.org/show_bug.cgi?id=144016 by commit-queue@webkit.org · 10 years ago
- 0bf8831 Rename HardPhantom to MustGenerate. by fpizlo@apple.com · 10 years ago
- 6a8daef DFG should allow Phantoms after terminals by fpizlo@apple.com · 10 years ago
- 5456e9a Remove AllocationProfileWatchpoint node by commit-queue@webkit.org · 10 years ago
- 54129b6 REGRESSION (182567): regress/script-tests/sorting-benchmark.js fails on 32 bit dfg-eager tests by msaboff@apple.com · 10 years ago
- 93373ba Constant folding of typed array properties should be handled by AI rather than strength reduction by fpizlo@apple.com · 10 years ago
- 153559e [ES6] DFG and FTL should be aware of that StringConstructor behavior for symbols becomes different from ToString by utatane.tea@gmail.com · 10 years ago
- f9b8663 Web Inspector: ES6: Better support for Symbol types in Type Profiler by saambarati1@gmail.com · 10 years ago
- da834ae Heap variables shouldn't end up in the stack frame by fpizlo@apple.com · 10 years ago
- b644c25 REGRESSION (172175-172177): Change in for...in processing causes properties added in loop to be enumerated by msaboff@apple.com · 10 years ago
- 3beeb7f Observably effectful nodes in DFG IR should come last in their bytecode instruction (i.e. forExit section), except for Hint nodes by fpizlo@apple.com · 10 years ago
- 8ff7471 DFG IR shouldn't have a separate node for every kind of put hint that could be described using PromotedLocationDescriptor by fpizlo@apple.com · 10 years ago
- d3a3de9 [ARM] Enable generating idiv instructions if it is supported by ossy@webkit.org · 10 years ago
- eb7ac19 "this" should be in TDZ until super is called in the constructor of a derived class by rniwa@webkit.org · 10 years ago
- 2b5682d [JSC] Add a node for Math.log() https://bugs.webkit.org/show_bug.cgi?id=142126 by benjamin@webkit.org · 10 years ago
- 90640ab DFG should constant fold GetScope, and accesses to the scope register in the ByteCodeParser should not pretend that it's a constant as that breaks OSR exit liveness tracking by fpizlo@apple.com · 10 years ago
- 54d94f5 [JSC] Use the way number constants are written to help type speculation by benjamin@webkit.org · 10 years ago
- 5116ee7 Various array access corner cases should take OSR exit feedback by fpizlo@apple.com · 10 years ago
- bcfd8eb DFG SSA stack accesses shouldn't speak of VariableAccessDatas by fpizlo@apple.com · 10 years ago
- 0bfb74c Constructor returning null should construct an object instead of null by utatane.tea@gmail.com · 10 years ago
- ea8e427 Unreviewed, rolling out r180547 and r180550. by commit-queue@webkit.org · 10 years ago
- b8a0a42 Constructor returning null should construct an object instead of null by utatane.tea@gmail.com · 10 years ago
- 8fefdd3 DFG should really support varargs https://bugs.webkit.org/show_bug.cgi?id=141332 by fpizlo@apple.com · 10 years ago