f9ece777368eedfcb0bdfa0a5680e968def8a319: Merge inbound to m-c.
Ryan VanderMeulen <ryanvm@gmail.com> - Mon, 25 Feb 2013 21:27:56 -0500 - rev 122953
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Merge inbound to m-c.
67541ee4c5a43c64974c8bb36a7eb3e1768ba132: Backed out changeset 71a93fff7311 (bug 840360) for B2G reftest/crashtest bustage on a CLOSED TREE.
Ryan VanderMeulen <ryanvm@gmail.com> - Mon, 25 Feb 2013 19:49:19 -0500 - rev 122952
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Backed out changeset 71a93fff7311 (bug 840360) for B2G reftest/crashtest bustage on a CLOSED TREE.
0a5e95d8db0226559a7b9e8f50c4efa6f886e648: Backed out changeset ea8134dfa481 (bug 843619) for robocop failures.
Ryan VanderMeulen <ryanvm@gmail.com> - Mon, 25 Feb 2013 18:21:08 -0500 - rev 122951
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Backed out changeset ea8134dfa481 (bug 843619) for robocop failures.
74ad7a9937dce57e196406d6e94336c427c98586: Bug 841530 - Tweaks to fit JIT inspector after the decompilerectomy, r=pierron.
Brian Hackett <bhackett1024@gmail.com> - Mon, 25 Feb 2013 15:31:49 -0700 - rev 122950
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 841530 - Tweaks to fit JIT inspector after the decompilerectomy, r=pierron.
62243742ec7637beba092ad93c2af0b741169777: Bug 844169 - Part 1: Rename nsHTMLIFrameElement to mozilla::dom::HTMLIFrameElement; r=bzbarsky
Ehsan Akhgari <ehsan@mozilla.com> - Fri, 22 Feb 2013 19:59:26 -0500 - rev 122949
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 844169 - Part 1: Rename nsHTMLIFrameElement to mozilla::dom::HTMLIFrameElement; r=bzbarsky
72ede8c87fed30b4fdb9307cd5aee55d26e6440f: Bug 780474 - Disable the struct/class mismatch warning on MSVC as well; r=glandium
Ehsan Akhgari <ehsan@mozilla.com> - Mon, 25 Feb 2013 12:10:41 -0500 - rev 122948
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 780474 - Disable the struct/class mismatch warning on MSVC as well; r=glandium
e6f94804e6a7702a3068df1b546e09bbfb82fbf5: Bug 844482 - Watch for OOM disabling TI under CreateThisForFunction, r=dvander.
Brian Hackett <bhackett1024@gmail.com> - Mon, 25 Feb 2013 15:21:13 -0700 - rev 122947
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 844482 - Watch for OOM disabling TI under CreateThisForFunction, r=dvander.
0f9bcf85f0b7394aec83309352668864eb861b35: Bug 844364 - Fix bogus assertion, inverted test when compiling JSOP_EVAL, r=jandem.
Brian Hackett <bhackett1024@gmail.com> - Mon, 25 Feb 2013 15:17:12 -0700 - rev 122946
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 844364 - Fix bogus assertion, inverted test when compiling JSOP_EVAL, r=jandem.
dba451863c29a51cb820b4e7ec22f645f34fa325: Bug 843888 - Reduce LayerView overdraw by removing the background. r=sriram
Kartikaya Gupta <kgupta@mozilla.com> - Mon, 25 Feb 2013 17:11:02 -0500 - rev 122945
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 843888 - Reduce LayerView overdraw by removing the background. r=sriram
c6ab568916625b010640faf801d6915327f01cb6: Bug 845008 - Metro's save file picker always throws on appendFilter. r=tabraldes
Brian R. Bondy <netzen@gmail.com> - Mon, 25 Feb 2013 16:56:45 -0500 - rev 122944
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 845008 - Metro's save file picker always throws on appendFilter. r=tabraldes
51483e470216d2226be08faf948c61ee898d5826: Bug 836301 - Hoist some assertions, remove a bunch of no-op trap overrides, and add assertions that we've entered our policy. r=mrbkap
Bobby Holley <bobbyholley@gmail.com> - Mon, 25 Feb 2013 13:54:18 -0800 - rev 122943
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 836301 - Hoist some assertions, remove a bunch of no-op trap overrides, and add assertions that we've entered our policy. r=mrbkap
fdf8b5dab36c1e60f3cc7b5516ca509fe8de67c5: Bug 836301 - Hoist enter() calls from {Xray,}Wrapper::foo into Proxy::foo. r=mrbkap
Bobby Holley <bobbyholley@gmail.com> - Mon, 25 Feb 2013 13:54:18 -0800 - rev 122942
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 836301 - Hoist enter() calls from {Xray,}Wrapper::foo into Proxy::foo. r=mrbkap
d7322c063fc14ca60e8cc605b8ac11c8a647333c: Bug 836301 - Introduce an RAII class for entering policies. r=mrbkap
Bobby Holley <bobbyholley@gmail.com> - Mon, 25 Feb 2013 13:54:18 -0800 - rev 122941
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 836301 - Introduce an RAII class for entering policies. r=mrbkap This will allow us to make some hard assertions that a given policy has been entered exactly once.
1638e21ef27de233439fbb2c53ae7fcbff0b2dfa: Bug 836301 - Hoist enter() into BaseProxyHandler. r=mrbkap
Bobby Holley <bobbyholley@gmail.com> - Mon, 25 Feb 2013 13:54:18 -0800 - rev 122940
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 836301 - Hoist enter() into BaseProxyHandler. r=mrbkap
f353efb7e15afeb49b55d356d3948046c33e97be: Bug 836301 - Add tracking for whether we have a non-trivial enter() trap. r=mrbkap
Bobby Holley <bobbyholley@gmail.com> - Mon, 25 Feb 2013 13:54:18 -0800 - rev 122939
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 836301 - Add tracking for whether we have a non-trivial enter() trap. r=mrbkap This will allow us to skip the virtual function call for non-security-wrapper proxies, which are the cases where we care most about performance.
f976eaa7bbf4c2c64c9ffad46c7d2b3f70890341: Bug 836301 - Stop enter()ing with CALL for nativeCall. r=mrbkap
Bobby Holley <bobbyholley@gmail.com> - Mon, 25 Feb 2013 13:54:17 -0800 - rev 122938
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 836301 - Stop enter()ing with CALL for nativeCall. r=mrbkap This is kind of nonsensical, because CALL means "the wrapped object is being called", whereas nativeCall means "the wrapped object is being unwrapped to have a JSNative invoked on it", which are two very different things. We _could_ add a NATIVECALL enter() trap, but our current policy enforcement around nativeCall involves overriding the trap itself, so we wouldn't use it for anything. So let's just get rid of it.
b16b1535278221cafda174664a0c09e33eaf1815: Bug 836301 - Add Special handling to allow us to call enter() for defineProperty on Xrays. r=mrbkap
Bobby Holley <bobbyholley@gmail.com> - Mon, 25 Feb 2013 13:54:17 -0800 - rev 122937
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 836301 - Add Special handling to allow us to call enter() for defineProperty on Xrays. r=mrbkap
520ff1852dafc17e2107d57c65cabf500321cd59: Bug 836301 - Stop using JSRESOLVE_ASSIGNING to determine GET vs SET. r=mrbkap
Bobby Holley <bobbyholley@gmail.com> - Mon, 25 Feb 2013 13:54:17 -0800 - rev 122936
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 836301 - Stop using JSRESOLVE_ASSIGNING to determine GET vs SET. r=mrbkap This is just a heuristic, anyway, and some of the usage is downright broken. There are two cases here: 1 - Deciding what to do for get{Own,}PropertyDescriptor. In these cases, we can just enter with GET and rely on the filtering machinery to filter out dangerous setters for security wrappers. 2 - Custom Xray props. None of these make sense in a |set| context. In fact, they generally have null setters anyway, so we can just assume GET. The policy-entering code in XrayWrapper is super haphazard. We'll get rid of it entirely later in these patches.
e2cd7f968aaf7db77836febf22f3ba0c57bc7843: Bug 836301 - Assert against JSID_VOID in JSID wrapping. r=mrbkap
Bobby Holley <bobbyholley@gmail.com> - Mon, 25 Feb 2013 13:54:17 -0800 - rev 122935
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Bug 836301 - Assert against JSID_VOID in JSID wrapping. r=mrbkap Luke explained to me that it should never get there.
3d958ab2652367c5409a2650c37226f1b87383a5: Fix for bug 844559 (Crash [@ mozilla::dom::XrayResolveNativeProperty]). r=bz.
Peter Van der Beken <peterv@propagandism.org> - Mon, 25 Feb 2013 20:39:15 +0100 - rev 122934
Push 24363 by ryanvm@gmail.com at Tue, 26 Feb 2013 02:27:39 +0000
Fix for bug 844559 (Crash [@ mozilla::dom::XrayResolveNativeProperty]). r=bz.
(0) -100000 -30000 -10000 -3000 -1000 -300 -100 -50 -20 +20 +50 +100 +300 +1000 +3000 +10000 +30000 +100000 +300000 tip