searching for reviewer(jandem)
7e435fbdd037: Bug 1532262: OBJECT_FLAG_NON_PACKED only implies packed elements, not a packed array. r=jandem
André Bargull <andre.bargull@gmail.com> - Sun, 17 Mar 2019 23:56:01 +0100 - rev 522617
Push 10871 by cbrindusan@mozilla.com at Mon, 18 Mar 2019 15:49:32 +0000
Bug 1532262: OBJECT_FLAG_NON_PACKED only implies packed elements, not a packed array. r=jandem Summary: Add MIsPackedArray to ensure the array's length matches its initialised length. Differential Revision: https://phabricator.services.mozilla.com/D23673
da8f5a9fb9be: Bug 1535037 - Use ValueType for TypeSet. r=jandem
Tom Schuster <evilpies@gmail.com> - Thu, 14 Mar 2019 07:38:00 +0000 - rev 521893
Push 10870 by nbeleuzu@mozilla.com at Fri, 15 Mar 2019 20:00:07 +0000
Bug 1535037 - Use ValueType for TypeSet. r=jandem Differential Revision: https://phabricator.services.mozilla.com/D23329
65c88218fbb2: Bug 1533755 - Use RefPtr for SharedScriptData pointers. r=jandem
Ted Campbell <tcampbell@mozilla.com> - Tue, 12 Mar 2019 02:40:29 +0000 - rev 521521
Push 10867 by dvarga@mozilla.com at Thu, 14 Mar 2019 15:20:45 +0000
Bug 1533755 - Use RefPtr for SharedScriptData pointers. r=jandem Leave manual refcounting in the ScriptDataTable for now since it requires a bit of care to make the automatic types do the right thing when sweeping. Differential Revision: https://phabricator.services.mozilla.com/D22718
53c759ed45e4: Bug 1533755 - Cleanups in PrivateScriptData. r=jandem
Ted Campbell <tcampbell@mozilla.com> - Tue, 12 Mar 2019 02:38:51 +0000 - rev 521520
Push 10867 by dvarga@mozilla.com at Thu, 14 Mar 2019 15:20:45 +0000
Bug 1533755 - Cleanups in PrivateScriptData. r=jandem Also add a GCManagedDeletePolicy so that the script data can be dropped even when we are not sweeping. Differential Revision: https://phabricator.services.mozilla.com/D22715
d5eff5c34ce9: Bug 1533755 - Use RefPtr for SharedScriptData pointers. r=jandem
Ted Campbell <tcampbell@mozilla.com> - Mon, 11 Mar 2019 20:01:08 +0000 - rev 521424
Push 10866 by nerli@mozilla.com at Tue, 12 Mar 2019 18:59:09 +0000
Bug 1533755 - Use RefPtr for SharedScriptData pointers. r=jandem Leave manual refcounting in the ScriptDataTable for now since it requires a bit of care to make the automatic types do the right thing when sweeping. Differential Revision: https://phabricator.services.mozilla.com/D22718
35825a8005ab: Bug 1533755 - Cleanups in PrivateScriptData. r=jandem
Ted Campbell <tcampbell@mozilla.com> - Mon, 11 Mar 2019 20:01:26 +0000 - rev 521423
Push 10866 by nerli@mozilla.com at Tue, 12 Mar 2019 18:59:09 +0000
Bug 1533755 - Cleanups in PrivateScriptData. r=jandem Also add a GCManagedDeletePolicy so that the script data can be dropped even when we are not sweeping. Differential Revision: https://phabricator.services.mozilla.com/D22715
0dd9653849e2: Bug 1533204 - Crash [@ js::jit::CompileRuntime::mainContextPtr] with asm.js. r=jandem.
Julian Seward <jseward@acm.org> - Mon, 11 Mar 2019 17:38:44 +0100 - rev 521361
Push 10866 by nerli@mozilla.com at Tue, 12 Mar 2019 18:59:09 +0000
Bug 1533204 - Crash [@ js::jit::CompileRuntime::mainContextPtr] with asm.js. r=jandem. This patch ensures that resetOsiPointRegs will not be called on safepoints associated with Wasm code, in CodeGenerator::generateBody.
0a14e20db6a1: Bug 1533204 - Crash [@ js::jit::CompileRuntime::mainContextPtr] with asm.js. r=jandem.
Julian Seward <jseward@acm.org> - Mon, 11 Mar 2019 10:36:33 +0100 - rev 521349
Push 10866 by nerli@mozilla.com at Tue, 12 Mar 2019 18:59:09 +0000
Bug 1533204 - Crash [@ js::jit::CompileRuntime::mainContextPtr] with asm.js. r=jandem. Baldr: in CodeGenerator::generateBody, don't call resetOsiPointRegs on safepoints associated with Wasm code.
2bec5d831e88: Bug 1532376 - Assert that the group's shouldPretenure flag is respected when creating an object r=jandem
Jon Coppeard <jcoppeard@mozilla.com> - Wed, 06 Mar 2019 16:38:29 +0000 - rev 521295
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1532376 - Assert that the group's shouldPretenure flag is respected when creating an object r=jandem Differential Revision: https://phabricator.services.mozilla.com/D22326
2369f5bbf379: Bug 1532376 - Fix places where we don't respect the shouldPretenure flag when creating an object r=jandem
Jon Coppeard <jcoppeard@mozilla.com> - Wed, 06 Mar 2019 16:38:25 +0000 - rev 521294
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1532376 - Fix places where we don't respect the shouldPretenure flag when creating an object r=jandem This adds an overload of GetInitialHeap that takes an ObjectGroup* instead of a Class* and also takes into account whether the group's shouldPreTenure flag is set. I moved this to JSObject-inl.h too. I removed the heap parameter in a few places, in particular in NewDenseCopyOnWriteArray which required a bunch of changes elsewhere including the JITs. I left the heap parameter intact for environment objects where we may have reason prefer these objects to be allocated in the tenure heap. It's possible we should just remove all these parameters too and make allocation more uniform. Differential Revision: https://phabricator.services.mozilla.com/D22324
ac1601914ac5: Bug 1403679: Provide a shell testing function for JS_TransplantObject. r=jandem
André Bargull <andre.bargull@gmail.com> - Fri, 20 Oct 2017 11:32:22 +0100 - rev 521254
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1403679: Provide a shell testing function for JS_TransplantObject. r=jandem
835fc236080c: Bug 1527974: Use non-shared memmove in self-hosting intrinsics when possible. r=jandem
André Bargull <andre.bargull@gmail.com> - Fri, 08 Mar 2019 13:23:12 +0000 - rev 521214
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1527974: Use non-shared memmove in self-hosting intrinsics when possible. r=jandem Differential Revision: https://phabricator.services.mozilla.com/D22508
9d5e6a41565d: Bug 1532289 - Fix missing pre-write barrier for BigInt values in Ion r=jandem
Robin Templeton <robin@igalia.com> - Thu, 07 Mar 2019 09:32:08 +0000 - rev 520884
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1532289 - Fix missing pre-write barrier for BigInt values in Ion r=jandem Differential Revision: https://phabricator.services.mozilla.com/D21941
dbf02da1d1bf: Bug 1533420 - Remove JSScript::ExplicitUseStrict flag. r=jandem
Ted Campbell <tcampbell@mozilla.com> - Thu, 07 Mar 2019 16:08:17 +0000 - rev 520841
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533420 - Remove JSScript::ExplicitUseStrict flag. r=jandem Differential Revision: https://phabricator.services.mozilla.com/D22524
82a1c7087806: Bug 1532376 - Assert that the group's shouldPretenure flag is respected when creating an object r=jandem
Jon Coppeard <jcoppeard@mozilla.com> - Wed, 06 Mar 2019 16:38:29 +0000 - rev 520785
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1532376 - Assert that the group's shouldPretenure flag is respected when creating an object r=jandem Differential Revision: https://phabricator.services.mozilla.com/D22326
1b4fd78107e2: Bug 1532376 - Fix places where we don't respect the shouldPretenure flag when creating an object r=jandem
Jon Coppeard <jcoppeard@mozilla.com> - Wed, 06 Mar 2019 16:38:25 +0000 - rev 520784
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1532376 - Fix places where we don't respect the shouldPretenure flag when creating an object r=jandem This adds an overload of GetInitialHeap that takes an ObjectGroup* instead of a Class* and also takes into account whether the group's shouldPreTenure flag is set. I moved this to JSObject-inl.h too. I removed the heap parameter in a few places, in particular in NewDenseCopyOnWriteArray which required a bunch of changes elsewhere including the JITs. I left the heap parameter intact for environment objects where we may have reason prefer these objects to be allocated in the tenure heap. It's possible we should just remove all these parameters too and make allocation more uniform. Differential Revision: https://phabricator.services.mozilla.com/D22324
26d4249db1c7: Bug 1533196 - Remove JSScript::FunHasAnyAliasedFormal flag r=jandem
Ted Campbell <tcampbell@mozilla.com> - Thu, 07 Mar 2019 09:34:05 +0000 - rev 520755
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533196 - Remove JSScript::FunHasAnyAliasedFormal flag r=jandem This flag is only used by IonAnalysis and rarely so it should be computed there instead of in all script/function code paths. Differential Revision: https://phabricator.services.mozilla.com/D22432
04d9abc278fa: Bug 1532599 - Force expected crashes on unexpected magic values. r=jandem
Nicolas B. Pierron <nicolas.b.pierron@nbp.name> - Wed, 06 Mar 2019 20:23:43 +0000 - rev 520737
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1532599 - Force expected crashes on unexpected magic values. r=jandem Differential Revision: https://phabricator.services.mozilla.com/D22120
14d519134002: Bug 1531073: Inline ArrayIteratorPrototypeOptimizable with a constant when possible. r=jandem
André Bargull <andre.bargull@gmail.com> - Wed, 27 Feb 2019 09:51:33 -0800 - rev 520634
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1531073: Inline ArrayIteratorPrototypeOptimizable with a constant when possible. r=jandem
ba3dfc81120d: Bug 1533003 - Split JSScript::initFromFunctionBox r=jandem
Ted Campbell <tcampbell@mozilla.com> - Wed, 06 Mar 2019 18:12:30 +0000 - rev 520618
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533003 - Split JSScript::initFromFunctionBox r=jandem Split into one part for JSScript internal initialization of flags and a second part for linking the JSFunction and JSScript only after the script is fully initialized. Depends on D22322 Differential Revision: https://phabricator.services.mozilla.com/D22323
6da5f14c5005: Bug 1533003 - Add SharedScriptData::InitFromEmitter r=jandem
Ted Campbell <tcampbell@mozilla.com> - Wed, 06 Mar 2019 18:09:27 +0000 - rev 520617
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533003 - Add SharedScriptData::InitFromEmitter r=jandem Depends on D22321 Differential Revision: https://phabricator.services.mozilla.com/D22322
e993e4a050b0: Bug 1533003 - Add PrivateScriptData::InitFromEmitter r=jandem
Ted Campbell <tcampbell@mozilla.com> - Wed, 06 Mar 2019 18:06:35 +0000 - rev 520616
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533003 - Add PrivateScriptData::InitFromEmitter r=jandem Depends on D22320 Differential Revision: https://phabricator.services.mozilla.com/D22321
62ba39ca25a2: Bug 1533003 - Split out inner-function scope linking in script compile r=jandem
Ted Campbell <tcampbell@mozilla.com> - Wed, 06 Mar 2019 18:04:10 +0000 - rev 520615
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533003 - Split out inner-function scope linking in script compile r=jandem When compiling a script with lazy inner functions, we now know the scopes that those inner functions belong too and need to save this information on the inner function itself (as enclosingScope). This patch makes that process more explicit in JSScript initialization so we can better reason about error / OOM paths. Depends on D22319 Differential Revision: https://phabricator.services.mozilla.com/D22320
154ce749b8e1: Bug 1533003 - JSScript::fullyInitFromEmitter group flag init r=jandem
Ted Campbell <tcampbell@mozilla.com> - Wed, 06 Mar 2019 18:03:12 +0000 - rev 520614
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533003 - JSScript::fullyInitFromEmitter group flag init r=jandem Depends on D22318 Differential Revision: https://phabricator.services.mozilla.com/D22319
a826392776b5: Bug 1533003 - JSScript::fullyInitFromEmitter group POD fields r=jandem
Ted Campbell <tcampbell@mozilla.com> - Wed, 06 Mar 2019 18:01:34 +0000 - rev 520613
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533003 - JSScript::fullyInitFromEmitter group POD fields r=jandem Depends on D22317 Differential Revision: https://phabricator.services.mozilla.com/D22318
ce7559041ffa: Bug 1533003 - Cleanup JSScript::fullyInitFromEmitter error handling r=jandem
Ted Campbell <tcampbell@mozilla.com> - Wed, 06 Mar 2019 17:59:06 +0000 - rev 520612
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533003 - Cleanup JSScript::fullyInitFromEmitter error handling r=jandem Use an ExitScope similar to to XDRScript for more consistency. Depends on D22316 Differential Revision: https://phabricator.services.mozilla.com/D22317
a8cbb44ae49b: Bug 1533003 - Compute JSScript::NeedsFunctionEnvironmentObjects directly from BCE r=jandem
Ted Campbell <tcampbell@mozilla.com> - Wed, 06 Mar 2019 17:55:38 +0000 - rev 520611
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533003 - Compute JSScript::NeedsFunctionEnvironmentObjects directly from BCE r=jandem Depends on D22315 Differential Revision: https://phabricator.services.mozilla.com/D22316
1eb22a2970d3: Bug 1533003 - Compute JSScript::FunHasAnyAliasedFormal directly from BCE r=jandem
Ted Campbell <tcampbell@mozilla.com> - Wed, 06 Mar 2019 17:42:18 +0000 - rev 520610
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533003 - Compute JSScript::FunHasAnyAliasedFormal directly from BCE r=jandem Compute this flag directly from BytecodeEmitter data structures instead of needing to access the partially initialized script while setting its own flags. Depends on D22313 Differential Revision: https://phabricator.services.mozilla.com/D22315
3fd4fd359c05: Bug 1533003 - Remove JSScript::initFromModuleContext r=jandem
Ted Campbell <tcampbell@mozilla.com> - Wed, 06 Mar 2019 17:34:39 +0000 - rev 520609
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1533003 - Remove JSScript::initFromModuleContext r=jandem This removes the redundant set of TreatAsRunOnce which is instead set by CompileOptions before we start compiling. The IsModule flag is now set directly similar to IsForEval. Differential Revision: https://phabricator.services.mozilla.com/D22313
d33d48a3998a: Bug 1530958 - Fix an issue with native groups for unboxed objects. r=jandem
Brian Hackett <bhackett1024@gmail.com> - Wed, 06 Mar 2019 08:29:26 +0100 - rev 520473
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1530958 - Fix an issue with native groups for unboxed objects. r=jandem
19047d153c2f: Bug 1532289 - Fix missing pre-write barrier for BigInt values in Ion r=jandem
Andy Wingo <wingo@igalia.com> - Tue, 05 Mar 2019 15:02:57 +0000 - rev 520303
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1532289 - Fix missing pre-write barrier for BigInt values in Ion r=jandem Differential Revision: https://phabricator.services.mozilla.com/D21941
e0828fccefb5: Bug 1531788 - Use Value::type in js::GetProperty. r=jandem
Tom Schuster <evilpies@gmail.com> - Mon, 04 Mar 2019 09:28:00 +0000 - rev 520143
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1531788 - Use Value::type in js::GetProperty. r=jandem Differential Revision: https://phabricator.services.mozilla.com/D21708
7f2bfa2b5fb9: Bug 1529203 - Add release build assertions around using modules with the wrong global r=jandem
Jon Coppeard <jcoppeard@mozilla.com> - Sat, 02 Mar 2019 09:00:17 +0000 - rev 520038
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1529203 - Add release build assertions around using modules with the wrong global r=jandem
e262ebb01282: Bug 1527900 - Throw exception if StructuredClone sees bigint in realm without bigint r=jandem
Andy Wingo <wingo@igalia.com> - Fri, 01 Mar 2019 10:01:33 +0000 - rev 519852
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1527900 - Throw exception if StructuredClone sees bigint in realm without bigint r=jandem Differential Revision: https://phabricator.services.mozilla.com/D21206
cc20c56545bd: Bug 1527900 - Throw exception if StructuredClone sees bigint in realm without bigint r=jandem
Andy Wingo <wingo@igalia.com> - Wed, 27 Feb 2019 17:10:05 +0000 - rev 519676
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1527900 - Throw exception if StructuredClone sees bigint in realm without bigint r=jandem Differential Revision: https://phabricator.services.mozilla.com/D21206
888a99e562a7: Bug 1473830 - Add testcase r=jandem
Matthew Gaudet <mgaudet@mozilla.com> - Wed, 27 Feb 2019 11:53:01 +0000 - rev 519673
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1473830 - Add testcase r=jandem Differential Revision: https://phabricator.services.mozilla.com/D21014
c2fdfa3db1b2: Bug 1531293 - Enable javascript.options.bigint on Nightly r=jandem
Andy Wingo <wingo@igalia.com> - Thu, 28 Feb 2019 13:14:22 +0000 - rev 519646
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1531293 - Enable javascript.options.bigint on Nightly r=jandem Differential Revision: https://phabricator.services.mozilla.com/D21528
191a7f8a2816: Bug 1517210 - Stop always loading DevTools modules in fresh compartments. r=jandem,nchevobbe
Alexandre Poirot <poirot.alex@gmail.com> - Thu, 28 Feb 2019 16:03:26 +0000 - rev 519640
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1517210 - Stop always loading DevTools modules in fresh compartments. r=jandem,nchevobbe Now, DevTools server is loaded with a custom loader every time we want to debug chrome resources. We ensure toggling the "invisibleToDebugger" flag on Loader.jsm which itself propagates to DevTools Sandboxes. We added calls to force GC in console test to prevent crashes on Windows 7. Differential Revision: https://phabricator.services.mozilla.com/D20347
865ffd54922d: Bug 1527007 - Work around Windows fmod bugs r=jandem
Ted Campbell <tcampbell@mozilla.com> - Thu, 28 Feb 2019 13:22:17 +0000 - rev 519606
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1527007 - Work around Windows fmod bugs r=jandem Differential Revision: https://phabricator.services.mozilla.com/D21407
e3d1480593cf: Bug 1358501 - Ion optimize JSOP_OPTIMIZE_SPREADCALL with a constant when Array iterator properties are in their initial state. r=jandem
André Bargull <andre.bargull@gmail.com> - Mon, 18 Feb 2019 05:58:09 -0800 - rev 519563
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1358501 - Ion optimize JSOP_OPTIMIZE_SPREADCALL with a constant when Array iterator properties are in their initial state. r=jandem
8cd8d6fd4931: Bug 1528772: Support hoisting RegExp when "exec" is called. r=jandem
André Bargull <andre.bargull@gmail.com> - Mon, 18 Feb 2019 08:17:34 -0800 - rev 519525
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1528772: Support hoisting RegExp when "exec" is called. r=jandem
b299e2b98861: Bug 1530362 - Do Not Use The Forbidden API. r=jandem
Lars T Hansen <lhansen@mozilla.com> - Mon, 25 Feb 2019 15:46:31 +0100 - rev 519518
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1530362 - Do Not Use The Forbidden API. r=jandem Avoid using the leaky API, use a non-leaky one instead. Differential Revision: https://phabricator.services.mozilla.com/D21018
280ab3f61c87: Bug 1527729 - Skip range computation for non-int32 bitwise ops r=wingo,jandem
Robin Templeton <robin@igalia.com> - Wed, 27 Feb 2019 12:10:23 +0000 - rev 519344
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1527729 - Skip range computation for non-int32 bitwise ops r=wingo,jandem Differential Revision: https://phabricator.services.mozilla.com/D20618
46246cd080fa: Bug 1519077 - Don't mutate inputs in CacheIR operations r=jandem
Matthew Gaudet <mgaudet@mozilla.com> - Wed, 27 Feb 2019 14:29:08 +0000 - rev 519326
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1519077 - Don't mutate inputs in CacheIR operations r=jandem Differential Revision: https://phabricator.services.mozilla.com/D18708
9527be2c6bcf: Bug 1527897 - Optimize js::getProperty on bigint values to not create wrapper object r=jandem
Andy Wingo <wingo@igalia.com> - Wed, 27 Feb 2019 12:03:04 +0000 - rev 519322
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1527897 - Optimize js::getProperty on bigint values to not create wrapper object r=jandem Differential Revision: https://phabricator.services.mozilla.com/D21221
8a75915b2541: Bug 1519077 - Don't mutate inputs in CacheIR operations r=jandem
Matthew Gaudet <mgaudet@mozilla.com> - Thu, 07 Feb 2019 22:32:00 +0000 - rev 519129
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1519077 - Don't mutate inputs in CacheIR operations r=jandem Differential Revision: https://phabricator.services.mozilla.com/D18708
fec419c7471b: Bug 1530292. Fix crash when cross-compartment WindowProxy is used as RHS of instanceof. r=jandem
Boris Zbarsky <bzbarsky@mit.edu> - Tue, 26 Feb 2019 08:50:20 +0000 - rev 519073
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1530292. Fix crash when cross-compartment WindowProxy is used as RHS of instanceof. r=jandem Differential Revision: https://phabricator.services.mozilla.com/D21035
805264e071d9: Bug 1529939 - Remove JSVAL_TYPE_MISSING. r=bzbarsky,jandem
Tom Schuster <evilpies@gmail.com> - Tue, 26 Feb 2019 08:48:01 +0000 - rev 519067
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1529939 - Remove JSVAL_TYPE_MISSING. r=bzbarsky,jandem Differential Revision: https://phabricator.services.mozilla.com/D20936
355463041f49: Bug 1528931 - Use Value::type in dumpValue. r=jandem
Tom Schuster <evilpies@gmail.com> - Tue, 26 Feb 2019 16:54:06 +0000 - rev 519066
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1528931 - Use Value::type in dumpValue. r=jandem Differential Revision: https://phabricator.services.mozilla.com/D20818
31e8a0659913: Bug 1530513 - Fix handling of LazyScript HasBeenCloned flag r=jandem
Ted Campbell <tcampbell@mozilla.com> - Tue, 26 Feb 2019 09:26:26 +0000 - rev 519032
Push 10862 by ffxbld-merge at Mon, 11 Mar 2019 13:01:11 +0000
Bug 1530513 - Fix handling of LazyScript HasBeenCloned flag r=jandem - Ensure that HasBeenCloned flag is set on LazyScript when setting it on JSScript so it is preserved by relazification. - Never preserve HasBeenCloned flag in LazyScript XDR. NOTE: With the first fix, this is not needed for tests to pass anymore. - Add a LazyScript::packedFieldsForXDR() helper to strip out runtime flags before serializing. Depends on D21069 Differential Revision: https://phabricator.services.mozilla.com/D21070