Results (111 - 120 of 3373)
- [229694]: Put the DOM in IsoHeaps https://bugs.webkit.org/show_bug.cgi?id=183546 ...
- Put the DOM in IsoHeaps https://bugs.webkit.org/show_bug.cgi?id=183546 Source/bmalloc: Reviewed by Simon Fraser. Make it easy to runtime-disable IsoHeaps. * bmalloc/Allocator.h: * bmalloc/IsoTLS.cpp: (bmalloc::IsoTLS::determine ...
- By — Mar 16, 2018 11:11:00 PM
- [229545]: Unreviewed, fix simple goof that was causing 32-bit DFG crashes. * ...
- Unreviewed, fix simple goof that was causing 32-bit DFG crashes. * dfg/DFGSpeculativeJIT.cpp: (JSC::DFG::SpeculativeJIT::compileCreateDirectArguments):
- By — Mar 12, 2018 1:19:53 PM
- [229518]: Split DirectArguments into JSValueOOB and JSValueStrict parts ...
- Split DirectArguments into JSValueOOB and JSValueStrict parts https://bugs.webkit.org/show_bug.cgi?id=183458 Reviewed by Yusuke Suzuki. Source/JavaScriptCore: Our Spectre plan for JSValue objects is to allow inline JSValue store ...
- By — Mar 11, 2018 2:09:20 PM
- [229516]: PerProcess<> should be safe by default ...
- PerProcess<> should be safe by default https://bugs.webkit.org/show_bug.cgi?id=183545 Reviewed by Yusuke Suzuki. This makes PerProcess<> safe by default, so we don't need SafePerProcess<>. The new PerProcess<> design rel ...
- By — Mar 11, 2018 10:45:49 AM
- [229436]: bmalloc mutex should be adaptive ...
- bmalloc mutex should be adaptive https://bugs.webkit.org/show_bug.cgi?id=177839 Reviewed by Michael Saboff. Source/bmalloc: This pulls the WordLock algorithm into bmalloc, mostly by copy-pasting the code. We need to copy paste b ...
- By — Mar 8, 2018 2:58:23 PM
- [229412]: Make it possible to randomize register allocation ...
- Make it possible to randomize register allocation https://bugs.webkit.org/show_bug.cgi?id=183416 Reviewed by Keith Miller. Source/JavaScriptCore: This is disabled by default for now, because it reveals a regalloc bug in wasm. * ...
- By — Mar 8, 2018 9:11:51 AM
- [229366]: MarkedArgumentsBuffer should allocate from the JSValue Gigacage ...
- MarkedArgumentsBuffer should allocate from the JSValue Gigacage https://bugs.webkit.org/show_bug.cgi?id=183377 Reviewed by Michael Saboff. That prevents it from being used to pivot UAF on malloc memory into corruption in the JS h ...
- By — Mar 7, 2018 10:14:02 AM
- [228693]: GetArrayMask should support constant folding ...
- GetArrayMask should support constant folding https://bugs.webkit.org/show_bug.cgi?id=182907 Reviewed by Saam Barati. Implement constant folding for GetArrayMask. This revealed a bug in tryGetFoldableView, where it was ignoring th ...
- By — Feb 19, 2018 9:39:52 AM
- [228576]: Unreviewed, roll out r228306 (custom memcpy/memset) because the bots ...
- Unreviewed, roll out r228306 (custom memcpy/memset) because the bots say that it was not a progression. Source/bmalloc: * bmalloc/Algorithm.h: (bmalloc::fastCopy): Deleted. (bmalloc::fastZeroFill): Deleted. * bmalloc/Allocator.cpp: (bmal ...
- By — Feb 16, 2018 1:38:53 PM
- [228552]: Objects that contain dangerous things should be allocated far away ...
- Objects that contain dangerous things should be allocated far away from objects that can do OOB https://bugs.webkit.org/show_bug.cgi?id=182843 Reviewed by Saam Barati. To complete our object distancing plan, we need to put object ...
- By — Feb 15, 2018 9:27:39 PM
Note: See TracSearch
for help on searching.
