Commit Graph

345 Commits

Author SHA1 Message Date
Jeff Walden
e8e463d19c Bug 631098 - Ensure slow arrays always have a length property. r=brendan, a=b 2011-02-03 11:04:14 -08:00
Bill McCloskey
8e7e07dfaa Bug 623297 - Make JS_TRACE_MONITOR more robust by distinguishing callers (r=gal) 2011-02-01 10:18:06 -08:00
Bill McCloskey
3c8509742b Bug 623297 - Reduce usage of JS_TRACE_MONITOR in jstracer (r=gal) 2011-02-01 10:16:44 -08:00
Jeff Walden
13fb18a6fe Bug 619283 - Built-in JS methods must not box undefined or null into the global object when called, both to comply with ES5 and to prevent inadvertent global object exposure to secure JS variants. r=dmandelin
--HG--
extra : rebase_source : be6802a24bd58eb6339369e6803d3eb2fbbc07a5
2011-01-26 13:37:45 -08:00
David Mandelin
618cf9a71d Bug 624041: skip elements deleted via shift or reverse in iteration, r=igor
--HG--
extra : rebase_source : 4e6862e68ee808b172c782412a2983ad0ea5ac4a
2011-01-10 18:39:46 -08:00
Luke Wagner
75d92493c9 Bug 626526 - Change cx->busyArrays to use SystemAllocPolicy; avoid JSContext init subtleties (r=pbiggar) 2011-01-24 09:47:25 -08:00
Bill McCloskey
238069d8ff Bug 623050 - Move tracerState to compartment (r=gal) 2011-01-12 16:56:23 -08:00
Chris Leary
29a4e97a8f Bug 617935: Check string lengths using StringBuffer. (r=lw) 2011-01-12 15:28:58 -08:00
Jeff Walden
d7667cbf66 Back out 72ac46e9f64e for orange. r=bustage 2011-01-11 15:04:36 -06:00
David Mandelin
3933a8dec7 Bug 624041: skip elements deleted via shift or reverse in iteration, r=igor 2011-01-10 18:39:46 -08:00
David Mandelin
7ad6a4c643 Backed out changeset 000cb7431848 -- bad commit messaage 2011-01-11 11:42:29 -08:00
David Mandelin
28e3bcfb71 [mq]: fix-iter.diff
* * *
[mq]: fix-iter2.js
* * *
[mq]: itertest.js
2011-01-10 18:39:46 -08:00
Paul Biggar
602b3440e8 Bug 623859 - Add missing OOM checks during array allocation (r=lw) 2011-01-07 18:55:35 -08:00
Luke Wagner
b30b771200 Bug 619970 - Use the correct magic-value code in GetElement (r=waldo) 2011-01-03 09:06:26 -08:00
Brian Hackett
582da529de Don't call setProperty from dense array defineProperty, bug 618350. r=waldo 2010-12-16 13:33:49 -08:00
Luke Wagner
d8719356c0 Bug 609440, part 4 - make JSString::chars() fallible (r=waldo,dvander,igor,dwitte,njn) 2010-12-06 10:26:58 -08:00
Paul Biggar
d5a5d3946f Bug 612292 - Rename array allocation functions (r=lw) 2010-12-13 16:22:59 -08:00
Jim Blandy
24b8297050 Bug 599159: Revert changes making Array length handling strict-sensitive, to be redone differently. r=brendan 2010-12-09 11:43:31 -08:00
Igor Bukanov
f110aa58b7 bug 603318 - make dense array slow during array growth, not during the GC. r=bhackett 2010-10-14 16:12:19 +02:00
David Mandelin
bf0a0f2c33 Bug 614915: set return value correctly when sorting a list containing only undefined values, r=cdleary 2010-11-30 10:25:07 -08:00
Jan de Mooij
2c0fa33d2e Bug 614070 - Fix Array.prototype.unshift to always set the new length on this. r=jwalden
--HG--
extra : rebase_source : ee4b0898778b2646087405b177be891867f16380
2010-11-24 23:22:44 +01:00
Chris Leary
3ef296cd53 Tracer build fixes. (b=588021, r=dvander) 2010-11-23 13:58:34 -08:00
David Mandelin
7fbeca4035 Bug 570385: notify iterators of dense array property deletion in DeleteArrayElement, r=igor 2010-11-19 17:01:26 -08:00
Brian Hackett
d2c59c063a Compile INITPROP/INITELEM, bug 606477. r=jorendorff,dvander 2010-11-18 18:14:22 -08:00
Brian Hackett
7c941aa622 Fix fixed slots invariant for slow arrays, bug 610592. r=brendan 2010-11-15 17:21:58 -08:00
Luke Wagner
36b12087f9 Bug 610038 - apply should not ignore indexed properties on the prototype (r=waldo) 2010-11-09 09:06:57 -08:00
Luke Wagner ext:(%2C%20Jan%20de%20Mooij%20%3Cjandemooij%40gmail.com%3E)
43464cfd48 Bug 595884 - JM: make f.apply(x, arguments) fast (r=dvander)
--HG--
extra : rebase_source : 81f5bd888164aecab2f3e701fb31ccf81affbc21
2010-10-21 11:42:28 -07:00
Luke Wagner
977a639eeb Bug 605192 - JM: make f.apply(x, obj) fast, part 1 (r=waldo)
--HG--
extra : rebase_source : cceaabf5a68cae8bfa67320b4a47f0673ade86c6
2010-10-20 23:52:55 -07:00
Boris Zbarsky
ffa00663da Bug 606141. ArrayCompPush can deep-bail, so handle that. r=jorendorff 2010-11-04 16:37:44 -04:00
Nicholas Nethercote
c8ae37081d Bug 607242 - TM: inline js_Array_dense_setelem_hole. r=gal. 2010-11-03 20:48:51 -07:00
Blake Kaplan
c0e2873909 Bug 596031 - 'this' is wrong in getters and setters when a proxy object is on the prototype chain. r=brendan/jorendorff/gal
--HG--
extra : rebase_source : 609b96c4b461e33f0f79dc74f714edfa882d1da0
2010-10-29 10:42:35 -07:00
Nicholas Nethercote
505e8ac40a Bug 602703 - TM: create a layer over Nanojit's LIR creation API. r=lw. 2010-10-28 18:28:36 -07:00
Jeff Walden
ca6294d553 Bug 607148 - Remove unnamed namespaces from SpiderMonkey code. rs=luke 2010-10-25 16:47:11 -07:00
Jason Orendorff
bfaf004fd7 Merge. 2010-10-22 19:11:26 -05:00
Jason Orendorff
596862d852 Remove JSObject::title. Bug 606029, r=igor. 2010-10-22 19:04:22 -05:00
Andreas Gal
a4b0c37cda Remove obsolete wrappedObject extended class hook (604523, r=mrbkap/vlad/dvander). 2010-10-22 15:40:11 -07:00
Tom Schuster
457468224a Bug 373118 - Fix handling of explicitly-provided |undefined| as an optional argument to various JS functions ([].sort, [].slice, "".slice, "".substr, "".substring). r=jwalden 2010-10-21 15:02:02 -07:00
Andreas Gal
6e672eda05 Backed out changeset 438afef93fd5 (bug 604523) due to suspected orange. 2010-10-20 23:19:05 -07:00
Andreas Gal
e5f45d98a2 Remove obsolete wrappedObject extended class hook (604523, r=mrbkap/vlad/dvander). 2010-10-20 22:41:35 -07:00
Nicholas Nethercote
913bd8a149 Bug 584279 - TM: improve alias analysis by adding many more access regions (2nd attempt). r=bhackett. 2010-10-18 12:55:56 -07:00
Tom Schuster
5369c7af87 Bug 604971 - array.sort compare-function gets incorrect this. r=jwalden 2010-10-18 12:24:23 -07:00
Nicholas Nethercote
be2aa1d407 Backed out changeset c961a413660c 2010-10-17 23:24:26 -07:00
Nicholas Nethercote
e48a2774f0 Bug 584279 - TM: improve alias analysis by adding many more access regions. r=bhackett. 2010-10-17 18:42:58 -07:00
Brian Hackett
f9cf7a5b7d Flexible length JSObject, bug 584917. r=brendan,igor 2010-10-13 11:49:22 -07:00
Jeff Walden
4626f47ec6 Bug 514570 - 3 - Don't box |this| for strict mode functions. r=jorendorff 2010-10-12 11:50:03 -07:00
Jeff Walden
7f75fc0a25 Bug 514570 - 2 - Push |undefined| rather than |null| when calling functions without a specified |this| value, per ES5. r=jorendorff 2010-10-12 11:50:03 -07:00
Luke Wagner
cbc9601aa0 Bug 581893 - build a js::Invoke Gatling gun (r=waldo) 2010-09-28 15:23:43 -07:00
Tom Schuster
537c5775ed Bug 601689 - Optimize GetArrayElement for arguments objects (r=lw)
--HG--
extra : rebase_source : 6360a47b95660da477a1f312ab8654a23e4019c1
2010-10-06 12:04:31 -07:00
David Mandelin
d3637a9f66 Bug 595963: notify iterators about property deletion in array_splice, r=gal
--HG--
extra : rebase_source : de2700e0d3d7bce1453a73155c569d28cfbd4482
2010-10-01 11:12:01 -07:00
Jason Orendorff
630900ee20 Finally get rid of /* Added by JSIFY */ comments. r=Waldo. 2010-10-01 18:46:54 -05:00