358a6b0a757cb99f98a881e7d873399d897468b2: Catch negative indexes at recording time. At runtime the builtins already check for us. Also guard for shape and setters/getters for non-dense integer index setelem case (57580, r=mrbkap).
Andreas Gal <gal@mozilla.com> - Sun, 28 Sep 2008 17:11:47 -0700 - rev 20000
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Catch negative indexes at recording time. At runtime the builtins already check for us. Also guard for shape and setters/getters for non-dense integer index setelem case (57580, r=mrbkap).
bd6c14287863e19f2b5da0be29b088b8c2e79ee5: Add test case for 457456.
Andreas Gal <gal@mozilla.com> - Sat, 27 Sep 2008 13:13:42 -0700 - rev 19999
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Add test case for 457456.
d2e1766c65b20c14f12263573f52356d76c5a903: Fix constant folding for cmov and add folding of or/and/xor (457456, r=danderson).
Andreas Gal <gal@mozilla.com> - Sat, 27 Sep 2008 13:10:24 -0700 - rev 19998
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Fix constant folding for cmov and add folding of or/and/xor (457456, r=danderson).
085c70527b41d7e3e675777afc4006cedc7d2e4c: Properly handle cmov and sse2 flags, and put them in a central place not into each platform-dependant assembler (457355, r=danderson).
Andreas Gal <gal@mozilla.com> - Fri, 26 Sep 2008 20:39:21 -0700 - rev 19997
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Properly handle cmov and sse2 flags, and put them in a central place not into each platform-dependant assembler (457355, r=danderson).
de17fecafd161469bbb7bb904d003c82cc5b433f: Merge.
Andreas Gal <gal@mozilla.com> - Fri, 26 Sep 2008 19:21:27 -0700 - rev 19996
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Merge.
3bdea835df9ce1a54404fb2cabf09a9272cf835e: Can't use JSVAL_IS_BOOLEAN on trace since boolean type contains undefined (457351, r=brendan).
Andreas Gal <gal@mozilla.com> - Fri, 26 Sep 2008 19:20:52 -0700 - rev 19995
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Can't use JSVAL_IS_BOOLEAN on trace since boolean type contains undefined (457351, r=brendan).
af4d2ab298e07b9f66bc8566308c799d904fc37e: Fixed a bug where no shape guard was emitted if a property was not found, causing it to remain unseen if added later. Abort in this case instead. (bug 457171, r=brendan)
David Anderson <danderson@mozilla.com> - Fri, 26 Sep 2008 19:18:00 -0700 - rev 19994
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Fixed a bug where no shape guard was emitted if a property was not found, causing it to remain unseen if added later. Abort in this case instead. (bug 457171, r=brendan)
cfa7088079dadada0940c005d2b1b761304df089: Cleanup SETELEM, box early (in case we side exit on that) and don't set return value if INITELEM or followed by POP (457336, r=brendan).
Andreas Gal <gal@mozilla.com> - Fri, 26 Sep 2008 17:33:40 -0700 - rev 19993
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Cleanup SETELEM, box early (in case we side exit on that) and don't set return value if INITELEM or followed by POP (457336, r=brendan).
7b29d221e3564ab124c7104437c56b9e56fe1a3f: Merge.
Andreas Gal <gal@mozilla.com> - Fri, 26 Sep 2008 14:16:25 -0700 - rev 19992
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Merge.
b44f455eae52038e84d96ed1ce1ecdecf40986f1: When replenishing the recovery double pool, detect if a GC happens (follow up work for 456826, r=gal).
igor - Fri, 26 Sep 2008 14:16:11 -0700 - rev 19991
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
When replenishing the recovery double pool, detect if a GC happens (follow up work for 456826, r=gal).
b8dcfe8b5efba925ad209faeebc7b49a941ea76a: Bug 456165 part 2. Trace Date.now. r=gal
Boris Zbarsky <bzbarsky@mit.edu> - Fri, 26 Sep 2008 14:37:50 -0400 - rev 19990
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Bug 456165 part 2. Trace Date.now. r=gal
3a02053b2cffd0c06000bcebf3e12ba35be1ac26: Bug 456370. Flush the fragment cache earlier on global shape mismatch. r=gal
Boris Zbarsky <bzbarsky@mit.edu> - Fri, 26 Sep 2008 14:37:49 -0400 - rev 19989
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Bug 456370. Flush the fragment cache earlier on global shape mismatch. r=gal
ea5a7136bce2e8d4fd41f99358e7233a0ffc65ea: Bug 456165 part 1. Get rid of icky JS_LL macros, r=brendan
Boris Zbarsky <bzbarsky@mit.edu> - Fri, 26 Sep 2008 14:08:28 -0400 - rev 19988
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Bug 456165 part 1. Get rid of icky JS_LL macros, r=brendan
ca0b904b4b26c2ab19938d6cca3725751ce33909: Use a pre-allocated pool of doubles to make sure we can safely recover in case of OOM or out of doubles (456826, r=brendan).
Andreas Gal <gal@mozilla.com> - Thu, 25 Sep 2008 19:11:48 -0700 - rev 19987
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Use a pre-allocated pool of doubles to make sure we can safely recover in case of OOM or out of doubles (456826, r=brendan).
cacf236a16630f58fef0a9f7bcad8d40e17bea51: Bug 457130 - TM: regexp lastIndex property not traced correctly (r=danderson).
Brendan Eich <brendan@mozilla.org> - Thu, 25 Sep 2008 17:45:14 -0700 - rev 19986
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Bug 457130 - TM: regexp lastIndex property not traced correctly (r=danderson).
766dcca2a93056376aea2206ff5b867d557776eb: Workaround for intermittent js_GetClassObject failures (bug 457069, r=brendan).
David Anderson <danderson@mozilla.com> - Thu, 25 Sep 2008 17:30:01 -0700 - rev 19985
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Workaround for intermittent js_GetClassObject failures (bug 457069, r=brendan).
a47422194ffbd6ec4c7fdb8d545830c160ca39f2: Bug 457127 - TM: Crash on digg.com with adblock plus [@ ReconstructPCStack] (r=danderson).
Brendan Eich <brendan@mozilla.org> - Thu, 25 Sep 2008 17:05:06 -0700 - rev 19984
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Bug 457127 - TM: Crash on digg.com with adblock plus [@ ReconstructPCStack] (r=danderson).
308e7e1eb1cf76567939a51089a02ef602a2f37f: Bug 456810 - TM: Crash on digg.com with adblock plus [@ ReconstructPCStack] (r=gal).
Brendan Eich <brendan@mozilla.org> - Thu, 25 Sep 2008 15:04:48 -0700 - rev 19983
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Bug 456810 - TM: Crash on digg.com with adblock plus [@ ReconstructPCStack] (r=gal).
da80ff92f1fad5f9186cf1269cf0edb6f5a5d640: Added test case for bug 456667.
David Anderson <danderson@mozilla.com> - Thu, 25 Sep 2008 14:16:24 -0700 - rev 19982
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Added test case for bug 456667.
437331f166fe9f8070fc5e54cd273933195083c6: Fixed argc < nargs miscount in js_SynthesizeFrame and adjusted a related assertion (bug 456667, r=danderson).
Brendan Eich <brendan@mozilla.org> - Thu, 25 Sep 2008 13:12:01 -0700 - rev 19981
Push 2577 by brendan@mozilla.com at Wed, 01 Oct 2008 04:35:27 +0000
Fixed argc < nargs miscount in js_SynthesizeFrame and adjusted a related assertion (bug 456667, r=danderson).
(0) -10000 -3000 -1000 -300 -100 -50 -20 +20 +50 +100 +300 +1000 +3000 +10000 +30000 +100000 +300000 tip