1. 29 May, 2018 1 commit
  2. 23 Feb, 2018 2 commits
  3. 07 Feb, 2018 1 commit
  4. 20 Dec, 2017 1 commit
  5. 13 Oct, 2017 1 commit
  6. 04 Aug, 2017 1 commit
  7. 19 May, 2017 1 commit
  8. 12 Apr, 2017 1 commit
    • binji's avatar
      [SAB] Validate index before value conversion using ToIndex · 7b300ba2
      binji authored
      It's required by the spec -- and observable -- that the index be validated
      before the conversion of the value(s) via ToInteger.
      
      The previous implementation also had an old test for validating the atomic
      index, which has now been switched to ToIndex.
      
      This also exposed an issue in the ia32 code generator: cmpxchg_b requires a
      byte register, but the ia32 instruction selector was ensuring that the
      new_value was a byte register, not the TempRegister. This change forces the
      temp register to use edx, which always can be used as a byte register (dl).
      This is the same behavior as currently used in UseByteRegister.
      
      BUG=v8:4614
      R=jarin@chromium.org,jkummerow@chromium.org
      
      Review-Url: https://codereview.chromium.org/2814753003
      Cr-Commit-Position: refs/heads/master@{#44626}
      7b300ba2
  9. 11 Apr, 2017 1 commit
  10. 07 Apr, 2017 1 commit
  11. 06 Apr, 2017 1 commit
  12. 30 Mar, 2017 1 commit
  13. 21 Mar, 2017 1 commit
  14. 16 Mar, 2017 2 commits