- 08 Mar, 2019 4 commits
-
-
Jakob Kummerow authored
RotateRight32 needs a "number of bits" operand in the range 0..31. Thankfully that's how x86 shift instructions behave anyway, and how the bitwise shift operators in JavaScript are spec'ed, so this fix is unobservable in non-UBSan builds. RemoveArrayHolesGeneric can be used for length values anywhere in the uint32_t range, so it must not implicitly cast those to int. That actually caused an observable bug where a proxy's traps would not get called at all, but only for huge "length" properties, where the entire operation would also be painfully slow. Bug: chromium:935133, chromium:937652 Change-Id: I13f74ca27eae6b2b089d58217842b699b2574509 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1510272 Auto-Submit: Jakob Kummerow <jkummerow@chromium.org> Reviewed-by:
Adam Klein <adamk@chromium.org> Reviewed-by:
Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Benedikt Meurer <bmeurer@chromium.org> Cr-Commit-Position: refs/heads/master@{#60112}
-
Bill Budge authored
- Converts most integer vector tests to use globals (except Select) so results can be checked in C++ code. - Remove integer vector result checking macros. - Add specializations of test CompareOps for floats, so we can use BinOps for integer vector compare opcodes. - Remove Run#format#CompareOpTests helper functions for integer vector types. Use Run#BinOpTests helper function instead. Bug: v8:6020 Change-Id: I968a71c874b028a750e1118cf51f6678cae90091 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1496281 Commit-Queue: Bill Budge <bbudge@chromium.org> Reviewed-by:
Deepti Gandluri <gdeepti@chromium.org> Cr-Commit-Position: refs/heads/master@{#60111}
-
v8-ci-autoroll-builder authored
Rolling v8/build: https://chromium.googlesource.com/chromium/src/build/+log/37fdf54..ba214bf Rolling v8/test/wasm-js/data: https://chromium.googlesource.com/external/github.com/WebAssembly/spec/+log/44dfa15..b552862 Rolling v8/third_party/catapult: https://chromium.googlesource.com/catapult/+log/ccc2908..a07cd8f Rolling v8/third_party/depot_tools: https://chromium.googlesource.com/chromium/tools/depot_tools/+log/ffb1ffb..2f3c820 Rolling v8/tools/clang: https://chromium.googlesource.com/chromium/src/tools/clang/+log/8d60039..60462ac TBR=machenbach@chromium.org,hablich@chromium.org,sergiyb@chromium.org Change-Id: I687a2ab71f8b6484d864a86db2579d55ded3882e Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1510578Reviewed-by:
v8-ci-autoroll-builder <v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com> Commit-Queue: v8-ci-autoroll-builder <v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com> Cr-Commit-Position: refs/heads/master@{#60110}
-
Bill Budge authored
This is a reland of 821bc649 Original change's description: > [wasm simd] Fix F32x4 Min and Max > > - Fix F32x4 tests to save results in globals, so they can be checked > in C++ code. Perform correct checks in case of NaNs. > - Fix ia32, x64 implementations of F32x4Min, F32x4Max to correctly > deal with NaNs. > - Enable tests for all float values on all platforms, except skip > denormalized results on ARM, and skip extreme values for reciprocal, > reciprocal square root approximation opcodes. > - Disable Min, Max test for interpreter (see v8:8425) since it doesn't > handle NaNs correctly. > - Fix vmin, vmax implementations in ARM simulator. > > Bug: v8:8639 > Change-Id: I87e188e3cb078f09fdacfd9955f426c20a11bf64 > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1495897 > Commit-Queue: Bill Budge <bbudge@chromium.org> > Reviewed-by: Deepti Gandluri <gdeepti@chromium.org> > Cr-Commit-Position: refs/heads/master@{#60021} Bug: v8:8639 Change-Id: Ic557aa1d323693eabf5885ff5eddc15e3174079b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1501279Reviewed-by:
-
- 07 Mar, 2019 34 commits
-
-
Frank Tang authored
Antarctica/DumontDUrville has special casing. Bug: chromium:928068 Change-Id: I8aea2fafc2c14d6fbfee8a95910df7e8d7d1ff37 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507329Reviewed-by:
Sathya Gunasekaran <gsathya@chromium.org> Commit-Queue: Frank Tang <ftang@chromium.org> Cr-Commit-Position: refs/heads/master@{#60108}
-
Frank Tang authored
Fix 'intl402/Intl/getCanonicalLocales/non-iana-canon' Add "mo" to IsDeprecatedLanguage list. Bug: v8:8849 Change-Id: I414f2a86fd18719ddcce07e9cbcb20caa6459acd Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1504772 Commit-Queue: Frank Tang <ftang@chromium.org> Reviewed-by:
-
Ben Smith authored
V8's MemMove and libc's memset do not specify how the memory is filled, but wasm requires the direction to be backward only when the regions are overlapping and the source address is less than the destination address. Bug: v8:8950 Change-Id: If392967b51b33ad65fe145660f44b857559e34b1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507316 Commit-Queue: Ben Smith <binji@chromium.org> Reviewed-by:
Michael Starzinger <mstarzinger@chromium.org> Cr-Commit-Position: refs/heads/master@{#60106}
-
Junliang Yan authored
Change-Id: I71a347673f656ba7cdb33d5094277f8cac6f4a7c Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1508820 Auto-Submit: Junliang Yan <jyan@ca.ibm.com> Reviewed-by:
Milad Farazmand <miladfar@ca.ibm.com> Commit-Queue: Junliang Yan <jyan@ca.ibm.com> Cr-Commit-Position: refs/heads/master@{#60105}
-
Igor Sheludko authored
... because the latter are not meant to be modified from non-main thread and especially after V8 isolate is set up while the former are modified cuncurrently by tracing API. Tbr: verwaest@chromium.org Cq-Include-Trybots: luci.v8.try:v8_linux64_tsan_rel Bug: v8:8929, v8:8834 Change-Id: I44d3da2f388bb8bb8d0365ac6354e761bf92b936 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1505581Reviewed-by:
Ulan Degenbaev <ulan@chromium.org> Commit-Queue: Igor Sheludko <ishell@chromium.org> Cr-Commit-Position: refs/heads/master@{#60104}
-
Francis McCabe authored
Implement ReturnCall functionality for TurboFan compiler. Bug: v8:7431 Change-Id: I1e20473a9b3eba9ee48c0c11f89029356dd9b9eb Cq-Include-Trybots: luci.v8.try:v8_linux64_ubsan_rel_ng Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1467344 Commit-Queue: Francis McCabe <fgm@chromium.org> Reviewed-by:
Clemens Hammacher <clemensh@chromium.org> Reviewed-by:
Andreas Haas <ahaas@chromium.org> Cr-Commit-Position: refs/heads/master@{#60103}
-
Igor Sheludko authored
(https://chromium-review.googlesource.com/c/v8/v8/+/1467182) Bug: v8:7703 Change-Id: Ia6b74b985735af67bde56b30e4a709247eb591be Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1508674 Commit-Queue: Igor Sheludko <ishell@chromium.org> Commit-Queue: Ulan Degenbaev <ulan@chromium.org> Reviewed-by:
-
Sigurd Schneider authored
This change enables clean-up of weak map entries in the scavenger of the weak map is in the young generation. With this change, the scavenger treats keys in ephemerons as weak instead of strong, but does not implement full ephemeron semantics: Values are treated always as strong, independently of whether the key is live or not. This approach ensures that no value is cleaned up accidentally. After scavenging, all entries with dead keys are removed from weak maps. After that, some values that are not referenced anywhere anymore might still be in the heap, and those can be cleaned up in the next scavenge. What the scavenger does, amounts to one iteration of the fixed-point algorithm required to implement ephemeron semantics. We hope that this is a reasonable trade-off between time spent tracing and cleaned-up entries. This change does not affect weak maps that reside in old space. Bug: v8:8557 Change-Id: Ic5618b3b863ad8c314c87449571150e756fecbf0 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1467182 Commit-Queue: Sigurd Schneider <sigurds@chromium.org> Reviewed-by:
-
Igor Sheludko authored
... which complained about truncating uintptr_t constant to uint32_t. Bug: v8:7703 Change-Id: I6fae2bf1e5de79e6131479b84a8d8aa5b9de909f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1508672Reviewed-by:
-
Maya Lekova authored
After introducing the new pointer-containing Object class in V8 (see https://docs.google.com/document/d/1_w49sakC1XM1OptjTurBDqO86NE16FH8LwbeUAtrbCo/edit), gcmole stopped finding errorneous usage of raw pointers in functions that could trigger GC. This CL modifies the heuristics of the tool to classify Object and MaybeObject instances as raw pointers, thus giving back the missing warnings. Updated the gcmole implementation to support modern llvm (tested with llvm 8.0) for which additional support for MaterializeTemporaryExpr, ExprWithCleanups and UnaryExprOrTypeTraitExpr was needed. Basic tests are added to make it harder to introduce such errors without noticing in the future. This version gives a lot of false positives when ran on the whole project, see https://docs.google.com/document/d/1K7eJ0f6m9QX6FZIjZnt_GFtUsjEOC_LpiAwZbcAA3f8/edit R=jkummerow@chromium.org,mstarzinger@chromium.org Bug: v8:8813 Change-Id: Ic0190a4bc2642eda8880d9f7b30b5145a76a7d89 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1494754 Commit-Queue: Maya Lekova <mslekova@chromium.org> Reviewed-by:
-
Clemens Hammacher authored
Some windows toolchains contain a macro name 'FormatMessage', making compilation fail, see e.g. https://ci.chromium.org/p/v8/builders/try/v8_win64_msvc_compile_rel/b8919741418899023808. Hence rename {MessageFormatter::FormatMessage} to {MessageFormatter::Format}. R=sigurds@chromium.org Change-Id: I51bd444838be2449bbe848aa0f7f85d73a0a713b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1505456Reviewed-by:
Sigurd Schneider <sigurds@chromium.org> Commit-Queue: Clemens Hammacher <clemensh@chromium.org> Cr-Commit-Position: refs/heads/master@{#60098}
-
Junliang Yan authored
smi size is sill 8 bytes when V8_COMPRESS_POINTERS is undefined. Bug: v8:7703 Change-Id: I0d1e757e42e8b1e6b10960420135245e24553175 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1508572 Commit-Queue: Junliang Yan <jyan@ca.ibm.com> Auto-Submit: Junliang Yan <jyan@ca.ibm.com> Reviewed-by:
Igor Sheludko <ishell@chromium.org> Cr-Commit-Position: refs/heads/master@{#60097}
-
Clemens Hammacher authored
Emitting bytes to the Uint8Array directly speeds up generation of binaries enormously. On the limits-any.js spec test (which creates huge modules), the execution time of an optdebug build reduces from 286 seconds to 61 seconds. R=titzer@chromium.org CC=ahaas@chromium.org, ssauleau@igalia.com Change-Id: I5b473b7dc7b0853e54d2406f3db3658bb2abed40 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1508352Reviewed-by:
Ben Titzer <titzer@chromium.org> Reviewed-by:
-
Takuto Ikuta authored
Because string-util.h includes src/base/logging.h Bug: chromium:931596 Change-Id: Ia6f49ec4629471e8a4a20578c6073b47eab8c4df Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507000 Auto-Submit: Takuto Ikuta <tikuta@chromium.org> Reviewed-by:
Yang Guo <yangguo@chromium.org> Commit-Queue: Yang Guo <yangguo@chromium.org> Cr-Commit-Position: refs/heads/master@{#60095}
-
Peter Marshall authored
When running mksnapshot standalone, no callback is registered to serialize embedder fields. In this case they are most probably empty as there is no embedder to set them, so provide a default serialization that keeps them as nullptr. Bug: v8:8822 Change-Id: I9219f2755488aa1473959c3ee75e9d4f47202359 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507677 Auto-Submit: Peter Marshall <petermarshall@chromium.org> Reviewed-by:
-
Maciej Goszczycki authored
Most test-log tests create their own isolates, so initializing the cctest isolate is not necessary. Bug: v8:7464 Change-Id: Icc3cd9d5053c4070833709cbe28e5bde2cee9708 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507719Reviewed-by:
Dan Elphick <delphick@chromium.org> Commit-Queue: Maciej Goszczycki <goszczycki@google.com> Cr-Commit-Position: refs/heads/master@{#60093}
-
Michael Starzinger authored
This makes sure an exception raised while compiling a module via the embedder API is properly returned as a "scheduled exception" and hence propagates to surrounding {v8::TryCatch} scopes. R=clemensh@chromium.org TEST=cctest/test-api/WasmModuleObjectCompileFailure BUG=v8:8908 Change-Id: I52b21fbe5a4548aa346fd6c9b5bac061613db487 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507673 Commit-Queue: Michael Starzinger <mstarzinger@chromium.org> Reviewed-by: -
Ujjwal Sharma authored
Add a fast path for String.p.startsWith(str) when length of str is 1. Bug: v8:8400 Change-Id: I65e657549902dc3ad064a213d815dd098ce6455f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1491872 Commit-Queue: Sigurd Schneider <sigurds@chromium.org> Reviewed-by:
-
Hannes Payer authored
Bug: v8:8945 Change-Id: I0e1b0d6751efdb468e603df21af4d36972b8b90b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1505455 Commit-Queue: Hannes Payer <hpayer@chromium.org> Reviewed-by:
-
Ulan Degenbaev authored
Change-Id: Ic11e2c6a7b08b7f470f8f1649f37c48cc53eeee6 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507675Reviewed-by:
-
Michael Hablich authored
NOTRY=true TBR=machenbach@chromium.org Change-Id: I0b8b93276e7724ef103924d17646599aef7b2ab4 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1508212Reviewed-by:
Michael Hablich <hablich@chromium.org> Commit-Queue: Michael Hablich <hablich@chromium.org> Cr-Commit-Position: refs/heads/master@{#60088}
-
Michael Achenbach authored
This umblocks switching this builder to Xenial. The corresponding gcc version is not yet supported by goma. NOTRY=true Bug: chromium:933093 Change-Id: Ib00d191c229bb598b209dcaf447321b874571e62 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1505577Reviewed-by:
Tamer Tas <tmrts@chromium.org> Commit-Queue: Michael Achenbach <machenbach@chromium.org> Cr-Commit-Position: refs/heads/master@{#60087}
-
Dan Elphick authored
Updates a bunch of links from https://github.com/v8/v8/wiki pages to the appropriate v8.dev page that it redirected to anyway. Bug: v8:8834 Change-Id: I5b37996900eb779753d97e487d16e1489f54d391 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1503473 Auto-Submit: Dan Elphick <delphick@chromium.org> Reviewed-by:
-
Vadim Gorbachev (bmsdave) authored
These changes fix Python 3 compatibility errors in third-party libraries I'm not sure if these problems can be fixed this way. But! (1) In deps/inspector_protocol no file roll.py it looks like the repository v8 it shouldn't be, either. (2) I have not found a separate repository for binutils. Bug: chromium:935197 Change-Id: Ied2bb83e0539aa392f8fc7c3aeef662612f37d06 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1484302Reviewed-by:
Sergiy Belozorov <sergiyb@chromium.org> Reviewed-by:
-
Michael Achenbach authored
NOTRY=true Bug: v8:8959 Change-Id: I3493487268aa945aab690ee4561678e61b09aace Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507676Reviewed-by:
-
v8-ci-autoroll-builder authored
Rolling v8/build: https://chromium.googlesource.com/chromium/src/build/+log/80892bf..37fdf54 Rolling v8/buildtools: https://chromium.googlesource.com/chromium/src/buildtools/+log/3e50219..a9db5de Rolling v8/buildtools/third_party/libc++/trunk: https://chromium.googlesource.com/chromium/llvm-project/libcxx/+log/22d3f6d..9ae8fb4 Rolling v8/third_party/depot_tools: https://chromium.googlesource.com/chromium/tools/depot_tools/+log/cf661ac..ffb1ffb Rolling v8/tools/clang: https://chromium.googlesource.com/chromium/src/tools/clang/+log/257c91c..8d60039 TBR=machenbach@chromium.org,hablich@chromium.org,sergiyb@chromium.org Change-Id: I3fd7ecfbcb998097e5cfe062e4f20933244da918 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507793Reviewed-by:
-
Clemens Hammacher authored
Execute foreground tasks triggered by the {CompilationStateCallback} via the {CompileStep} mechanism of {AsyncCompileJob} such that they get cancelled when the AsyncCompileJob dies. R=ahaas@chromium.org Bug: chromium:938311 Change-Id: I2082f93f47988c014c8dee3ddf3e9b2940f6f531 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507674Reviewed-by: -
Michael Achenbach authored
TBR=yangguo@chromium.org Change-Id: Ieb6f9da0cd15c65ed0537ecbc3a3c032ac6bbbf7 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507672Reviewed-by:
Michael Achenbach <machenbach@chromium.org> Reviewed-by:
Maya Lekova <mslekova@chromium.org> Commit-Queue: Michael Achenbach <machenbach@chromium.org> Cr-Commit-Position: refs/heads/master@{#60081}
-
Michael Starzinger authored
R=jkummerow@chromium.org TEST=mjsunit/asm/regress-937650 BUG=chromium:937650 Change-Id: I9a46fcce68cf1b5c424539aad2f78fbcd30cf9b1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1505458Reviewed-by:
Jakob Kummerow <jkummerow@chromium.org> Commit-Queue: Michael Starzinger <mstarzinger@chromium.org> Cr-Commit-Position: refs/heads/master@{#60080}
-
Michael Achenbach authored
Bug: v8:8889 Change-Id: If0a8e71dca2ae5660481ba78bf79eb311d60c9e4 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1495557 Commit-Queue: Michael Achenbach <machenbach@chromium.org> Reviewed-by:
-
Simon Zünd authored
This reverts commit 0738c63a. Reason for revert: Closes tree Original change's description: > Update V8 DEPS. > > Rolling v8/build: https://chromium.googlesource.com/chromium/src/build/+log/80892bf..2cef311 > > Rolling v8/buildtools: https://chromium.googlesource.com/chromium/src/buildtools/+log/3e50219..a9db5de > > Rolling v8/buildtools/third_party/libc++/trunk: https://chromium.googlesource.com/chromium/llvm-project/libcxx/+log/22d3f6d..9ae8fb4 > > Rolling v8/third_party/depot_tools: https://chromium.googlesource.com/chromium/tools/depot_tools/+log/cf661ac..48f640f > > TBR=machenbach@chromium.org,hablich@chromium.org,sergiyb@chromium.org > > Change-Id: Ibe4c24ac7d8a576c21306a915b0d68222eb4477b > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507318 > Reviewed-by: v8-ci-autoroll-builder <v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com> > Commit-Queue: v8-ci-autoroll-builder <v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com> > Cr-Commit-Position: refs/heads/master@{#60077} TBR=machenbach@chromium.org,hablich@chromium.org,sergiyb@chromium.org,v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com Change-Id: I84832aa42e94f79b6c55f083d574e15c8c2d9353 No-Presubmit: true No-Tree-Checks: true No-Try: true Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1505583Reviewed-by:
Simon Zünd <szuend@chromium.org> Commit-Queue: Simon Zünd <szuend@chromium.org> Cr-Commit-Position: refs/heads/master@{#60078}
-
v8-ci-autoroll-builder authored
Rolling v8/build: https://chromium.googlesource.com/chromium/src/build/+log/80892bf..2cef311 Rolling v8/buildtools: https://chromium.googlesource.com/chromium/src/buildtools/+log/3e50219..a9db5de Rolling v8/buildtools/third_party/libc++/trunk: https://chromium.googlesource.com/chromium/llvm-project/libcxx/+log/22d3f6d..9ae8fb4 Rolling v8/third_party/depot_tools: https://chromium.googlesource.com/chromium/tools/depot_tools/+log/cf661ac..48f640f TBR=machenbach@chromium.org,hablich@chromium.org,sergiyb@chromium.org Change-Id: Ibe4c24ac7d8a576c21306a915b0d68222eb4477b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1507318Reviewed-by:
-
tzik authored
This adds the entrypoint to MicrotaskQueue, which used to miss the implementation. Bug: v8:8124 Change-Id: I114fb69d975ee75c86b19349ca76789e425ea910 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1505232Reviewed-by:
-
Jakob Kummerow authored
Fixing a few float and int overflows. Drive-by fix: with --experimental-wasm-bigint, Number values may not be used to initialize i64-typed globals. The existing code for doing that relied on UB; since it's a spec violation the fix is to throw instead. No regression test for 933103 because it will OOM anyway. No regression test for 932896 because it would be extremely slow. Bug: chromium:927894, chromium:927996, chromium:930086, chromium:932679, chromium:932896, chromium:933103, chromium:933134 Change-Id: Iae1c1ff1038af4512a52d3e56b8c4b75f2233314 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1495911 Commit-Queue: Jakob Kummerow <jkummerow@chromium.org> Reviewed-by:
-
- 06 Mar, 2019 2 commits
-
-
Igor Sheludko authored
... and fix header includes to please the respective bot. Drive-by-fix: decompression implementation is now MSVC friendly. Bug: v8:7703, v8:8834 Change-Id: Iaf589138e5bafb32b0d9feab5cf074b71f241a3c Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1505579 Commit-Queue: Igor Sheludko <ishell@chromium.org> Reviewed-by:
-
Matt Gardner authored
ReduceJSHasProperty was always passing STANDARD_LOAD instead of using the load mode from the feedback verctor. This was causing deopt loops when checking for out-of-bounds indices. chromium: 937734 Change-Id: I6de29f2c6a80bcc171cf027d47a2d1af1414b76c Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1501975Reviewed-by:
-
