Calls to baselineCodeBlockForOriginAndBaselineCodeBlock in operationMaterializeObject...
[WebKit-https.git] / JSTests / ChangeLog
1 2018-09-25  Saam Barati  <sbarati@apple.com>
2
3         Calls to baselineCodeBlockForOriginAndBaselineCodeBlock in operationMaterializeObjectInOSR should actually pass in the baseline CodeBlock
4         https://bugs.webkit.org/show_bug.cgi?id=189940
5         <rdar://problem/43640987>
6
7         Reviewed by Mark Lam.
8
9         * stress/use-baseline-codeblock-materialize-osr-exit.js: Added.
10
11 2018-09-24  Saam Barati  <sbarati@apple.com>
12
13         Array.prototype.indexOf fast path needs to ensure the length is still valid after performing effects
14         https://bugs.webkit.org/show_bug.cgi?id=189922
15         <rdar://problem/44651275>
16
17         Reviewed by Mark Lam.
18
19         * stress/array-indexof-fast-path-effects.js: Added.
20         * stress/array-indexof-cached-length.js: Added.
21
22 2018-09-24  Saam barati  <sbarati@apple.com>
23
24         ArgumentsEliminationPhase should snip basic blocks after proven OSR exits
25         https://bugs.webkit.org/show_bug.cgi?id=189682
26         <rdar://problem/43557315>
27
28         Reviewed by Mark Lam.
29
30         * stress/arguments-elimination-will-generate-edge-without-result.js: Added.
31         (foo):
32
33 2018-09-22  Saam barati  <sbarati@apple.com>
34
35         The sampling should not use Strong<CodeBlock> in its machineLocation field
36         https://bugs.webkit.org/show_bug.cgi?id=189319
37
38         Reviewed by Filip Pizlo.
39
40         * stress/sampling-profiler-richards.js: Added.
41
42 2018-09-19  Yusuke Suzuki  <yusukesuzuki@slowstart.org>
43
44         [JSC] Optimize Array#indexOf in C++ runtime
45         https://bugs.webkit.org/show_bug.cgi?id=189507
46
47         Reviewed by Saam Barati.
48
49         * stress/array-indexof-array-prototype-trap.js: Added.
50         (shouldBe):
51         (AncestorArray.prototype.get 2):
52         (AncestorArray):
53         * stress/array-indexof-have-a-bad-time-c-runtime.js: Added.
54         (shouldBe):
55         * stress/array-indexof-hole-nan.js: Added.
56         (shouldBe):
57         (throw.new.Error):
58         * stress/array-indexof-infinity.js: Added.
59         (shouldBe):
60         (throw.new.Error):
61         * stress/array-indexof-negative-zero.js: Added.
62         (shouldBe):
63         (throw.new.Error):
64         * stress/array-indexof-own-getter.js: Added.
65         (shouldBe):
66         (throw.new.Error.get array):
67         (get array):
68         * stress/array-indexof-prototype-trap.js: Added.
69         (shouldBe):
70         (DerivedArray.prototype.get 2):
71         (DerivedArray):
72
73 2018-09-19  Saam barati  <sbarati@apple.com>
74
75         AI rule for MultiPutByOffset executes its effects in the wrong order
76         https://bugs.webkit.org/show_bug.cgi?id=189757
77         <rdar://problem/43535257>
78
79         Reviewed by Michael Saboff.
80
81         * stress/multi-put-by-offset-must-filter-value-before-filtering-base.js: Added.
82         (foo):
83         (Foo):
84         (g):
85
86 2018-09-17  Mark Lam  <mark.lam@apple.com>
87
88         Ensure that ForInContexts are invalidated if their loop local is over-written.
89         https://bugs.webkit.org/show_bug.cgi?id=189571
90         <rdar://problem/44402277>
91
92         Reviewed by Saam Barati.
93
94         * stress/regress-189571.js: Added.
95
96 2018-09-17  Saam barati  <sbarati@apple.com>
97
98         We must convert ProfileType to CheckStructureOrEmpty instead of CheckStructure
99         https://bugs.webkit.org/show_bug.cgi?id=189676
100         <rdar://problem/39682897>
101
102         Reviewed by Michael Saboff.
103
104         * typeProfiler/check-structure-or-empty-in-fixup.js: Added.
105         (A):
106         (K):
107         (i.catch):
108
109 2018-09-14  Saam barati  <sbarati@apple.com>
110
111         Don't dump OSRAvailabilityData in Graph::dump because a stale Availability may point to a Node that is already freed
112         https://bugs.webkit.org/show_bug.cgi?id=189628
113         <rdar://problem/39481690>
114
115         Reviewed by Mark Lam.
116
117         * stress/verbose-failure-dont-graph-dump-availability-already-freed.js: Added.
118         (foo):
119
120 2018-09-11  Mark Lam  <mark.lam@apple.com>
121
122         Test for array initialization in arrayProtoFuncSplice.
123         https://bugs.webkit.org/show_bug.cgi?id=170253
124         <rdar://problem/31328773>
125
126         Rubber-stamped by Saam Barati.
127
128         * stress/regress-170253.js: Added.
129
130 2018-09-11  Mark Lam  <mark.lam@apple.com>
131
132         Test for IntlObject initialization.
133         https://bugs.webkit.org/show_bug.cgi?id=170251
134         <rdar://problem/31328419>
135
136         Rubber-stamped by Saam Barati.
137
138         * stress/regress-170251.js: Added.
139
140 2018-09-11  Mark Lam  <mark.lam@apple.com>
141
142         Test for array memcpy'ing when JSGlobalObject::haveABadTime.
143         https://bugs.webkit.org/show_bug.cgi?id=169889
144         <rdar://problem/31155607>
145
146         Reviewed by Saam Barati.
147
148         * stress/regress-169889-array-concat.js: Added.
149         * stress/regress-169889-array-concat1.js: Added.
150         * stress/regress-169889-array-slice.js: Added.
151
152 2018-09-11  Mark Lam  <mark.lam@apple.com>
153
154         Test for incorrect check in emitPutDerivedConstructorToArrowFunctionContextScope.
155         https://bugs.webkit.org/show_bug.cgi?id=169445
156         <rdar://problem/30957435>
157
158         Reviewed by Saam Barati.
159
160         * stress/regress-169445.js: Added.
161         (let.gun.eval.A):
162         (let.gun.eval.B.C):
163         (let.gun.eval.B.C.prototype.trigger):
164         (let.gun.eval.B.C.prototype.triggerWithRestParameters):
165         (let.gun.eval.B):
166         (let.gun.eval):
167
168 == Rolled over to ChangeLog-2018-09-11 ==