Hiroyuki Ikezoe
dc9e8a7592
Bug 751387 - Fix crash caused by out-of-bounds accesses in command line options handling. r=bholley
2015-03-12 01:37:00 -04:00
Jan de Mooij
a9e4cec91e
Bug 1140428 - Warn when __noSuchMethod__ is used. r=jorendorff
2015-03-12 13:07:02 +01:00
Boris Zbarsky
159438b2c6
Bug 1142282 part 3. Remove the parent argument of NewNativeObjectWithClassProto. r=waldo
2015-03-11 22:33:59 -04:00
Boris Zbarsky
0c06895c2e
Bug 1142282 part 2. Remove the parent argument of NewNativeObjectWithGivenTaggedProto. r=waldo
2015-03-11 22:33:59 -04:00
Boris Zbarsky
ad799be094
Bug 1142282 part 1. Remove the parent argument of NewNativeObjectWithGivenProto. r=waldo
2015-03-11 22:33:59 -04:00
Boris Zbarsky
b7a41fe20b
Bug 1142266. Remove the parent argument from js::NewObjectWithProto. r=waldo
2015-03-11 22:33:59 -04:00
Boris Zbarsky
9b5f48b73d
Bug 1142241. Stop using getParent() in js::GetObjectEnvironmentObjectForFunction. r=waldo
2015-03-11 22:33:59 -04:00
Boris Zbarsky
32fcbbd5d3
Bug 1140586 part 5. Split up js::NewFunction into several different APIs that are more clear in terms of what they do and don't need parents as much. r=waldo
2015-03-11 22:33:59 -04:00
Boris Zbarsky
15ef23fa76
Bug 1140586 part 4. Stop passing non-null parents to js::NewFunctionWithProto when creating a native function via direct calls to that API. r=waldo
2015-03-11 22:33:59 -04:00
Boris Zbarsky
6c3e6c2ff4
Bug 1140586 part 3. Drop the funobjArg of js::NewFunction and js::NewFunctionWithProto. r=waldo
2015-03-11 22:33:59 -04:00
Boris Zbarsky
431ea5102f
Bug 1140586 part 2. Stop passing non-null funobjArg to js::NewFunction and js::NewFunctionWithProto. r=waldo
2015-03-11 22:33:59 -04:00
Boris Zbarsky
e79d697cee
Bug 1140586 part 1. Add some asserts about us not caring too much about the parents of native functions. r=waldo
2015-03-11 22:33:58 -04:00
Wes Kocher
0c74443547
Backed out changeset 851347e26940 (bug 1038839) for spidermonkey failures CLOSED TREE
2015-03-11 14:52:14 -07:00
Sean Stangl
33a28f8360
Bug 1038839 - Use type information for alias analysis. r=jandem
2015-03-10 14:56:13 -07:00
Boris Zbarsky
11485bb5a2
Bug 1140737. Fix Ion setter cache to reserve the register the value being set lives in as needed, so other things don't stomp on that register. r=jandem
2015-03-11 16:53:29 -04:00
Brian Hackett
dc1a17f2cd
Bug 1141379 - Remove unboxed layouts from the per-compartment list they are threaded through while we are still on the main thread, r=jandem.
2015-03-11 14:08:00 -06:00
Brian Hackett
3bd334ccf0
Bug 1139466 - Watch for strict scripts with lazy arguments when marking Ion frames, r=jandem.
2015-03-11 14:03:24 -06:00
Ryan VanderMeulen
7c83ade1bc
Backed out changesets 18c84fcee487 and cc4786da89db (bug 1135039) for Linux32 jit-test assertion failures.
...
CLOSED TREE
2015-03-11 15:23:58 -04:00
Benjamin Bouvier
c021b37e81
Bug 1140317: and even more using mozilla::UniquePtr in a CLOSED TREE; r=bustage
2015-03-11 17:47:45 +01:00
Benjamin Bouvier
e3971a8935
Bug 1140317: include more UniquePtr and more using mozilla::UniquePtr in a CLOSED TREE; r=bustage
2015-03-11 17:32:02 +01:00
Jason Orendorff
436d09cb18
Bug 1137616 - Restore ReferenceError when a proxy is on the global object's prototype chain, regressed by rev 615f118f2787. r=jandem.
2015-03-03 18:13:03 -06:00
Jason Orendorff
93b2f19ac6
Bug 828137, part 1 - Make Object.defineProperty fail on window elements. r=bz.
2015-02-11 11:38:36 -06:00
Jason Orendorff
96f6d602b5
Bug 1132522, part 2 - Treat false return from proxyHandler.set() as strict mode failure. r=efaust.
...
This changeset includes a change in addon-sdk/source that is logically of a piece with the rest, but was reviewed separately; see <https://github.com/mozilla/addon-sdk/pull/1888 >. r=Mossop.
2015-02-13 09:49:31 -06:00
Jason Orendorff
d6339c71c8
Bug 1132522, part 1 - Treat false return from proxyHandler.defineProperty() as strict mode failure. r=efaust.
2015-02-12 11:29:32 -06:00
Benjamin Bouvier
faf708e967
Bug 1135039: Apply swizzle type policy changes in Ion too; r=sunfish
2015-03-02 19:40:06 +01:00
Benjamin Bouvier
838cf44003
Bug 1135039: Throw on non-int32 or out-of-bounds lanes arguments to swizzle/shuffle; r=sunfish
2015-03-05 11:55:10 +01:00
Jason Orendorff
85bdea2d36
Bug 1141329 - Fix crash [@ JSObject::getGroup] or [@ js::jit::SetPropertyIC::update]. r=efaust.
2015-03-10 13:14:36 -05:00
Jason Orendorff
951d1580ab
Bug 1141329, prelude - Make ObjectOpResult pointer-sized to fix amazingly bogus code and assertions in IonCaches, introduced by rev 0712a3d4b79c. r=efaust.
2015-03-10 12:22:30 -05:00
Jason Orendorff
149272a4da
Bug 1141154 - Fix crashes with Ion and proxy set failure cases, caused by rev 0712a3d4b79c. r=efaust.
2015-03-09 19:07:56 -05:00
Benjamin Bouvier
a624b04a01
Bug 1140317: Make sure chars created by DecompileValueGenerator won't ever leak; r=Waldo
2015-03-10 19:34:00 +01:00
Lars T Hansen
2cbf586abd
Bug 1141067 - byte operations on x86/x64. r=sunfish
2015-03-11 15:45:57 +01:00
Lars T Hansen
46f8be1263
Bug 1138348 - byte array test cases. r=h4writer
2015-03-11 15:45:57 +01:00
Lars T Hansen
837108ebce
Bug 1138348 - byte ops on x86_64. r=h4writer
2015-03-11 15:45:57 +01:00
Jan de Mooij
19bb48ccef
Bug 1090583 part 2 - Fix the property count check in MonitorAssign to check the actual count instead of the capacity. r=bhackett
2015-03-11 11:58:25 +01:00
Benjamin Bouvier
ae743951a8
Bug 1140709: Add a second bounds check for checking that the index is actually positive; r=bhackett
2015-03-10 19:24:25 +01:00
ziyunfei
5870724746
Bug 1108949 - RegExp(RegExp object, flags) no longer throws. r=till
2015-03-10 21:36:00 +01:00
Eric Faust
575c7f9242
Bug 1066233 - Followup: Address a forgotten review comment. (r=jorendorff)
2015-03-11 00:49:38 -07:00
Eric Faust
ba64d9326b
Bug 1066233 - Tests. (r=jorendorff)
2015-03-11 00:44:41 -07:00
Eric Faust
a189050d65
Bug 1066233 - Part 3: Reflect.parse support for ES6 ClassExpressions. (r=jorendorff)
2015-03-11 00:44:41 -07:00
Eric Faust
81a1a3b267
Bug 1066233 - Part 2: Emitter support for ES6 ClassExpressions. (r=jorendorff)
2015-03-11 00:44:41 -07:00
Eric Faust
502022b333
Bug 1066233 - Part 1: Parser suppoert for ES6 ClassExpressions. (r=jorendorff)
2015-03-11 00:44:41 -07:00
Eric Faust
b9b9c6053c
Bug 1066234 - Tests. (r=jorendorff)
2015-03-10 20:27:35 -07:00
Eric Faust
653543d9c9
Bug 1066234 - Part 6: Emitter support for 'extends' in ES6 Classes. (r=jorendorff)
2015-03-10 20:27:34 -07:00
Eric Faust
b0b1d241e3
Bug 1066234 - Part 5: Implement JSOP_OBJWITHPROTO. (r=jorendorff)
2015-03-10 20:27:34 -07:00
Eric Faust
567b73efd1
Bug 1066234 - Part 4: Implement JSOP_FUNWITHPROTO. (r=jorendorff)
2015-03-10 20:27:34 -07:00
Eric Faust
8b641b6f0e
Bug 1066234 - Part 3: Refactor js::CloneFunctionObject to take a proto argument. (r=jorendorff)
2015-03-10 20:27:34 -07:00
Eric Faust
ec9c018a8c
Bug 1066234 - Part 2: Implement JSOP_CLASSHERITAGE. (r=jorendorff)
2015-03-10 20:27:34 -07:00
Eric Faust
d4a7e69fbf
Bug 1066234 - Part 1: Parser support for 'extends' in ES6 Classes. (r=jorendorff)
2015-03-10 20:27:34 -07:00
Phil Ringnalda
9b1e7b6199
Backed out 7 changesets (bug 1066234) for bustage
...
CLOSED TREE
Backed out changeset ce28663e61d4 (bug 1066234)
Backed out changeset e06ad6b69b25 (bug 1066234)
Backed out changeset 99933582c7d8 (bug 1066234)
Backed out changeset a40045b47bba (bug 1066234)
Backed out changeset f6b44a3c3c6f (bug 1066234)
Backed out changeset 478d797266b1 (bug 1066234)
Backed out changeset 73f4dd8f8d97 (bug 1066234)
2015-03-10 20:44:12 -07:00
Eric Faust
e50c5d1d4c
Bug 1066234 - Tests. (r=jorendorff)
2015-03-10 20:27:35 -07:00
