1. 25 Jan, 2017 5 commits
    • bmeurer's avatar
      [turbofan] Maintain the invariant to never inline cross native context. · 9a8e269a
      bmeurer authored
      In the JSCallReducer we'd inline certain builtins like the Array
      constructor or Function builtins across native contexts, which at
      this point should be mostly safe, but might lead to cross context
      leaks in the future (as it's not obvious that the JSCallReducer)
      doesn't maintain this invariant. So better safe than sorry.
      
      R=yangguo@chromium.org
      BUG=v8:5267
      
      Review-Url: https://codereview.chromium.org/2651133002
      Cr-Commit-Position: refs/heads/master@{#42643}
      9a8e269a
    • zhengxing.li's avatar
      X87: [Turbofan] Implement call with spread bytecode in assembly code. · bc1117ac
      zhengxing.li authored
        port f9367847 (r42632)
      
        original commit message:
        We can share almost all of the architecture-specific builtin code with super-call-with-spread.
      
        Info to port-writers: The code in CheckSpreadAndPushToStack has changed slightly from what was in Generate_ConstructWithSpread,
        in that we take the length of the spreaded parameters from the JSArray rather than the FixedArray backing store.
      
      BUG=
      
      Review-Url: https://codereview.chromium.org/2652153002
      Cr-Commit-Position: refs/heads/master@{#42642}
      bc1117ac
    • zhengxing.li's avatar
      X87: [TypeFeedbackVector] DeclareGlobals needs a literals array. · f223d4f5
      zhengxing.li authored
        port d287c819 (r42620)
      
        original commit message:
        [RELAND with one change: until literal arrays are rooted in the outer
        feedback vector (coming in the next days), the runtime-scope.cc change
        is held off.]
      
        When a function is declared in global scope, the closure is created
        by the DeclareGlobals runtime service. It needs a pointer to the
        literals array, already allocated in the feedback vector. This
        fixes a bug where it's behavior wasn't in sync with CreateClosure,
        which accepts the literals from the vector.
      
        This enables a follow-on performance improvement in the CompileLazy
        builtin.
      
      BUG=
      
      Review-Url: https://codereview.chromium.org/2653893002
      Cr-Commit-Position: refs/heads/master@{#42641}
      f223d4f5
    • cbruni's avatar
      [runtime] Fix Array.prototype.concat with complex @@species · e5608155
      cbruni authored
      Array.prototype.concat does not properly handle JSProxy species that will
      modify the currently visited array.
      
      BUG=682194
      
      Review-Url: https://codereview.chromium.org/2655623004
      Cr-Commit-Position: refs/heads/master@{#42640}
      e5608155
    • brettw's avatar
      Conditionally convert V8 build overrides to declare_args. · 98dbcfde
      brettw authored
      We're converting the build_overrides system to the new default_args list of
      overrides that can be listed in the toplevel .gn file. This will allow args to
      be set on a per-repo basis.
      
      This change conditionally adds the variables currently defined in
      build_overrides/v8.gni to build args. This allows V8's build to be used in both
      the new and old systems. Once all Chrome and pdfium have been updated, v8's
      build overrides and the conditional checks around the new args can be removed.
      
      BUG=684096
      
      Review-Url: https://codereview.chromium.org/2654663003
      Cr-Commit-Position: refs/heads/master@{#42639}
      98dbcfde
  2. 24 Jan, 2017 26 commits
  3. 23 Jan, 2017 9 commits