Commits · 81b3372efa2aa692ac9de896787052652d424c83 · Linshizhi / V8

28 Nov, 2019 1 commit

Introduce %IsBeingInterpreted · 9ac62c4d

Georg Neis authored 5 years ago

A call to this intrinsic will produce true in the interpreter and false
in optimized code. This is useful for writing tests.

Change-Id: I64d06ed062027e723eca82d6f879202244f21fdf
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1939750
Commit-Queue: Georg Neis <neis@chromium.org>
Auto-Submit: Georg Neis <neis@chromium.org>
Reviewed-by: Tobias Tebbi <tebbi@chromium.org>
Cr-Commit-Position: refs/heads/master@{#65240}

9ac62c4d

28 Oct, 2019 1 commit

[turbofan] Fix memory corruption with VirtualBoundFunctions · 48fb778e

Maya Lekova authored 5 years ago

Bug: chromium:1018565
Change-Id: I72d41573a9a8c2f1a235ff50e918f89b1dc3f585
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1879904
Commit-Queue: Maya Lekova <mslekova@chromium.org>
Reviewed-by: Georg Neis <neis@chromium.org>
Cr-Commit-Position: refs/heads/master@{#64588}

48fb778e

19 Jun, 2019 2 commits

[cleanup] Add %PrepareFunctionForOptimization for few more tests · 15709b5a

Mythri A authored 5 years ago

Bug: v8:8394, v8:8801, v8:9183
Change-Id: Ia5169541ada58bf2bea64e720cae5e5c04617cbd
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1667001
Commit-Queue: Mythri Alle <mythria@chromium.org>
Reviewed-by: Ross McIlroy <rmcilroy@chromium.org>
Cr-Commit-Position: refs/heads/master@{#62278}

15709b5a

[Turbofan] Fix crash in MapInference::~MapInference · b3ce13f4

Mike Stanton authored 5 years ago

CL https://chromium-review.googlesource.com/c/v8/v8/+/1660623
("[Turbofan] Brokerize more promise reductions in JSCallReducer")
introduced a bug where we bail out of a call reduction but failed
to remove graph constructs added by the MapInference class.

R=jarin@chromium.org

Bug: chromium:976256, chromium:976524
Change-Id: I97f142fe6c1caba5e679f7df742893536c83b2d8
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1666990Reviewed-by: Jaroslav Sevcik <jarin@chromium.org>
Commit-Queue: Michael Stanton <mvstanton@chromium.org>
Cr-Commit-Position: refs/heads/master@{#62267}

b3ce13f4

12 Jun, 2019 1 commit

[test] Add %PrepareForOptimization to even more tests · c6a16c10

Mathias Bynens authored 5 years ago

With bytecode flushing and lazy feedback allocation, we need to call
%PrepareForOptimization before we call %OptimizeFunctionOnNextCall,
ideally after declaring the function.

Bug: v8:8801, v8:8394, v8:9183
Change-Id: I3fb257282a30f6526a376a3afdedb44786320d34
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1648255
Commit-Queue: Mathias Bynens <mathias@chromium.org>
Reviewed-by: Maya Lekova <mslekova@chromium.org>
Reviewed-by: Mythri Alle <mythria@chromium.org>
Cr-Commit-Position: refs/heads/master@{#62119}

c6a16c10

02 May, 2019 2 commits

[turbofan] Fix a bug in DepenOnStablePrototypeChains · 87b3416a

Georg Neis authored 5 years ago

When asked to start at the receiver and the receiver is a primitive, the
dependency should be taken on the primitive map (which is a no-op)
rather than the wrapper object's map.

Bug: chromium:958716
Change-Id: I9c8b2b56436d134b2f79dbe458c0c527fe6d17a1
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1593086
Commit-Queue: Georg Neis <neis@chromium.org>
Auto-Submit: Georg Neis <neis@chromium.org>
Reviewed-by: Jaroslav Sevcik <jarin@chromium.org>
Cr-Commit-Position: refs/heads/master@{#61174}

87b3416a

[turbofan] Fix two bugs in ReduceArrayIteratorPrototypeNext · 053393d9

Georg Neis authored 5 years ago

- Add missing uses of MapInference::NoChange.
- Insert map checks even if inferred maps were reliable, because
  they were inferred for an earlier effect input.

Bug: chromium:958420, chromium:958350, v8:9197
Change-Id: Id7677b1fc6f1e09dc12ae178f1155e4245b4e3e6
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1593077
Auto-Submit: Georg Neis <neis@chromium.org>
Reviewed-by: Jaroslav Sevcik <jarin@chromium.org>
Commit-Queue: Georg Neis <neis@chromium.org>
Cr-Commit-Position: refs/heads/master@{#61157}

053393d9

01 Apr, 2019 1 commit

[turbofan] Fix bug in JSStoreInArrayLiteral · 8d6da708

Georg Neis authored 5 years ago

It was missing a control output.

Bug: chromium:946889
Change-Id: I85f203fc6e27a60f0b86e0e2999dd798a5416dfc
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1547655
Commit-Queue: Georg Neis <neis@chromium.org>
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Cr-Commit-Position: refs/heads/master@{#60549}

8d6da708

06 Mar, 2019 1 commit

[turbofan] Use load_mode feedback for HasProperty access · 1297c928

Matt Gardner authored 5 years ago

ReduceJSHasProperty was always passing STANDARD_LOAD instead of using the load mode from
the feedback verctor. This was causing deopt loops when checking for out-of-bounds
indices.

chromium: 937734
Change-Id: I6de29f2c6a80bcc171cf027d47a2d1af1414b76c
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1501975Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Commit-Queue: Matt Gardner <magardn@microsoft.com>
Cr-Commit-Position: refs/heads/master@{#60073}

1297c928

07 Jan, 2019 1 commit

[turbofan] Add missing heap object check · 426312c8

Jaroslav Sevcik authored 6 years ago

Bug: chromium:918763
Change-Id: Ic9faaed6b3194269748ba35740cda0dc8dde3241
Reviewed-on: https://chromium-review.googlesource.com/c/1397707Reviewed-by: Georg Neis <neis@chromium.org>
Commit-Queue: Jaroslav Sevcik <jarin@chromium.org>
Cr-Commit-Position: refs/heads/master@{#58589}

426312c8

27 Oct, 2016 1 commit

[turbofan] Relax a too-strict dcheck. · 21d55e21

jarin authored 8 years ago

BUG=v8:5573

Review-Url: https://codereview.chromium.org/2458623002
Cr-Commit-Position: refs/heads/master@{#40619}

21d55e21

21 Apr, 2016 1 commit

Fix 'typeof null' canonicalization in crankshaft · 7dfb5bee

verwaest authored 8 years ago

BUG=

Review URL: https://codereview.chromium.org/1912553002

Cr-Commit-Position: refs/heads/master@{#35699}

7dfb5bee

05 Feb, 2016 1 commit

[turbofan] Reducers should revisit end after merging to it. · 52f2dbca

jarin authored 9 years ago

Review URL: https://codereview.chromium.org/1675433003

Cr-Commit-Position: refs/heads/master@{#33767}

52f2dbca

15 Jan, 2016 1 commit
- [crankshaft] Don't inline array indexOf operations if receiver's proto is not a JSObject. · 1bb7cfda
  ishell authored 9 years ago
```
BUG=chromium:577112
LOG=N

Review URL: https://codereview.chromium.org/1584303002

Cr-Commit-Position: refs/heads/master@{#33320}
```
  1bb7cfda
24 Jun, 2014 1 commit

Remove bogus assertions in HCompareObjectEqAndBranch. · 58bf19e9

yangguo@chromium.org authored 10 years ago

R=jkummerow@chromium.org, danno@chromium.org
BUG=387636
LOG=Y

Review URL: https://codereview.chromium.org/331863015

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@21959 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

58bf19e9

04 Jun, 2014 1 commit

Fix invalid loop condition for Array.lastIndexOf(). · 92444297

bmeurer@chromium.org authored 10 years ago

BUG=380512
LOG=y
R=jarin@chromium.org

Review URL: https://codereview.chromium.org/313073003

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@21665 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

92444297

03 Apr, 2014 1 commit

Check in Lithium that allocation size in Smi range. · 0b53ed2d

jarin@chromium.org authored 10 years ago

This is to avoid triggering an assertion from Smi::FromInt. The
generated code is unreachable, so it is not a real bug.

R=ulan@chromium.org
BUG=

Review URL: https://codereview.chromium.org/221743005

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@20458 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

0b53ed2d

31 Mar, 2014 1 commit

Fix Type::Intersect to skip uninhabited bitsets · 282a7ca1

rossberg@chromium.org authored 10 years ago

R=verwaest@chromium.org, bmeurer@chromium.org
BUG=chromium:357330
LOG=Y

Review URL: https://codereview.chromium.org/219333003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@20366 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

282a7ca1

28 Feb, 2014 3 commits

Fix representation generalization for doubles. · 38ca2629

hpayer@chromium.org authored 11 years ago

BUG=
R=verwaest@chromium.org

Review URL: https://codereview.chromium.org/184393002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19599 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

38ca2629

Fix handling of constant global variable assignments. · 5945f9eb

bmeurer@chromium.org authored 11 years ago

BUG=347904
LOG=y
R=hpayer@chromium.org

Review URL: https://codereview.chromium.org/184303003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19594 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

5945f9eb

Removed bogus ASSERT. · c4e90c15

svenpanne@chromium.org authored 11 years ago

LOG=y
BUG=347542
R=yangguo@chromium.org

Review URL: https://codereview.chromium.org/183763007

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19592 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

c4e90c15

25 Feb, 2014 1 commit

Fix crasher in Object.getOwnPropertySymbols · 63f1970c

rossberg@chromium.org authored 11 years ago

R=arv@chromium.org, mstarzinger@chromium.org
BUG=346141
LOG=Y

Review URL: https://codereview.chromium.org/177883002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19539 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

63f1970c

20 Feb, 2014 1 commit

Don't turn objects with empty-string properties into fast-mode. · 84b36651

verwaest@chromium.org authored 11 years ago

R=ishell@chromium.org

Review URL: https://codereview.chromium.org/165743003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19511 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

84b36651

14 Feb, 2014 1 commit

Fix typed array error message. · a676bc1b

yangguo@chromium.org authored 11 years ago

R=dslomov@chromium.org
BUG=v8:3159
LOG=N

Review URL: https://codereview.chromium.org/163293002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19369 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

a676bc1b