77dc6664b416c164682c5652c29f426e97eee46e
[WebKit-https.git] / JSTests / ChangeLog
1 2018-11-08  Ross Kirsling  <ross.kirsling@sony.com>
2
3         U+180E is no longer a whitespace character
4         https://bugs.webkit.org/show_bug.cgi?id=191415
5
6         Reviewed by Saam Barati.
7
8         * ChakraCore/test/es5/regexSpace.baseline:
9         * ChakraCore/test/es6/unicode_whitespace.js:
10         Update tests to latest version.
11         (See https://github.com/Microsoft/ChakraCore/commit/7c097b698de1e400286f9b957597b2a81fc6f80b.)
12
13         * test262.yaml:
14         * test262/config.yaml:
15         * test262/expectations.yaml:
16         Update expectations.
17
18 2018-11-07  Caio Lima  <ticaiolima@gmail.com>
19
20         [BigInt] Add support to BigInt into ValueAdd
21         https://bugs.webkit.org/show_bug.cgi?id=186177
22
23         Reviewed by Keith Miller.
24
25         * stress/big-int-negate-jit.js:
26         * stress/value-add-big-int-and-string.js: Added.
27         * stress/value-add-big-int-prediction-propagation.js: Added.
28         * stress/value-add-big-int-untyped.js: Added.
29
30 2018-11-07  Tadeu Zagallo  <tzagallo@apple.com>
31
32         REGRESSION(r237547): Test failures on 32-bit JSC since the JIT was disabled
33         https://bugs.webkit.org/show_bug.cgi?id=191184
34
35         Reviewed by Saam Barati.
36
37         Most tests were failing due to timeouts, since they are too slow to
38         run on CLoop. The exceptions are:
39
40         proxy-get-set-correct-receiver.js: Had to reduce the recursion depth not to overflow on CLoop
41         dont-crash-on-stack-overflow-when-parsing-builtin.js and
42         dont-crash-on-stack-overflow-when-parsing-default-constructor.js: had
43         to change the stack size since CLoop requires it to be page aligned.
44
45         * microbenchmarks/array-push-1.js:
46         * microbenchmarks/array-push-2.js:
47         * microbenchmarks/elidable-new-object-dag.js:
48         * microbenchmarks/elidable-new-object-roflcopter.js:
49         * microbenchmarks/elidable-new-object-tree.js:
50         * microbenchmarks/getter-richards.js:
51         * microbenchmarks/sinkable-new-object-dag.js:
52         * microbenchmarks/string-concat-long-convert.js:
53         * microbenchmarks/typed-array-get-set-by-val-profiling.js:
54         * slowMicrobenchmarks/array-push-3.js:
55         * slowMicrobenchmarks/large-map-iteration-with-additions.js:
56         * slowMicrobenchmarks/spread-small-array.js:
57         * slowMicrobenchmarks/undefined-property-access.js:
58         * stress/activation-sink-default-value-tdz-error.js:
59         * stress/activation-sink-default-value.js:
60         * stress/activation-sink-osrexit-default-value-tdz-error.js:
61         * stress/activation-sink-osrexit-default-value.js:
62         * stress/activation-sink-osrexit.js:
63         * stress/activation-sink.js:
64         * stress/allow-math-ic-b3-code-duplication.js:
65         * stress/array-push-multiple-int32.js:
66         * stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js:
67         * stress/arrowfunction-lexical-this-activation-sink-osrexit.js:
68         * stress/arrowfunction-lexical-this-activation-sink.js:
69         * stress/dont-crash-on-stack-overflow-when-parsing-builtin.js:
70         * stress/dont-crash-on-stack-overflow-when-parsing-default-constructor.js:
71         * stress/elide-new-object-dag-then-exit.js:
72         * stress/materialize-regexp-cyclic.js:
73         * stress/new-regex-inline.js:
74         * stress/op_add.js:
75         * stress/op_bitand.js:
76         * stress/op_bitor.js:
77         * stress/op_bitxor.js:
78         * stress/op_div-ConstVar.js:
79         * stress/op_div-VarConst.js:
80         * stress/op_div-VarVar.js:
81         * stress/op_lshift-ConstVar.js:
82         * stress/op_lshift-VarConst.js:
83         * stress/op_lshift-VarVar.js:
84         * stress/op_mod-ConstVar.js:
85         * stress/op_mod-VarConst.js:
86         * stress/op_mod-VarVar.js:
87         * stress/op_mul-ConstVar.js:
88         * stress/op_mul-VarConst.js:
89         * stress/op_mul-VarVar.js:
90         * stress/op_rshift-ConstVar.js:
91         * stress/op_rshift-VarConst.js:
92         * stress/op_rshift-VarVar.js:
93         * stress/op_sub-ConstVar.js:
94         * stress/op_sub-VarConst.js:
95         * stress/op_sub-VarVar.js:
96         * stress/op_urshift-ConstVar.js:
97         * stress/op_urshift-VarConst.js:
98         * stress/op_urshift-VarVar.js:
99         * stress/proxy-get-set-correct-receiver.js:
100         * stress/regress-179562.js:
101         * stress/rest-parameter-many-arguments.js:
102         * stress/sampling-profiler-richards.js:
103         * stress/splay-flash-access-1ms.js:
104         * stress/tailCallForwardArguments.js:
105         * stress/typed-array-get-by-val-profiling.js:
106         * typeProfiler/getter-richards.js:
107
108 2018-11-06  Michael Saboff  <msaboff@apple.com>
109
110         Multiple stress/regexp-compile-oom.js tests are failing on High Sierra Debug and Release JSC testers.
111         https://bugs.webkit.org/show_bug.cgi?id=191271
112
113         Reviewed by Saam Barati.
114
115         Added more test cases and made all test cases run with the same deeply recursive stack
116         instead of finding that same point for each test case.
117
118         * stress/regexp-compile-oom.js:
119         (prototype.runTest):
120         (recurseAndTest):
121         (testList.push.new.TestAndExpectedException):
122
123 2018-11-05  Michael Saboff  <msaboff@apple.com>
124
125         Unreviewed build fix for linux.
126
127         * stress/regexp-compile-oom.js: Disabled for non-darwin OSes.
128
129 2018-11-02  Michael Saboff  <msaboff@apple.com>
130
131         Rolling in r237753 with unreviewed build fix.
132
133         Fixed issues with DECLARE_THROW_SCOPE placement.
134
135 2018-11-02  Ryan Haddad  <ryanhaddad@apple.com>
136
137         Unreviewed, rolling out r237753.
138
139         Introduced JSC test failures
140
141         Reverted changeset:
142
143         "Running out of stack space not properly handled in
144         RegExp::compile() and its callers"
145         https://bugs.webkit.org/show_bug.cgi?id=191206
146         https://trac.webkit.org/changeset/237753
147
148 2018-11-02  Michael Saboff  <msaboff@apple.com>
149
150         Running out of stack space not properly handled in RegExp::compile() and its callers
151         https://bugs.webkit.org/show_bug.cgi?id=191206
152
153         Reviewed by Filip Pizlo.
154
155         New regression test.
156
157         * stress/regexp-compile-oom.js: Added.
158         (recurseAndTest):
159
160 2018-11-01  Guillaume Emont  <guijemont@igalia.com>
161
162         Skip tests on arm/mips that time out now we're running on CLoop
163
164         Unreviewed gardening.
165
166         Since the JIT is temporarily disabled on 32-bit platforms, these tests
167         time out on the bots and need to be disabled. There's more tests
168         disabled on arm because the timeout is longer on the mips bot (as the
169         device is slower to start with), so many of the tests don't time out
170         there.
171
172         * microbenchmarks/getter-richards.js: disable on arm and mips.
173         * stress/op_add.js: disable on arm.
174         * stress/op_bitand.js: disable on arm.
175         * stress/op_bitor.js: disable on arm.
176         * stress/op_bitxor.js: disable on arm.
177         * stress/op_lshift-ConstVar.js: disable on arm.
178         * stress/op_lshift-VarConst.js: disable on arm.
179         * stress/op_lshift-VarVar.js: disable on arm.
180         * stress/op_mod-ConstVar.js: disable on arm.
181         * stress/op_mod-VarConst.js: disable on arm.
182         * stress/op_mod-VarVar.js: disable on arm.
183         * stress/op_mul-ConstVar.js: disable on arm.
184         * stress/op_mul-VarConst.js: disable on arm.
185         * stress/op_mul-VarVar.js: disable on arm.
186         * stress/op_rshift-ConstVar.js: disable on arm.
187         * stress/op_rshift-VarConst.js: disable on arm.
188         * stress/op_rshift-VarVar.js: disable on arm.
189         * stress/op_sub-ConstVar.js: disable on arm.
190         * stress/op_sub-VarConst.js: disable on arm.
191         * stress/op_sub-VarVar.js: disable on arm.
192         * stress/op_urshift-ConstVar.js: disable on arm.
193         * stress/op_urshift-VarConst.js: disable on arm.
194         * stress/op_urshift-VarVar.js: disable on arm.
195         * stress/spread-forward-call-varargs-stack-overflow.js: disable on arm.
196         * stress/value-to-boolean.js: disable on arm and mips.
197
198 2018-10-31  Tadeu Zagallo  <tzagallo@apple.com>
199
200         REGRESSION(r237547): Exception handlers should be aware of wide opcodes
201         https://bugs.webkit.org/show_bug.cgi?id=191108
202         <rdar://problem/45690700>
203
204         Reviewed by Saam Barati.
205
206         * stress/wide-op_catch.js: Added.
207         (catch):
208
209 2018-10-29  Mark Lam  <mark.lam@apple.com>
210
211         Correctly detect string overflow when using the 'Function' constructor.
212         https://bugs.webkit.org/show_bug.cgi?id=184883
213         <rdar://problem/36320331>
214
215         Reviewed by Saam Barati.
216
217         I've verified that this passes on 32-bit as well.
218
219         * slowMicrobenchmarks/function-constructor-with-huge-strings.js: Added.
220
221 2018-10-29  Tadeu Zagallo  <tzagallo@apple.com>
222
223         Add support for GetStack FlushedDouble
224         https://bugs.webkit.org/show_bug.cgi?id=191012
225         <rdar://problem/45265141>
226
227         Reviewed by Saam Barati.
228
229         * stress/get-stack-double.js: Added.
230         (bar):
231         (noInline):
232
233 2018-10-29  Tadeu Zagallo  <tzagallo@apple.com>
234
235         New bytecode format for JSC
236         https://bugs.webkit.org/show_bug.cgi?id=187373
237         <rdar://problem/44186758>
238
239         Reviewed by Filip Pizlo.
240
241         Add tests to ensure that the inferred inline capacity for a narrow op_new_object will be capped at 255.
242
243         * stress/maximum-inline-capacity.js: Added.
244         (test1):
245         (test3.Foo):
246         (test3):
247
248 2018-10-26  Commit Queue  <commit-queue@webkit.org>
249
250         Unreviewed, rolling out r237479 and r237484.
251         https://bugs.webkit.org/show_bug.cgi?id=190978
252
253         broke JSC on iOS (Requested by tadeuzagallo on #webkit).
254
255         Reverted changesets:
256
257         "New bytecode format for JSC"
258         https://bugs.webkit.org/show_bug.cgi?id=187373
259         https://trac.webkit.org/changeset/237479
260
261         "Gardening: Build fix after r237479."
262         https://bugs.webkit.org/show_bug.cgi?id=187373
263         https://trac.webkit.org/changeset/237484
264
265 2018-10-26  Tadeu Zagallo  <tzagallo@apple.com>
266
267         New bytecode format for JSC
268         https://bugs.webkit.org/show_bug.cgi?id=187373
269         <rdar://problem/44186758>
270
271         Reviewed by Filip Pizlo.
272
273         Add tests to ensure that the inferred inline capacity for a narrow op_new_object will be capped at 255.
274
275         * stress/maximum-inline-capacity.js: Added.
276         (test1):
277         (test3.Foo):
278         (test3):
279
280 2018-10-26  Mark Lam  <mark.lam@apple.com>
281
282         Fix missing edge cases with JSGlobalObjects having a bad time.
283         https://bugs.webkit.org/show_bug.cgi?id=189028
284         <rdar://problem/45204939>
285
286         Reviewed by Saam Barati.
287
288         * stress/regress-189028.js: Added.
289
290 2018-10-22  Mark Lam  <mark.lam@apple.com>
291
292         DFGAbstractValue::m_arrayModes expects IndexingMode values, not IndexingType.
293         https://bugs.webkit.org/show_bug.cgi?id=190515
294         <rdar://problem/45222379>
295
296         Rubber-stamped by Saam Barati.
297
298         Adding another test.
299
300         * stress/regress-190515-2.js: Added.
301
302 2018-10-22  Mark Lam  <mark.lam@apple.com>
303
304         DFGAbstractValue::m_arrayModes expects IndexingMode values, not IndexingType.
305         https://bugs.webkit.org/show_bug.cgi?id=190515
306         <rdar://problem/45222379>
307
308         Reviewed by Saam Barati.
309
310         * stress/regress-190515.js: Added.
311
312 2018-10-19  Commit Queue  <commit-queue@webkit.org>
313
314         Unreviewed, rolling out r237254.
315         https://bugs.webkit.org/show_bug.cgi?id=190760
316
317         "It regresses JetStream 2 by 5% on some iOS devices"
318         (Requested by saamyjoon on #webkit).
319
320         Reverted changeset:
321
322         "[JSC] JSC should have "parseFunction" to optimize Function
323         constructor"
324         https://bugs.webkit.org/show_bug.cgi?id=190340
325         https://trac.webkit.org/changeset/237254
326
327 2018-10-19  Saam Barati  <sbarati@apple.com>
328
329         vmCall should check if we exit before emitting an OSR exit due to exceptions
330         https://bugs.webkit.org/show_bug.cgi?id=190740
331         <rdar://problem/45220139>
332
333         Reviewed by Mark Lam.
334
335         * stress/dont-emit-osr-exits-for-every-call-ftl.js: Added.
336         (foo):
337
338 2018-10-19  Caio Lima  <ticaiolima@gmail.com>
339
340         [ESNext][BigInt] Implement support for "^"
341         https://bugs.webkit.org/show_bug.cgi?id=186235
342
343         Reviewed by Yusuke Suzuki.
344
345         * stress/big-int-bitwise-xor-general.js: Added.
346         * stress/big-int-bitwise-xor-to-primitive-precedence.js: Added.
347         * stress/big-int-bitwise-xor-type-error.js: Added.
348         * stress/big-int-bitwise-xor-wrapped-value.js: Added.
349
350 2018-10-19  Caio Lima  <ticaiolima@gmail.com>
351
352         [BigInt] Add ValueSub into DFG
353         https://bugs.webkit.org/show_bug.cgi?id=186176
354
355         Reviewed by Yusuke Suzuki.
356
357         * stress/big-int-subtraction-jit.js:
358         * stress/value-sub-big-int-prediction-propagation.js: Added.
359         * stress/value-sub-big-int-untyped.js: Added.
360         * stress/value-sub-spec-none-case.js: Added.
361
362 2018-10-18  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
363
364         [JSC] JSC should have "parseFunction" to optimize Function constructor
365         https://bugs.webkit.org/show_bug.cgi?id=190340
366
367         Reviewed by Mark Lam.
368
369         This patch fixes the line number of syntax errors raised by the Function constructor,
370         since we now parse the final code only once. And we no longer use block statement
371         for Function constructor's parsing.
372
373         * ChakraCore/test/Function/FuncBodyES5.baseline-jsc:
374         * stress/function-cache-with-parameters-end-position.js: Added.
375         (shouldBe):
376         (shouldThrow):
377         (i.anonymous):
378         * stress/function-constructor-name.js: Added.
379         (shouldBe):
380         (GeneratorFunction):
381         (AsyncFunction.async):
382         (AsyncGeneratorFunction.async):
383         (anonymous):
384         (async.anonymous):
385         * test262/expectations.yaml:
386
387 2018-10-18  Commit Queue  <commit-queue@webkit.org>
388
389         Unreviewed, rolling out r237242.
390         https://bugs.webkit.org/show_bug.cgi?id=190701
391
392         it breaks "stress/sampling-profiler-basic.js" (Requested by
393         caiolima on #webkit).
394
395         Reverted changeset:
396
397         "[BigInt] Add ValueSub into DFG"
398         https://bugs.webkit.org/show_bug.cgi?id=186176
399         https://trac.webkit.org/changeset/237242
400
401 2018-10-17  Keith Miller  <keith_miller@apple.com>
402
403         AI does not clear Phantom allocation nodes.
404         https://bugs.webkit.org/show_bug.cgi?id=190694
405
406         Reviewed by Saam Barati.
407
408         * stress/ftl-ai-filter-phantoms-should-clear-clear-value.js: Added.
409         (Day):
410         (DaysInYear):
411         (TimeInYear):
412         (TimeFromYear):
413         (DayFromYear):
414         (InLeapYear):
415         (YearFromTime):
416         (WeekDay):
417         (DaylightSavingTA):
418         (GetSecondSundayInMarch):
419         (TimeInMonth):
420
421 2018-10-17  Caio Lima  <ticaiolima@gmail.com>
422
423         [BigInt] Add ValueSub into DFG
424         https://bugs.webkit.org/show_bug.cgi?id=186176
425
426         Reviewed by Yusuke Suzuki.
427
428         * stress/big-int-subtraction-jit.js:
429         * stress/value-sub-big-int-prediction-propagation.js: Added.
430         * stress/value-sub-big-int-untyped.js: Added.
431
432 2018-10-16  Dominik Infuehr  <dinfuehr@igalia.com>
433
434         [JSC] stress/array-prototype-concat-of-long-spliced-arrays2.js times out on arm and mips
435         https://bugs.webkit.org/show_bug.cgi?id=190611
436
437         Reviewed by Saam Barati.
438
439         Reduce array length just like in array-prototype-concat-of-long-spliced-arrays.js
440         to improve test runtime. On ARM/MIPS this test even timed out when running all
441         tests.
442
443         * stress/array-prototype-concat-of-long-spliced-arrays2.js:
444         (test):
445
446 2018-10-15  Guillaume Emont  <guijemont@igalia.com>
447
448         Skip stress/array-prototype-concat-of-long-spliced-arrays2.js on arm and mips/linux
449
450         Unreviewed gardening.
451
452         * stress/array-prototype-concat-of-long-spliced-arrays2.js:
453
454 2018-10-15  Saam barati  <sbarati@apple.com>
455
456         Emit fjcvtzs on ARM64E on Darwin
457         https://bugs.webkit.org/show_bug.cgi?id=184023
458
459         Reviewed by Yusuke Suzuki and Filip Pizlo.
460
461         * stress/double-to-int32-NaN.js: Added.
462         (assert):
463         (foo):
464
465 2018-10-15  Saam Barati  <sbarati@apple.com>
466
467         JSArray::shiftCountWithArrayStorage is wrong when an array has holes
468         https://bugs.webkit.org/show_bug.cgi?id=190262
469         <rdar://problem/44986241>
470
471         Reviewed by Mark Lam.
472
473         * stress/array-prototype-concat-of-long-spliced-arrays.js:
474         (test):
475         * stress/slice-array-storage-with-holes.js: Added.
476         (main):
477
478 2018-10-15  Commit Queue  <commit-queue@webkit.org>
479
480         Unreviewed, rolling out r237054.
481         https://bugs.webkit.org/show_bug.cgi?id=190593
482
483         "this regressed JetStream 2 by 6% on iOS" (Requested by
484         saamyjoon on #webkit).
485
486         Reverted changeset:
487
488         "[JSC] JSC should have "parseFunction" to optimize Function
489         constructor"
490         https://bugs.webkit.org/show_bug.cgi?id=190340
491         https://trac.webkit.org/changeset/237054
492
493 2018-10-13  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
494
495         [JSC] JSON.stringify can accept call-with-no-arguments
496         https://bugs.webkit.org/show_bug.cgi?id=190343
497
498         Reviewed by Mark Lam.
499
500         * stress/json-stringify-no-arguments.js: Added.
501         (shouldBe):
502
503 2018-10-08  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
504
505         [JSC] JSC should have "parseFunction" to optimize Function constructor
506         https://bugs.webkit.org/show_bug.cgi?id=190340
507
508         Reviewed by Mark Lam.
509
510         This patch fixes the line number of syntax errors raised by the Function constructor,
511         since we now parse the final code only once. And we no longer use block statement
512         for Function constructor's parsing.
513
514         * ChakraCore/test/Function/FuncBodyES5.baseline-jsc:
515         * stress/function-cache-with-parameters-end-position.js: Added.
516         (shouldBe):
517         (shouldThrow):
518         (i.anonymous):
519         * stress/function-constructor-name.js: Added.
520         (shouldBe):
521         (GeneratorFunction):
522         (AsyncFunction.async):
523         (AsyncGeneratorFunction.async):
524         (anonymous):
525         (async.anonymous):
526         * test262/expectations.yaml:
527
528 2018-10-10  Guillaume Emont  <guijemont@igalia.com>
529
530         Skip JSC test stress/sampling-profiler-richards.js on armv7/linux
531         https://bugs.webkit.org/show_bug.cgi?id=190426
532
533         Unreviewed gardening.
534
535         * stress/sampling-profiler-richards.js:
536
537 2018-10-06  Caio Lima  <ticaiolima@gmail.com>
538
539         [ESNext][BigInt] Implement support for "|"
540         https://bugs.webkit.org/show_bug.cgi?id=186229
541
542         Reviewed by Yusuke Suzuki.
543
544         * stress/big-int-bitwise-and-jit.js:
545         * stress/big-int-bitwise-or-general.js: Added.
546         * stress/big-int-bitwise-or-jit-untyped.js: Added.
547         * stress/big-int-bitwise-or-jit.js: Added.
548         * stress/big-int-bitwise-or-memory-stress.js: Added.
549         * stress/big-int-bitwise-or-to-primitive-precedence.js: Added.
550         * stress/big-int-bitwise-or-type-error.js: Added.
551         * stress/big-int-bitwise-or-wrapped-value.js: Added.
552
553 2018-10-05  Dominik Infuehr  <dominik.infuehr@gmail.com>
554
555         Skip test on systems with limited memory
556         https://bugs.webkit.org/show_bug.cgi?id=190310
557
558         Invoking runDefault adds test to runlist, skipping the test in the next
559         line does not prevent the test from executing. Change order of lines such
560         that runDefault is only executed if test is not executed.
561
562         Reviewed by Mark Lam.
563
564         * stress/regress-190187.js:
565
566 2018-10-03  Saam barati  <sbarati@apple.com>
567
568         lowXYZ in FTLLower should always filter the type of the incoming edge
569         https://bugs.webkit.org/show_bug.cgi?id=189939
570         <rdar://problem/44407030>
571
572         Reviewed by Michael Saboff.
573
574         * stress/ftl-should-always-filter-for-low-type-check-functions.js: Added.
575         (foo):
576         (test):
577
578 2018-10-03  Mark Lam  <mark.lam@apple.com>
579
580         Make string MaxLength for all WTF and JS strings consistently equal to INT_MAX.
581         https://bugs.webkit.org/show_bug.cgi?id=190187
582         <rdar://problem/42512909>
583
584         Reviewed by Michael Saboff.
585
586         * stress/regress-190187.js: Added.
587
588 2018-10-02  Caio Lima  <ticaiolima@gmail.com>
589
590         [BigInt] BigInt.proptotype.toString is broken when radix is power of 2
591         https://bugs.webkit.org/show_bug.cgi?id=190033
592
593         Reviewed by Yusuke Suzuki.
594
595         * stress/big-int-to-string.js:
596
597 2018-10-01  Mark Lam  <mark.lam@apple.com>
598
599         Function.toString() should also copy the source code Functions that are class definitions.
600         https://bugs.webkit.org/show_bug.cgi?id=190186
601         <rdar://problem/44733360>
602
603         Reviewed by Saam Barati.
604
605         * stress/regress-190186.js: Added.
606
607 2018-10-01  Dominik Infuehr  <dinfuehr@igalia.com>
608
609         Split NaN-check into separate test
610         https://bugs.webkit.org/show_bug.cgi?id=190010
611
612         Reviewed by Saam Barati.
613
614         DataView exposes NaN-representation, which is not necessarily the same on each
615         architecture. Therefore move the check of the NaN-representation into its own
616         file such that we can disable this test on MIPS where NaN-representation can be
617         different on older CPUs.
618
619         * stress/dataview-jit-set-nan.js: Added.
620         (assert):
621         (test.storeLittleEndian):
622         (test.storeBigEndian):
623         (test.store):
624         (test):
625         * stress/dataview-jit-set.js:
626         (test5):
627
628 2018-10-01  Commit Queue  <commit-queue@webkit.org>
629
630         Unreviewed, rolling out r236647.
631         https://bugs.webkit.org/show_bug.cgi?id=190124
632
633         Breaking test stress/big-int-to-string.js (Requested by
634         caiolima_ on #webkit).
635
636         Reverted changeset:
637
638         "[BigInt] BigInt.proptotype.toString is broken when radix is
639         power of 2"
640         https://bugs.webkit.org/show_bug.cgi?id=190033
641         https://trac.webkit.org/changeset/236647
642
643 2018-09-30  Caio Lima  <ticaiolima@gmail.com>
644
645         [BigInt] BigInt.proptotype.toString is broken when radix is power of 2
646         https://bugs.webkit.org/show_bug.cgi?id=190033
647
648         Reviewed by Yusuke Suzuki.
649
650         * stress/big-int-to-string.js:
651
652 2018-09-28  Caio Lima  <ticaiolima@gmail.com>
653
654         [ESNext][BigInt] Implement support for "&"
655         https://bugs.webkit.org/show_bug.cgi?id=186228
656
657         Reviewed by Yusuke Suzuki.
658
659         * stress/big-int-bitwise-and-general.js: Added.
660         (assert):
661         (assert.sameValue):
662         * stress/big-int-bitwise-and-jit.js: Added.
663         (let.assert.sameValue):
664         (bigIntBitAnd):
665         * stress/big-int-bitwise-and-memory-stress.js: Added.
666         (assert):
667         * stress/big-int-bitwise-and-to-primitive-precedence.js: Added.
668         (assert.sameValue):
669         (let.o.Symbol.toPrimitive):
670         (catch):
671         * stress/big-int-bitwise-and-type-error.js: Added.
672         (assert):
673         (assertThrowTypeError):
674         (let.o.valueOf):
675         (o.valueOf):
676         (o.toString):
677         (o.Symbol.toPrimitive):
678         * stress/big-int-bitwise-and-wrapped-value.js: Added.
679         (assert.sameValue):
680         (testBitAnd):
681         (let.o.Symbol.toPrimitive):
682         (o.valueOf):
683         (o.toString):
684
685 2018-09-28  Ross Kirsling  <ross.kirsling@sony.com>
686
687         JSC test stress/jsc-read.js doesn't support CRLF
688         https://bugs.webkit.org/show_bug.cgi?id=190063
689
690         Reviewed by Yusuke Suzuki.
691
692         In order to run this test via Windows command prompt, we can't assume that the final newline will be LF.
693
694         * stress/jsc-read.js:
695         (test):
696
697 2018-09-27  Saam barati  <sbarati@apple.com>
698
699         Verify the contents of AssemblerBuffer on arm64e
700         https://bugs.webkit.org/show_bug.cgi?id=190057
701         <rdar://problem/38916630>
702
703         Reviewed by Mark Lam.
704
705         * stress/regress-189132.js:
706
707 2018-09-27  Dominik Infuehr  <dinfuehr@igalia.com>
708
709         Disable test without LLInt on ARMv7
710         https://bugs.webkit.org/show_bug.cgi?id=190037
711
712         Reviewed by Mark Lam.
713
714         Test runs out of executable memory on ARMv7, do not run
715         this test without LLInt enabled.
716
717         * stress/regress-169445.js:
718
719 2018-09-26  Keith Miller  <keith_miller@apple.com>
720
721         We should zero unused property storage when rebalancing array storage.
722         https://bugs.webkit.org/show_bug.cgi?id=188151
723
724         Reviewed by Michael Saboff.
725
726         * stress/splice-should-zero-property-storage-when-rebalancing.js: Added.
727
728 2018-09-20  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
729
730         [JSC] Optimize Array#lastIndexOf
731         https://bugs.webkit.org/show_bug.cgi?id=189780
732
733         Reviewed by Saam Barati.
734
735         * stress/array-lastindexof-array-prototype-trap.js: Added.
736         (shouldBe):
737         (AncestorArray.prototype.get 2):
738         (AncestorArray):
739         * stress/array-lastindexof-have-a-bad-time-c-runtime.js: Added.
740         (shouldBe):
741         * stress/array-lastindexof-hole-nan.js: Added.
742         (shouldBe):
743         (throw.new.Error):
744         * stress/array-lastindexof-infinity.js: Added.
745         (shouldBe):
746         (throw.new.Error):
747         * stress/array-lastindexof-negative-zero.js: Added.
748         (shouldBe):
749         (throw.new.Error):
750         * stress/array-lastindexof-own-getter.js: Added.
751         (shouldBe):
752         (throw.new.Error.get array):
753         (get array):
754         * stress/array-lastindexof-prototype-trap.js: Added.
755         (shouldBe):
756         (DerivedArray.prototype.get 2):
757         (DerivedArray):
758
759 2018-09-25  Saam Barati  <sbarati@apple.com>
760
761         Calls to baselineCodeBlockForOriginAndBaselineCodeBlock in operationMaterializeObjectInOSR should actually pass in the baseline CodeBlock
762         https://bugs.webkit.org/show_bug.cgi?id=189940
763         <rdar://problem/43640987>
764
765         Reviewed by Mark Lam.
766
767         * stress/use-baseline-codeblock-materialize-osr-exit.js: Added.
768
769 2018-09-24  Saam Barati  <sbarati@apple.com>
770
771         Array.prototype.indexOf fast path needs to ensure the length is still valid after performing effects
772         https://bugs.webkit.org/show_bug.cgi?id=189922
773         <rdar://problem/44651275>
774
775         Reviewed by Mark Lam.
776
777         * stress/array-indexof-fast-path-effects.js: Added.
778         * stress/array-indexof-cached-length.js: Added.
779
780 2018-09-24  Saam barati  <sbarati@apple.com>
781
782         ArgumentsEliminationPhase should snip basic blocks after proven OSR exits
783         https://bugs.webkit.org/show_bug.cgi?id=189682
784         <rdar://problem/43557315>
785
786         Reviewed by Mark Lam.
787
788         * stress/arguments-elimination-will-generate-edge-without-result.js: Added.
789         (foo):
790
791 2018-09-22  Saam barati  <sbarati@apple.com>
792
793         The sampling should not use Strong<CodeBlock> in its machineLocation field
794         https://bugs.webkit.org/show_bug.cgi?id=189319
795
796         Reviewed by Filip Pizlo.
797
798         * stress/sampling-profiler-richards.js: Added.
799
800 2018-09-19  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
801
802         [JSC] Optimize Array#indexOf in C++ runtime
803         https://bugs.webkit.org/show_bug.cgi?id=189507
804
805         Reviewed by Saam Barati.
806
807         * stress/array-indexof-array-prototype-trap.js: Added.
808         (shouldBe):
809         (AncestorArray.prototype.get 2):
810         (AncestorArray):
811         * stress/array-indexof-have-a-bad-time-c-runtime.js: Added.
812         (shouldBe):
813         * stress/array-indexof-hole-nan.js: Added.
814         (shouldBe):
815         (throw.new.Error):
816         * stress/array-indexof-infinity.js: Added.
817         (shouldBe):
818         (throw.new.Error):
819         * stress/array-indexof-negative-zero.js: Added.
820         (shouldBe):
821         (throw.new.Error):
822         * stress/array-indexof-own-getter.js: Added.
823         (shouldBe):
824         (throw.new.Error.get array):
825         (get array):
826         * stress/array-indexof-prototype-trap.js: Added.
827         (shouldBe):
828         (DerivedArray.prototype.get 2):
829         (DerivedArray):
830
831 2018-09-19  Saam barati  <sbarati@apple.com>
832
833         AI rule for MultiPutByOffset executes its effects in the wrong order
834         https://bugs.webkit.org/show_bug.cgi?id=189757
835         <rdar://problem/43535257>
836
837         Reviewed by Michael Saboff.
838
839         * stress/multi-put-by-offset-must-filter-value-before-filtering-base.js: Added.
840         (foo):
841         (Foo):
842         (g):
843
844 2018-09-17  Mark Lam  <mark.lam@apple.com>
845
846         Ensure that ForInContexts are invalidated if their loop local is over-written.
847         https://bugs.webkit.org/show_bug.cgi?id=189571
848         <rdar://problem/44402277>
849
850         Reviewed by Saam Barati.
851
852         * stress/regress-189571.js: Added.
853
854 2018-09-17  Saam barati  <sbarati@apple.com>
855
856         We must convert ProfileType to CheckStructureOrEmpty instead of CheckStructure
857         https://bugs.webkit.org/show_bug.cgi?id=189676
858         <rdar://problem/39682897>
859
860         Reviewed by Michael Saboff.
861
862         * typeProfiler/check-structure-or-empty-in-fixup.js: Added.
863         (A):
864         (K):
865         (i.catch):
866
867 2018-09-14  Saam barati  <sbarati@apple.com>
868
869         Don't dump OSRAvailabilityData in Graph::dump because a stale Availability may point to a Node that is already freed
870         https://bugs.webkit.org/show_bug.cgi?id=189628
871         <rdar://problem/39481690>
872
873         Reviewed by Mark Lam.
874
875         * stress/verbose-failure-dont-graph-dump-availability-already-freed.js: Added.
876         (foo):
877
878 2018-09-11  Mark Lam  <mark.lam@apple.com>
879
880         Test for array initialization in arrayProtoFuncSplice.
881         https://bugs.webkit.org/show_bug.cgi?id=170253
882         <rdar://problem/31328773>
883
884         Rubber-stamped by Saam Barati.
885
886         * stress/regress-170253.js: Added.
887
888 2018-09-11  Mark Lam  <mark.lam@apple.com>
889
890         Test for IntlObject initialization.
891         https://bugs.webkit.org/show_bug.cgi?id=170251
892         <rdar://problem/31328419>
893
894         Rubber-stamped by Saam Barati.
895
896         * stress/regress-170251.js: Added.
897
898 2018-09-11  Mark Lam  <mark.lam@apple.com>
899
900         Test for array memcpy'ing when JSGlobalObject::haveABadTime.
901         https://bugs.webkit.org/show_bug.cgi?id=169889
902         <rdar://problem/31155607>
903
904         Reviewed by Saam Barati.
905
906         * stress/regress-169889-array-concat.js: Added.
907         * stress/regress-169889-array-concat1.js: Added.
908         * stress/regress-169889-array-slice.js: Added.
909
910 2018-09-11  Mark Lam  <mark.lam@apple.com>
911
912         Test for incorrect check in emitPutDerivedConstructorToArrowFunctionContextScope.
913         https://bugs.webkit.org/show_bug.cgi?id=169445
914         <rdar://problem/30957435>
915
916         Reviewed by Saam Barati.
917
918         * stress/regress-169445.js: Added.
919         (let.gun.eval.A):
920         (let.gun.eval.B.C):
921         (let.gun.eval.B.C.prototype.trigger):
922         (let.gun.eval.B.C.prototype.triggerWithRestParameters):
923         (let.gun.eval.B):
924         (let.gun.eval):
925
926 == Rolled over to ChangeLog-2018-09-11 ==