Commits · c4e90c15b8adef5a45a5bc60622eaf52ae50b658 · Linshizhi / V8

28 Feb, 2014 1 commit

svenpanne@chromium.org authored Feb 28, 2014

LOG=y
BUG=347542
R=yangguo@chromium.org

Review URL: https://codereview.chromium.org/183763007

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19592 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

c4e90c15

27 Feb, 2014 11 commits

HAllocate should never generate allocation code if the requested size does not... · 2ab83cf1

ishell@chromium.org authored Feb 27, 2014

HAllocate should never generate allocation code if the requested size does not fit into page. Regression test included.

BUG=347543
LOG=N
R=hpayer@chromium.org

Review URL: https://codereview.chromium.org/180803005

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19591 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

2ab83cf1

Runtime::RunMicrotask should silent return if no pending microtask work (rather than asserting) · d9a66ad9

rafaelw@chromium.org authored Feb 27, 2014

R=rossberg@chromium.org, rossberg
BUG=347532

Review URL: https://codereview.chromium.org/181013008

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19588 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

d9a66ad9

Avoid normalizing global proxy for fuzzing purposes. · ce0f1b3d

verwaest@chromium.org authored Feb 27, 2014

R=danno@chromium.org

Review URL: https://codereview.chromium.org/183313002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19587 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

ce0f1b3d

Fix putting of prototype transitions. The length is also subject to GC, just like entry. · aa14020b

verwaest@chromium.org authored Feb 27, 2014

BUG=347536
LOG=n
R=danno@chromium.org

Review URL: https://codereview.chromium.org/183193003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19586 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

aa14020b

Fix bogus assertion. · f1ad20d0

yangguo@chromium.org authored Feb 27, 2014

R=hpayer@chromium.org
BUG=347530

Review URL: https://codereview.chromium.org/183243002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19585 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

f1ad20d0

Handle arguments objects in frame when materializing arguments · 05b98492

jarin@chromium.org authored Feb 27, 2014

R=mstarzinger@chromium.org
BUG=347262

Review URL: https://codereview.chromium.org/177293009

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19584 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

05b98492

Fix bogus assertion in SetFastDoubleElements. · 6912a248

yangguo@chromium.org authored Feb 27, 2014

R=danno@chromium.org
BUG=347530
LOG=N

Review URL: https://codereview.chromium.org/181433016

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19579 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

6912a248

Fix for Clusterfuzz issue 343928. · b8f8cfab

mvstanton@chromium.org authored Feb 27, 2014

The problem was that the debugger didn't expect that a JSFunction could
have a GlobalContext, which it can with harmony scoping.

BUG=343928
R=yangguo@chromium.org
LOG=N

Review URL: https://codereview.chromium.org/183103003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19576 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

b8f8cfab

Revert "Better threaded fuzzing for TestFunctionCallOptimization" · 703536eb

dcarney@chromium.org authored Feb 27, 2014

This reverts commit 19567.

TBR=verwaest@chromium.org

BUG=

Review URL: https://codereview.chromium.org/182893003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19569 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

703536eb

Implement and enable zapping of code space while sweeping. · 947a5e6b

mstarzinger@chromium.org authored Feb 27, 2014

R=danno@chromium.org, hpayer@chromium.org
BUG=

Review URL: https://codereview.chromium.org/181513004

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19568 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

947a5e6b

Better threaded fuzzing for TestFunctionCallOptimization · 44da7452

dcarney@chromium.org authored Feb 27, 2014

R=verwaest@chromium.org

BUG=

Review URL: https://codereview.chromium.org/182863002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19567 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

44da7452

26 Feb, 2014 7 commits

Fix patch creation in merge-to-branch script. · f09b3db7

machenbach@chromium.org authored Feb 26, 2014

Patch white space got stripped, which lead to failures when applying the patch.

- Refine test to reveal the problem
- Create a separate method for retrieving the patch that doesn't strip white space

R=jkummerow@chromium.org

Review URL: https://codereview.chromium.org/181603002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19566 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

f09b3db7

Refactoring: Deprecate optparse in push and merge scripts. · 2e01427c

machenbach@chromium.org authored Feb 26, 2014

- Deprecate optparse with argparse
- The tests include now options parsing by default: each test specifies the command-line args to parse rather than the options directly

This CL is split off from https://codereview.chromium.org/173983002/

TBR=ulan@chromium.org

Review URL: https://codereview.chromium.org/181583002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19565 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

2e01427c

A64: Hardwire the decoder and the simulator · 201436d4

jochen@chromium.org authored Feb 26, 2014

If one of --trace-sim --debug-sim or --log-instruction-stats flags is
given, we use the decoder dispatcher instead.

BUG=none
R=rodolph.perfetta@arm.com, ulan@chromium.org
LOG=n

Review URL: https://codereview.chromium.org/177533023

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19564 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

201436d4

A64: Make the Decoder a template · 597a4b4d

jochen@chromium.org authored Feb 26, 2014

This will allow for replacing the dispatcher with a concrete decoder
visitor.

BUG=none
R=ulan@chromium.org, rodolph.perfetta@arm.com
LOG=n

Review URL: https://codereview.chromium.org/181253002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19562 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

597a4b4d

A64: Move the dispatching logic of the decoder to a separate class. · 662bb0cc

jochen@chromium.org authored Feb 26, 2014

BUG=none
R=ulan@chromium.org, rodolph.perfetta@arm.com
LOG=n

Review URL: https://codereview.chromium.org/181233002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19561 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

662bb0cc

A64: Decoder should not inherit from DecoderVisitor · 0d297e51

jochen@chromium.org authored Feb 26, 2014

BUG=none
R=ulan@chromium.org, rodolph.perfetta@arm.com
LOG=n

Review URL: https://codereview.chromium.org/177073013

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19560 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

0d297e51

Add vi swap files to .gitignore · 5ce87611

jochen@chromium.org authored Feb 26, 2014

BUG=none
R=dcarney@chromium.org
LOG=n

Review URL: https://codereview.chromium.org/181263002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19559 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

5ce87611

25 Feb, 2014 15 commits

Fix for failing asserts in HBoundsCheck code generation on x64: index register... · 1ae7e8a1

ishell@chromium.org authored Feb 25, 2014

Fix for failing asserts in HBoundsCheck code generation on x64: index register should be zero extended.

BUG=345820
LOG=N
R=verwaest@chromium.org

Review URL: https://codereview.chromium.org/180013002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19549 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

1ae7e8a1

Revert "Use stability to only conditionally flush information from the CheckMaps table." · d5caeccc

verwaest@chromium.org authored Feb 25, 2014

R=ishell@chromium.org

Review URL: https://codereview.chromium.org/180023002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19548 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

d5caeccc

Follow up to r19538: Bump preparse data version number. · be9c56e6

marja@chromium.org authored Feb 25, 2014

r19538 changes the preparse data format, so this is probably a good idea.

R=ulan@chromium.org
BUG=

Review URL: https://codereview.chromium.org/179903002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19547 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

be9c56e6

Re-evaluate marking bits of a descriptor array when it gets replaced. · 5211824c

hpayer@chromium.org authored Feb 25, 2014

BUG=340254
R=verwaest@chromium.org

Review URL: https://codereview.chromium.org/179733004

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19546 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

5211824c

Mark HCompareMap as having Tagged representation · e7e93cd4

jkummerow@chromium.org authored Feb 25, 2014

BUG=chromium:346636
LOG=y
R=svenpanne@chromium.org

Review URL: https://codereview.chromium.org/176923013

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19545 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

e7e93cd4

Crash like chrome. Currently, most chrome crashes do not yield useful stack... · 499b31e2

dcarney@chromium.org authored Feb 25, 2014

Crash like chrome. Currently, most chrome crashes do not yield useful stack traces as v8 does a silent abort and chrome's crash symbolization does not kick in.

R=svenpanne@chromium.org

BUG=

Review URL: https://codereview.chromium.org/179793004

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19544 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

499b31e2

Prepare push to trunk. Now working on version 3.25.3. · 27b670ae

hpayer@chromium.org authored Feb 25, 2014

R=danno@chromium.org
BUG=

Review URL: https://codereview.chromium.org/179733002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19541 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

27b670ae

Revert r19430, r19459: · e664f42a

mvstanton@chromium.org authored Feb 25, 2014

"Reland "Allow ICs to be generated for own global proxy.""

Causing ClusterFuzz crash (issue 343928)

TBR=verwaest@chromium.org

Review URL: https://codereview.chromium.org/179643003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19540 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

e664f42a

Fix crasher in Object.getOwnPropertySymbols · 63f1970c

rossberg@chromium.org authored Feb 25, 2014

R=arv@chromium.org, mstarzinger@chromium.org
BUG=346141
LOG=Y

Review URL: https://codereview.chromium.org/177883002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19539 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

63f1970c

Fix the bit massaging code in CompleteParserRecorder::WriteNumber. · 94af17a8

marja@chromium.org authored Feb 25, 2014

The original code, added by
https://codereview.chromium.org/3384003/diff/7001/src/parser.cc 3.5 years ago,
failed to write numbers which contain a chunk of 7 zeroes in the middle. The
smallest such number is 2^14, so this is a problem if the source file to
preparse contains 16384 or more symbols (which happens in the wild).

This bug went unnoticed because the symbol data was not used by Parser (see
https://codereview.chromium.org/172753002/ for starting to use it again) and
there were no tests.

R=ulan@chromium.org
BUG=346221
LOG=y

Review URL: https://codereview.chromium.org/179433004

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19538 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

94af17a8

Revert r19455 "Load target types and handlers before IC computation." · 368782f0

ulan@chromium.org authored Feb 25, 2014

It caused performance regression in dromaeo/jslib.

BUG=346149
LOG=Y
R=verwaest@chromium.org

Review URL: https://codereview.chromium.org/179613002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19537 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

368782f0

Don't eliminate loads with incompatible types or representations. · 77f597d3

bmeurer@chromium.org authored Feb 25, 2014

BUG=346343
LOG=y
R=verwaest@chromium.org

Review URL: https://codereview.chromium.org/179553002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19536 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

77f597d3

Fix for a smi stores optimization on x64 with a regression test. · 6c1659be

ishell@chromium.org authored Feb 25, 2014

BUG=345715
LOG=N
R=verwaest@chromium.org

Review URL: https://codereview.chromium.org/178833002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19535 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

6c1659be

Check that after a weak callback, the handle is either dead or strong · 6eb2d358

jochen@chromium.org authored Feb 25, 2014

BUG=346061
R=dcarney@chromium.org
LOG=y

Review URL: https://codereview.chromium.org/177943002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19534 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

6eb2d358

negative bounds checking on realm calls · cb05cff5

dcarney@chromium.org authored Feb 25, 2014

R=rossberg@chromium.org

LOG=N

BUG=344285

Review URL: https://codereview.chromium.org/169393002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19533 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

cb05cff5

24 Feb, 2014 2 commits

Lazy preparsing vs. lazy parsing fix. · 3d85b86e

marja@chromium.org authored Feb 24, 2014

Preparsing is always maximally lazy (every function that can be lazy is preparsed
lazily), but Parser has more complicated laziness logic.

If we're going to parse eagerly, and we have preparse data from lazy preparsing,
we're gonna have a bad time. The symbol stream won't contain symbols inside lazy
functions, and when the Parser parses them eagerly, it will consume symbols from
the symbol stream, and everything will go wrong.

This bug was hidden because the symbol cache was not used for real (see
https://codereview.chromium.org/172753002/ ).

R=ulan@chromium.org
BUG=346207
LOG=Y

Review URL: https://codereview.chromium.org/177973002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19532 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

3d85b86e

Fix optimistic BCE to back off after deopt · 37b6fd07

jkummerow@chromium.org authored Feb 24, 2014

BUG=v8:3176
LOG=n
R=danno@chromium.org

Review URL: https://codereview.chromium.org/177523002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19530 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

37b6fd07

21 Feb, 2014 4 commits

A64: Replace a Subs by a Sub where flags don't need to be updated. · 3ffc6b5d

baptiste.afsa@arm.com authored Feb 21, 2014

R=jochen@chromium.org

Review URL: https://codereview.chromium.org/170553002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19529 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

3ffc6b5d

A64: Remove a couple of already addressed TODOs. · 5576fd5f

baptiste.afsa@arm.com authored Feb 21, 2014

R=jochen@chromium.org

Review URL: https://codereview.chromium.org/173773002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19528 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

5576fd5f

A64: Tidy up register use in TaggedToI · 0468660b

m.m.capewell@googlemail.com authored Feb 21, 2014

Fix bug where input register was potentially corrupted, tidy up register use in
TruncateDoubleToI and rename TryInlineTruncateDoubleToI.

BUG=
R=ulan@chromium.org

Review URL: https://codereview.chromium.org/173663002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19527 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

0468660b

Initialize interface descriptor for ToNumberStub. · fa63cfaf

mstarzinger@chromium.org authored Feb 21, 2014

R=svenpanne@chromium.org
BUG=

Review URL: https://codereview.chromium.org/170303003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19526 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

fa63cfaf