Jason Orendorff
|
fc08c0c726
|
Bug 502890 - Assigning to a called method on trace does not change the object's shape. r=gal,r=brendan.
|
2009-07-08 14:44:31 -05:00 |
|
Boris Zbarsky
|
e3f52528d3
|
Bug 499865. Log blacklists as part of our jitstats. r=jorendorff
|
2009-06-23 23:44:38 -04:00 |
|
Andreas Gal
|
659a7a9b6c
|
Implement oracle-based speculative fmod/fdiv/fmul demotion (474443, r=graydon,dvander).
|
2009-06-12 08:33:32 -07:00 |
|
Andreas Gal
|
7b098dc9e7
|
When merging type maps in a side exit, use the inner tree's globals (495958, r=dvander).
|
2009-06-04 20:42:56 -07:00 |
|
Jeff Walden
|
9607777654
|
Bug 496054 - TM: Null deref [@ JITted code] involving __proto__ munging and array-like access. r=brendan
|
2009-06-03 16:34:37 -07:00 |
|
Andreas Gal
|
f4be60c6d3
|
Bug 495897 - Assertion failure: ti->typeMap.matches(ti_other->typeMap) with undeclared global. r=dvander
|
2009-06-02 22:28:59 -04:00 |
|
Andreas Gal
|
518a96a672
|
Inspect the scope for the right object when looking up properties on fast arrays (495844, r=jwalden).
|
2009-06-01 18:58:56 -07:00 |
|
Andreas Gal
|
1f12d31de5
|
Abort recording if wrapping occurs, take 2 (495563, r=brendan).
|
2009-05-29 20:39:13 -07:00 |
|
Andreas Gal
|
548cbfeef5
|
Setting scopeChain to NULL in SynthesizeFrame breaks GetCallObject (494045, r=brendan).
|
2009-05-20 17:05:38 -07:00 |
|
Andreas Gal
|
0d2b989430
|
Update JSSLOT_ARRAY_COUNT when emitting array constructor code on trace (493255, r=jorendorff).
|
2009-05-18 15:56:11 -07:00 |
|
Jeff Walden
|
24ec69f5cf
|
Bug 492599 - Recording of JSOP_NEWARRAY doesn't update JSSLOT_ARRAY_COUNT properly. r=jorendorff
|
2009-05-12 14:31:44 -07:00 |
|
David Mandelin
|
be8b0cb323
|
Bug 458838: updating test case to pass when we successfully trace out-of-reach upvars
|
2009-05-11 18:58:10 -07:00 |
|
Andreas Gal
|
806e556ee1
|
Make sure stack frame is flagged as constructor frame when falling off trace in a slow native constructor (491965, r=graydon).
|
2009-05-11 14:40:42 -07:00 |
|
Andreas Gal
|
89e9d61d35
|
Fast-path for string constructors only works for new/call with a single argument (491989, r=dmandelin).
|
2009-05-11 14:03:29 -07:00 |
|
Jacob Bramley
|
c942893875
|
Bug 483962 - Remove ARM-specific code from jstracer.cpp. r=vlad
|
2009-05-11 12:16:01 -04:00 |
|
Graydon Hoare
|
3330967d8a
|
Bug 492124 - TM: unit tests should gc() before each, to purge JIT state, r=brendan.
|
2009-05-08 17:02:37 -07:00 |
|
jorendorff
|
93c6d226d3
|
Record all calls to native functions (487134, r=gal, brendan).
|
2009-05-05 14:26:06 -07:00 |
|
Andreas Gal
|
c5c7bd2f6c
|
Trace getting String.length (484332, r=brendan).
|
2009-04-21 18:56:24 -07:00 |
|
Jeff Walden
|
c9680230c4
|
Bug 473117 - Rejigger how guards use side exits, and fix an erroneous comment. r=graydon
|
2009-04-18 16:47:23 -07:00 |
|
Andreas Gal
|
d9f8074374
|
Be less paranoid about jit stats for testNestedExitStackOuter since it doesn't seem to be stable.
|
2009-04-16 16:01:27 -07:00 |
|
Jason Orendorff
|
4dd9ad09ef
|
Bug 487845 - TM: After deep-bailing, we can lirbuf->rewind() and then return to a dead code page. r=gal.
--HG--
extra : rebase_source : b7de71b526d45c7caed1982fba80c65763a0a9c6
|
2009-04-15 09:47:02 -05:00 |
|
Andreas Gal
|
c11974bb60
|
Backed out changeset 4c157cfe2289 (bug 487845).
|
2009-04-14 21:28:40 -07:00 |
|
Jason Orendorff
|
0616f91d10
|
Bug 487845 - TM: After deep-bailing, we can lirbuf->rewind() and then return to a dead code page. r=gal.
|
2009-04-14 08:45:37 -05:00 |
|
Jason Orendorff
|
81f9c93dec
|
Bug 479198 - "Deep" property cache entries not invalidated when shadowed (TIBCO General Interface regression). r=brendan.
|
2009-04-06 13:24:20 -05:00 |
|
Brendan Eich
|
862f9eb6d3
|
Test for upvar2 dup/dep bug 473271, from comment 8; also remove print noise from testPropagatedFunArgs crash test.
|
2009-04-06 11:18:10 -07:00 |
|
Jeff Walden
|
7bd23208f1
|
Update trace-test.js jitstats for testThinLoopDemote to account for upvar2, although there's still some wonkiness here being tracked in bug 486820. r=orange
|
2009-04-05 22:29:18 -07:00 |
|
Brendan Eich
|
962b187fe5
|
upvar2, aka the big one take 2 (452598, r=mrbkap).
|
2009-04-05 21:17:22 -07:00 |
|
Jeff Walden
|
14e879800f
|
Bug 486578 - TM: "Assertion failure: scope->object == pobj" with function, __proto__, length. r=gal
|
2009-04-04 16:55:51 -07:00 |
|
Andreas Gal
|
706120c0fb
|
Backed out changeset 972c44aa9d1f (bug 452598).
|
2009-04-04 10:14:52 -07:00 |
|
Brendan Eich
|
5f4d9ff474
|
upvar2, aka the big one (452598, r=mrbkap).
|
2009-04-04 10:05:49 +01:00 |
|
Jeff Walden
|
3e189b0822
|
Bug 484751 - TM: "Assertion failure: !OBJ_GET_CLASS(cx, proto)->getObjectOps, at ../jsobj.cpp". r=mrbkap
|
2009-03-31 14:24:01 -07:00 |
|
Andreas Gal
|
79baa5db23
|
Guard that object is a dense array when skipping to its prototype during property lookup (485790, r=brendan).
|
2009-03-30 17:19:04 -07:00 |
|
Jeff Walden
|
c8f309e4e5
|
Bug 485889 - Incorrect null checking/assignment? (with xpcshell test case). r=gal
|
2009-03-30 17:15:42 -07:00 |
|
Robert Sayre
|
bfa28b2971
|
Back out Bug 483723 - 'Trace string.indexOf'. It conflicts badly with mozilla-central.
|
2009-03-29 10:38:18 -07:00 |
|
Vladimir Vukicevic
|
c32792f55e
|
backing out 273c85c827e1
|
2009-03-27 16:42:49 -07:00 |
|
Vladimir Vukicevic
|
2a8f257f6d
|
b=484599; add calling convention tests to trace-tests and js shell; r=mrbkap
|
2009-03-27 14:35:46 -07:00 |
|
Ben Turner
|
01022c4478
|
Bug 483723 - 'Trace string.indexOf'. r=brendan+gal.
|
2009-03-24 21:32:09 -07:00 |
|
Jeff Walden
|
136daf85e6
|
Bug 484495 - new String(obj) asserts when tracing. r=brendan, r=gal
|
2009-03-22 12:49:15 -07:00 |
|
Andreas Gal
|
9bee45ca8e
|
trace JSOP_CALLELEM (484334, r=mrbkap)
|
2009-03-20 17:21:57 -07:00 |
|
Vladimir Vukicevic
|
ffb503790f
|
trace-tests: Add int overflow/underflow test
|
2009-03-20 15:53:14 -07:00 |
|
Jeff Walden
|
bb500538a7
|
Bug 483103 - Better fixes for getting the lengths of strings and String objects. r=brendan
|
2009-03-20 15:31:01 -07:00 |
|
mrbkap@gmail.com
|
c46b004611
|
Bug 484151 - Initializing non-int elements calls the wrong imacro. Also call the right builtin when setting and initializing non-int properties (r=brendan).
|
2009-03-19 09:41:58 -07:00 |
|
Andreas Gal
|
b20ebf6bfe
|
NEWINIT creates objects with wrong prototype (484104, r=mrbkap).
|
2009-03-18 18:06:29 -07:00 |
|
Jeff Walden
|
4a7b00dc77
|
Bug 469347 - TM: obj.length and slowArray.length don't trace. r=gal
|
2009-03-17 20:19:57 -07:00 |
|
Jeff Walden
|
0d638ca87a
|
Bug 483103 - TM: "Assertion failed: p->isQuad()" with str["-1"]; make str[-1] a non-special property rather than one that returns the length of str. r=brendan
|
2009-03-17 15:27:31 -07:00 |
|
Jeff Walden
|
2de1fda1f3
|
Bug 482783 - TM: Crash [@ js_ConcatStrings] due to forgetting about tagbits. r=brendan
|
2009-03-11 18:52:03 -07:00 |
|
Brendan Eich
|
9eb422d7f2
|
Bug 482594 - TM: followup work for support String(v) -- String constructor called as a converter (r=jwalden).
|
2009-03-10 16:32:16 -07:00 |
|
Brendan Eich
|
5abff57eb3
|
Waldo's followup fix to valueOf/toString misorder in patch for bug 482349 (r=me).
|
2009-03-10 01:52:43 -07:00 |
|
Jeff Walden
|
b0184f38f5
|
Kick tinderboxen to see if the current orange is random or not
|
2009-03-09 22:47:13 -07:00 |
|
Andreas Gal
|
0002d84879
|
Support String(v) -- String constructor called as a converter (482349, r=jwalden).
|
2009-03-09 17:29:42 -07:00 |
|