1 2018-09-24 Saam Barati <sbarati@apple.com>
3 Array.prototype.indexOf fast path needs to ensure the length is still valid after performing effects
4 https://bugs.webkit.org/show_bug.cgi?id=189922
5 <rdar://problem/44651275>
9 * stress/array-indexof-fast-path-effects.js: Added.
10 * stress/array-indexof-cached-length.js: Added.
12 2018-09-24 Saam barati <sbarati@apple.com>
14 ArgumentsEliminationPhase should snip basic blocks after proven OSR exits
15 https://bugs.webkit.org/show_bug.cgi?id=189682
16 <rdar://problem/43557315>
20 * stress/arguments-elimination-will-generate-edge-without-result.js: Added.
23 2018-09-22 Saam barati <sbarati@apple.com>
25 The sampling should not use Strong<CodeBlock> in its machineLocation field
26 https://bugs.webkit.org/show_bug.cgi?id=189319
28 Reviewed by Filip Pizlo.
30 * stress/sampling-profiler-richards.js: Added.
32 2018-09-19 Yusuke Suzuki <yusukesuzuki@slowstart.org>
34 [JSC] Optimize Array#indexOf in C++ runtime
35 https://bugs.webkit.org/show_bug.cgi?id=189507
37 Reviewed by Saam Barati.
39 * stress/array-indexof-array-prototype-trap.js: Added.
41 (AncestorArray.prototype.get 2):
43 * stress/array-indexof-have-a-bad-time-c-runtime.js: Added.
45 * stress/array-indexof-hole-nan.js: Added.
48 * stress/array-indexof-infinity.js: Added.
51 * stress/array-indexof-negative-zero.js: Added.
54 * stress/array-indexof-own-getter.js: Added.
56 (throw.new.Error.get array):
58 * stress/array-indexof-prototype-trap.js: Added.
60 (DerivedArray.prototype.get 2):
63 2018-09-19 Saam barati <sbarati@apple.com>
65 AI rule for MultiPutByOffset executes its effects in the wrong order
66 https://bugs.webkit.org/show_bug.cgi?id=189757
67 <rdar://problem/43535257>
69 Reviewed by Michael Saboff.
71 * stress/multi-put-by-offset-must-filter-value-before-filtering-base.js: Added.
76 2018-09-17 Mark Lam <mark.lam@apple.com>
78 Ensure that ForInContexts are invalidated if their loop local is over-written.
79 https://bugs.webkit.org/show_bug.cgi?id=189571
80 <rdar://problem/44402277>
82 Reviewed by Saam Barati.
84 * stress/regress-189571.js: Added.
86 2018-09-17 Saam barati <sbarati@apple.com>
88 We must convert ProfileType to CheckStructureOrEmpty instead of CheckStructure
89 https://bugs.webkit.org/show_bug.cgi?id=189676
90 <rdar://problem/39682897>
92 Reviewed by Michael Saboff.
94 * typeProfiler/check-structure-or-empty-in-fixup.js: Added.
99 2018-09-14 Saam barati <sbarati@apple.com>
101 Don't dump OSRAvailabilityData in Graph::dump because a stale Availability may point to a Node that is already freed
102 https://bugs.webkit.org/show_bug.cgi?id=189628
103 <rdar://problem/39481690>
105 Reviewed by Mark Lam.
107 * stress/verbose-failure-dont-graph-dump-availability-already-freed.js: Added.
110 2018-09-11 Mark Lam <mark.lam@apple.com>
112 Test for array initialization in arrayProtoFuncSplice.
113 https://bugs.webkit.org/show_bug.cgi?id=170253
114 <rdar://problem/31328773>
116 Rubber-stamped by Saam Barati.
118 * stress/regress-170253.js: Added.
120 2018-09-11 Mark Lam <mark.lam@apple.com>
122 Test for IntlObject initialization.
123 https://bugs.webkit.org/show_bug.cgi?id=170251
124 <rdar://problem/31328419>
126 Rubber-stamped by Saam Barati.
128 * stress/regress-170251.js: Added.
130 2018-09-11 Mark Lam <mark.lam@apple.com>
132 Test for array memcpy'ing when JSGlobalObject::haveABadTime.
133 https://bugs.webkit.org/show_bug.cgi?id=169889
134 <rdar://problem/31155607>
136 Reviewed by Saam Barati.
138 * stress/regress-169889-array-concat.js: Added.
139 * stress/regress-169889-array-concat1.js: Added.
140 * stress/regress-169889-array-slice.js: Added.
142 2018-09-11 Mark Lam <mark.lam@apple.com>
144 Test for incorrect check in emitPutDerivedConstructorToArrowFunctionContextScope.
145 https://bugs.webkit.org/show_bug.cgi?id=169445
146 <rdar://problem/30957435>
148 Reviewed by Saam Barati.
150 * stress/regress-169445.js: Added.
153 (let.gun.eval.B.C.prototype.trigger):
154 (let.gun.eval.B.C.prototype.triggerWithRestParameters):
158 == Rolled over to ChangeLog-2018-09-11 ==