- 13 Jul, 2017 2 commits
-
-
v8-autoroll authored
Rolling v8/build: https://chromium.googlesource.com/chromium/src/build/+log/7e59b44..f64cb20 Rolling v8/buildtools: https://chromium.googlesource.com/chromium/buildtools/+log/1dcd1bd..c2827ae Rolling v8/third_party/catapult: https://chromium.googlesource.com/external/github.com/catapult-project/catapult/+log/08d8c9f..1286055 Rolling v8/tools/clang: https://chromium.googlesource.com/chromium/src/tools/clang/+log/4dc63de..f6f6b65 TBR=machenbach@chromium.org,hablich@chromium.org Change-Id: I98b37d30910e31eed44072520b817ebec95c0f98 Reviewed-on: https://chromium-review.googlesource.com/569407Reviewed-by: v8 autoroll <v8-autoroll@chromium.org> Commit-Queue: v8 autoroll <v8-autoroll@chromium.org> Cr-Commit-Position: refs/heads/master@{#46613}
-
agrieve authored
BUG=chromium:738469 Review-Url: https://codereview.chromium.org/2962213002 Cr-Commit-Position: refs/heads/master@{#46612}
-
- 12 Jul, 2017 38 commits
-
-
Sathya Gunasekaran authored
Bug: chromium:740694 Cq-Include-Trybots: master.tryserver.chromium.linux:linux_chromium_rel_ng Change-Id: Ib23bca1942c25d8a9f32e12be3f7b50fc3ab55c8 Reviewed-on: https://chromium-review.googlesource.com/568222 Commit-Queue: Sathya Gunasekaran <gsathya@chromium.org> Reviewed-by: Adam Klein <adamk@chromium.org> Cr-Commit-Position: refs/heads/master@{#46611}
-
Adam Klein authored
Change-Id: I0f4756efdaa9468bcbd88949ddb2e2d7cae3ce06 Reviewed-on: https://chromium-review.googlesource.com/568917Reviewed-by: Sathya Gunasekaran <gsathya@chromium.org> Commit-Queue: Adam Klein <adamk@chromium.org> Cr-Commit-Position: refs/heads/master@{#46610}
-
Adam Klein authored
Change-Id: Id46a9007021c8f1508a9a737b1e35d12bffd872b Reviewed-on: https://chromium-review.googlesource.com/568254Reviewed-by: Sathya Gunasekaran <gsathya@chromium.org> Commit-Queue: Adam Klein <adamk@chromium.org> Cr-Commit-Position: refs/heads/master@{#46609}
-
Ross McIlroy authored
Didn't seem to help and caused a couple of regressions. BUG=v8:6243,chromium:740124 Change-Id: I72887ba245a524211dbf181c77d0cdc6d917d090 Reviewed-on: https://chromium-review.googlesource.com/568480 Commit-Queue: Ross McIlroy <rmcilroy@chromium.org> Reviewed-by: Mythri Alle <mythria@chromium.org> Cr-Commit-Position: refs/heads/master@{#46608}
-
Adam Klein authored
When we abort preparsing, we have to reset the Scope state, to ensure re-parsing will leave us in the proper Zone. Resetting of rare_data_ was missing, causing this to fail in some cases. Bug: chromium:740803 Change-Id: I7ce70f9c4670eaf1b76745ae8231eb95625b0f4b Reviewed-on: https://chromium-review.googlesource.com/568784Reviewed-by: Caitlin Potter <caitp@igalia.com> Commit-Queue: Adam Klein <adamk@chromium.org> Cr-Commit-Position: refs/heads/master@{#46607}
-
Adam Klein authored
It's been regularly timing out on the Linux debug bot. TBR=machenbach@chromium.org Change-Id: I250fc55acb5d714c7060edb691eb9759a7d38a15 Reviewed-on: https://chromium-review.googlesource.com/568794Reviewed-by: Adam Klein <adamk@chromium.org> Cr-Commit-Position: refs/heads/master@{#46606}
-
Karl Schimpf authored
This turns on collection of function size bytes, and decode time for functions in all cases (both background and foreground). Bug: v8:6361 Change-Id: I5d982ec4452596210b3ea9858126820ad0c3eacf Reviewed-on: https://chromium-review.googlesource.com/568781 Commit-Queue: Karl Schimpf <kschimpf@chromium.org> Reviewed-by: Bill Budge <bbudge@chromium.org> Cr-Commit-Position: refs/heads/master@{#46605}
-
Jaideep Bajwa authored
Follow up on https://codereview.chromium.org/2740353002. Created PosixDefaultTimezoneCache which is a subclass of PosixTimezoneCache containing definition of LocalTimezone and LocalTimeOffset which is separate for different OS. R=littledan@chromium.org, ulan@chromium.org BUG=v8:6578 LOG=N Change-Id: I58342893aeefe79ac50e1df041d614fc473f15bf Reviewed-on: https://chromium-review.googlesource.com/568686Reviewed-by: Daniel Ehrenberg <littledan@chromium.org> Commit-Queue: Jaideep Bajwa <bjaideep@ca.ibm.com> Cr-Commit-Position: refs/heads/master@{#46604}
-
Camillo Bruni authored
By creating the boilerplate only on the second instantiation we cannot propagate back the elements transitions early enough. The resulting literals would change the initial ElementsKind one step too late and already pollute ICs that went to monomorphic state. - Disable lazy AllocationSites for literals containing arrays - Introduce new ComplexLiteral class to share code between ObjectLiteral and ArrayLiteral - RegexpLiteral now no longer needs a depth_ field Bug: v8:6517, v8:6519, v8:6211 Change-Id: Ia88d1878954e8895c3d00a7dda8d71e95bba005c Reviewed-on: https://chromium-review.googlesource.com/563305Reviewed-by: Adam Klein <adamk@chromium.org> Reviewed-by: Ross McIlroy <rmcilroy@chromium.org> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Camillo Bruni <cbruni@chromium.org> Cr-Commit-Position: refs/heads/master@{#46603}
-
Camillo Bruni authored
This is a reland of f720d024 Original change's description: > [mjsunit] Improve mjsunit stracktrace readability > > Format the function name and file-position into proper columns to easily spot > where the test code ends and the mjsunit framework code starts. > > BEFORE: > Stack: Error > at new MjsUnitAssertionError (test/mjsunit/mjsunit.js:36:18) > at failWithMessage (test/mjsunit/mjsunit.js:310:11) > at fail (test/mjsunit/mjsunit.js:327:12) > at assertEquals (test/mjsunit/mjsunit.js:398:7) > at closure (test/mjsunit/regress/regress-4121.js:20:7) > at literals_sharing_test (test/mjsunit/regress/regress-4121.js:27:3) > at test (test/mjsunit/regress/regress-4121.js:37:5) > at eval (eval at <anonymous> (test/mjsunit/regress/regress-4121.js:49:6), <anonymous>:1:1) > at test/mjsunit/regress/regress-4121.js:49:6 > at Array.forEach.call (test/mjsunit/regress/regress-4121.js:50:7) > throw new MjsUnitAssertionError(message); > > AFTER: > Stack: MjsUnitAssertionError > at assertEquals test/mjsunit/mjsunit.js 398:7 > at closure test/mjsunit/regress/regress-4121.js 20:7 > at literals_sharing_test test/mjsunit/regress/regress-4121.js 27:3 > at test test/mjsunit/regress/regress-4121.js 37:5 > at eval eval at <anonymous> (test/mjsunit/regress/regress-4121.js:49:6) > at test/mjsunit/regress/regress-4121.js 49:6 > at Array.forEach.call test/mjsunit/regress/regress-4121.js 50:7 > throw new MjsUnitAssertionError(message); > > > Change-Id: Iad3460a648e26effb43c00426ab043743ee6a138 > Reviewed-on: https://chromium-review.googlesource.com/563627 > Reviewed-by: Michael Achenbach <machenbach@chromium.org> > Reviewed-by: Igor Sheludko <ishell@chromium.org> > Commit-Queue: Camillo Bruni <cbruni@chromium.org> > Cr-Commit-Position: refs/heads/master@{#46589} Change-Id: I44bf07f7be4114369315605542cafd17345b4397 Reviewed-on: https://chromium-review.googlesource.com/567063Reviewed-by: Michael Achenbach <machenbach@chromium.org> Commit-Queue: Camillo Bruni <cbruni@chromium.org> Cr-Commit-Position: refs/heads/master@{#46602}
-
Adam Klein authored
JSFunction::SetName can fail if it tries to create a string with length > String::kMaxLength (either by prepending "set "/"get " or by surrounding a Symbol descriptor with "["/"]"). This patch propagates that exception to the surrounding code rather than CHECK-failing. Bug: chromium:740398 Change-Id: I394943af481f3147387dd82ec5862d7071d57827 Reviewed-on: https://chromium-review.googlesource.com/566092Reviewed-by: Michael Starzinger <mstarzinger@chromium.org> Reviewed-by: Mircea Trofin <mtrofin@chromium.org> Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> Commit-Queue: Adam Klein <adamk@chromium.org> Cr-Commit-Position: refs/heads/master@{#46601}
-
Alexandre Talon authored
The JSTypedLowering reducer was returning Changed(node) when it did not change the node, in case the node was a speculative number comparison node. Bug: Change-Id: I2082e4c2e45078b343e427f54d61d4e0a323a64f Reviewed-on: https://chromium-review.googlesource.com/568036Reviewed-by: Michael Starzinger <mstarzinger@chromium.org> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Alexandre Talon <alexandret@google.com> Cr-Commit-Position: refs/heads/master@{#46600}
-
Clemens Hammacher authored
The problem popped up when passing the constants by reference (https://chromium-review.googlesource.com/c/565141). It's a bit ugly, but, the C++11 standard requires a definition additionally to the existing declaration in the body of the class: 9.4.2/4: If a static data member is of const literal type, its declaration in the class definition can specify a brace-or-equal-initializer in which every initializer-clause that is an assignment-expression is a constant expression. A static data member of literal type can be declared in the class definition with the constexpr specifier; if so, its declaration shall specify a brace-or-equal-initializer in which every initializer-clause that i an assignment-expression is a constant expression. [Note: In both these cases, the member may appear in constant expressions. — end note] The member shall still be defined in a namespace scope if it is odr-used (3.2) in the program and the namespace scope definition shall not contain an initializer. Drive-by: Make the static constants constexpr. R=bmeurer@chromium.org Change-Id: Idc3d20bf2adf31d874c23ff8bfec52437789160a Reviewed-on: https://chromium-review.googlesource.com/567506Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Clemens Hammacher <clemensh@chromium.org> Cr-Commit-Position: refs/heads/master@{#46599}
-
Mythri authored
In branch elimination phase, control paths are updated when visiting the nodes. We first create a control path and then check if it is same as the exisiting one. If it is the same we discard the newly created one. Since these are created in the zone memory the memory will not be released till the entire pass is over. This cl changes it to first check if the control path has changed and create a new path only if it has changed. Bug: chromium:725664,v8:6150 Change-Id: I67fbea13036f85999c7ed366c571f8dc1c17a023 Reviewed-on: https://chromium-review.googlesource.com/563406Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Mythri Alle <mythria@chromium.org> Cr-Commit-Position: refs/heads/master@{#46598}
-
Ulan Degenbaev authored
BUG=chromium:694255 Change-Id: I49618ccb7e7c87dfd8ba8b2359c4384198fd1c30 Reviewed-on: https://chromium-review.googlesource.com/568306 Commit-Queue: Ulan Degenbaev <ulan@chromium.org> Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Cr-Commit-Position: refs/heads/master@{#46597}
-
Daniel Clifford authored
This makes it possible for automated tests to distinguish between CHECK failures and DCHECK failures, the latter of which will continue to run in release builds after the assertion failure point. Change-Id: Ie26978c0342d401a8c85f3261749739195087579 Reviewed-on: https://chromium-review.googlesource.com/565515 Commit-Queue: Daniel Clifford <danno@chromium.org> Reviewed-by: Jochen Eisinger <jochen@chromium.org> Reviewed-by: Adam Klein <adamk@chromium.org> Cr-Commit-Position: refs/heads/master@{#46596}
-
Michael Starzinger authored
This makes sure we leave some gap on the stack whenever compilation jobs are being finalized. Such a finalization can trigger assembling back on the main thread, hence requiring a non-negligible amount of stack. This is in sync with other {Runtime_CompileFoo} methods. R=ishell@chromium.org BUG=chromium:740400,chromium:741599 Change-Id: I96fbd524c3cd443a1f5a8e22925b92407fadfb63 Reviewed-on: https://chromium-review.googlesource.com/568142Reviewed-by: Igor Sheludko <ishell@chromium.org> Commit-Queue: Michael Starzinger <mstarzinger@chromium.org> Cr-Commit-Position: refs/heads/master@{#46595}
-
Camillo Bruni authored
- Update InitializeAllocationMemento to use newer CSA helper - Fix AllocateJSArray to create AllocationMementos for empty arrays as well Bug: v8:6211 Change-Id: I8731b04cdd500b877a54dee67f00f2899d91d86d Reviewed-on: https://chromium-review.googlesource.com/566810 Commit-Queue: Camillo Bruni <cbruni@chromium.org> Reviewed-by: Igor Sheludko <ishell@chromium.org> Cr-Commit-Position: refs/heads/master@{#46594}
-
Georg Neis authored
R=ahaas@chromium.org, bmeurer@chromium.org Bug: v8:6048 Change-Id: I5641cb1036fb0c6bf0803de3df9ddeb5787a93de Reviewed-on: https://chromium-review.googlesource.com/563308Reviewed-by: Andreas Haas <ahaas@chromium.org> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Reviewed-by: Ben Titzer <titzer@chromium.org> Commit-Queue: Georg Neis <neis@chromium.org> Cr-Commit-Position: refs/heads/master@{#46593}
-
Georg Neis authored
This reverts commit f720d024. Reason for revert: Bot failure at https://build.chromium.org/p/client.v8/builders/V8%20Linux64%20-%20custom%20snapshot%20-%20debug/builds/15690 Original change's description: > [mjsunit] Improve mjsunit stracktrace readability > > Format the function name and file-position into proper columns to easily spot > where the test code ends and the mjsunit framework code starts. > > BEFORE: > Stack: Error > at new MjsUnitAssertionError (test/mjsunit/mjsunit.js:36:18) > at failWithMessage (test/mjsunit/mjsunit.js:310:11) > at fail (test/mjsunit/mjsunit.js:327:12) > at assertEquals (test/mjsunit/mjsunit.js:398:7) > at closure (test/mjsunit/regress/regress-4121.js:20:7) > at literals_sharing_test (test/mjsunit/regress/regress-4121.js:27:3) > at test (test/mjsunit/regress/regress-4121.js:37:5) > at eval (eval at <anonymous> (test/mjsunit/regress/regress-4121.js:49:6), <anonymous>:1:1) > at test/mjsunit/regress/regress-4121.js:49:6 > at Array.forEach.call (test/mjsunit/regress/regress-4121.js:50:7) > throw new MjsUnitAssertionError(message); > > AFTER: > Stack: MjsUnitAssertionError > at assertEquals test/mjsunit/mjsunit.js 398:7 > at closure test/mjsunit/regress/regress-4121.js 20:7 > at literals_sharing_test test/mjsunit/regress/regress-4121.js 27:3 > at test test/mjsunit/regress/regress-4121.js 37:5 > at eval eval at <anonymous> (test/mjsunit/regress/regress-4121.js:49:6) > at test/mjsunit/regress/regress-4121.js 49:6 > at Array.forEach.call test/mjsunit/regress/regress-4121.js 50:7 > throw new MjsUnitAssertionError(message); > > > Change-Id: Iad3460a648e26effb43c00426ab043743ee6a138 > Reviewed-on: https://chromium-review.googlesource.com/563627 > Reviewed-by: Michael Achenbach <machenbach@chromium.org> > Reviewed-by: Igor Sheludko <ishell@chromium.org> > Commit-Queue: Camillo Bruni <cbruni@chromium.org> > Cr-Commit-Position: refs/heads/master@{#46589} TBR=machenbach@chromium.org,cbruni@chromium.org,ishell@chromium.org Change-Id: I631cec7f318637ce2f60500e2bf0ab7fe1f6d09e No-Presubmit: true No-Tree-Checks: true No-Try: true Reviewed-on: https://chromium-review.googlesource.com/567062Reviewed-by: Georg Neis <neis@chromium.org> Commit-Queue: Georg Neis <neis@chromium.org> Cr-Commit-Position: refs/heads/master@{#46592}
-
Yang Guo authored
Previously, the serializer would share mutable heap numbers between contexts. The workaround was to disable double field tracking entirely during bootstrapping of isolates preparing to be serialized. This does not cover custom scripts run between bootstrapping and serialization, and can cause race conditions when writing to the flag. This no longer seems necessary since we can correctly tell mutable and immutable heap numbers apart by instance type now. Bug: v8:6585 Change-Id: I7a59ffaad9d96f1c2b08813e19505f4fda95e555 Reviewed-on: https://chromium-review.googlesource.com/566861Reviewed-by: Yang Guo <yangguo@chromium.org> Reviewed-by: Camillo Bruni <cbruni@chromium.org> Commit-Queue: Yang Guo <yangguo@chromium.org> Cr-Commit-Position: refs/heads/master@{#46591}
-
jgruber authored
This CL moves collected source range information out of AST nodes and into a side table stored on ParseInfo. The side table is only created if block coverage is enabled, so there's almost no memory overhead in the standard case. Change-Id: I41871b8425ebbc6217d82d3ad26b5fc9e5d68ecb Reviewed-on: https://chromium-review.googlesource.com/566808 Commit-Queue: Jakob Gruber <jgruber@chromium.org> Reviewed-by: Ross McIlroy <rmcilroy@chromium.org> Reviewed-by: Georg Neis <neis@chromium.org> Cr-Commit-Position: refs/heads/master@{#46590}
-
Camillo Bruni authored
Format the function name and file-position into proper columns to easily spot where the test code ends and the mjsunit framework code starts. BEFORE: Stack: Error at new MjsUnitAssertionError (test/mjsunit/mjsunit.js:36:18) at failWithMessage (test/mjsunit/mjsunit.js:310:11) at fail (test/mjsunit/mjsunit.js:327:12) at assertEquals (test/mjsunit/mjsunit.js:398:7) at closure (test/mjsunit/regress/regress-4121.js:20:7) at literals_sharing_test (test/mjsunit/regress/regress-4121.js:27:3) at test (test/mjsunit/regress/regress-4121.js:37:5) at eval (eval at <anonymous> (test/mjsunit/regress/regress-4121.js:49:6), <anonymous>:1:1) at test/mjsunit/regress/regress-4121.js:49:6 at Array.forEach.call (test/mjsunit/regress/regress-4121.js:50:7) throw new MjsUnitAssertionError(message); AFTER: Stack: MjsUnitAssertionError at assertEquals test/mjsunit/mjsunit.js 398:7 at closure test/mjsunit/regress/regress-4121.js 20:7 at literals_sharing_test test/mjsunit/regress/regress-4121.js 27:3 at test test/mjsunit/regress/regress-4121.js 37:5 at eval eval at <anonymous> (test/mjsunit/regress/regress-4121.js:49:6) at test/mjsunit/regress/regress-4121.js 49:6 at Array.forEach.call test/mjsunit/regress/regress-4121.js 50:7 throw new MjsUnitAssertionError(message); Change-Id: Iad3460a648e26effb43c00426ab043743ee6a138 Reviewed-on: https://chromium-review.googlesource.com/563627Reviewed-by: Michael Achenbach <machenbach@chromium.org> Reviewed-by: Igor Sheludko <ishell@chromium.org> Commit-Queue: Camillo Bruni <cbruni@chromium.org> Cr-Commit-Position: refs/heads/master@{#46589}
-
Maya Lekova authored
Bug: v8:6558, v8:6557 Change-Id: Ife58f78d00bfd53d6b904e838cbd028f039945b4 Reviewed-on: https://chromium-review.googlesource.com/567501 Commit-Queue: Maya Lekova <mslekova@google.com> Reviewed-by: Camillo Bruni <cbruni@chromium.org> Cr-Commit-Position: refs/heads/master@{#46588}
-
Daniel Ehrenberg authored
This patch teaches the parser that async functions are not valid destructuring targets so that it can cleanly exit with a SyntaxError. Previously, async functions used in the wrong position would lead to a check failure. Bug: chromium:740366 Change-Id: Ie5b0cf50326c3f96174c6b29d0ccedb5da4f75a2 Reviewed-on: https://chromium-review.googlesource.com/567002Reviewed-by: Adam Klein <adamk@chromium.org> Reviewed-by: Caitlin Potter <caitp@igalia.com> Commit-Queue: Daniel Ehrenberg <littledan@chromium.org> Cr-Commit-Position: refs/heads/master@{#46587}
-
Clemens Hammacher authored
In most cases, this does not matter, especially if assigning to the source variable again: x = Abs(x) But there are cases where it matters, e.g. when being used as argument to a template function: DCHECK_EQ(x, Abs(x)); which would currently *not* fail for x==kMinInt. R=tebbi@chromium.org Change-Id: Ia5abfe164db602b80a34548e0bf9b22033b77c6e Reviewed-on: https://chromium-review.googlesource.com/568028Reviewed-by: Tobias Tebbi <tebbi@chromium.org> Commit-Queue: Clemens Hammacher <clemensh@chromium.org> Cr-Commit-Position: refs/heads/master@{#46586}
-
Michael Starzinger authored
This makes sure the inline allocation of generator objects only shrinks initial maps when slack tracking is actually in progress. Shrinking all unused properties unconditionally is bogus because instances using them might have become unreachable and collected by the GC. R=mvstanton@chromium.org TEST=mjsunit/regress/regress-crbug-741078 BUG=chromium:741078 Change-Id: Iaf2f08a4fa82c820a945bf012d24c760a6b4f514 Reviewed-on: https://chromium-review.googlesource.com/567982Reviewed-by: Michael Stanton <mvstanton@chromium.org> Commit-Queue: Michael Starzinger <mstarzinger@chromium.org> Cr-Commit-Position: refs/heads/master@{#46585}
-
Daniel Ehrenberg authored
In certain timezones, being at noon UTC doesn't guarantee that you'll be the same day in local time. This patch fixes that false assumption. Thanks to Holmes He for reporting the issue. Cq-Include-Trybots: master.tryserver.v8:v8_linux_noi18n_rel_ng Change-Id: I7432c0eb1e13fdf11c665e59dabaebeb79bff8c8 Reviewed-on: https://chromium-review.googlesource.com/568021Reviewed-by: Ulan Degenbaev <ulan@chromium.org> Commit-Queue: Daniel Ehrenberg <littledan@chromium.org> Cr-Commit-Position: refs/heads/master@{#46584}
-
Ulan Degenbaev authored
Change-Id: Id73c2c3a8b19c3e398d7de760dffe95e0e8b49a4 Reviewed-on: https://chromium-review.googlesource.com/566836Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Reviewed-by: Ulan Degenbaev <ulan@chromium.org> Commit-Queue: Ulan Degenbaev <ulan@chromium.org> Cr-Commit-Position: refs/heads/master@{#46583}
-
Georg Neis authored
This is a reland of 66b54ab1 Original change's description: > [compiler] Move the main pipeline's code assembly pass into the background. > > R=bmeurer@chromium.org > > Bug: v8:6048 > Change-Id: I60bc35c02b5460416c3b0e2872fc72ebf9b808a5 > Reviewed-on: https://chromium-review.googlesource.com/563386 > Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> > Commit-Queue: Georg Neis <neis@chromium.org> > Cr-Commit-Position: refs/heads/master@{#46499} TBR=bmeurer@chromium.org Bug: v8:6048 Change-Id: Ifcdd660dd69c6c4c1bc628961f4180a0b6ea4d9f Reviewed-on: https://chromium-review.googlesource.com/567061Reviewed-by: Georg Neis <neis@chromium.org> Commit-Queue: Georg Neis <neis@chromium.org> Cr-Commit-Position: refs/heads/master@{#46582}
-
Georg Neis authored
TF will instantiate the Assembler when we're already on a background thread, so it's not safe to read out the heap's max_old_generation_size (it can change). This CL simply removes the use of that value from the assembler. If the buffer gets too large we will fail when creating the actual code object. Bug: v8:6048 Change-Id: Ifb8a64c90222e4516117d237b001779fae060d28 Reviewed-on: https://chromium-review.googlesource.com/567921Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Reviewed-by: Michael Starzinger <mstarzinger@chromium.org> Commit-Queue: Georg Neis <neis@chromium.org> Cr-Commit-Position: refs/heads/master@{#46581}
-
Michael Achenbach authored
TBR=neis@chromium.org Change-Id: I59903a40c1ca47cce3e5744c51a2abda93e45dad Reviewed-on: https://chromium-review.googlesource.com/567931Reviewed-by: Michael Achenbach <machenbach@chromium.org> Cr-Commit-Position: refs/heads/master@{#46580}
-
Pierre Langlois authored
It seems there was a typo which meant we didn't generate any code for 32 and 128 bit slot to slot moves. Bug: Change-Id: Ia6982ec92471d16541d8ee873e1de33e4f46e77a Reviewed-on: https://chromium-review.googlesource.com/566812Reviewed-by: Bill Budge <bbudge@chromium.org> Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Pierre Langlois <pierre.langlois@arm.com> Cr-Commit-Position: refs/heads/master@{#46579}
-
Michael Lippautz authored
Various Scavenger fixes for smaller issues that accumulated over the last years. Bug: chromium:738865 Change-Id: I7573e438eba030944b99c65807944c662526a171 Reviewed-on: https://chromium-review.googlesource.com/567190 Commit-Queue: Michael Lippautz <mlippautz@chromium.org> Reviewed-by: Ulan Degenbaev <ulan@chromium.org> Cr-Commit-Position: refs/heads/master@{#46578}
-
Michael Lippautz authored
Bug: chromium:738865 Change-Id: Iffa80389def41cf03719c01b56f7971612367660 Reviewed-on: https://chromium-review.googlesource.com/567154Reviewed-by: Ulan Degenbaev <ulan@chromium.org> Commit-Queue: Michael Lippautz <mlippautz@chromium.org> Cr-Commit-Position: refs/heads/master@{#46577}
-
Michael Lippautz authored
Bug: chromium:738865 Change-Id: I53f82a459a82057486dcba26696fadebf7befcf7 Reviewed-on: https://chromium-review.googlesource.com/567156Reviewed-by: Ulan Degenbaev <ulan@chromium.org> Commit-Queue: Michael Lippautz <mlippautz@chromium.org> Cr-Commit-Position: refs/heads/master@{#46576}
-
Michael Starzinger authored
This introduces 2^16 as an upper limit for the allowed value range of a table switch on all architectures. It also fixes several overflows in the table size calculation. R=bmeurer@chromium.org TEST=mjsunit/regress/regress-crbug-736633 BUG=chromium:736633 Change-Id: I931bd226c99eb8a1ae1770c159fc314ff650bf57 Reviewed-on: https://chromium-review.googlesource.com/566829Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Michael Starzinger <mstarzinger@chromium.org> Cr-Commit-Position: refs/heads/master@{#46575}
-
jgruber authored
Previously (since f0e95769), this toLowerCase fast-path assumed it would only see one-byte flat contents. Unfortunately, it's possible to have a one-byte sliced string that has a two-byte parent. This CL ensures that String.p.toLowerCase handles such cases correctly. BUG=chromium:736451 Cq-Include-Trybots: master.tryserver.v8:v8_linux_noi18n_rel_ng Change-Id: Iae056b3db5535bb5665439a5cc8282a51571a548 Reviewed-on: https://chromium-review.googlesource.com/565559Reviewed-by: Yang Guo <yangguo@chromium.org> Commit-Queue: Jakob Gruber <jgruber@chromium.org> Cr-Commit-Position: refs/heads/master@{#46574}
-