1 2018-09-24 Saam barati <sbarati@apple.com>
3 ArgumentsEliminationPhase should snip basic blocks after proven OSR exits
4 https://bugs.webkit.org/show_bug.cgi?id=189682
5 <rdar://problem/43557315>
9 * stress/arguments-elimination-will-generate-edge-without-result.js: Added.
12 2018-09-22 Saam barati <sbarati@apple.com>
14 The sampling should not use Strong<CodeBlock> in its machineLocation field
15 https://bugs.webkit.org/show_bug.cgi?id=189319
17 Reviewed by Filip Pizlo.
19 * stress/sampling-profiler-richards.js: Added.
21 2018-09-19 Yusuke Suzuki <yusukesuzuki@slowstart.org>
23 [JSC] Optimize Array#indexOf in C++ runtime
24 https://bugs.webkit.org/show_bug.cgi?id=189507
26 Reviewed by Saam Barati.
28 * stress/array-indexof-array-prototype-trap.js: Added.
30 (AncestorArray.prototype.get 2):
32 * stress/array-indexof-have-a-bad-time-c-runtime.js: Added.
34 * stress/array-indexof-hole-nan.js: Added.
37 * stress/array-indexof-infinity.js: Added.
40 * stress/array-indexof-negative-zero.js: Added.
43 * stress/array-indexof-own-getter.js: Added.
45 (throw.new.Error.get array):
47 * stress/array-indexof-prototype-trap.js: Added.
49 (DerivedArray.prototype.get 2):
52 2018-09-19 Saam barati <sbarati@apple.com>
54 AI rule for MultiPutByOffset executes its effects in the wrong order
55 https://bugs.webkit.org/show_bug.cgi?id=189757
56 <rdar://problem/43535257>
58 Reviewed by Michael Saboff.
60 * stress/multi-put-by-offset-must-filter-value-before-filtering-base.js: Added.
65 2018-09-17 Mark Lam <mark.lam@apple.com>
67 Ensure that ForInContexts are invalidated if their loop local is over-written.
68 https://bugs.webkit.org/show_bug.cgi?id=189571
69 <rdar://problem/44402277>
71 Reviewed by Saam Barati.
73 * stress/regress-189571.js: Added.
75 2018-09-17 Saam barati <sbarati@apple.com>
77 We must convert ProfileType to CheckStructureOrEmpty instead of CheckStructure
78 https://bugs.webkit.org/show_bug.cgi?id=189676
79 <rdar://problem/39682897>
81 Reviewed by Michael Saboff.
83 * typeProfiler/check-structure-or-empty-in-fixup.js: Added.
88 2018-09-14 Saam barati <sbarati@apple.com>
90 Don't dump OSRAvailabilityData in Graph::dump because a stale Availability may point to a Node that is already freed
91 https://bugs.webkit.org/show_bug.cgi?id=189628
92 <rdar://problem/39481690>
96 * stress/verbose-failure-dont-graph-dump-availability-already-freed.js: Added.
99 2018-09-11 Mark Lam <mark.lam@apple.com>
101 Test for array initialization in arrayProtoFuncSplice.
102 https://bugs.webkit.org/show_bug.cgi?id=170253
103 <rdar://problem/31328773>
105 Rubber-stamped by Saam Barati.
107 * stress/regress-170253.js: Added.
109 2018-09-11 Mark Lam <mark.lam@apple.com>
111 Test for IntlObject initialization.
112 https://bugs.webkit.org/show_bug.cgi?id=170251
113 <rdar://problem/31328419>
115 Rubber-stamped by Saam Barati.
117 * stress/regress-170251.js: Added.
119 2018-09-11 Mark Lam <mark.lam@apple.com>
121 Test for array memcpy'ing when JSGlobalObject::haveABadTime.
122 https://bugs.webkit.org/show_bug.cgi?id=169889
123 <rdar://problem/31155607>
125 Reviewed by Saam Barati.
127 * stress/regress-169889-array-concat.js: Added.
128 * stress/regress-169889-array-concat1.js: Added.
129 * stress/regress-169889-array-slice.js: Added.
131 2018-09-11 Mark Lam <mark.lam@apple.com>
133 Test for incorrect check in emitPutDerivedConstructorToArrowFunctionContextScope.
134 https://bugs.webkit.org/show_bug.cgi?id=169445
135 <rdar://problem/30957435>
137 Reviewed by Saam Barati.
139 * stress/regress-169445.js: Added.
142 (let.gun.eval.B.C.prototype.trigger):
143 (let.gun.eval.B.C.prototype.triggerWithRestParameters):
147 == Rolled over to ChangeLog-2018-09-11 ==