Commit Graph

984 Commits

Author SHA1 Message Date
Andreas Gal
8aa08cec2a For GETELEM/SETELEM we must check that its a native object first before trying to compare the objects shape to the shape of the global object to ensure its not aliasing the global object (457979, r=shaver). 2008-09-30 20:10:46 -07:00
Vladimir Vukicevic
f761c61b8e TM: move cmov_available setting into nj arch backends where appropriate 2008-09-30 17:15:09 -07:00
Andreas Gal
83ea7eb834 Merge. 2008-09-30 16:35:52 -07:00
David Mandelin
a9fa2e79d8 Don't trace a property access with a watchpoint (455413, r=brendan) 2008-09-30 13:34:17 -07:00
Andreas Gal
9adad6d33a Merge. 2008-09-30 13:02:53 -07:00
Andreas Gal
9c4eefd7ec Fix guarding in case of sparse array setelem (regression from 457580, r=danderson). 2008-09-30 13:02:23 -07:00
David Anderson
0804b51ac0 Fixed cmp number check logic for 64-bit environments (bug 457129, r=gal). 2008-09-30 11:45:00 -05:00
David Anderson
60ff7369b3 Fixed global object ownership change not aborting recording (bug 455173, r=gal). 2008-09-29 23:55:58 -05:00
David Anderson
75e7abcf38 Fixed crash when charCodeAt failed (with NaN) while recording (bug 457795, r=gal). 2008-09-29 23:20:34 -05:00
Brendan Eich
11db6aaf1d Always use JSBool (not bool sometimes, JSBool others) as JSVAL_IS_BOOLEAN's native slot type. 2008-09-29 22:27:43 -04:00
Andreas Gal
320dd48955 Add a resume point (JSOP_RESUME) immediately following JSOP_CALL (457789, r=mrbkap). 2008-09-29 18:49:40 -07:00
Andreas Gal
36e0e1fcbf Catch negative indexes at recording time. At runtime the builtins already check for us. Also guard for shape and setters/getters for non-dense integer index setelem case (57580, r=mrbkap). 2008-09-28 17:11:47 -07:00
Andreas Gal
5fdd5d2b67 Properly handle cmov and sse2 flags, and put them in a central place not into each platform-dependant assembler (457355, r=danderson). 2008-09-26 20:39:21 -07:00
Andreas Gal
5cc5fdedb8 Merge. 2008-09-26 19:21:27 -07:00
Andreas Gal
9960750440 Can't use JSVAL_IS_BOOLEAN on trace since boolean type contains undefined (457351, r=brendan). 2008-09-26 19:20:52 -07:00
David Anderson
ce71880114 Fixed a bug where no shape guard was emitted if a property was not found, causing it to remain unseen if added later. Abort in this case instead. (bug 457171, r=brendan) 2008-09-26 19:18:00 -07:00
Andreas Gal
884eabf3d5 Cleanup SETELEM, box early (in case we side exit on that) and don't set return value if INITELEM or followed by POP (457336, r=brendan). 2008-09-26 17:33:40 -07:00
Andreas Gal
93a292bd90 Merge. 2008-09-26 14:16:25 -07:00
igor
19701dd91b When replenishing the recovery double pool, detect if a GC happens (follow up work for 456826, r=gal). 2008-09-26 14:16:11 -07:00
Boris Zbarsky
fe2220afb1 Bug 456165 part 2. Trace Date.now. r=gal 2008-09-26 14:37:50 -04:00
Boris Zbarsky
a4b9ae6222 Bug 456370. Flush the fragment cache earlier on global shape mismatch. r=gal 2008-09-26 14:37:49 -04:00
Andreas Gal
7bb0a663e6 Use a pre-allocated pool of doubles to make sure we can safely recover in case of OOM or out of doubles (456826, r=brendan). 2008-09-25 19:11:48 -07:00
Brendan Eich
8030ce9609 Bug 457130 - TM: regexp lastIndex property not traced correctly (r=danderson). 2008-09-25 17:45:14 -07:00
David Anderson
3808521295 Workaround for intermittent js_GetClassObject failures (bug 457069, r=brendan). 2008-09-25 17:30:01 -07:00
Brendan Eich
9807c189fe Bug 457127 - TM: Crash on digg.com with adblock plus [@ ReconstructPCStack] (r=danderson). 2008-09-25 17:05:06 -07:00
Brendan Eich
f875d89fa2 Bug 456810 - TM: Crash on digg.com with adblock plus [@ ReconstructPCStack] (r=gal). 2008-09-25 15:04:48 -07:00
Brendan Eich
b7841b8cfd Fixed argc < nargs miscount in js_SynthesizeFrame and adjusted a related assertion (bug 456667, r=danderson). 2008-09-25 13:12:01 -07:00
Andreas Gal
4be7fad144 Merge. 2008-09-25 11:32:00 -07:00
Andreas Gal
5b117e1c3f Rewrite and cleanup GETELEM and SETELEM (455748, r=brendan). 2008-09-25 11:31:40 -07:00
Jason Orendorff
c35bfc3682 Bug 389034 - JS_SetProperty() ends up resolving w/o JSRESOLVE_ASSIGNING (r=brendan, sr=bzbarsky) 2008-09-25 11:13:31 -05:00
Brendan Eich
d56e0c688e Back off premature arguments tracing (453730 temporary measure). 2008-09-25 08:51:40 -07:00
Andreas Gal
97be5eae89 Merge. 2008-09-24 23:32:19 -07:00
Andreas Gal
eb5f8be2b1 Demote modulo operations to integer if both args are int (456934, r=brendan). 2008-09-24 23:28:56 -07:00
Brendan Eich
3238fa4180 Bug 456931 - TM: GVAR op record methods use wrong object (r=gal). 2008-09-24 23:09:46 -07:00
Brendan Eich
86b3bc3671 Bug 456932 - TM: Don't assert that global object can't grow additional properties if none are used by any trace and we don't check for global shape mismatches (r=gal). 2008-09-24 23:05:44 -07:00
Andreas Gal
c3ae2f8027 Merge. 2008-09-24 19:33:04 -07:00
Andreas Gal
f1cdf0fd1c Make sure JSOP_DEFLOCALFUN pushes the right function object (456470, r=brendan). 2008-09-24 19:31:51 -07:00
Brendan Eich
ac41d655c4 Merge pull from mozilla-central. 2008-09-24 18:46:44 -07:00
Andreas Gal
5fdc88e6b7 Only fasttrack applys where the arguments array has the same lengths as the expected arguments of the called function (456494, r=brendan). 2008-09-24 16:45:27 -07:00
Andreas Gal
e50585b158 Merge. 2008-09-24 16:32:36 -07:00
Andreas Gal
2bc1ba7a91 The meaning of T changed in our builtin table to object-only, so we have to mark the string builtins now with S, instead of T (454682, r=brendan). 2008-09-24 16:31:07 -07:00
Brendan Eich
d0645c2e47 Bug 456875 - TM: js_SynthesizeFrame must js_GetCallObject if JSFUN_HEAVYWEIGHT (r=mrbkap). 2008-09-24 15:43:19 -07:00
Brendan Eich
536e07f808 Bug 455146 - TM: Going to NEW Facebook profile page causes crash. [ @FlushNativeStackFrame] (r=danderson,mrbkap). 2008-09-24 15:40:08 -07:00
Andreas Gal
619234db4c Back out attempt to invoke natives that return a boxed value (namely push and pop, 453734). 2008-09-24 15:18:19 -07:00
David Anderson
a53ee95a20 Fixed breaks in switch statements causing premature end-of-traces (bug 456345, r=gal,brendan). 2008-09-24 13:12:25 -07:00
David Anderson
ccd5e825b9 Fixed jstracer's operator delete leaking out into other shared libraries (bug 452721, r=gal). 2008-09-23 18:12:53 -07:00
Andreas Gal
38a8e67fa5 Merge. 2008-09-23 17:19:02 -07:00
Andreas Gal
958c18fb2a Add builtin for invocation of match() on String objects (454682, r=danderson). 2008-09-23 17:18:40 -07:00
Doug Turner
cf6bf884ef Bug 456458 - JS Tracer uses file-system stat structure name - WinCE compile fails. patch by dougt, r=crowder 2008-09-23 14:35:29 -07:00
David Anderson
b3141a864c Fix where recording could crash if globalObj->dslots got reallocated (bug 451137, bug 455137, r=gal). 2008-09-23 13:29:41 -07:00