Bill McCloskey
daa16e64bb
Bug 609104 - Move the property tree to the compartment (r=brendan)
2011-01-27 15:46:39 -08:00
David Mandelin
a4880c2f6d
Bug 611652: clear values instead of scope when global window is cleared, r=brendan,enn,jeff,mrbkap,smaug
...
--HG--
extra : rebase_source : 77e3844d35de229817bee767256a96d030a78bf9
2011-01-21 18:37:30 -08:00
Luke Wagner
5719802a65
Bug 629974 - js_TraceObject doesn't need to mark past slotSpan (r=brendan)
...
--HG--
extra : rebase_source : 232f2e01121dd89fb1d5ec032b7e0b986068ad49
2011-02-01 14:24:28 -08:00
Luke Wagner
64d2de0179
Bug 628564 - Make sure we don't miss the AbortIfUnexpectedGlobalWrite check (r=brendan)
...
--HG--
extra : rebase_source : 1b66dc81ff960db5eb966956c13282cda1796ac1
2011-02-01 11:01:26 -08:00
Bill McCloskey
8e7e07dfaa
Bug 623297 - Make JS_TRACE_MONITOR more robust by distinguishing callers (r=gal)
2011-02-01 10:18:06 -08:00
Jeff Walden
13fb18a6fe
Bug 619283 - Built-in JS methods must not box undefined or null into the global object when called, both to comply with ES5 and to prevent inadvertent global object exposure to secure JS variants. r=dmandelin
...
--HG--
extra : rebase_source : be6802a24bd58eb6339369e6803d3eb2fbbc07a5
2011-01-26 13:37:45 -08:00
Jim Blandy
2016210905
Bug 554955: Revert fix (changesets 297b1312f534, 18a1effafe19, 26d40e1e80bf, f6117465a979): 14% performance hit as measured by Talos. r=talos
2011-01-31 16:48:26 -08:00
Bill McCloskey
fa08e98f10
Bug 630340 - Fix undefined value in compartment assertion (r=Waldo)
2011-01-31 13:54:28 -08:00
Jason Orendorff
f1be13e671
js_InitExceptionClasses was skipping part js_InitClass, leading to "Assertion failure: proto->canProvideEmptyShape". Bug 624968, r=Waldo.
...
--HG--
extra : rebase_source : 08ebb71574a0b1962e8f1c0c3f9a7aa7ec904b03
2011-01-24 17:32:44 -06:00
Jim Blandy
a237e87988
Bug 554955: Give blocks and call objects unique shapes when they have parents that may be extended with new bindings. r=jorendorff
...
The comments for js::Bindings::extensibleParents explain why this is necessary.
AssertValidPropertyCacheHit should have been catching this bug, but for
reasons I don't understand, it is restricted from checking this case. This
patch extends it to assert when the bug is detected.
I've gathered the infallible parts of the initialization for Call objects
and cloned block objects into their own functions.
2011-01-31 12:08:13 -08:00
Brendan Eich
de8093385a
Followup fix for gaping hole in patch for bug 591846 (credit to jorendorff, r=me).
2011-01-29 01:01:54 -08:00
Brendan Eich
1d606e7be9
Allow PropertyOp-based data properties to be frozen at last-got value (591846, r=jwalden).
2011-01-25 18:04:45 -08:00
Chris Leary
6d0cc31d27
Back out changeset 7d82892cb8df.
2011-01-27 19:43:33 -08:00
Chris Leary
001cef1fd8
Merge the backout head.
2011-01-27 16:26:21 -08:00
Chris Leary
8f8ea8fd48
Backed out changeset b5ca98debed0
2011-01-27 16:25:30 -08:00
Bill McCloskey
a4f9ab0da8
Bug 609104 - Move the property tree to the compartment (r=brendan)
2011-01-27 15:46:39 -08:00
David Mandelin
62ff5f09d8
Bug 611653: clear values instead of scope when global window shuts down, r=brendan,smaug
2011-01-21 18:37:30 -08:00
Chris Leary
074bd0c596
Bug 595691, take 2: fix versioning across VM instances, remove _options. (r=luke,brendan,igor)
2011-01-27 02:54:58 -08:00
Andreas Gal
3c34eab945
Follow-up fix for bug 625559.
2011-01-26 19:19:33 -08:00
Chris Leary
1771b7c232
Backed out changeset b88172246b66 due to Win32 debug failures.
2011-01-25 04:11:47 -08:00
Chris Leary
b462e1fb98
Bug 595691: fix versioning across VM instances, remove _options. (r=luke,brendan,igor)
2011-01-25 02:33:27 -08:00
Chris Leary
e41aa73d24
Back out changeset 72cb2f4a893c
2011-01-24 19:45:08 -08:00
Andreas Gal
6629b9fa11
Trigger appropriate proxy trap for Object.getOwnPropertyNames (bug 628333, r=jwalden).
2011-01-24 16:10:54 -08:00
Andreas Gal
927855f788
Cache eval CSP check (bug 614137, r=mrbkap, a=dmandelin).
2011-01-22 14:28:37 -08:00
Luke Wagner
b00fed595e
Bug 626118 - Fix RegExp ref-counting leak; record already-incremented-ness in type (r=cdleary)
2011-01-17 14:58:53 -08:00
Jason Orendorff
ec712fc18c
Return the new shape from methodWriteBarrier instead of searching for it again. Bug 623863, r=brendan.
2011-01-17 11:30:08 -06:00
Jason Orendorff
f224da500c
Bug 559653 - Record assignment before the interpreter goes, mostly. This reduces record_SetPropHit to a narrower callback, record_AddProperty. r=brendan.
...
--HG--
rename : js/src/jsapi-tests/testSetPropertyWithNativeGetterStubSetter.cpp => js/src/jsapi-tests/testSetProperty.cpp
2011-01-14 16:18:53 -06:00
Bill McCloskey
238069d8ff
Bug 623050 - Move tracerState to compartment (r=gal)
2011-01-12 16:56:23 -08:00
Igor Bukanov
5a00058c07
Bug 619529 - avoid any exposure of XML's AttributeName and AnyName objects. r=brendan
2011-01-09 00:01:52 +01:00
Chris Leary
887da71fad
Merge mozilla-central into tracemonkey.
2011-01-12 00:07:40 -08:00
Andreas Gal
b4b6a78889
Bug 609287. Fix Assertion failure: OperationInProgress(cx, proxy). r=jorendorff@mozilla.com, jwalden@mit.edu, a=blocker.
2011-01-11 17:09:53 -08:00
David Anderson
2ff0acbe75
Fix a slot bug when objects become dictionaries (bug 618129, r=brendan).
2011-01-11 11:47:07 -08:00
Brendan Eich
042b55be8a
Fix joined method leak via arguments.callee.caller (586482, r=igor).
2011-01-04 12:27:18 -08:00
Chris Leary
5ada212069
Bug 587288: 0. Compartmentalize regexp allocator, remove ExecutablePool atomic refcounts. (r=gal)
2011-01-05 18:44:30 -08:00
Jeff Walden
6ddf166349
Warning patrol. r=sparky
2011-01-04 15:18:16 -06:00
Brendan Eich
4d93d9cad7
Backing out last push.
2011-01-03 23:07:46 -08:00
Brendan Eich
3f2e5de43d
Bug 586482 - arguments.callee.caller not equal to proto-delegated joined function object method (r=igor).
2010-11-11 10:06:56 -08:00
Jeff Walden
ff60a27654
Bug 621376 - new Function.prototype on trace should not define Function.prototype.prototype. r=brendan
2010-12-27 16:24:27 -06:00
Brian Hackett
be4d109005
Don't generate INITPROP/INITELEM for singleton constant initializers, bug 577359.
2010-12-30 08:07:43 -05:00
Chris Leary
5c3dd7b9ca
Merge mozilla-central to tracemonkey.
2010-12-30 00:36:53 -05:00
Chris Leary
272d457a20
Merge mozilla-central to tracemonkey.
2010-12-29 19:25:04 -05:00
David Mandelin
c3e8135c6a
Bug 595975 diagnostic 2: shape markers and object data, r=billm, a=blocker
...
--HG--
extra : rebase_source : ddc486824d5f4a4e3dfe114ccde7e4841033ebaa
2010-12-28 14:50:01 -08:00
David Mandelin
625946d567
Backed out changeset c35a4e6ea3ca -- done with diagnotics.
2010-12-29 17:46:14 -08:00
Jeff Walden
59814e4551
Bug 620315 - "Assertion failure: unexpected constantly false guard detected" with "use strict", 4 > this. Fix a problem where we weren't marking functions created by |new Function| as accepting a primitive this value when their body was strict mode, by removing the duplicative bit that was being checked. r=dmandelin
2010-12-22 18:05:07 -05:00
Jeff Walden
fa572289d5
Bug 620130 - Calls to eval with same code + varying strict mode of script containing eval == fail. r=brendan
2010-12-18 14:17:09 -06:00
Robert Sayre
eb5a082560
Merge tracemonkey to mozilla-central. a=blockers
...
--HG--
rename : js/src/trace-test/tests/basic/bug616762.js => js/src/jit-test/tests/basic/bug616762.js
2010-12-15 12:21:50 -08:00
Brian Hackett
2f26f4e870
Fix bogus assert when using SETMETHOD on a property with a setter, bug 559912. r=brendan
2010-12-13 16:36:35 -08:00
Paul Biggar
d5a5d3946f
Bug 612292 - Rename array allocation functions (r=lw)
2010-12-13 16:22:59 -08:00
Brendan Eich
5eef9df0a1
Implement method thrash counting, at limit unbrand and stick count to limit; also, brand and unbrand return false on shape overflow, so call them that way instead of as if infallible (597864, r=dvander).
2010-11-22 17:58:53 -08:00
Jeff Walden
c39f97db70
Convert JSScript::*Offset into offsets from the end of JSScript, not from its start, to escape an offset <= 0xFF requirement failing due to an impending increase in the size of JSScripts for bug 614493. r=brendan
...
--HG--
extra : rebase_source : 8c4046bdc99b8280d414cba864b7d5e1b1f25331
2010-12-02 14:23:51 -08:00
