1. 10 Oct, 2012 1 commit
    • verwaest@chromium.org's avatar
      Fix CNLT regression. · 55e924c5
      verwaest@chromium.org authored
      This happens when a map A with no descriptors in fast_holey_elements
      mode first gets some properties, making it share descriptor arrays with
      a map B to which it transitions. Then map A transitions elements kind to
      dictionary_elements in map C. C stores the empty_descriptor_array in its
      own transition array. When adding a property to C, C transitions to D
      and shares the descriptors. If D dies, a CNLT clears the transition
      array of C, making the descriptor array of A (and thus also of B) shine
      through. If a property is now added to an object in state C, it'll inherit
      all the properties of A (and B). If those properties had high field indices,
      we do not have a large enough backing store for the single newly added
      property, and we'll write out of bounds.
      
      BUG=chromium:151749
      
      Review URL: https://chromiumcodereview.appspot.com/11017054
      
      git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@12687 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
      55e924c5
  2. 15 May, 2012 1 commit
  3. 13 Jan, 2012 1 commit
  4. 27 Nov, 2009 1 commit
  5. 23 Oct, 2009 1 commit
  6. 20 Oct, 2009 1 commit
  7. 04 Mar, 2009 1 commit
  8. 26 Sep, 2008 1 commit
  9. 09 Sep, 2008 1 commit
  10. 22 Aug, 2008 1 commit
    • christian.plesner.hansen's avatar
      Included mjsunit JavaScript test suite and C++ unit tests. · c42f5829
      christian.plesner.hansen authored
      In the shell sample don't print the result of executing a script, only
      evaluating expressions.
      
      Fixed issue when building samples on Windows using a shared V8
      library.  Added visibility option on Linux build which makes the
      generated library 18% smaller.
      
      Changed build system to accept multiple build modes in one build and
      generate seperate objects, libraries and executables for each mode.
      
      Removed deferred negation optimization (a * -b => -(a * b)) since this
      visibly changes operand conversion order.
      
      Improved parsing performance by introducing stack guard in preparsing.
      Without a stack guard preparsing always bails out with stack overflow.
      
      
      git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@16 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
      c42f5829
  11. 03 Jul, 2008 1 commit