2957689a110a2cc8007c5f271359a9a2f6756023
[WebKit-https.git] / JSTests / ChangeLog
1 2018-11-15  Mark Lam  <mark.lam@apple.com>
2
3         RegExp operations should not take fast patch if lastIndex is not numeric.
4         https://bugs.webkit.org/show_bug.cgi?id=191731
5         <rdar://problem/46017305>
6
7         Reviewed by Saam Barati.
8
9         * stress/regress-191731.js: Added.
10
11 2018-11-13  Saam Barati  <sbarati@apple.com>
12
13         TypeProfileLog::processLogEntries should stash away any pending exceptions and re-apply them to the VM
14         https://bugs.webkit.org/show_bug.cgi?id=191600
15
16         Reviewed by Mark Lam.
17
18         * stress/type-profiler-log-should-defer-pending-exceptions.js: Added.
19         (foo):
20         (test):
21         (bar):
22
23 2018-11-13  Ryan Haddad  <ryanhaddad@apple.com>
24
25         Unreviewed, rolling out r238132.
26
27         The test added with this change is timing out on Debug JSC
28         bots.
29
30         Reverted changeset:
31
32         "[BigInt] JSBigInt::createWithLength should throw when length
33         is greater than JSBigInt::maxLength"
34         https://bugs.webkit.org/show_bug.cgi?id=190836
35         https://trac.webkit.org/changeset/238132
36
37 2018-11-13  Mark Lam  <mark.lam@apple.com>
38
39         Add OOM detection to StringPrototype's substituteBackreferences().
40         https://bugs.webkit.org/show_bug.cgi?id=191563
41         <rdar://problem/45720428>
42
43         Reviewed by Saam Barati.
44
45         * stress/regress-191563.js: Added.
46
47 2018-11-13  Mark Lam  <mark.lam@apple.com>
48
49         LLIntSlowPath's llint_loop_osr and llint_replace should set the topCallFrame.
50         https://bugs.webkit.org/show_bug.cgi?id=191579
51         <rdar://problem/45942472>
52
53         Reviewed by Saam Barati.
54
55         * stress/regress-191579.js: Added.
56
57 2018-11-13  Caio Lima  <ticaiolima@gmail.com>
58
59         [BigInt] JSBigInt::createWithLength should throw when length is greater than JSBigInt::maxLength
60         https://bugs.webkit.org/show_bug.cgi?id=190836
61
62         Reviewed by Saam Barati.
63
64         * stress/big-int-out-of-memory-tests.js: Added.
65
66 2018-11-08  Ross Kirsling  <ross.kirsling@sony.com>
67
68         U+180E is no longer a whitespace character
69         https://bugs.webkit.org/show_bug.cgi?id=191415
70
71         Reviewed by Saam Barati.
72
73         * ChakraCore/test/es5/regexSpace.baseline:
74         * ChakraCore/test/es6/unicode_whitespace.js:
75         Update tests to latest version.
76         (See https://github.com/Microsoft/ChakraCore/commit/7c097b698de1e400286f9b957597b2a81fc6f80b.)
77
78         * test262.yaml:
79         * test262/config.yaml:
80         * test262/expectations.yaml:
81         Update expectations.
82
83 2018-11-07  Caio Lima  <ticaiolima@gmail.com>
84
85         [BigInt] Add support to BigInt into ValueAdd
86         https://bugs.webkit.org/show_bug.cgi?id=186177
87
88         Reviewed by Keith Miller.
89
90         * stress/big-int-negate-jit.js:
91         * stress/value-add-big-int-and-string.js: Added.
92         * stress/value-add-big-int-prediction-propagation.js: Added.
93         * stress/value-add-big-int-untyped.js: Added.
94
95 2018-11-07  Tadeu Zagallo  <tzagallo@apple.com>
96
97         REGRESSION(r237547): Test failures on 32-bit JSC since the JIT was disabled
98         https://bugs.webkit.org/show_bug.cgi?id=191184
99
100         Reviewed by Saam Barati.
101
102         Most tests were failing due to timeouts, since they are too slow to
103         run on CLoop. The exceptions are:
104
105         proxy-get-set-correct-receiver.js: Had to reduce the recursion depth not to overflow on CLoop
106         dont-crash-on-stack-overflow-when-parsing-builtin.js and
107         dont-crash-on-stack-overflow-when-parsing-default-constructor.js: had
108         to change the stack size since CLoop requires it to be page aligned.
109
110         * microbenchmarks/array-push-1.js:
111         * microbenchmarks/array-push-2.js:
112         * microbenchmarks/elidable-new-object-dag.js:
113         * microbenchmarks/elidable-new-object-roflcopter.js:
114         * microbenchmarks/elidable-new-object-tree.js:
115         * microbenchmarks/getter-richards.js:
116         * microbenchmarks/sinkable-new-object-dag.js:
117         * microbenchmarks/string-concat-long-convert.js:
118         * microbenchmarks/typed-array-get-set-by-val-profiling.js:
119         * slowMicrobenchmarks/array-push-3.js:
120         * slowMicrobenchmarks/large-map-iteration-with-additions.js:
121         * slowMicrobenchmarks/spread-small-array.js:
122         * slowMicrobenchmarks/undefined-property-access.js:
123         * stress/activation-sink-default-value-tdz-error.js:
124         * stress/activation-sink-default-value.js:
125         * stress/activation-sink-osrexit-default-value-tdz-error.js:
126         * stress/activation-sink-osrexit-default-value.js:
127         * stress/activation-sink-osrexit.js:
128         * stress/activation-sink.js:
129         * stress/allow-math-ic-b3-code-duplication.js:
130         * stress/array-push-multiple-int32.js:
131         * stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js:
132         * stress/arrowfunction-lexical-this-activation-sink-osrexit.js:
133         * stress/arrowfunction-lexical-this-activation-sink.js:
134         * stress/dont-crash-on-stack-overflow-when-parsing-builtin.js:
135         * stress/dont-crash-on-stack-overflow-when-parsing-default-constructor.js:
136         * stress/elide-new-object-dag-then-exit.js:
137         * stress/materialize-regexp-cyclic.js:
138         * stress/new-regex-inline.js:
139         * stress/op_add.js:
140         * stress/op_bitand.js:
141         * stress/op_bitor.js:
142         * stress/op_bitxor.js:
143         * stress/op_div-ConstVar.js:
144         * stress/op_div-VarConst.js:
145         * stress/op_div-VarVar.js:
146         * stress/op_lshift-ConstVar.js:
147         * stress/op_lshift-VarConst.js:
148         * stress/op_lshift-VarVar.js:
149         * stress/op_mod-ConstVar.js:
150         * stress/op_mod-VarConst.js:
151         * stress/op_mod-VarVar.js:
152         * stress/op_mul-ConstVar.js:
153         * stress/op_mul-VarConst.js:
154         * stress/op_mul-VarVar.js:
155         * stress/op_rshift-ConstVar.js:
156         * stress/op_rshift-VarConst.js:
157         * stress/op_rshift-VarVar.js:
158         * stress/op_sub-ConstVar.js:
159         * stress/op_sub-VarConst.js:
160         * stress/op_sub-VarVar.js:
161         * stress/op_urshift-ConstVar.js:
162         * stress/op_urshift-VarConst.js:
163         * stress/op_urshift-VarVar.js:
164         * stress/proxy-get-set-correct-receiver.js:
165         * stress/regress-179562.js:
166         * stress/rest-parameter-many-arguments.js:
167         * stress/sampling-profiler-richards.js:
168         * stress/splay-flash-access-1ms.js:
169         * stress/tailCallForwardArguments.js:
170         * stress/typed-array-get-by-val-profiling.js:
171         * typeProfiler/getter-richards.js:
172
173 2018-11-06  Michael Saboff  <msaboff@apple.com>
174
175         Multiple stress/regexp-compile-oom.js tests are failing on High Sierra Debug and Release JSC testers.
176         https://bugs.webkit.org/show_bug.cgi?id=191271
177
178         Reviewed by Saam Barati.
179
180         Added more test cases and made all test cases run with the same deeply recursive stack
181         instead of finding that same point for each test case.
182
183         * stress/regexp-compile-oom.js:
184         (prototype.runTest):
185         (recurseAndTest):
186         (testList.push.new.TestAndExpectedException):
187
188 2018-11-05  Michael Saboff  <msaboff@apple.com>
189
190         Unreviewed build fix for linux.
191
192         * stress/regexp-compile-oom.js: Disabled for non-darwin OSes.
193
194 2018-11-02  Michael Saboff  <msaboff@apple.com>
195
196         Rolling in r237753 with unreviewed build fix.
197
198         Fixed issues with DECLARE_THROW_SCOPE placement.
199
200 2018-11-02  Ryan Haddad  <ryanhaddad@apple.com>
201
202         Unreviewed, rolling out r237753.
203
204         Introduced JSC test failures
205
206         Reverted changeset:
207
208         "Running out of stack space not properly handled in
209         RegExp::compile() and its callers"
210         https://bugs.webkit.org/show_bug.cgi?id=191206
211         https://trac.webkit.org/changeset/237753
212
213 2018-11-02  Michael Saboff  <msaboff@apple.com>
214
215         Running out of stack space not properly handled in RegExp::compile() and its callers
216         https://bugs.webkit.org/show_bug.cgi?id=191206
217
218         Reviewed by Filip Pizlo.
219
220         New regression test.
221
222         * stress/regexp-compile-oom.js: Added.
223         (recurseAndTest):
224
225 2018-11-01  Guillaume Emont  <guijemont@igalia.com>
226
227         Skip tests on arm/mips that time out now we're running on CLoop
228
229         Unreviewed gardening.
230
231         Since the JIT is temporarily disabled on 32-bit platforms, these tests
232         time out on the bots and need to be disabled. There's more tests
233         disabled on arm because the timeout is longer on the mips bot (as the
234         device is slower to start with), so many of the tests don't time out
235         there.
236
237         * microbenchmarks/getter-richards.js: disable on arm and mips.
238         * stress/op_add.js: disable on arm.
239         * stress/op_bitand.js: disable on arm.
240         * stress/op_bitor.js: disable on arm.
241         * stress/op_bitxor.js: disable on arm.
242         * stress/op_lshift-ConstVar.js: disable on arm.
243         * stress/op_lshift-VarConst.js: disable on arm.
244         * stress/op_lshift-VarVar.js: disable on arm.
245         * stress/op_mod-ConstVar.js: disable on arm.
246         * stress/op_mod-VarConst.js: disable on arm.
247         * stress/op_mod-VarVar.js: disable on arm.
248         * stress/op_mul-ConstVar.js: disable on arm.
249         * stress/op_mul-VarConst.js: disable on arm.
250         * stress/op_mul-VarVar.js: disable on arm.
251         * stress/op_rshift-ConstVar.js: disable on arm.
252         * stress/op_rshift-VarConst.js: disable on arm.
253         * stress/op_rshift-VarVar.js: disable on arm.
254         * stress/op_sub-ConstVar.js: disable on arm.
255         * stress/op_sub-VarConst.js: disable on arm.
256         * stress/op_sub-VarVar.js: disable on arm.
257         * stress/op_urshift-ConstVar.js: disable on arm.
258         * stress/op_urshift-VarConst.js: disable on arm.
259         * stress/op_urshift-VarVar.js: disable on arm.
260         * stress/spread-forward-call-varargs-stack-overflow.js: disable on arm.
261         * stress/value-to-boolean.js: disable on arm and mips.
262
263 2018-10-31  Tadeu Zagallo  <tzagallo@apple.com>
264
265         REGRESSION(r237547): Exception handlers should be aware of wide opcodes
266         https://bugs.webkit.org/show_bug.cgi?id=191108
267         <rdar://problem/45690700>
268
269         Reviewed by Saam Barati.
270
271         * stress/wide-op_catch.js: Added.
272         (catch):
273
274 2018-10-29  Mark Lam  <mark.lam@apple.com>
275
276         Correctly detect string overflow when using the 'Function' constructor.
277         https://bugs.webkit.org/show_bug.cgi?id=184883
278         <rdar://problem/36320331>
279
280         Reviewed by Saam Barati.
281
282         I've verified that this passes on 32-bit as well.
283
284         * slowMicrobenchmarks/function-constructor-with-huge-strings.js: Added.
285
286 2018-10-29  Tadeu Zagallo  <tzagallo@apple.com>
287
288         Add support for GetStack FlushedDouble
289         https://bugs.webkit.org/show_bug.cgi?id=191012
290         <rdar://problem/45265141>
291
292         Reviewed by Saam Barati.
293
294         * stress/get-stack-double.js: Added.
295         (bar):
296         (noInline):
297
298 2018-10-29  Tadeu Zagallo  <tzagallo@apple.com>
299
300         New bytecode format for JSC
301         https://bugs.webkit.org/show_bug.cgi?id=187373
302         <rdar://problem/44186758>
303
304         Reviewed by Filip Pizlo.
305
306         Add tests to ensure that the inferred inline capacity for a narrow op_new_object will be capped at 255.
307
308         * stress/maximum-inline-capacity.js: Added.
309         (test1):
310         (test3.Foo):
311         (test3):
312
313 2018-10-26  Commit Queue  <commit-queue@webkit.org>
314
315         Unreviewed, rolling out r237479 and r237484.
316         https://bugs.webkit.org/show_bug.cgi?id=190978
317
318         broke JSC on iOS (Requested by tadeuzagallo on #webkit).
319
320         Reverted changesets:
321
322         "New bytecode format for JSC"
323         https://bugs.webkit.org/show_bug.cgi?id=187373
324         https://trac.webkit.org/changeset/237479
325
326         "Gardening: Build fix after r237479."
327         https://bugs.webkit.org/show_bug.cgi?id=187373
328         https://trac.webkit.org/changeset/237484
329
330 2018-10-26  Tadeu Zagallo  <tzagallo@apple.com>
331
332         New bytecode format for JSC
333         https://bugs.webkit.org/show_bug.cgi?id=187373
334         <rdar://problem/44186758>
335
336         Reviewed by Filip Pizlo.
337
338         Add tests to ensure that the inferred inline capacity for a narrow op_new_object will be capped at 255.
339
340         * stress/maximum-inline-capacity.js: Added.
341         (test1):
342         (test3.Foo):
343         (test3):
344
345 2018-10-26  Mark Lam  <mark.lam@apple.com>
346
347         Fix missing edge cases with JSGlobalObjects having a bad time.
348         https://bugs.webkit.org/show_bug.cgi?id=189028
349         <rdar://problem/45204939>
350
351         Reviewed by Saam Barati.
352
353         * stress/regress-189028.js: Added.
354
355 2018-10-22  Mark Lam  <mark.lam@apple.com>
356
357         DFGAbstractValue::m_arrayModes expects IndexingMode values, not IndexingType.
358         https://bugs.webkit.org/show_bug.cgi?id=190515
359         <rdar://problem/45222379>
360
361         Rubber-stamped by Saam Barati.
362
363         Adding another test.
364
365         * stress/regress-190515-2.js: Added.
366
367 2018-10-22  Mark Lam  <mark.lam@apple.com>
368
369         DFGAbstractValue::m_arrayModes expects IndexingMode values, not IndexingType.
370         https://bugs.webkit.org/show_bug.cgi?id=190515
371         <rdar://problem/45222379>
372
373         Reviewed by Saam Barati.
374
375         * stress/regress-190515.js: Added.
376
377 2018-10-19  Commit Queue  <commit-queue@webkit.org>
378
379         Unreviewed, rolling out r237254.
380         https://bugs.webkit.org/show_bug.cgi?id=190760
381
382         "It regresses JetStream 2 by 5% on some iOS devices"
383         (Requested by saamyjoon on #webkit).
384
385         Reverted changeset:
386
387         "[JSC] JSC should have "parseFunction" to optimize Function
388         constructor"
389         https://bugs.webkit.org/show_bug.cgi?id=190340
390         https://trac.webkit.org/changeset/237254
391
392 2018-10-19  Saam Barati  <sbarati@apple.com>
393
394         vmCall should check if we exit before emitting an OSR exit due to exceptions
395         https://bugs.webkit.org/show_bug.cgi?id=190740
396         <rdar://problem/45220139>
397
398         Reviewed by Mark Lam.
399
400         * stress/dont-emit-osr-exits-for-every-call-ftl.js: Added.
401         (foo):
402
403 2018-10-19  Caio Lima  <ticaiolima@gmail.com>
404
405         [ESNext][BigInt] Implement support for "^"
406         https://bugs.webkit.org/show_bug.cgi?id=186235
407
408         Reviewed by Yusuke Suzuki.
409
410         * stress/big-int-bitwise-xor-general.js: Added.
411         * stress/big-int-bitwise-xor-to-primitive-precedence.js: Added.
412         * stress/big-int-bitwise-xor-type-error.js: Added.
413         * stress/big-int-bitwise-xor-wrapped-value.js: Added.
414
415 2018-10-19  Caio Lima  <ticaiolima@gmail.com>
416
417         [BigInt] Add ValueSub into DFG
418         https://bugs.webkit.org/show_bug.cgi?id=186176
419
420         Reviewed by Yusuke Suzuki.
421
422         * stress/big-int-subtraction-jit.js:
423         * stress/value-sub-big-int-prediction-propagation.js: Added.
424         * stress/value-sub-big-int-untyped.js: Added.
425         * stress/value-sub-spec-none-case.js: Added.
426
427 2018-10-18  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
428
429         [JSC] JSC should have "parseFunction" to optimize Function constructor
430         https://bugs.webkit.org/show_bug.cgi?id=190340
431
432         Reviewed by Mark Lam.
433
434         This patch fixes the line number of syntax errors raised by the Function constructor,
435         since we now parse the final code only once. And we no longer use block statement
436         for Function constructor's parsing.
437
438         * ChakraCore/test/Function/FuncBodyES5.baseline-jsc:
439         * stress/function-cache-with-parameters-end-position.js: Added.
440         (shouldBe):
441         (shouldThrow):
442         (i.anonymous):
443         * stress/function-constructor-name.js: Added.
444         (shouldBe):
445         (GeneratorFunction):
446         (AsyncFunction.async):
447         (AsyncGeneratorFunction.async):
448         (anonymous):
449         (async.anonymous):
450         * test262/expectations.yaml:
451
452 2018-10-18  Commit Queue  <commit-queue@webkit.org>
453
454         Unreviewed, rolling out r237242.
455         https://bugs.webkit.org/show_bug.cgi?id=190701
456
457         it breaks "stress/sampling-profiler-basic.js" (Requested by
458         caiolima on #webkit).
459
460         Reverted changeset:
461
462         "[BigInt] Add ValueSub into DFG"
463         https://bugs.webkit.org/show_bug.cgi?id=186176
464         https://trac.webkit.org/changeset/237242
465
466 2018-10-17  Keith Miller  <keith_miller@apple.com>
467
468         AI does not clear Phantom allocation nodes.
469         https://bugs.webkit.org/show_bug.cgi?id=190694
470
471         Reviewed by Saam Barati.
472
473         * stress/ftl-ai-filter-phantoms-should-clear-clear-value.js: Added.
474         (Day):
475         (DaysInYear):
476         (TimeInYear):
477         (TimeFromYear):
478         (DayFromYear):
479         (InLeapYear):
480         (YearFromTime):
481         (WeekDay):
482         (DaylightSavingTA):
483         (GetSecondSundayInMarch):
484         (TimeInMonth):
485
486 2018-10-17  Caio Lima  <ticaiolima@gmail.com>
487
488         [BigInt] Add ValueSub into DFG
489         https://bugs.webkit.org/show_bug.cgi?id=186176
490
491         Reviewed by Yusuke Suzuki.
492
493         * stress/big-int-subtraction-jit.js:
494         * stress/value-sub-big-int-prediction-propagation.js: Added.
495         * stress/value-sub-big-int-untyped.js: Added.
496
497 2018-10-16  Dominik Infuehr  <dinfuehr@igalia.com>
498
499         [JSC] stress/array-prototype-concat-of-long-spliced-arrays2.js times out on arm and mips
500         https://bugs.webkit.org/show_bug.cgi?id=190611
501
502         Reviewed by Saam Barati.
503
504         Reduce array length just like in array-prototype-concat-of-long-spliced-arrays.js
505         to improve test runtime. On ARM/MIPS this test even timed out when running all
506         tests.
507
508         * stress/array-prototype-concat-of-long-spliced-arrays2.js:
509         (test):
510
511 2018-10-15  Guillaume Emont  <guijemont@igalia.com>
512
513         Skip stress/array-prototype-concat-of-long-spliced-arrays2.js on arm and mips/linux
514
515         Unreviewed gardening.
516
517         * stress/array-prototype-concat-of-long-spliced-arrays2.js:
518
519 2018-10-15  Saam barati  <sbarati@apple.com>
520
521         Emit fjcvtzs on ARM64E on Darwin
522         https://bugs.webkit.org/show_bug.cgi?id=184023
523
524         Reviewed by Yusuke Suzuki and Filip Pizlo.
525
526         * stress/double-to-int32-NaN.js: Added.
527         (assert):
528         (foo):
529
530 2018-10-15  Saam Barati  <sbarati@apple.com>
531
532         JSArray::shiftCountWithArrayStorage is wrong when an array has holes
533         https://bugs.webkit.org/show_bug.cgi?id=190262
534         <rdar://problem/44986241>
535
536         Reviewed by Mark Lam.
537
538         * stress/array-prototype-concat-of-long-spliced-arrays.js:
539         (test):
540         * stress/slice-array-storage-with-holes.js: Added.
541         (main):
542
543 2018-10-15  Commit Queue  <commit-queue@webkit.org>
544
545         Unreviewed, rolling out r237054.
546         https://bugs.webkit.org/show_bug.cgi?id=190593
547
548         "this regressed JetStream 2 by 6% on iOS" (Requested by
549         saamyjoon on #webkit).
550
551         Reverted changeset:
552
553         "[JSC] JSC should have "parseFunction" to optimize Function
554         constructor"
555         https://bugs.webkit.org/show_bug.cgi?id=190340
556         https://trac.webkit.org/changeset/237054
557
558 2018-10-13  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
559
560         [JSC] JSON.stringify can accept call-with-no-arguments
561         https://bugs.webkit.org/show_bug.cgi?id=190343
562
563         Reviewed by Mark Lam.
564
565         * stress/json-stringify-no-arguments.js: Added.
566         (shouldBe):
567
568 2018-10-08  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
569
570         [JSC] JSC should have "parseFunction" to optimize Function constructor
571         https://bugs.webkit.org/show_bug.cgi?id=190340
572
573         Reviewed by Mark Lam.
574
575         This patch fixes the line number of syntax errors raised by the Function constructor,
576         since we now parse the final code only once. And we no longer use block statement
577         for Function constructor's parsing.
578
579         * ChakraCore/test/Function/FuncBodyES5.baseline-jsc:
580         * stress/function-cache-with-parameters-end-position.js: Added.
581         (shouldBe):
582         (shouldThrow):
583         (i.anonymous):
584         * stress/function-constructor-name.js: Added.
585         (shouldBe):
586         (GeneratorFunction):
587         (AsyncFunction.async):
588         (AsyncGeneratorFunction.async):
589         (anonymous):
590         (async.anonymous):
591         * test262/expectations.yaml:
592
593 2018-10-10  Guillaume Emont  <guijemont@igalia.com>
594
595         Skip JSC test stress/sampling-profiler-richards.js on armv7/linux
596         https://bugs.webkit.org/show_bug.cgi?id=190426
597
598         Unreviewed gardening.
599
600         * stress/sampling-profiler-richards.js:
601
602 2018-10-06  Caio Lima  <ticaiolima@gmail.com>
603
604         [ESNext][BigInt] Implement support for "|"
605         https://bugs.webkit.org/show_bug.cgi?id=186229
606
607         Reviewed by Yusuke Suzuki.
608
609         * stress/big-int-bitwise-and-jit.js:
610         * stress/big-int-bitwise-or-general.js: Added.
611         * stress/big-int-bitwise-or-jit-untyped.js: Added.
612         * stress/big-int-bitwise-or-jit.js: Added.
613         * stress/big-int-bitwise-or-memory-stress.js: Added.
614         * stress/big-int-bitwise-or-to-primitive-precedence.js: Added.
615         * stress/big-int-bitwise-or-type-error.js: Added.
616         * stress/big-int-bitwise-or-wrapped-value.js: Added.
617
618 2018-10-05  Dominik Infuehr  <dominik.infuehr@gmail.com>
619
620         Skip test on systems with limited memory
621         https://bugs.webkit.org/show_bug.cgi?id=190310
622
623         Invoking runDefault adds test to runlist, skipping the test in the next
624         line does not prevent the test from executing. Change order of lines such
625         that runDefault is only executed if test is not executed.
626
627         Reviewed by Mark Lam.
628
629         * stress/regress-190187.js:
630
631 2018-10-03  Saam barati  <sbarati@apple.com>
632
633         lowXYZ in FTLLower should always filter the type of the incoming edge
634         https://bugs.webkit.org/show_bug.cgi?id=189939
635         <rdar://problem/44407030>
636
637         Reviewed by Michael Saboff.
638
639         * stress/ftl-should-always-filter-for-low-type-check-functions.js: Added.
640         (foo):
641         (test):
642
643 2018-10-03  Mark Lam  <mark.lam@apple.com>
644
645         Make string MaxLength for all WTF and JS strings consistently equal to INT_MAX.
646         https://bugs.webkit.org/show_bug.cgi?id=190187
647         <rdar://problem/42512909>
648
649         Reviewed by Michael Saboff.
650
651         * stress/regress-190187.js: Added.
652
653 2018-10-02  Caio Lima  <ticaiolima@gmail.com>
654
655         [BigInt] BigInt.proptotype.toString is broken when radix is power of 2
656         https://bugs.webkit.org/show_bug.cgi?id=190033
657
658         Reviewed by Yusuke Suzuki.
659
660         * stress/big-int-to-string.js:
661
662 2018-10-01  Mark Lam  <mark.lam@apple.com>
663
664         Function.toString() should also copy the source code Functions that are class definitions.
665         https://bugs.webkit.org/show_bug.cgi?id=190186
666         <rdar://problem/44733360>
667
668         Reviewed by Saam Barati.
669
670         * stress/regress-190186.js: Added.
671
672 2018-10-01  Dominik Infuehr  <dinfuehr@igalia.com>
673
674         Split NaN-check into separate test
675         https://bugs.webkit.org/show_bug.cgi?id=190010
676
677         Reviewed by Saam Barati.
678
679         DataView exposes NaN-representation, which is not necessarily the same on each
680         architecture. Therefore move the check of the NaN-representation into its own
681         file such that we can disable this test on MIPS where NaN-representation can be
682         different on older CPUs.
683
684         * stress/dataview-jit-set-nan.js: Added.
685         (assert):
686         (test.storeLittleEndian):
687         (test.storeBigEndian):
688         (test.store):
689         (test):
690         * stress/dataview-jit-set.js:
691         (test5):
692
693 2018-10-01  Commit Queue  <commit-queue@webkit.org>
694
695         Unreviewed, rolling out r236647.
696         https://bugs.webkit.org/show_bug.cgi?id=190124
697
698         Breaking test stress/big-int-to-string.js (Requested by
699         caiolima_ on #webkit).
700
701         Reverted changeset:
702
703         "[BigInt] BigInt.proptotype.toString is broken when radix is
704         power of 2"
705         https://bugs.webkit.org/show_bug.cgi?id=190033
706         https://trac.webkit.org/changeset/236647
707
708 2018-09-30  Caio Lima  <ticaiolima@gmail.com>
709
710         [BigInt] BigInt.proptotype.toString is broken when radix is power of 2
711         https://bugs.webkit.org/show_bug.cgi?id=190033
712
713         Reviewed by Yusuke Suzuki.
714
715         * stress/big-int-to-string.js:
716
717 2018-09-28  Caio Lima  <ticaiolima@gmail.com>
718
719         [ESNext][BigInt] Implement support for "&"
720         https://bugs.webkit.org/show_bug.cgi?id=186228
721
722         Reviewed by Yusuke Suzuki.
723
724         * stress/big-int-bitwise-and-general.js: Added.
725         (assert):
726         (assert.sameValue):
727         * stress/big-int-bitwise-and-jit.js: Added.
728         (let.assert.sameValue):
729         (bigIntBitAnd):
730         * stress/big-int-bitwise-and-memory-stress.js: Added.
731         (assert):
732         * stress/big-int-bitwise-and-to-primitive-precedence.js: Added.
733         (assert.sameValue):
734         (let.o.Symbol.toPrimitive):
735         (catch):
736         * stress/big-int-bitwise-and-type-error.js: Added.
737         (assert):
738         (assertThrowTypeError):
739         (let.o.valueOf):
740         (o.valueOf):
741         (o.toString):
742         (o.Symbol.toPrimitive):
743         * stress/big-int-bitwise-and-wrapped-value.js: Added.
744         (assert.sameValue):
745         (testBitAnd):
746         (let.o.Symbol.toPrimitive):
747         (o.valueOf):
748         (o.toString):
749
750 2018-09-28  Ross Kirsling  <ross.kirsling@sony.com>
751
752         JSC test stress/jsc-read.js doesn't support CRLF
753         https://bugs.webkit.org/show_bug.cgi?id=190063
754
755         Reviewed by Yusuke Suzuki.
756
757         In order to run this test via Windows command prompt, we can't assume that the final newline will be LF.
758
759         * stress/jsc-read.js:
760         (test):
761
762 2018-09-27  Saam barati  <sbarati@apple.com>
763
764         Verify the contents of AssemblerBuffer on arm64e
765         https://bugs.webkit.org/show_bug.cgi?id=190057
766         <rdar://problem/38916630>
767
768         Reviewed by Mark Lam.
769
770         * stress/regress-189132.js:
771
772 2018-09-27  Dominik Infuehr  <dinfuehr@igalia.com>
773
774         Disable test without LLInt on ARMv7
775         https://bugs.webkit.org/show_bug.cgi?id=190037
776
777         Reviewed by Mark Lam.
778
779         Test runs out of executable memory on ARMv7, do not run
780         this test without LLInt enabled.
781
782         * stress/regress-169445.js:
783
784 2018-09-26  Keith Miller  <keith_miller@apple.com>
785
786         We should zero unused property storage when rebalancing array storage.
787         https://bugs.webkit.org/show_bug.cgi?id=188151
788
789         Reviewed by Michael Saboff.
790
791         * stress/splice-should-zero-property-storage-when-rebalancing.js: Added.
792
793 2018-09-20  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
794
795         [JSC] Optimize Array#lastIndexOf
796         https://bugs.webkit.org/show_bug.cgi?id=189780
797
798         Reviewed by Saam Barati.
799
800         * stress/array-lastindexof-array-prototype-trap.js: Added.
801         (shouldBe):
802         (AncestorArray.prototype.get 2):
803         (AncestorArray):
804         * stress/array-lastindexof-have-a-bad-time-c-runtime.js: Added.
805         (shouldBe):
806         * stress/array-lastindexof-hole-nan.js: Added.
807         (shouldBe):
808         (throw.new.Error):
809         * stress/array-lastindexof-infinity.js: Added.
810         (shouldBe):
811         (throw.new.Error):
812         * stress/array-lastindexof-negative-zero.js: Added.
813         (shouldBe):
814         (throw.new.Error):
815         * stress/array-lastindexof-own-getter.js: Added.
816         (shouldBe):
817         (throw.new.Error.get array):
818         (get array):
819         * stress/array-lastindexof-prototype-trap.js: Added.
820         (shouldBe):
821         (DerivedArray.prototype.get 2):
822         (DerivedArray):
823
824 2018-09-25  Saam Barati  <sbarati@apple.com>
825
826         Calls to baselineCodeBlockForOriginAndBaselineCodeBlock in operationMaterializeObjectInOSR should actually pass in the baseline CodeBlock
827         https://bugs.webkit.org/show_bug.cgi?id=189940
828         <rdar://problem/43640987>
829
830         Reviewed by Mark Lam.
831
832         * stress/use-baseline-codeblock-materialize-osr-exit.js: Added.
833
834 2018-09-24  Saam Barati  <sbarati@apple.com>
835
836         Array.prototype.indexOf fast path needs to ensure the length is still valid after performing effects
837         https://bugs.webkit.org/show_bug.cgi?id=189922
838         <rdar://problem/44651275>
839
840         Reviewed by Mark Lam.
841
842         * stress/array-indexof-fast-path-effects.js: Added.
843         * stress/array-indexof-cached-length.js: Added.
844
845 2018-09-24  Saam barati  <sbarati@apple.com>
846
847         ArgumentsEliminationPhase should snip basic blocks after proven OSR exits
848         https://bugs.webkit.org/show_bug.cgi?id=189682
849         <rdar://problem/43557315>
850
851         Reviewed by Mark Lam.
852
853         * stress/arguments-elimination-will-generate-edge-without-result.js: Added.
854         (foo):
855
856 2018-09-22  Saam barati  <sbarati@apple.com>
857
858         The sampling should not use Strong<CodeBlock> in its machineLocation field
859         https://bugs.webkit.org/show_bug.cgi?id=189319
860
861         Reviewed by Filip Pizlo.
862
863         * stress/sampling-profiler-richards.js: Added.
864
865 2018-09-19  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
866
867         [JSC] Optimize Array#indexOf in C++ runtime
868         https://bugs.webkit.org/show_bug.cgi?id=189507
869
870         Reviewed by Saam Barati.
871
872         * stress/array-indexof-array-prototype-trap.js: Added.
873         (shouldBe):
874         (AncestorArray.prototype.get 2):
875         (AncestorArray):
876         * stress/array-indexof-have-a-bad-time-c-runtime.js: Added.
877         (shouldBe):
878         * stress/array-indexof-hole-nan.js: Added.
879         (shouldBe):
880         (throw.new.Error):
881         * stress/array-indexof-infinity.js: Added.
882         (shouldBe):
883         (throw.new.Error):
884         * stress/array-indexof-negative-zero.js: Added.
885         (shouldBe):
886         (throw.new.Error):
887         * stress/array-indexof-own-getter.js: Added.
888         (shouldBe):
889         (throw.new.Error.get array):
890         (get array):
891         * stress/array-indexof-prototype-trap.js: Added.
892         (shouldBe):
893         (DerivedArray.prototype.get 2):
894         (DerivedArray):
895
896 2018-09-19  Saam barati  <sbarati@apple.com>
897
898         AI rule for MultiPutByOffset executes its effects in the wrong order
899         https://bugs.webkit.org/show_bug.cgi?id=189757
900         <rdar://problem/43535257>
901
902         Reviewed by Michael Saboff.
903
904         * stress/multi-put-by-offset-must-filter-value-before-filtering-base.js: Added.
905         (foo):
906         (Foo):
907         (g):
908
909 2018-09-17  Mark Lam  <mark.lam@apple.com>
910
911         Ensure that ForInContexts are invalidated if their loop local is over-written.
912         https://bugs.webkit.org/show_bug.cgi?id=189571
913         <rdar://problem/44402277>
914
915         Reviewed by Saam Barati.
916
917         * stress/regress-189571.js: Added.
918
919 2018-09-17  Saam barati  <sbarati@apple.com>
920
921         We must convert ProfileType to CheckStructureOrEmpty instead of CheckStructure
922         https://bugs.webkit.org/show_bug.cgi?id=189676
923         <rdar://problem/39682897>
924
925         Reviewed by Michael Saboff.
926
927         * typeProfiler/check-structure-or-empty-in-fixup.js: Added.
928         (A):
929         (K):
930         (i.catch):
931
932 2018-09-14  Saam barati  <sbarati@apple.com>
933
934         Don't dump OSRAvailabilityData in Graph::dump because a stale Availability may point to a Node that is already freed
935         https://bugs.webkit.org/show_bug.cgi?id=189628
936         <rdar://problem/39481690>
937
938         Reviewed by Mark Lam.
939
940         * stress/verbose-failure-dont-graph-dump-availability-already-freed.js: Added.
941         (foo):
942
943 2018-09-11  Mark Lam  <mark.lam@apple.com>
944
945         Test for array initialization in arrayProtoFuncSplice.
946         https://bugs.webkit.org/show_bug.cgi?id=170253
947         <rdar://problem/31328773>
948
949         Rubber-stamped by Saam Barati.
950
951         * stress/regress-170253.js: Added.
952
953 2018-09-11  Mark Lam  <mark.lam@apple.com>
954
955         Test for IntlObject initialization.
956         https://bugs.webkit.org/show_bug.cgi?id=170251
957         <rdar://problem/31328419>
958
959         Rubber-stamped by Saam Barati.
960
961         * stress/regress-170251.js: Added.
962
963 2018-09-11  Mark Lam  <mark.lam@apple.com>
964
965         Test for array memcpy'ing when JSGlobalObject::haveABadTime.
966         https://bugs.webkit.org/show_bug.cgi?id=169889
967         <rdar://problem/31155607>
968
969         Reviewed by Saam Barati.
970
971         * stress/regress-169889-array-concat.js: Added.
972         * stress/regress-169889-array-concat1.js: Added.
973         * stress/regress-169889-array-slice.js: Added.
974
975 2018-09-11  Mark Lam  <mark.lam@apple.com>
976
977         Test for incorrect check in emitPutDerivedConstructorToArrowFunctionContextScope.
978         https://bugs.webkit.org/show_bug.cgi?id=169445
979         <rdar://problem/30957435>
980
981         Reviewed by Saam Barati.
982
983         * stress/regress-169445.js: Added.
984         (let.gun.eval.A):
985         (let.gun.eval.B.C):
986         (let.gun.eval.B.C.prototype.trigger):
987         (let.gun.eval.B.C.prototype.triggerWithRestParameters):
988         (let.gun.eval.B):
989         (let.gun.eval):
990
991 == Rolled over to ChangeLog-2018-09-11 ==