Skip to content

V
V8
Switch branch/tag
  1. 19 May, 2015 1 commit
  3. 13 May, 2015 2 commits
  5. 11 May, 2015 1 commit
    • danno's avatar
      Add a MathFloor stub generated with TurboFan · abc35080
      danno authored 
      This stub will be used as the basis of a Math.floor-specific CallIC to
detect and track calls to floor that return -0.

Along the way:
- Create a TurboFanCodeStub super class from which the StringLength and
MathRound TF stubs derive.
- Fix the ugly hack that passes the first stub parameter as the "this"
pointer in the the TF-compiled JS function.
- Fix bugs in the ia32/x64 disassembler.

Review URL: https://codereview.chromium.org/1137703002

Cr-Commit-Position: refs/heads/master@{#28339}
      abc35080
  7. 05 May, 2015 1 commit
  9. 04 May, 2015 2 commits
  11. 30 Apr, 2015 2 commits
  13. 28 Apr, 2015 1 commit
    • yangguo's avatar
      Port CallSite methods to C++. · 4d12e948
      yangguo authored 
      The goal is to port all of error stack trace formatting to C++.
We will do this bottom up, by first porting helper functions.

Eventually, CallSite methods will only be used when a custom
error stack trace formatter is defined via Error.prepareStackTrace.

R=jkummerow@chromium.org

Review URL: https://codereview.chromium.org/1060583008

Cr-Commit-Position: refs/heads/master@{#28095}
      4d12e948
  15. 27 Apr, 2015 4 commits
  17. 22 Apr, 2015 1 commit
  19. 21 Apr, 2015 1 commit
  21. 14 Apr, 2015 1 commit
  23. 13 Apr, 2015 1 commit
    • vegorov's avatar
      Treat HArgumentsObject as a safe use during Uint32 analysis phase. · 021f7381
      vegorov authored 
      Deoptimization infrastructure already handles it correctly.

This change fixes repetitive deoptimizations in the code like this:

    var u32 = new Uint32Array(1);
    u32[0] = -1;

    function tr(x) { return x|0; }
    function ld() { return tr(u32[0]); }

    while (true) ld();

Currently inlined tr will contain HArgumentsObject that is considered uint32-unsafe use and prevents u32[0] from becoming uint32 load - instead a speculative int32 load is generated which just deopts.

BUG=

Review URL: https://codereview.chromium.org/1077113002

Cr-Commit-Position: refs/heads/master@{#27781}
      021f7381
  25. 08 Apr, 2015 1 commit
  27. 25 Mar, 2015 1 commit
  29. 20 Mar, 2015 2 commits
  31. 19 Mar, 2015 2 commits
  33. 17 Mar, 2015 1 commit
  35. 10 Mar, 2015 1 commit
  37. 09 Mar, 2015 2 commits
    • jarin's avatar
      [turbofan] Fix lazy deopt for JSToNumber conversions in binary operations. · 6f559b7e
      jarin authored 
      This slightly hacky change provides lazy deopt points for to-number conversions in binops: When we deopt from a to-number conversion, we create a frame state with the already-converted value(s) so that we do not repeat the side effect of the conversion.

Embenchen numbers are below. It is not quite clear what happened to fasta - the hot code looks nearly identical.

Current: EmbenchenBox2d(RunTime): 12746 ms.
d8-master: EmbenchenBox2d(RunTime): 13861 ms.
----------- bullet.js
Current: EmbenchenBullet(RunTime): 17680 ms.
d8-master: EmbenchenBullet(RunTime): 19170 ms.
----------- copy.js
Current: EmbenchenCopy(RunTime): 4939 ms.
d8-master: EmbenchenCopy(RunTime): 4943 ms.
----------- corrections.js
Current: EmbenchenCorrections(RunTime): 6639 ms.
d8-master: EmbenchenCorrections(RunTime): 6728 ms.
----------- fannkuch.js
Current: EmbenchenFannkuch(RunTime): 4630 ms.
d8-master: EmbenchenFannkuch(RunTime): 4872 ms.
----------- fasta.js
Current: EmbenchenFasta(RunTime): 10209 ms.
d8-master: EmbenchenFasta(RunTime): 9673 ms.
----------- lua_binarytrees.js
Current: EmbenchenLuaBinaryTrees(RunTime): 12936 ms.
d8-master: EmbenchenLuaBinaryTrees(RunTime): 15529 ms.
----------- memops.js
Current: EmbenchenMemOps(RunTime): 7357 ms.
d8-master: EmbenchenMemOps(RunTime): 7340 ms.
----------- primes.js
Current: EmbenchenPrimes(RunTime): 7530 ms.
d8-master: EmbenchenPrimes(RunTime): 7457 ms.
----------- skinning.js
Current: EmbenchenSkinning(RunTime): 15832 ms.
d8-master: EmbenchenSkinning(RunTime): 15630 ms.
----------- zlib.js
Current: EmbenchenZLib(RunTime): 11176 ms.
d8-master: EmbenchenZLib(RunTime): 11324 ms.

BUG=

Review URL: https://codereview.chromium.org/985713003

Cr-Commit-Position: refs/heads/master@{#27071}
      6f559b7e
    • mstarzinger's avatar
      [turbofan] Only reduce inline %DeoptimizeNow. · dcb502a4
      mstarzinger authored 
      This makes sure only the %_DeoptimizeNow intrinsic is inlined, and
not the %DeoptimizeNow one. It hence re-establishes the invariant
that JSIntrinsicLowering only deals with inline intrinsics.

R=jarin@chromium.org
TEST=mjsunit/compiler/eager-deopt-simple

Review URL: https://codereview.chromium.org/988333003

Cr-Commit-Position: refs/heads/master@{#27070}
      dcb502a4
  39. 04 Mar, 2015 1 commit
  41. 03 Mar, 2015 1 commit
  43. 02 Mar, 2015 1 commit
  45. 19 Feb, 2015 1 commit
  47. 17 Feb, 2015 1 commit
  49. 16 Feb, 2015 1 commit
  51. 11 Feb, 2015 1 commit
  53. 10 Feb, 2015 1 commit
  55. 09 Feb, 2015 1 commit
  57. 02 Feb, 2015 1 commit
  59. 30 Jan, 2015 1 commit
  61. 29 Jan, 2015 1 commit