Commit Graph

914 Commits

Author SHA1 Message Date
Brendan Eich
0366d26673 Try to fix Ts regression from patch for bug 592556... 2010-09-12 08:53:18 -07:00
Luke Wagner
562fc49870 Bug 539144 - Make formal args a jit-time const offset from fp; rm argv/argc/thisv/script/callobj (r=brendan,dvander) 2010-08-09 22:43:33 -07:00
Brendan Eich
6ba6389297 Rename freeslot appropriately (593256 separated cosmetics-only patch, r=jorendorff). 2010-09-03 11:05:43 -07:00
Brendan Eich
d7abc9c150 Eliminate JSObject::freeslot via monotonic lastProp->freeslot (592556, r=jorendorff,dvander). 2010-09-02 14:50:44 -07:00
Luke Wagner
273362efd0 Bug 583275 - remove unnecessary unboxing cost of obj->getPrivate() on x64 (r=brendan) 2010-09-10 17:06:30 -07:00
Chris Leary
7c740a8dc0 Back out due to mochiserver breakage. (no_r=me) 2010-09-09 16:52:31 -07:00
Chris Leary
7c2ac56dff Bug 540675: remove callerVersion from stack frame. (r=lw) 2010-09-09 14:25:30 -07:00
Igor Bukanov
e353306519 bug 588016 - Avoid reporting OOM when background has not finished. r=anygregor
--HG--
extra : rebase_source : 7d6b09d93bdc463cf7d06d2cdbe09085fd0e4b4b
2010-09-07 23:08:20 +02:00
Brendan Eich
32e251d137 Wrong behavior setting existing properties to joined function object values (592412, r=jorendorff). 2010-08-31 16:45:34 -07:00
Blake Kaplan
2b71d97594 No bug - Don't assert in js_DumpObject on non-native objects. rs=brendan 2010-09-02 15:59:19 -07:00
Luke Wagner
5e9978f911 Bug 581263 - remove slow natives (r=waldo,mrbkap) 2010-08-16 12:35:04 -07:00
Steve Fink
139d2a2a71 Bug 584175 - Unify various JS probes into a single set of static probe points. r=gal
Part 1: Change dtrace-specific names to probes
Part 2: Stop using the frame pointer for probes.
Part 3: Update the set of available probes

r=gal@uci.edu
a=NPOTB

--HG--
rename : js/src/jsdtracef.cpp => js/src/jsprobes.cpp
rename : js/src/jsdtracef.h => js/src/jsprobes.h
2010-09-01 14:09:54 -07:00
Robert Sayre
0308956e29 Backed out changeset e2e1ea2a39ce. (Igor Bukanov – bug 588016 - Avoid reporting OOM when background has not finished. r=anygregor) 2010-09-01 11:24:45 -07:00
Igor Bukanov
3232f601ce bug 588016 - Avoid reporting OOM when background has not finished. r=anygregor 2010-08-19 21:28:12 +02:00
Brendan Eich
b15d952f7c Bug 535629 - Deleted properties' slots are not recycled (r=gal).
--HG--
extra : rebase_source : 04a8bbd6731e4e9b9d36a5d685c5ee0f87db064e
2010-08-18 11:34:13 -07:00
David Mandelin
5eba7a1580 [JAEGER] Merge from Tracemonkey. 2010-08-31 10:36:08 -07:00
Brendan Eich
85ea65ea98 Bug 592001 - Fix v8-regexp regression in wake of patch for bug 558451 (r=igor, CLOSED TREE). 2010-08-31 07:33:25 -07:00
David Mandelin
de19395f25 [JAEGER] Merge from Tracemonkey. 2010-08-30 15:19:36 -07:00
David Mandelin
3dc48e12b2 [JAEGER] Merge from Tracemonkey. 2010-08-30 15:13:32 -07:00
Igor Bukanov
175710cef6 bug 558451 - followup to fix GCC warnings and link error. "CLOSED TREE" 2010-08-29 23:24:23 +02:00
Brendan Eich
790ddc9e99 Merge JSScope into JSObject and JSScopeProperty (now js::Shape; bug 558451, r=jorendorff). 2010-08-29 11:57:08 -07:00
David Mandelin
78cdeefdf2 [JAEGER] Merge from Tracemonkey. 2010-08-24 11:56:29 -07:00
Nicholas Nethercote
c5586f145a Bug 578216 - Make eval(json-like string) fast. r=sayrer 2010-08-24 11:50:54 -04:00
Nicholas Nethercote
2ab58fd02d Backed out changeset 74ce80e8782e 2010-08-23 22:38:19 -07:00
Nicholas Nethercote
7ba153876d Bug 578216 - Make eval(json-like string) fast. r=sayrer. 2010-08-23 18:13:09 -07:00
Brian Hackett
a4a17593d6 Move cx->fp to cx->regs->fp, bug 588978. r=lw
--HG--
extra : rebase_source : 14a90a53ceeb1f65d0ab70eafb5371095535e66f
2010-08-22 16:00:20 -07:00
David Mandelin
02f201cead [JAEGER] Merge from tracemonkey. 2010-08-23 11:35:14 -07:00
Brian Hackett
53791f1d70 Move cx->fp to cx->regs->fp, bug 588978. r=lw 2010-08-22 16:00:20 -07:00
Jim Blandy
285b03968f Bug 438633: Give new JSScript objects lifetimes like GCThings. r=brendan
Attach script objects immediately in all JSAPI script-creating functions;
have JS_NewScriptObject simply return the already-allocated object; and
make JS_DestroyScript a no-op.

Verify that all scripts given to JSAPI script-consuming functions have
objects, or are the canonical empty script object.
2010-08-20 13:11:05 -07:00
David Mandelin
169803d2d3 [JAEGER] Merge from tracemonkey. 2010-08-19 17:30:04 -07:00
Brian Hackett
2aeb294c19 Interface for JSStackFrame.argc, bug 586533. r=lw 2010-08-19 16:44:12 -07:00
David Mandelin
d32d792513 [JAEGER] Merge from tracemonkey. Note that we will currently fail one trace test that was recently added. There is a bug in that test that will be fixed posthaste. 2010-08-17 15:32:40 -07:00
David Mandelin
6f19cd8199 [JAEGER] Merge from Tracemonkey part 1: don't change visibility of JSStackFrame members yet 2010-08-16 15:37:15 -07:00
David Mandelin
c0001dbe3b [JAEGER] Merge from Tracemonkey. 2010-08-16 15:31:14 -07:00
David Mandelin
066c9f1718 [JAEGER] Merge from Tracemonkey. scopeChain and blockChain are still public so I can check one thing at a time--this merge is brutal. 2010-08-16 14:59:44 -07:00
Brian Hackett
ed4defc8b5 Add interface for JSStackFrame.fun/script/thisv/rval, bug 586533. r=lw 2010-08-15 08:44:51 -04:00
Chris Leary
b725adffe8 Bug 586358: make imacpc flagged. (r=lw) 2010-08-15 04:16:54 -07:00
Brian Hackett
da6f70519b Second try at adding interface for JSStackFrame.scopeChain/blockChain, bug 586533. r=lw 2010-08-13 23:36:37 -04:00
David Mandelin
a8a454c883 [JAEGER] Merge from tracemonkey. 2010-08-13 12:01:02 -07:00
Jason Orendorff
37d79b0719 Merge backout. 2010-08-13 08:24:40 -05:00
Jason Orendorff
8a568c9133 Backed out changeset c5e31473b1a6 (assertions for bug 583850). See bug 584578 and bug 585754. 2010-08-13 08:21:13 -05:00
Robert Sayre
a00d7f60fe Backed out changeset 1406935fced4. Brian Hackett – Put JSStackFrame.scopeChain/blockChain behind an interface, bug 586533. r=lw. 2010-08-12 21:47:46 -07:00
Brian Hackett
a416b05f95 Put JSStackFrame.scopeChain/blockChain behind an interface, bug 586533. r=lw 2010-08-13 00:08:37 -04:00
Brian Hackett
b6fa83e115 Put JSStackFrame.callobj/argsobj behind an interface, bug 586533. r=lw 2010-08-12 18:46:03 -04:00
Jim Blandy
4e04561ee9 Revert fixes for bug 438633, bug 585803 2010-08-12 14:07:52 -07:00
Jim Blandy
ce4b4e5c9e Bug 438633: Give new JSScript objects lifetimes like GCThings. r=brendan
Attach script objects immediately in all JSAPI script-creating functions;
have JS_NewScriptObject simply return the already-allocated object; and
make JS_DestroyScript a no-op.

Verify that all scripts given to JSAPI script-consuming functions have
objects, or are the canonical empty script object.
2010-08-12 12:38:37 -07:00
Brian Hackett
16873a1fb8 Bug 579471 - fast constructors (r=dmandelin,lw) 2010-08-10 16:38:08 -07:00
David Mandelin
4b7d4e43d2 [JAEGER] Merge from tracemonkey. 2010-08-11 11:05:24 -07:00
Luke Wagner
9644ea639c Bug 581900 - obj_getPrototypeOf produces wrong error when Invoked (r=brendan) 2010-08-09 14:07:27 -07:00
Paul Biggar
6634b70997 Split object/function allocation paths to avoid branch (578158, r=brendan). 2010-08-09 09:11:22 -07:00
David Mandelin
df3e6a9e74 [JAEGER] Merge from tracemonkey. 2010-08-09 11:36:39 -07:00
Brian Hackett
5ab7972159 Fast native constructors, bug 579471. 2010-08-03 12:20:48 -07:00
Jeff Walden
443f3f510a Bug 514581 - ES5: fun.caller and fun.arguments must throw when fun is strict-mode code. r=jimb
--HG--
extra : rebase_source : 10f930852e39b0b1ef917b18b6a1332a9a815d5d
2010-08-02 23:52:12 -07:00
David Mandelin
d7f6c4209b Merge from Tracemonkey. 2010-08-02 15:55:29 -07:00
Jason Orendorff
5534502a01 Bug 583850 - Assert that certain security checks in the JS engine never fail. r=mrbkap. 2010-08-02 16:38:46 -05:00
Jason Orendorff
652b4f196b Bug 583262 - Remove security checks on f.prototype.constructor property at last. r=mrbkap.
--HG--
extra : rebase_source : d41e97b9ec4367ed4eb1f28a082571f37a9696e2
2010-08-02 15:59:06 -05:00
Robert Sayre
250c59eece Reland: Bug 577648 - arguments.callee.caller does not work in FF 4 under certain circumstances. 2010-08-01 09:58:03 -07:00
Robert Sayre
9bae5e1079 Backout changeset 80382d88b92c. (Bug 577648 - arguments.callee.caller does not work in FF 4 under certain circumstances). The patch is righteous, but MSVC's behavior with a mere 3GB of addressable memory is not. Will reland soon. 2010-07-31 14:01:26 -07:00
David Mandelin
09a44c39fb Bug 583402 followup: use correct new freeslot 2010-07-30 18:52:54 -07:00
David Mandelin
103991fb43 Bug 583402: fix loop in js_ClearNative 2010-07-30 16:33:07 -07:00
David Mandelin
4c5a188923 [JAEGER] Merge from Tracemonkey. 2010-07-29 13:23:33 -07:00
Igor Bukanov
4eff9db05f bug 579957 - parent as a field in JSObject. r=lw 2010-07-29 19:11:27 +02:00
David Mandelin
a73ecdeee1 Merge from Tracemonkey. 2010-07-28 11:16:36 -07:00
Igor Bukanov
181c2cdf3a Backed out changeset 7b2b90efe57d -- the patch was landed against a tree with a lot of orange. This will hinder the orange resolution. 2010-07-28 14:36:06 +02:00
David Mandelin
904ccc994c Merge from Tracemonkey. 2010-07-27 11:48:08 -07:00
Igor Bukanov
b4a4d8d48e bug 579957 - parent as a field in JSObject (relanding after wixing bug 583404). r=lw 2010-07-31 11:54:01 +02:00
Igor Bukanov
fc98a499af bug 583404 - backport of fix from David for JM branch. 2010-07-31 11:42:28 +02:00
Andreas Gal
98a47a4f07 Array.prototype lost its length property (583429, r=brendan). 2010-07-30 18:24:03 -07:00
Robert Sayre
909914ff10 Merge backout. 2010-07-29 18:15:03 -07:00
Robert Sayre
c7bd912564 Backed out changeset d8bbb2ef3038. (Igor Bukanov – bug 579957 - parent as a field in JSObject. r=lw) 2010-07-29 18:11:41 -07:00
David Anderson
31e9292046 [JAEGER] Merge from tracemonkey. 2010-07-25 20:21:14 -07:00
Luke Wagner
5f73207275 Remove js::Value default ctor (jsval doesn't have one) (no bug) 2010-07-23 17:16:00 -07:00
Brendan Eich
794e678554 Arguments.callee.caller does not work in FF 4 under certain circumstances (577648, r=jwalden). 2010-07-23 14:41:56 -07:00
David Mandelin
3c3566af26 [JAEGER] Merge from tracemonkey. 2010-07-23 18:47:24 -07:00
David Mandelin
cf0c3c24a7 Merge from tracemonkey. 2010-07-22 18:31:01 -07:00
Sean Stangl
7388a70f72 [JAEGER] Merge from TraceMonkey (which pulled m-c). 2010-07-20 22:24:39 -07:00
Jason Orendorff
02f46a123c Bug 580084 - JS_InitClass with no methods or properties breaks JSScope::emptyScope invariant. r=brendan. 2010-07-20 16:57:12 -05:00
David Anderson
cf5a8cf505 [JAEGER] Merge from tracemonkey. 2010-07-19 20:49:26 -07:00
Jeff Walden
8b99528a95 Bug 568786 - Fix a bad assertion defining an accessor property over a method-valued property. r=brendan
--HG--
extra : rebase_source : 88fc1934f4be3516ace8b006c4296931dfef7a5f
2010-07-19 12:39:57 -05:00
Tom Austin
2ad03dfa62 Remove special constructs no longer needed for Narcissus (bug 579137, r=gal) 2010-07-16 18:16:07 -07:00
Jason Orendorff
7947f2514c Make CheckScopeChainValidity local to jsobj.cpp. No bug#, rs=gal on IRC. 2010-07-29 16:25:06 -05:00
Brendan Eich
1813531fe8 Back out patch for bug 577648, need to fix a leak. 2010-07-23 14:21:50 -07:00
David Anderson
a020926861 [JAEGER] Merge from fatval branch. 2010-07-12 10:46:01 -07:00
Chris Leary
1834523ed5 Bug 577708: Remove Algol-like display optimization. (r=dvander) 2010-07-11 00:57:13 -07:00
Brendan Eich
72e638d9ef arguments.callee.caller does not work in FF 4 under certain circumstances (577648, r=jwalden). 2010-07-10 11:48:00 -07:00
Andreas Gal
817e9fe04a Remove hole count from dense arrays (580846, r=njn). 2010-07-22 18:45:21 -07:00
Igor Bukanov
246300e968 bug 576596 - removal of JSObjectOps::(call|construct|hasInstance). r=jorendorff
--HG--
extra : rebase_source : 8fd09ab6bfb4daece7a27b9a46097ae74bdc055c
2010-07-07 09:53:50 +02:00
Luke Wagner
8c317f0f93 Stick jsops.cpp into jsinterp.cpp, where it belongs 2010-07-05 18:28:41 -07:00
David Anderson
64fd3377e9 [JAEGER] Merge from fatval & TM. 2010-07-05 18:07:39 -07:00
Luke Wagner
97d36215fd Change asX to toX, asXRef to getXRef, XTag to XValue 2010-07-05 13:44:59 -07:00
Luke Wagner
b77253dee8 Fix browser bustage from merge 2010-07-04 19:48:36 -07:00
Luke Wagner
1cec9d28d0 Fix compilation errors in merge. Trace-tests works 2010-07-04 15:13:23 -07:00
Luke Wagner
d119486317 Merge from TM
--HG--
rename : js/src/xpconnect/src/wrappers/AccessCheck.cpp => js/src/xpconnect/wrappers/AccessCheck.cpp
2010-07-04 14:49:39 -07:00
Luke Wagner
1bbdcb442c Remove bogus tag-testing in conservative GC; fix warning; define js_GetterOnlyPropertyStub appropriately 2010-07-04 12:55:13 -07:00
Luke Wagner
d52a11e637 Get merge building js shell and passing trace/ref tests. Still need to fix up browser 2010-07-04 00:12:06 -07:00
Sean Stangl
bcde0f1fc6 [JAEGER] Merge with fatval. 2010-07-02 21:52:25 -07:00
Luke Wagner
15a253d499 Merge 2010-07-01 23:10:37 -07:00
Luke Wagner
68403a872a Get narcissus compiling 2010-06-30 16:32:44 -07:00
David Anderson
9c55bbcdbc [JAEGER] Merge from fatval. 2010-06-30 11:46:07 -07:00
Luke Wagner
19f7cefc18 Drop the distinction in js::Value of funobj vs. nonfunobj. Instead, values can just have JSVAL_TYPE_OBJECT. The trace-jit still uses funobj/nonfunobj and translates as necessary. 2010-06-29 22:33:52 -07:00
David Anderson
2edc12b5ce [JAEGER] Fixed debug build. 2010-06-29 13:29:39 -07:00
David Anderson
9d91d7d5a9 [JAEGER] Merge from fatval. 2010-06-29 11:54:42 -07:00
Luke Wagner
b8a731853a Put JSContext argument back at the end of SameValue (apparently that means something) 2010-06-29 02:08:07 -07:00
Luke Wagner
ae0f7e12b6 Change js::DumpX back to js_DumpX 2010-06-29 01:49:55 -07:00
Chris Leary
21e4248a17 JM: Bug 574697, eagerly calculate |this|. (r=dvander) 2010-06-28 22:24:21 -07:00
Luke Wagner
fdd5b33385 Bug 579140 - Address review comments in xdr and xpconnect (r=igor,mrbkap) 2010-07-15 18:19:50 -07:00
Luke Wagner
99411cc93d Bug 549143 - fatvals 2010-07-14 23:19:36 -07:00
Jeff Walden
173c4d1adf Bug 531675 - Ignore the second argument of eval, except to warn once per JSScript (per function, or per global script for uses not in functions) that it's not supported. (Again.) r=mrbkap
--HG--
extra : rebase_source : 2a0b9670e7c2c90ab0c41d37e3ab99c3bbc4c819
2010-07-23 11:27:07 -05:00
Chris Leary
4c5fd024ab Bug 578272: Remove Algol-like display optimization. (r=brendan) 2010-07-26 06:35:38 -07:00
Nicholas Nethercote
be11c2f1c9 Backout TM-specific patches for bug 552812 due to assertion failures on Win2003. 2010-07-26 00:03:02 -07:00
Nicholas Nethercote
03a540e016 Bug 552812 - nanojit: factor out AccSet differences into TM and TR (TM-specific part). r=gal. 2010-07-25 21:23:02 -07:00
Jeff Walden
c626757f95 Bug 574474 - Eliminate a gratuitous property-name copy from the implementation of Object.keys. r=gal 2010-06-24 15:03:54 -07:00
David Anderson
a3709f170d [JAEGER] Merge from fatval branch. 2010-06-24 11:18:01 -07:00
Robert Sayre
377ebdefe1 Merge backout. 2010-08-04 13:45:02 -07:00
Robert Sayre
02b2a7ec6d Backed out changeset c6131ed87e9c. Jason Orendorff — Bug 583262 - Remove security checks on f.prototype.constructor property at last. r=mrbkap. Causing nightly topcrash. 2010-08-04 13:44:48 -07:00
Luke Wagner
ab09c2952d Switch jsids back to pointer-sized and fix a bunch of broken assumptions 2010-06-16 18:21:34 -07:00
Brendan Eich
fc2a83c5ee Assertion failure: scope->canProvideEmptyScope(&js_ObjectOps, clasp) (574280, r=gal). 2010-06-24 10:10:04 -07:00
David Anderson
82d98ad449 [JAEGER] Predict unbound names as being on the global object (bug 564949). 2010-06-12 19:00:27 -07:00
Igor Bukanov
2019c722fb bug 571789 - merging JSObjectOps and JSExtendedClass into JSClass. r=jorendorff 2010-06-12 18:29:04 +02:00
Igor Bukanov
a69fd0a49f bug 571789 - merging JSObjectOps and JSExtendedClass into JSClass. r=jorendorff 2010-06-12 18:29:04 +02:00
Nicholas Nethercote
9dfbe8877d Bug 552812 - nanojit: factor out AccSet differences into TM and TR (take 3, TM-specific part). r=gal. 2010-07-27 22:33:42 -07:00
Jeff Walden
27898e866f Bug 581744 - Deprecate JSFUN_GETTER and JSFUN_SETTER; they never did much, and they're very nearly dead code already. r=brendan 2010-07-26 16:11:37 -07:00
Andreas Gal
d23600e449 Bug 582081 - Dense array patches regressed empty Array creation on Dromaeo. r=jwalden 2010-07-27 16:42:58 -07:00
David Anderson
a2bfe74bbb [JAEGER] Merge from fatval branch. 2010-06-10 21:58:13 -07:00
David Mandelin
f242431382 Bug 569766: Make tracing work with fat values 2010-06-10 17:20:26 -07:00
Jason Orendorff
c1a1fb9be1 Bug 563099 - Compartments and wrappers API. r=gal.
--HG--
extra : rebase_source : cb34d0d0fc689fc6401d67e7f719344cd8e27655
2010-06-23 16:35:10 -05:00
Brendan Eich
e672f52623 Eliminate JSClass::reserveSlots and streamline new-object paths (535416, r=gal). 2010-06-18 17:43:02 -07:00
Jason Orendorff
c7000f4f86 Bug 574013 - Change JSObjectOps::call to compute this even later in certain cases. (This will also facilitate implementint ES5 primitive this.) r=gal.
--HG--
extra : rebase_source : 2f588a571cc7970ae2119338e4abfc34bdd6fdc8
2010-06-23 12:08:34 -05:00
David Anderson
858278d975 [JAEGER] Merge from fatval branch. 2010-06-10 14:01:11 -07:00
Luke Wagner
e6f9490099 Simplify code now that Value is copyable 2010-06-10 10:09:05 -07:00
Luke Wagner
dde2523f3a Remove assumption that getter objects are functions (can be any callable), fix jsproxy aliasing bug 2010-06-09 23:20:37 -07:00
Luke Wagner
1bb5128ab0 Merge with TraceMonkey 2010-06-09 21:59:18 -07:00
David Anderson
ad6f6ffb02 [JAEGER] Merge from fatval branch. 2010-06-07 19:29:40 -07:00
Jason Orendorff
6e7f075424 Merge backout. 2010-06-07 20:39:48 -05:00
Jason Orendorff
5874315d91 Back out changeset 5f425aecd7ab again. Still has performance issues; 14% in ThisObject hook. 2010-06-07 20:36:57 -05:00
Andreas Gal
be035f8008 Allow reading reserved slots without locking if we know its safe to do so (570404, r=brendan). 2010-06-07 21:35:58 -04:00
Luke Wagner
0d5dd30ea8 Firefox builds 2010-06-07 18:21:51 -07:00
David Anderson
87d142550e [JAEGER] Merge from fatval branch. 2010-06-04 22:11:53 -07:00
Luke Wagner
7b81a5dc24 Make JSHasInstanceOp and JSEqualityOp take jsval. Get a lot of xpconnect compiling 2010-06-04 16:55:08 -07:00
Jason Orendorff
5f5deee89d Bug 556277 - Compute this eagerly in more cases. r=brendan. Second landing. 2010-06-04 00:34:57 -07:00
David Anderson
8e4fe7b3e9 [JAEGER] Merge from fatval branch. 2010-06-03 23:04:57 -07:00
Luke Wagner
8f6c06b148 Remove jsboxedword, change jsid to be a jsval 2010-06-02 19:09:04 -07:00
Bill McCloskey
40b74847a1 Bug 609104 - Move the property tree to the compartment (r=brendan) 2011-02-04 10:59:07 -08:00
Bill McCloskey
4d89be0bd8 Backed out bug 609104 (csets ac3ba38f20c0 and 7717cabaf20c) (orange) 2011-02-02 14:20:06 -08:00
Bill McCloskey
daa16e64bb Bug 609104 - Move the property tree to the compartment (r=brendan) 2011-01-27 15:46:39 -08:00
David Mandelin
a4880c2f6d Bug 611652: clear values instead of scope when global window is cleared, r=brendan,enn,jeff,mrbkap,smaug
--HG--
extra : rebase_source : 77e3844d35de229817bee767256a96d030a78bf9
2011-01-21 18:37:30 -08:00
Luke Wagner
5719802a65 Bug 629974 - js_TraceObject doesn't need to mark past slotSpan (r=brendan)
--HG--
extra : rebase_source : 232f2e01121dd89fb1d5ec032b7e0b986068ad49
2011-02-01 14:24:28 -08:00
Luke Wagner
64d2de0179 Bug 628564 - Make sure we don't miss the AbortIfUnexpectedGlobalWrite check (r=brendan)
--HG--
extra : rebase_source : 1b66dc81ff960db5eb966956c13282cda1796ac1
2011-02-01 11:01:26 -08:00
Bill McCloskey
8e7e07dfaa Bug 623297 - Make JS_TRACE_MONITOR more robust by distinguishing callers (r=gal) 2011-02-01 10:18:06 -08:00
Jeff Walden
13fb18a6fe Bug 619283 - Built-in JS methods must not box undefined or null into the global object when called, both to comply with ES5 and to prevent inadvertent global object exposure to secure JS variants. r=dmandelin
--HG--
extra : rebase_source : be6802a24bd58eb6339369e6803d3eb2fbbc07a5
2011-01-26 13:37:45 -08:00
Jim Blandy
2016210905 Bug 554955: Revert fix (changesets 297b1312f534, 18a1effafe19, 26d40e1e80bf, f6117465a979): 14% performance hit as measured by Talos. r=talos 2011-01-31 16:48:26 -08:00
Bill McCloskey
fa08e98f10 Bug 630340 - Fix undefined value in compartment assertion (r=Waldo) 2011-01-31 13:54:28 -08:00
Jason Orendorff
f1be13e671 js_InitExceptionClasses was skipping part js_InitClass, leading to "Assertion failure: proto->canProvideEmptyShape". Bug 624968, r=Waldo.
--HG--
extra : rebase_source : 08ebb71574a0b1962e8f1c0c3f9a7aa7ec904b03
2011-01-24 17:32:44 -06:00
Jim Blandy
a237e87988 Bug 554955: Give blocks and call objects unique shapes when they have parents that may be extended with new bindings. r=jorendorff
The comments for js::Bindings::extensibleParents explain why this is necessary.

AssertValidPropertyCacheHit should have been catching this bug, but for
reasons I don't understand, it is restricted from checking this case. This
patch extends it to assert when the bug is detected.

I've gathered the infallible parts of the initialization for Call objects
and cloned block objects into their own functions.
2011-01-31 12:08:13 -08:00
Brendan Eich
de8093385a Followup fix for gaping hole in patch for bug 591846 (credit to jorendorff, r=me). 2011-01-29 01:01:54 -08:00
Brendan Eich
1d606e7be9 Allow PropertyOp-based data properties to be frozen at last-got value (591846, r=jwalden). 2011-01-25 18:04:45 -08:00
Chris Leary
6d0cc31d27 Back out changeset 7d82892cb8df. 2011-01-27 19:43:33 -08:00
Chris Leary
001cef1fd8 Merge the backout head. 2011-01-27 16:26:21 -08:00
Chris Leary
8f8ea8fd48 Backed out changeset b5ca98debed0 2011-01-27 16:25:30 -08:00
Bill McCloskey
a4f9ab0da8 Bug 609104 - Move the property tree to the compartment (r=brendan) 2011-01-27 15:46:39 -08:00
David Mandelin
62ff5f09d8 Bug 611653: clear values instead of scope when global window shuts down, r=brendan,smaug 2011-01-21 18:37:30 -08:00
Chris Leary
074bd0c596 Bug 595691, take 2: fix versioning across VM instances, remove _options. (r=luke,brendan,igor) 2011-01-27 02:54:58 -08:00
Andreas Gal
3c34eab945 Follow-up fix for bug 625559. 2011-01-26 19:19:33 -08:00
Chris Leary
1771b7c232 Backed out changeset b88172246b66 due to Win32 debug failures. 2011-01-25 04:11:47 -08:00
Chris Leary
b462e1fb98 Bug 595691: fix versioning across VM instances, remove _options. (r=luke,brendan,igor) 2011-01-25 02:33:27 -08:00
Chris Leary
e41aa73d24 Back out changeset 72cb2f4a893c 2011-01-24 19:45:08 -08:00
Andreas Gal
6629b9fa11 Trigger appropriate proxy trap for Object.getOwnPropertyNames (bug 628333, r=jwalden). 2011-01-24 16:10:54 -08:00
Andreas Gal
927855f788 Cache eval CSP check (bug 614137, r=mrbkap, a=dmandelin). 2011-01-22 14:28:37 -08:00
Luke Wagner
b00fed595e Bug 626118 - Fix RegExp ref-counting leak; record already-incremented-ness in type (r=cdleary) 2011-01-17 14:58:53 -08:00
Jason Orendorff
ec712fc18c Return the new shape from methodWriteBarrier instead of searching for it again. Bug 623863, r=brendan. 2011-01-17 11:30:08 -06:00
Jason Orendorff
f224da500c Bug 559653 - Record assignment before the interpreter goes, mostly. This reduces record_SetPropHit to a narrower callback, record_AddProperty. r=brendan.
--HG--
rename : js/src/jsapi-tests/testSetPropertyWithNativeGetterStubSetter.cpp => js/src/jsapi-tests/testSetProperty.cpp
2011-01-14 16:18:53 -06:00
Bill McCloskey
238069d8ff Bug 623050 - Move tracerState to compartment (r=gal) 2011-01-12 16:56:23 -08:00
Igor Bukanov
5a00058c07 Bug 619529 - avoid any exposure of XML's AttributeName and AnyName objects. r=brendan 2011-01-09 00:01:52 +01:00
Chris Leary
887da71fad Merge mozilla-central into tracemonkey. 2011-01-12 00:07:40 -08:00
Andreas Gal
b4b6a78889 Bug 609287. Fix Assertion failure: OperationInProgress(cx, proxy). r=jorendorff@mozilla.com, jwalden@mit.edu, a=blocker. 2011-01-11 17:09:53 -08:00
David Anderson
2ff0acbe75 Fix a slot bug when objects become dictionaries (bug 618129, r=brendan). 2011-01-11 11:47:07 -08:00
Brendan Eich
042b55be8a Fix joined method leak via arguments.callee.caller (586482, r=igor). 2011-01-04 12:27:18 -08:00
Chris Leary
5ada212069 Bug 587288: 0. Compartmentalize regexp allocator, remove ExecutablePool atomic refcounts. (r=gal) 2011-01-05 18:44:30 -08:00
Jeff Walden
6ddf166349 Warning patrol. r=sparky 2011-01-04 15:18:16 -06:00
Brendan Eich
4d93d9cad7 Backing out last push. 2011-01-03 23:07:46 -08:00
Brendan Eich
3f2e5de43d Bug 586482 - arguments.callee.caller not equal to proto-delegated joined function object method (r=igor). 2010-11-11 10:06:56 -08:00
Jeff Walden
ff60a27654 Bug 621376 - new Function.prototype on trace should not define Function.prototype.prototype. r=brendan 2010-12-27 16:24:27 -06:00
Brian Hackett
be4d109005 Don't generate INITPROP/INITELEM for singleton constant initializers, bug 577359. 2010-12-30 08:07:43 -05:00
Chris Leary
5c3dd7b9ca Merge mozilla-central to tracemonkey. 2010-12-30 00:36:53 -05:00
Chris Leary
272d457a20 Merge mozilla-central to tracemonkey. 2010-12-29 19:25:04 -05:00
David Mandelin
c3e8135c6a Bug 595975 diagnostic 2: shape markers and object data, r=billm, a=blocker
--HG--
extra : rebase_source : ddc486824d5f4a4e3dfe114ccde7e4841033ebaa
2010-12-28 14:50:01 -08:00
David Mandelin
625946d567 Backed out changeset c35a4e6ea3ca -- done with diagnotics. 2010-12-29 17:46:14 -08:00
Jeff Walden
59814e4551 Bug 620315 - "Assertion failure: unexpected constantly false guard detected" with "use strict", 4 > this. Fix a problem where we weren't marking functions created by |new Function| as accepting a primitive this value when their body was strict mode, by removing the duplicative bit that was being checked. r=dmandelin 2010-12-22 18:05:07 -05:00
Jeff Walden
fa572289d5 Bug 620130 - Calls to eval with same code + varying strict mode of script containing eval == fail. r=brendan 2010-12-18 14:17:09 -06:00
Robert Sayre
eb5a082560 Merge tracemonkey to mozilla-central. a=blockers
--HG--
rename : js/src/trace-test/tests/basic/bug616762.js => js/src/jit-test/tests/basic/bug616762.js
2010-12-15 12:21:50 -08:00
David Anderson
dff194f865 [JAEGER] Merge from fatval. 2010-05-30 20:07:48 -07:00
Jason Orendorff
46fecd5674 Bug 570169 - Part 2, add assertions that gcthings do not leak across compartments. r=gal.
--HG--
extra : rebase_source : eaa2aee559527dbca94c3279d256833d2293ca67
2010-06-16 16:13:28 -05:00
Jason Orendorff
9988b38a60 Bug 570169 - Part 3, cope with E4X and compiler-internal objects. r=gal. (Part 2 is to follow; my apologies for crummy numbering.) 2010-06-16 16:13:50 -05:00
Brendan Eich
734c3a1ba9 Back out a81f2aed9c9b due to orange. 2010-06-18 17:39:22 -07:00
Brendan Eich
157c408713 Eliminate JSClass::reserveSlots and reserve fixed-per-class slots lazily (535416, r=gal). 2010-06-15 10:06:40 -07:00
Andreas Gal
a92e115145 Move proto out of fslots and make it JSObject* (572820, r=jorendorff). 2010-06-17 15:23:17 -07:00
Andreas Gal
d79abfd782 Bug 572774 - NULL deref due to bug in js_Call, regression from bug 572495. r=jorendorff. 2010-06-17 13:15:18 -05:00
Igor Bukanov
a3a94a3484 bug 572411 - removal of JSObjectOps::checkAccess. r=mrbkap 2010-06-17 14:32:26 +02:00
Jason Orendorff
c80c81124a Merge backout. 2010-06-16 20:03:30 -05:00
Jason Orendorff
c1e349137a Back out changeset 4c1fbfcf1d0d due to orange. 2010-06-16 20:03:11 -05:00