Commit Graph

337 Commits

Author SHA1 Message Date
Jason Orendorff
8ca27f5bc7 Bug 507425 - cx->bailExit doesn't get cleared after a native setter. r=gal. 2009-07-30 15:21:23 -05:00
Jason Orendorff
9a9d7d84d3 Bug 507156 - JSOP_TABLESWITCH always aborts, sometimes without an abort message. r=dmandelin. 2009-07-30 13:06:15 -05:00
Jason Orendorff
e9f49c7644 Bug 504520 - TM: a >= b misbehaves if a and b are both Infinity at record time. r=Waldo.
--HG--
extra : rebase_source : 3debe2d9be81aa923e8d94081b189fd577a21287
2009-07-29 07:48:06 -05:00
Jason Orendorff
08e0a53af4 Bug 503408 - Trace native setters. r=brendan. 2009-07-27 16:47:34 -05:00
Andreas Gal
7c40de183a Bug 501275 - TM: Crash [@ nanojit::Assembler::nPatchBranch]. r=dvander 2009-07-26 20:28:46 -04:00
Jason Orendorff
a31f80165c Bug 503080 - Remove prototype-scope-sharing. r=brendan. 2009-07-21 16:25:11 -05:00
Jeff Walden
8361fadbb2 Bug 503992 - js_Int32ToId doesn't return the right id when passed a negative integer which doesn't fit in a jsval. Also change how 'in' is interpreted on trace so that we don't side-exit when the named property exists directly on the object. ALL HAIL TESTCASES! r=jorendorff 2009-07-15 02:48:49 -07:00
David Anderson
1899603001 Fixed division and modulo bugs with negative numbers and 0 (bug 498237, r=gal). 2009-07-09 18:14:32 -07:00
Jason Orendorff
5044a40564 Bug 503198 - Restore ability to trace initprop/setprop with non-branded scope and function rhs. r=brendan. 2009-07-09 06:49:44 -05:00
Jason Orendorff
3b8b21247e Bug 503191 - trace-test.js aborts in testAddAnyInconvertibleObject et al. r=Waldo.
--HG--
extra : rebase_source : 4977a191af6285669e7e268bc713c03a9338c60b
2009-07-08 17:58:59 -05:00
Jason Orendorff
d9e1f3aa40 Bug 502914 - JIT code can call js_AddProperty when the property already exists (Assertion failure: !SCOPE_HAS_PROPERTY(scope, sprop), at ../jsbuiltins.cpp:257). r=gal. 2009-07-08 15:44:58 -05:00
Jason Orendorff
9b7ea9a02e Last-minute change to the unit test in the previous changeset a08e3540da32, requested by bz in bug 502890 comment 6. Informal r=graydon. 2009-07-08 15:38:55 -05:00
Jason Orendorff
fc08c0c726 Bug 502890 - Assigning to a called method on trace does not change the object's shape. r=gal,r=brendan. 2009-07-08 14:44:31 -05:00
Boris Zbarsky
e3f52528d3 Bug 499865. Log blacklists as part of our jitstats. r=jorendorff 2009-06-23 23:44:38 -04:00
Andreas Gal
659a7a9b6c Implement oracle-based speculative fmod/fdiv/fmul demotion (474443, r=graydon,dvander). 2009-06-12 08:33:32 -07:00
Andreas Gal
7b098dc9e7 When merging type maps in a side exit, use the inner tree's globals (495958, r=dvander). 2009-06-04 20:42:56 -07:00
Jeff Walden
9607777654 Bug 496054 - TM: Null deref [@ JITted code] involving __proto__ munging and array-like access. r=brendan 2009-06-03 16:34:37 -07:00
Andreas Gal
f4be60c6d3 Bug 495897 - Assertion failure: ti->typeMap.matches(ti_other->typeMap) with undeclared global. r=dvander 2009-06-02 22:28:59 -04:00
Andreas Gal
518a96a672 Inspect the scope for the right object when looking up properties on fast arrays (495844, r=jwalden). 2009-06-01 18:58:56 -07:00
Andreas Gal
1f12d31de5 Abort recording if wrapping occurs, take 2 (495563, r=brendan). 2009-05-29 20:39:13 -07:00
Andreas Gal
548cbfeef5 Setting scopeChain to NULL in SynthesizeFrame breaks GetCallObject (494045, r=brendan). 2009-05-20 17:05:38 -07:00
Andreas Gal
0d2b989430 Update JSSLOT_ARRAY_COUNT when emitting array constructor code on trace (493255, r=jorendorff). 2009-05-18 15:56:11 -07:00
Jeff Walden
24ec69f5cf Bug 492599 - Recording of JSOP_NEWARRAY doesn't update JSSLOT_ARRAY_COUNT properly. r=jorendorff 2009-05-12 14:31:44 -07:00
David Mandelin
be8b0cb323 Bug 458838: updating test case to pass when we successfully trace out-of-reach upvars 2009-05-11 18:58:10 -07:00
Andreas Gal
806e556ee1 Make sure stack frame is flagged as constructor frame when falling off trace in a slow native constructor (491965, r=graydon). 2009-05-11 14:40:42 -07:00
Andreas Gal
89e9d61d35 Fast-path for string constructors only works for new/call with a single argument (491989, r=dmandelin). 2009-05-11 14:03:29 -07:00
Jacob Bramley
c942893875 Bug 483962 - Remove ARM-specific code from jstracer.cpp. r=vlad 2009-05-11 12:16:01 -04:00
Graydon Hoare
3330967d8a Bug 492124 - TM: unit tests should gc() before each, to purge JIT state, r=brendan. 2009-05-08 17:02:37 -07:00
jorendorff
93c6d226d3 Record all calls to native functions (487134, r=gal, brendan). 2009-05-05 14:26:06 -07:00
Andreas Gal
c5c7bd2f6c Trace getting String.length (484332, r=brendan). 2009-04-21 18:56:24 -07:00
Jeff Walden
c9680230c4 Bug 473117 - Rejigger how guards use side exits, and fix an erroneous comment. r=graydon 2009-04-18 16:47:23 -07:00
Andreas Gal
d9f8074374 Be less paranoid about jit stats for testNestedExitStackOuter since it doesn't seem to be stable. 2009-04-16 16:01:27 -07:00
Jason Orendorff
4dd9ad09ef Bug 487845 - TM: After deep-bailing, we can lirbuf->rewind() and then return to a dead code page. r=gal.
--HG--
extra : rebase_source : b7de71b526d45c7caed1982fba80c65763a0a9c6
2009-04-15 09:47:02 -05:00
Andreas Gal
c11974bb60 Backed out changeset 4c157cfe2289 (bug 487845). 2009-04-14 21:28:40 -07:00
Jason Orendorff
0616f91d10 Bug 487845 - TM: After deep-bailing, we can lirbuf->rewind() and then return to a dead code page. r=gal. 2009-04-14 08:45:37 -05:00
Jason Orendorff
81f9c93dec Bug 479198 - "Deep" property cache entries not invalidated when shadowed (TIBCO General Interface regression). r=brendan. 2009-04-06 13:24:20 -05:00
Brendan Eich
862f9eb6d3 Test for upvar2 dup/dep bug 473271, from comment 8; also remove print noise from testPropagatedFunArgs crash test. 2009-04-06 11:18:10 -07:00
Jeff Walden
7bd23208f1 Update trace-test.js jitstats for testThinLoopDemote to account for upvar2, although there's still some wonkiness here being tracked in bug 486820. r=orange 2009-04-05 22:29:18 -07:00
Brendan Eich
962b187fe5 upvar2, aka the big one take 2 (452598, r=mrbkap). 2009-04-05 21:17:22 -07:00
Jeff Walden
14e879800f Bug 486578 - TM: "Assertion failure: scope->object == pobj" with function, __proto__, length. r=gal 2009-04-04 16:55:51 -07:00
Andreas Gal
706120c0fb Backed out changeset 972c44aa9d1f (bug 452598). 2009-04-04 10:14:52 -07:00
Brendan Eich
5f4d9ff474 upvar2, aka the big one (452598, r=mrbkap). 2009-04-04 10:05:49 +01:00
Jeff Walden
3e189b0822 Bug 484751 - TM: "Assertion failure: !OBJ_GET_CLASS(cx, proto)->getObjectOps, at ../jsobj.cpp". r=mrbkap 2009-03-31 14:24:01 -07:00
Andreas Gal
79baa5db23 Guard that object is a dense array when skipping to its prototype during property lookup (485790, r=brendan). 2009-03-30 17:19:04 -07:00
Jeff Walden
c8f309e4e5 Bug 485889 - Incorrect null checking/assignment? (with xpcshell test case). r=gal 2009-03-30 17:15:42 -07:00
Robert Sayre
bfa28b2971 Back out Bug 483723 - 'Trace string.indexOf'. It conflicts badly with mozilla-central. 2009-03-29 10:38:18 -07:00
Vladimir Vukicevic
c32792f55e backing out 273c85c827e1 2009-03-27 16:42:49 -07:00
Vladimir Vukicevic
2a8f257f6d b=484599; add calling convention tests to trace-tests and js shell; r=mrbkap 2009-03-27 14:35:46 -07:00
Ben Turner
01022c4478 Bug 483723 - 'Trace string.indexOf'. r=brendan+gal. 2009-03-24 21:32:09 -07:00
Jeff Walden
136daf85e6 Bug 484495 - new String(obj) asserts when tracing. r=brendan, r=gal 2009-03-22 12:49:15 -07:00