1. 03 Jun, 2014 1 commit
  2. 29 Apr, 2014 1 commit
  3. 04 Feb, 2014 1 commit
  4. 03 Sep, 2013 1 commit
  5. 24 May, 2013 1 commit
  6. 29 Nov, 2012 1 commit
  7. 26 Nov, 2012 1 commit
  8. 08 Nov, 2012 1 commit
  9. 24 Nov, 2011 1 commit
  10. 13 Jul, 2011 1 commit
  11. 07 Apr, 2011 1 commit
  12. 18 Mar, 2011 3 commits
  13. 17 Mar, 2011 1 commit
  14. 04 Feb, 2011 1 commit
  15. 07 Dec, 2010 3 commits
  16. 02 Dec, 2010 1 commit
  17. 22 Nov, 2010 1 commit
  18. 19 Nov, 2010 1 commit
  19. 11 Nov, 2010 1 commit
  20. 10 Nov, 2010 1 commit
  21. 02 Nov, 2010 1 commit
  22. 29 Oct, 2010 1 commit
  23. 18 Oct, 2010 1 commit
  24. 04 Oct, 2010 1 commit
  25. 14 Sep, 2010 1 commit
  26. 01 Sep, 2010 1 commit
  27. 30 Aug, 2010 1 commit
  28. 27 Aug, 2010 1 commit
  29. 25 Aug, 2010 1 commit
  30. 20 Aug, 2010 1 commit
  31. 16 Aug, 2010 1 commit
  32. 12 Aug, 2010 1 commit
    • sgjesse@chromium.org's avatar
      Handle overwriting valueOf on String objects correctly when adding · 8e0cd6db
      sgjesse@chromium.org authored
      This adds a check to the fast case string add to ensure that the String object still have the default valueOf function. The default valueOf is sitting on a hidden prototype of String.prototype.
      
      Before using the fast case valueOf the object is checked for a local valueOf property. For slow case objects this check always reports true (the dictionary is not probed, so valueOf might be there) and for fast case objects the descriptor array is checked for the valueOf symbol (just liniar scan). After that the prototype is checked for beeing the initial value of String.prototype. If this all pass (that is the default valueOf is still in place) this result is cached on the map making the check fast the next time.
      
      This is only implemented in the optimizing compiler, as the two usages of %_IsStringWrapperSafeForDefaultValueOf is never hit by the full compiler.
      
      I will port to x64 and ARM when this has been reviewed for ia32.
      
      I will remove the performance counters prior to final commit.
      
      BUG=http://code.google.com/p/v8/issues/detail?id=760
      TEST=test/mjsunit/regress/regress-760-1.js
      TEST=test/mjsunit/regress/regress-760-2.js
      
      Review URL: http://codereview.chromium.org/3117006
      
      git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@5252 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
      8e0cd6db
  33. 09 Aug, 2010 1 commit
  34. 06 Aug, 2010 1 commit
  35. 23 Jul, 2010 2 commits