Results (101 - 110 of 3373)
- [230266]: Don't do index masking or poisoning for DirectArguments ...
- Don't do index masking or poisoning for DirectArguments https://bugs.webkit.org/show_bug.cgi?id=184280 Reviewed by Saam Barati. * JavaScriptCore.xcodeproj/project.pbxproj: * bytecode/AccessCase.cpp: (JSC::AccessCase::generateWithGuard): ...
- By — Apr 4, 2018, 10:55:44 AM
- [230264]: JSArray::appendMemcpy seems to be missing a barrier ...
- JSArray::appendMemcpy seems to be missing a barrier https://bugs.webkit.org/show_bug.cgi?id=184290 Reviewed by Mark Lam. If you write to an array that may contain pointers and you didn't just allocate it, then you need to barrier ...
- By — Apr 4, 2018, 10:42:11 AM
- [230226]: GC shouldn't do object distancing ...
- GC shouldn't do object distancing https://bugs.webkit.org/show_bug.cgi?id=184195 Reviewed by Saam Barati. Source/JavaScriptCore: This rolls out SecurityKind/SecurityOriginToken, but keeps the TLC infrastructure. It seems to be a ...
- By — Apr 3, 2018, 4:52:09 PM
- [230145]: Raise the for-call inlining threshold to 190 to fix JetStream/richards ...
- Raise the for-call inlining threshold to 190 to fix JetStream/richards regression https://bugs.webkit.org/show_bug.cgi?id=184228 Reviewed by Yusuke Suzuki. * runtime/Options.h:
- By — Apr 1, 2018, 12:46:05 PM
- [230144]: JSObject shouldn't do index masking ...
- JSObject shouldn't do index masking https://bugs.webkit.org/show_bug.cgi?id=184194 Reviewed by Yusuke Suzuki. Source/JavaScriptCore: Remove index masking, because it's not the way we'll mitigate Spectre. * API/tests/JSObjectGet ...
- By — Apr 1, 2018, 10:57:53 AM
- [230143]: JSC crash in JIT code with for-of loop and Array/Set iterators ...
- JSC crash in JIT code with for-of loop and Array/Set iterators https://bugs.webkit.org/show_bug.cgi?id=183174 Reviewed by Saam Barati. JSTests: * microbenchmarks/hoist-get-by-offset-tower-with-inferred-types.js: Added. This test shows t ...
- By — Apr 1, 2018, 10:08:39 AM
- [230130]: Strings and Vectors shouldn't do index masking ...
- Strings and Vectors shouldn't do index masking https://bugs.webkit.org/show_bug.cgi?id=184193 Reviewed by Mark Lam. Source/JavaScriptCore: * dfg/DFGSpeculativeJIT.cpp: (JSC::DFG::SpeculativeJIT::compileGetCharCodeAt): (JSC::DFG::Specula ...
- By — Mar 31, 2018, 8:55:38 AM
- [230115]: Bytecode generator should not get_from_scope something that may be a ...
- Bytecode generator should not get_from_scope something that may be a hole into a variable that is already live https://bugs.webkit.org/show_bug.cgi?id=184189 Reviewed by JF Bastien. JSTests: * stress/load-hole-from-scope-into-live-var.j ...
- By — Mar 30, 2018, 1:31:00 PM
- [229987]: DFG should know that CreateThis can be effectful ...
- DFG should know that CreateThis can be effectful https://bugs.webkit.org/show_bug.cgi?id=184013 Reviewed by Saam Barati. JSTests: * stress/create-this-property-change.js: Added. (Foo): (RealBar): (get if): * stress/create-this-structure ...
- By — Mar 26, 2018, 2:01:16 PM
- [229842]: ScopedArguments should do poisoning and index masking ...
- ScopedArguments should do poisoning and index masking https://bugs.webkit.org/show_bug.cgi?id=183863 Reviewed by Mark Lam. JSTests: Adds another stress test of scoped arguments. * stress/scoped-arguments-test.js: Added. (foo): ...
- By — Mar 21, 2018, 7:15:44 PM
Note:
See TracSearch
for help on searching.
