Results (91 - 100 of 3347)
- [229366]: MarkedArgumentsBuffer should allocate from the JSValue Gigacage ...
- MarkedArgumentsBuffer should allocate from the JSValue Gigacage https://bugs.webkit.org/show_bug.cgi?id=183377 Reviewed by Michael Saboff. That prevents it from being used to pivot UAF on malloc memory into corruption in the JS h ...
- By — Mar 7, 2018 10:14:02 AM
- [228693]: GetArrayMask should support constant folding ...
- GetArrayMask should support constant folding https://bugs.webkit.org/show_bug.cgi?id=182907 Reviewed by Saam Barati. Implement constant folding for GetArrayMask. This revealed a bug in tryGetFoldableView, where it was ignoring th ...
- By — Feb 19, 2018 9:39:52 AM
- [228576]: Unreviewed, roll out r228306 (custom memcpy/memset) because the bots ...
- Unreviewed, roll out r228306 (custom memcpy/memset) because the bots say that it was not a progression. Source/bmalloc: * bmalloc/Algorithm.h: (bmalloc::fastCopy): Deleted. (bmalloc::fastZeroFill): Deleted. * bmalloc/Allocator.cpp: (bmal ...
- By — Feb 16, 2018 1:38:53 PM
- [228552]: Objects that contain dangerous things should be allocated far away ...
- Objects that contain dangerous things should be allocated far away from objects that can do OOB https://bugs.webkit.org/show_bug.cgi?id=182843 Reviewed by Saam Barati. To complete our object distancing plan, we need to put object ...
- By — Feb 15, 2018 9:27:39 PM
- [228538]: Unreviewed, roll out r228366 since it did not progress anything. ...
- Unreviewed, roll out r228366 since it did not progress anything. JSTests: * stress/gc-error-stack.js: Removed. * stress/no-gc-error-stack.js: Removed. Source/JavaScriptCore: * heap/Heap.cpp: (JSC::Heap::finalizeUnconditionalFinalizers) ...
- By — Feb 15, 2018 3:38:15 PM
- [228420]: Lock down JSFunction https://bugs.webkit.org/show_bug.cgi?id=182652 ...
- Lock down JSFunction https://bugs.webkit.org/show_bug.cgi?id=182652 Reviewed by Saam Barati. This poisons pointers in JSFunction and puts all of the types in the JSFunction hierarchy in isospaces. This is so neutral on J ...
- By — Feb 13, 2018 9:02:45 AM
- [228366]: Don't waste memory for error.stack ...
- Don't waste memory for error.stack https://bugs.webkit.org/show_bug.cgi?id=182656 Reviewed by Saam Barati. JSTests: Tests the policy. * stress/gc-error-stack.js: Added. Shows that the GC forgets frames now. * stress/no-gc-error ...
- By — Feb 10, 2018 3:49:54 PM
- [228306]: Experiment with alternative implementation of memcpy/memset ...
- Experiment with alternative implementation of memcpy/memset https://bugs.webkit.org/show_bug.cgi?id=182563 Reviewed by Michael Saboff and Mark Lam. Source/bmalloc: Add a faster x86_64-specific implementation of memcpy and memset ...
- By — Feb 8, 2018 6:13:01 PM
- [228149]: Global objects should be able to use TLCs to allocate from different ...
- Global objects should be able to use TLCs to allocate from different blocks from each other https://bugs.webkit.org/show_bug.cgi?id=182227 Source/JavaScriptCore: Reviewed by JF Bastien. This uses TLCs to create at least `minimum ...
- By — Feb 5, 2018 7:50:30 PM
- [227721]: LargeAllocation should do the same distancing as MarkedBlock ...
- LargeAllocation should do the same distancing as MarkedBlock https://bugs.webkit.org/show_bug.cgi?id=182226 Reviewed by Saam Barati. This makes LargeAllocation do the same exact distancing that MarkedBlock promises to do. To mak ...
- By — Jan 28, 2018 9:08:13 PM
Note: See TracSearch
for help on searching.
