WebKit Trac
  • Login
  • Preferences
  • Forgot your password?
  • Wiki
  • Timeline
  • Browse Source
  • Search

Context Navigation



Results (101 - 110 of 3373)

← 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 →
[230266]: Don't do index masking or poisoning for DirectArguments ...
Don't do index masking or poisoning for DirectArguments https://bugs.webkit.org/show_bug.cgi?id=184280 Reviewed by Saam Barati. * JavaScriptCore.xcodeproj/project.pbxproj: * bytecode/AccessCase.cpp: (JSC::AccessCase::generateWithGuard): ...
By fpizlo@apple.com — Apr 4, 2018, 10:55:44 AM
[230264]: JSArray::appendMemcpy seems to be missing a barrier ...
JSArray::appendMemcpy seems to be missing a barrier https://bugs.webkit.org/show_bug.cgi?id=184290 Reviewed by Mark Lam. If you write to an array that may contain pointers and you didn't just allocate it, then you need to barrier ...
By fpizlo@apple.com — Apr 4, 2018, 10:42:11 AM
[230226]: GC shouldn't do object distancing ...
GC shouldn't do object distancing https://bugs.webkit.org/show_bug.cgi?id=184195 Reviewed by Saam Barati. Source/JavaScriptCore: This rolls out SecurityKind/SecurityOriginToken, but keeps the TLC infrastructure. It seems to be a ...
By fpizlo@apple.com — Apr 3, 2018, 4:52:09 PM
[230145]: Raise the for-call inlining threshold to 190 to fix JetStream/richards ...
Raise the for-call inlining threshold to 190 to fix JetStream/richards regression https://bugs.webkit.org/show_bug.cgi?id=184228 Reviewed by Yusuke Suzuki. * runtime/Options.h:
By fpizlo@apple.com — Apr 1, 2018, 12:46:05 PM
[230144]: JSObject shouldn't do index masking ...
JSObject shouldn't do index masking https://bugs.webkit.org/show_bug.cgi?id=184194 Reviewed by Yusuke Suzuki. Source/JavaScriptCore: Remove index masking, because it's not the way we'll mitigate Spectre. * API/tests/JSObjectGet ...
By fpizlo@apple.com — Apr 1, 2018, 10:57:53 AM
[230143]: JSC crash in JIT code with for-of loop and Array/Set iterators ...
JSC crash in JIT code with for-of loop and Array/Set iterators https://bugs.webkit.org/show_bug.cgi?id=183174 Reviewed by Saam Barati. JSTests: * microbenchmarks/hoist-get-by-offset-tower-with-inferred-types.js: Added. This test shows t ...
By fpizlo@apple.com — Apr 1, 2018, 10:08:39 AM
[230130]: Strings and Vectors shouldn't do index masking ...
Strings and Vectors shouldn't do index masking https://bugs.webkit.org/show_bug.cgi?id=184193 Reviewed by Mark Lam. Source/JavaScriptCore: * dfg/DFGSpeculativeJIT.cpp: (JSC::DFG::SpeculativeJIT::compileGetCharCodeAt): (JSC::DFG::Specula ...
By fpizlo@apple.com — Mar 31, 2018, 8:55:38 AM
[230115]: Bytecode generator should not get_from_scope something that may be a ...
Bytecode generator should not get_from_scope something that may be a hole into a variable that is already live https://bugs.webkit.org/show_bug.cgi?id=184189 Reviewed by JF Bastien. JSTests: * stress/load-hole-from-scope-into-live-var.j ...
By fpizlo@apple.com — Mar 30, 2018, 1:31:00 PM
[229987]: DFG should know that CreateThis can be effectful ...
DFG should know that CreateThis can be effectful https://bugs.webkit.org/show_bug.cgi?id=184013 Reviewed by Saam Barati. JSTests: * stress/create-this-property-change.js: Added. (Foo): (RealBar): (get if): * stress/create-this-structure ...
By fpizlo@apple.com — Mar 26, 2018, 2:01:16 PM
[229842]: ScopedArguments should do poisoning and index masking ...
ScopedArguments should do poisoning and index masking https://bugs.webkit.org/show_bug.cgi?id=183863 Reviewed by Mark Lam. JSTests: Adds another stress test of scoped arguments. * stress/scoped-arguments-test.js: Added. (foo): ...
By fpizlo@apple.com — Mar 21, 2018, 7:15:44 PM
← 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 →
Note: See TracSearch for help on searching.

Trac Powered

Powered by Trac 1.5.4
By Edgewall Software .

Hosted by Apple