Array.prototype.indexOf fast path needs to ensure the length is still valid after...
[WebKit-https.git] / JSTests / ChangeLog
1 2018-09-24  Saam Barati  <sbarati@apple.com>
2
3         Array.prototype.indexOf fast path needs to ensure the length is still valid after performing effects
4         https://bugs.webkit.org/show_bug.cgi?id=189922
5         <rdar://problem/44651275>
6
7         Reviewed by Mark Lam.
8
9         * stress/array-indexof-fast-path-effects.js: Added.
10         * stress/array-indexof-cached-length.js: Added.
11
12 2018-09-24  Saam barati  <sbarati@apple.com>
13
14         ArgumentsEliminationPhase should snip basic blocks after proven OSR exits
15         https://bugs.webkit.org/show_bug.cgi?id=189682
16         <rdar://problem/43557315>
17
18         Reviewed by Mark Lam.
19
20         * stress/arguments-elimination-will-generate-edge-without-result.js: Added.
21         (foo):
22
23 2018-09-22  Saam barati  <sbarati@apple.com>
24
25         The sampling should not use Strong<CodeBlock> in its machineLocation field
26         https://bugs.webkit.org/show_bug.cgi?id=189319
27
28         Reviewed by Filip Pizlo.
29
30         * stress/sampling-profiler-richards.js: Added.
31
32 2018-09-19  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
33
34         [JSC] Optimize Array#indexOf in C++ runtime
35         https://bugs.webkit.org/show_bug.cgi?id=189507
36
37         Reviewed by Saam Barati.
38
39         * stress/array-indexof-array-prototype-trap.js: Added.
40         (shouldBe):
41         (AncestorArray.prototype.get 2):
42         (AncestorArray):
43         * stress/array-indexof-have-a-bad-time-c-runtime.js: Added.
44         (shouldBe):
45         * stress/array-indexof-hole-nan.js: Added.
46         (shouldBe):
47         (throw.new.Error):
48         * stress/array-indexof-infinity.js: Added.
49         (shouldBe):
50         (throw.new.Error):
51         * stress/array-indexof-negative-zero.js: Added.
52         (shouldBe):
53         (throw.new.Error):
54         * stress/array-indexof-own-getter.js: Added.
55         (shouldBe):
56         (throw.new.Error.get array):
57         (get array):
58         * stress/array-indexof-prototype-trap.js: Added.
59         (shouldBe):
60         (DerivedArray.prototype.get 2):
61         (DerivedArray):
62
63 2018-09-19  Saam barati  <sbarati@apple.com>
64
65         AI rule for MultiPutByOffset executes its effects in the wrong order
66         https://bugs.webkit.org/show_bug.cgi?id=189757
67         <rdar://problem/43535257>
68
69         Reviewed by Michael Saboff.
70
71         * stress/multi-put-by-offset-must-filter-value-before-filtering-base.js: Added.
72         (foo):
73         (Foo):
74         (g):
75
76 2018-09-17  Mark Lam  <mark.lam@apple.com>
77
78         Ensure that ForInContexts are invalidated if their loop local is over-written.
79         https://bugs.webkit.org/show_bug.cgi?id=189571
80         <rdar://problem/44402277>
81
82         Reviewed by Saam Barati.
83
84         * stress/regress-189571.js: Added.
85
86 2018-09-17  Saam barati  <sbarati@apple.com>
87
88         We must convert ProfileType to CheckStructureOrEmpty instead of CheckStructure
89         https://bugs.webkit.org/show_bug.cgi?id=189676
90         <rdar://problem/39682897>
91
92         Reviewed by Michael Saboff.
93
94         * typeProfiler/check-structure-or-empty-in-fixup.js: Added.
95         (A):
96         (K):
97         (i.catch):
98
99 2018-09-14  Saam barati  <sbarati@apple.com>
100
101         Don't dump OSRAvailabilityData in Graph::dump because a stale Availability may point to a Node that is already freed
102         https://bugs.webkit.org/show_bug.cgi?id=189628
103         <rdar://problem/39481690>
104
105         Reviewed by Mark Lam.
106
107         * stress/verbose-failure-dont-graph-dump-availability-already-freed.js: Added.
108         (foo):
109
110 2018-09-11  Mark Lam  <mark.lam@apple.com>
111
112         Test for array initialization in arrayProtoFuncSplice.
113         https://bugs.webkit.org/show_bug.cgi?id=170253
114         <rdar://problem/31328773>
115
116         Rubber-stamped by Saam Barati.
117
118         * stress/regress-170253.js: Added.
119
120 2018-09-11  Mark Lam  <mark.lam@apple.com>
121
122         Test for IntlObject initialization.
123         https://bugs.webkit.org/show_bug.cgi?id=170251
124         <rdar://problem/31328419>
125
126         Rubber-stamped by Saam Barati.
127
128         * stress/regress-170251.js: Added.
129
130 2018-09-11  Mark Lam  <mark.lam@apple.com>
131
132         Test for array memcpy'ing when JSGlobalObject::haveABadTime.
133         https://bugs.webkit.org/show_bug.cgi?id=169889
134         <rdar://problem/31155607>
135
136         Reviewed by Saam Barati.
137
138         * stress/regress-169889-array-concat.js: Added.
139         * stress/regress-169889-array-concat1.js: Added.
140         * stress/regress-169889-array-slice.js: Added.
141
142 2018-09-11  Mark Lam  <mark.lam@apple.com>
143
144         Test for incorrect check in emitPutDerivedConstructorToArrowFunctionContextScope.
145         https://bugs.webkit.org/show_bug.cgi?id=169445
146         <rdar://problem/30957435>
147
148         Reviewed by Saam Barati.
149
150         * stress/regress-169445.js: Added.
151         (let.gun.eval.A):
152         (let.gun.eval.B.C):
153         (let.gun.eval.B.C.prototype.trigger):
154         (let.gun.eval.B.C.prototype.triggerWithRestParameters):
155         (let.gun.eval.B):
156         (let.gun.eval):
157
158 == Rolled over to ChangeLog-2018-09-11 ==