Jason Orendorff
|
8ca27f5bc7
|
Bug 507425 - cx->bailExit doesn't get cleared after a native setter. r=gal.
|
2009-07-30 15:21:23 -05:00 |
|
Jason Orendorff
|
9a9d7d84d3
|
Bug 507156 - JSOP_TABLESWITCH always aborts, sometimes without an abort message. r=dmandelin.
|
2009-07-30 13:06:15 -05:00 |
|
Jason Orendorff
|
e9f49c7644
|
Bug 504520 - TM: a >= b misbehaves if a and b are both Infinity at record time. r=Waldo.
--HG--
extra : rebase_source : 3debe2d9be81aa923e8d94081b189fd577a21287
|
2009-07-29 07:48:06 -05:00 |
|
Jason Orendorff
|
08e0a53af4
|
Bug 503408 - Trace native setters. r=brendan.
|
2009-07-27 16:47:34 -05:00 |
|
Andreas Gal
|
7c40de183a
|
Bug 501275 - TM: Crash [@ nanojit::Assembler::nPatchBranch]. r=dvander
|
2009-07-26 20:28:46 -04:00 |
|
Jason Orendorff
|
a31f80165c
|
Bug 503080 - Remove prototype-scope-sharing. r=brendan.
|
2009-07-21 16:25:11 -05:00 |
|
Jeff Walden
|
8361fadbb2
|
Bug 503992 - js_Int32ToId doesn't return the right id when passed a negative integer which doesn't fit in a jsval. Also change how 'in' is interpreted on trace so that we don't side-exit when the named property exists directly on the object. ALL HAIL TESTCASES! r=jorendorff
|
2009-07-15 02:48:49 -07:00 |
|
David Anderson
|
1899603001
|
Fixed division and modulo bugs with negative numbers and 0 (bug 498237, r=gal).
|
2009-07-09 18:14:32 -07:00 |
|
Jason Orendorff
|
5044a40564
|
Bug 503198 - Restore ability to trace initprop/setprop with non-branded scope and function rhs. r=brendan.
|
2009-07-09 06:49:44 -05:00 |
|
Jason Orendorff
|
3b8b21247e
|
Bug 503191 - trace-test.js aborts in testAddAnyInconvertibleObject et al. r=Waldo.
--HG--
extra : rebase_source : 4977a191af6285669e7e268bc713c03a9338c60b
|
2009-07-08 17:58:59 -05:00 |
|
Jason Orendorff
|
d9e1f3aa40
|
Bug 502914 - JIT code can call js_AddProperty when the property already exists (Assertion failure: !SCOPE_HAS_PROPERTY(scope, sprop), at ../jsbuiltins.cpp:257). r=gal.
|
2009-07-08 15:44:58 -05:00 |
|
Jason Orendorff
|
9b7ea9a02e
|
Last-minute change to the unit test in the previous changeset a08e3540da32, requested by bz in bug 502890 comment 6. Informal r=graydon.
|
2009-07-08 15:38:55 -05:00 |
|
Jason Orendorff
|
fc08c0c726
|
Bug 502890 - Assigning to a called method on trace does not change the object's shape. r=gal,r=brendan.
|
2009-07-08 14:44:31 -05:00 |
|
Boris Zbarsky
|
e3f52528d3
|
Bug 499865. Log blacklists as part of our jitstats. r=jorendorff
|
2009-06-23 23:44:38 -04:00 |
|
Andreas Gal
|
659a7a9b6c
|
Implement oracle-based speculative fmod/fdiv/fmul demotion (474443, r=graydon,dvander).
|
2009-06-12 08:33:32 -07:00 |
|
Andreas Gal
|
7b098dc9e7
|
When merging type maps in a side exit, use the inner tree's globals (495958, r=dvander).
|
2009-06-04 20:42:56 -07:00 |
|
Jeff Walden
|
9607777654
|
Bug 496054 - TM: Null deref [@ JITted code] involving __proto__ munging and array-like access. r=brendan
|
2009-06-03 16:34:37 -07:00 |
|
Andreas Gal
|
f4be60c6d3
|
Bug 495897 - Assertion failure: ti->typeMap.matches(ti_other->typeMap) with undeclared global. r=dvander
|
2009-06-02 22:28:59 -04:00 |
|
Andreas Gal
|
518a96a672
|
Inspect the scope for the right object when looking up properties on fast arrays (495844, r=jwalden).
|
2009-06-01 18:58:56 -07:00 |
|
Andreas Gal
|
1f12d31de5
|
Abort recording if wrapping occurs, take 2 (495563, r=brendan).
|
2009-05-29 20:39:13 -07:00 |
|
Andreas Gal
|
548cbfeef5
|
Setting scopeChain to NULL in SynthesizeFrame breaks GetCallObject (494045, r=brendan).
|
2009-05-20 17:05:38 -07:00 |
|
Andreas Gal
|
0d2b989430
|
Update JSSLOT_ARRAY_COUNT when emitting array constructor code on trace (493255, r=jorendorff).
|
2009-05-18 15:56:11 -07:00 |
|
Jeff Walden
|
24ec69f5cf
|
Bug 492599 - Recording of JSOP_NEWARRAY doesn't update JSSLOT_ARRAY_COUNT properly. r=jorendorff
|
2009-05-12 14:31:44 -07:00 |
|
David Mandelin
|
be8b0cb323
|
Bug 458838: updating test case to pass when we successfully trace out-of-reach upvars
|
2009-05-11 18:58:10 -07:00 |
|
Andreas Gal
|
806e556ee1
|
Make sure stack frame is flagged as constructor frame when falling off trace in a slow native constructor (491965, r=graydon).
|
2009-05-11 14:40:42 -07:00 |
|
Andreas Gal
|
89e9d61d35
|
Fast-path for string constructors only works for new/call with a single argument (491989, r=dmandelin).
|
2009-05-11 14:03:29 -07:00 |
|
Jacob Bramley
|
c942893875
|
Bug 483962 - Remove ARM-specific code from jstracer.cpp. r=vlad
|
2009-05-11 12:16:01 -04:00 |
|
Graydon Hoare
|
3330967d8a
|
Bug 492124 - TM: unit tests should gc() before each, to purge JIT state, r=brendan.
|
2009-05-08 17:02:37 -07:00 |
|
jorendorff
|
93c6d226d3
|
Record all calls to native functions (487134, r=gal, brendan).
|
2009-05-05 14:26:06 -07:00 |
|
Andreas Gal
|
c5c7bd2f6c
|
Trace getting String.length (484332, r=brendan).
|
2009-04-21 18:56:24 -07:00 |
|
Jeff Walden
|
c9680230c4
|
Bug 473117 - Rejigger how guards use side exits, and fix an erroneous comment. r=graydon
|
2009-04-18 16:47:23 -07:00 |
|
Andreas Gal
|
d9f8074374
|
Be less paranoid about jit stats for testNestedExitStackOuter since it doesn't seem to be stable.
|
2009-04-16 16:01:27 -07:00 |
|
Jason Orendorff
|
4dd9ad09ef
|
Bug 487845 - TM: After deep-bailing, we can lirbuf->rewind() and then return to a dead code page. r=gal.
--HG--
extra : rebase_source : b7de71b526d45c7caed1982fba80c65763a0a9c6
|
2009-04-15 09:47:02 -05:00 |
|
Andreas Gal
|
c11974bb60
|
Backed out changeset 4c157cfe2289 (bug 487845).
|
2009-04-14 21:28:40 -07:00 |
|
Jason Orendorff
|
0616f91d10
|
Bug 487845 - TM: After deep-bailing, we can lirbuf->rewind() and then return to a dead code page. r=gal.
|
2009-04-14 08:45:37 -05:00 |
|
Jason Orendorff
|
81f9c93dec
|
Bug 479198 - "Deep" property cache entries not invalidated when shadowed (TIBCO General Interface regression). r=brendan.
|
2009-04-06 13:24:20 -05:00 |
|
Brendan Eich
|
862f9eb6d3
|
Test for upvar2 dup/dep bug 473271, from comment 8; also remove print noise from testPropagatedFunArgs crash test.
|
2009-04-06 11:18:10 -07:00 |
|
Jeff Walden
|
7bd23208f1
|
Update trace-test.js jitstats for testThinLoopDemote to account for upvar2, although there's still some wonkiness here being tracked in bug 486820. r=orange
|
2009-04-05 22:29:18 -07:00 |
|
Brendan Eich
|
962b187fe5
|
upvar2, aka the big one take 2 (452598, r=mrbkap).
|
2009-04-05 21:17:22 -07:00 |
|
Jeff Walden
|
14e879800f
|
Bug 486578 - TM: "Assertion failure: scope->object == pobj" with function, __proto__, length. r=gal
|
2009-04-04 16:55:51 -07:00 |
|
Andreas Gal
|
706120c0fb
|
Backed out changeset 972c44aa9d1f (bug 452598).
|
2009-04-04 10:14:52 -07:00 |
|
Brendan Eich
|
5f4d9ff474
|
upvar2, aka the big one (452598, r=mrbkap).
|
2009-04-04 10:05:49 +01:00 |
|
Jeff Walden
|
3e189b0822
|
Bug 484751 - TM: "Assertion failure: !OBJ_GET_CLASS(cx, proto)->getObjectOps, at ../jsobj.cpp". r=mrbkap
|
2009-03-31 14:24:01 -07:00 |
|
Andreas Gal
|
79baa5db23
|
Guard that object is a dense array when skipping to its prototype during property lookup (485790, r=brendan).
|
2009-03-30 17:19:04 -07:00 |
|
Jeff Walden
|
c8f309e4e5
|
Bug 485889 - Incorrect null checking/assignment? (with xpcshell test case). r=gal
|
2009-03-30 17:15:42 -07:00 |
|
Robert Sayre
|
bfa28b2971
|
Back out Bug 483723 - 'Trace string.indexOf'. It conflicts badly with mozilla-central.
|
2009-03-29 10:38:18 -07:00 |
|
Vladimir Vukicevic
|
c32792f55e
|
backing out 273c85c827e1
|
2009-03-27 16:42:49 -07:00 |
|
Vladimir Vukicevic
|
2a8f257f6d
|
b=484599; add calling convention tests to trace-tests and js shell; r=mrbkap
|
2009-03-27 14:35:46 -07:00 |
|
Ben Turner
|
01022c4478
|
Bug 483723 - 'Trace string.indexOf'. r=brendan+gal.
|
2009-03-24 21:32:09 -07:00 |
|
Jeff Walden
|
136daf85e6
|
Bug 484495 - new String(obj) asserts when tracing. r=brendan, r=gal
|
2009-03-22 12:49:15 -07:00 |
|