rafaelw@chromium.org [Fri, 2 May 2014 13:55:11 +0000 (13:55 +0000)]
Re-enable Object.observe and add enforcement for security invariants.
This patch reverts r21062 which disabled Object.observe and the relevant tests.
It also adds enforcement for the following three invariants:
1) No observer may receive a change record describing changes to an object which is in different security origin (context have differing security tokens)
2) No observer may receive a change record whose context's security token is different from that of the object described by the change.
3) Object.getNotifier will return null if the caller and the provided object are in differing security origins
Further, it ensures that the global object can never be observed nor a notifier retrieved for it.
Tests are included.
R=verwaest@chromium.org, rossberg
LOG=Y
Review URL: https://codereview.chromium.org/
265503002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21122
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Fri, 2 May 2014 13:03:39 +0000 (13:03 +0000)]
Fix for a GCMole issue introduced in r21117.
R=jkummerow@chromium.org
Review URL: https://codereview.chromium.org/
269743002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21121
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
mvstanton@chromium.org [Fri, 2 May 2014 12:59:48 +0000 (12:59 +0000)]
v8:3303 MultithreadedParallelIsolates has a race condition
Disabling test until bug is fixed.
R=svenpanne@chromium.org
BUG=v8:3303
LOG=N
Review URL: https://codereview.chromium.org/
263893003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21120
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
svenpanne@chromium.org [Fri, 2 May 2014 12:35:51 +0000 (12:35 +0000)]
Move cache line size calculation directly into CPU::FlushICache.
This disentagles the initialization/dependency mess quite a bit and
makes things vastly simpler. If the 'mrs' on every flush is too
expensive (which it is hopefully not), the cache line sizes will have
to be instance variables of the CPU class and FlushICache will have to
be a member function. This would involve some more or less tricky
refactorings, which we shouldn't do until we are *really* forced to
do.
BUG=359977
LOG=y
R=rodolph.perfetta@gmail.com
Review URL: https://codereview.chromium.org/
269543016
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21119
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Fri, 2 May 2014 11:30:24 +0000 (11:30 +0000)]
Checks for empty array case added before casting elements to FixedDoubleArray.
BUG=chromium:369450
LOG=N
R=bmeurer@chromium.org
Review URL: https://codereview.chromium.org/
264973008
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21118
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Fri, 2 May 2014 10:27:12 +0000 (10:27 +0000)]
Map::Normalize() introduced as single entry point for map normalization and Map::NotifyLeafMapLayoutChange() made private.
R=verwaest@chromium.org
Review URL: https://codereview.chromium.org/
263663002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21117
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
svenpanne@chromium.org [Fri, 2 May 2014 10:14:37 +0000 (10:14 +0000)]
Generation of our home-grown memmove doesn't depend on serializer state anymore.
The serializer state has to be per-Isolate, but at the point where we
generate our memmoves we don't really have an Isolate. Furthermore,
there was no fundamental reason why we shouldn't use our home-grown
memmove during mksnapshot time.
Perhaps we can totally remove our own memmove nowadays, but this would
be a separate CL.
BUG=359977
LOG=y
R=bmeurer@chromium.org
Review URL: https://codereview.chromium.org/
261903002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21116
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
bmeurer@chromium.org [Fri, 2 May 2014 08:41:06 +0000 (08:41 +0000)]
Make zone_allocator actually usable.
R=jkummerow@chromium.org
Review URL: https://codereview.chromium.org/
267803005
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21113
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
bmeurer@chromium.org [Fri, 2 May 2014 08:08:23 +0000 (08:08 +0000)]
Fix crash in debug builds introduced with r21110.
Basically we should not check for map deprecation during
code selection, because that may run on the concurrent
compiler thread. So the fix is to move this logic to the
code generation phase instead, which is always run on the
main thread.
R=mvstanton@chromium.org
Review URL: https://codereview.chromium.org/
263803005
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21112
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
haraken@chromium.org [Fri, 2 May 2014 08:00:47 +0000 (08:00 +0000)]
Fix |RunMicrotasks()| leaking reference to the last context being run on.
RunMicrotasks() executes pending tasks and swaps the old array with a new array. However, the new array contains the reference to the current context as its creation context. This prevents the context from gc-ed until RunMicrotasks() is executed in the different context.
BUG=crbug.com/367016
LOG=y
R=rafaelw@chromium.org, rossberg@chromium.org
Review URL: https://codereview.chromium.org/
250883002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21111
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
bmeurer@chromium.org [Fri, 2 May 2014 06:37:54 +0000 (06:37 +0000)]
Don't add code dependencies on transitioning stores eagerly.
R=mvstanton@chromium.org
Review URL: https://codereview.chromium.org/
256303007
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21110
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
svenpanne@chromium.org [Fri, 2 May 2014 06:02:00 +0000 (06:02 +0000)]
Object.defineProperty shouldn't be a hint that we're constructing a dictionary.
BUG=362870
LOG=y
R=bmeurer@chromium.org
Review URL: https://codereview.chromium.org/
261583004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21109
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
bmeurer@chromium.org [Fri, 2 May 2014 05:59:07 +0000 (05:59 +0000)]
Drop obsolete HCheckMaps::HandleSideEffectsDominator().
In HCheckMaps::HandleSideEffectsDominator() we try to remove
redundant HCheckMaps instructions that are dominated by an
HStoreNamedField instruction with a transition. This is just
a special case of the check elimination and therefore obsolete
(it also gives some nice speedup since GVN just got cheaper).
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/
261003002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21108
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
plind44@gmail.com [Wed, 30 Apr 2014 20:19:45 +0000 (20:19 +0000)]
MIPS: CallICStub with a "never patch" approach by default.
Port r21093 (21e3836)
Original commit message:
Patching will
occur only when custom feedback needs to be gathered (future CLs).
Now rebased on https://codereview.chromium.org/
254623002/, which moves the type feedback vector to the SharedFunctionInfo.
BUG=
R=plind44@gmail.com
Review URL: https://codereview.chromium.org/
260753004
Patch from Balazs Kilvady <kilvadyb@homejinni.com>.
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21105
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Wed, 30 Apr 2014 19:32:47 +0000 (19:32 +0000)]
Remove max space limits in tests.
BUG=
Review URL: https://codereview.chromium.org/
263703003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21104
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Wed, 30 Apr 2014 18:57:25 +0000 (18:57 +0000)]
Limit old space size in test which require a large new space.
BUG=
Review URL: https://codereview.chromium.org/
265673003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21103
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Wed, 30 Apr 2014 18:13:24 +0000 (18:13 +0000)]
When maximum space size flags are set, overwrite the resource constraints.
BUG=
R=rmcilroy@chromium.org
Review URL: https://codereview.chromium.org/
262653002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21102
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
m.m.capewell@googlemail.com [Wed, 30 Apr 2014 17:31:05 +0000 (17:31 +0000)]
ARM64: use jssp for stack slots
R=bmeurer@chromium.org, ulan@chromium.org
Review URL: https://codereview.chromium.org/
262533006
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21101
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Wed, 30 Apr 2014 17:27:40 +0000 (17:27 +0000)]
StringTable::Lookup*IfExist() handlified.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
265553003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21100
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Wed, 30 Apr 2014 17:12:52 +0000 (17:12 +0000)]
ContextSlotCache::Update() handlified.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
263613003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21099
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
plind44@gmail.com [Wed, 30 Apr 2014 15:25:47 +0000 (15:25 +0000)]
MIPS: Simplify feedback vector creation and store in SharedFunctionInfo.
Port r21085 (782ce81)
LOG=N
BUG=v8:3212
R=plind44@gmail.com
Review URL: https://codereview.chromium.org/
267433003
Patch from Balazs Kilvady <kilvadyb@homejinni.com>.
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21098
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Wed, 30 Apr 2014 15:17:51 +0000 (15:17 +0000)]
Reland "Trigger exception debug event for promises at the throw site."
R=rossberg@chromium.org
Review URL: https://codereview.chromium.org/
266533003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21097
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Wed, 30 Apr 2014 15:13:38 +0000 (15:13 +0000)]
ScopeInfo::ContextSlotIndex() handlified.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
253263003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21096
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Wed, 30 Apr 2014 15:03:18 +0000 (15:03 +0000)]
Public interface of KeyedLookupCache handlified.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
264563003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21095
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Wed, 30 Apr 2014 14:51:41 +0000 (14:51 +0000)]
Revert "Trigger exception debug event for promises at the throw site."
This reverts r21092.
R=ishell@chromium.org
Review URL: https://codereview.chromium.org/
262533009
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21094
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
mvstanton@chromium.org [Wed, 30 Apr 2014 14:33:35 +0000 (14:33 +0000)]
CallICStub with a "never patch" approach by default. Patching will
occur only when custom feedback needs to be gathered (future CLs).
Now rebased on https://codereview.chromium.org/
254623002/, which moves the type feedback vector to the SharedFunctionInfo.
R=verwaest@chromium.org
Review URL: https://codereview.chromium.org/
247373002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21093
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Wed, 30 Apr 2014 14:17:40 +0000 (14:17 +0000)]
Trigger exception debug event for promises at the throw site.
R=rossberg@chromium.org
Review URL: https://codereview.chromium.org/
260723002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21092
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
alexandre.rames@arm.com [Wed, 30 Apr 2014 13:38:00 +0000 (13:38 +0000)]
ARM64: Generate optimized code for Math.floor and Math.round with double outputs.
R=jkummerow@chromium.org, ulan@chromium.org
Review URL: https://codereview.chromium.org/
258793002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21091
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
jkummerow@chromium.org [Wed, 30 Apr 2014 13:19:19 +0000 (13:19 +0000)]
Harden more runtime functions
R=dslomov@chromium.org
Review URL: https://codereview.chromium.org/
255333004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21090
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Wed, 30 Apr 2014 12:38:39 +0000 (12:38 +0000)]
Do not use default for switch over AllocationSpace.
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/
262583004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21089
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
mvstanton@chromium.org [Wed, 30 Apr 2014 12:35:41 +0000 (12:35 +0000)]
Small cleanup: AstConstructionVisitor no longer needs a Zone pointer.
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/
265623002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21088
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
mvstanton@chromium.org [Wed, 30 Apr 2014 12:33:16 +0000 (12:33 +0000)]
Fix gcmole warning in EnsureSlotContainsAllocationSite().
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
268443002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21087
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Wed, 30 Apr 2014 12:25:18 +0000 (12:25 +0000)]
Kiss goodbye to MaybeObject.
R=hpayer@chromium.org
Review URL: https://codereview.chromium.org/
259173003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21086
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
mvstanton@chromium.org [Wed, 30 Apr 2014 10:51:01 +0000 (10:51 +0000)]
Simplify feedback vector creation and store in SharedFunctionInfo.
LOG=N
BUG=v8:3212
R=bmeurer@chromium.org
Review URL: https://codereview.chromium.org/
254623002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21085
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
svenpanne@chromium.org [Wed, 30 Apr 2014 10:24:03 +0000 (10:24 +0000)]
Unbreak the build after r21083.
TBR=mstarzinger@chromium.org
Review URL: https://codereview.chromium.org/
266493003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21084
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
svenpanne@chromium.org [Wed, 30 Apr 2014 09:50:58 +0000 (09:50 +0000)]
Added a Isolate* parameter to Serializer::enabled().
This parameter will soon be used when a few pseudo-classes like
Serializer are turned into real classes. The current CL is already big
enough, untying our Gordian knot called "startup" will continue...
BUG=359977
LOG=y
R=mstarzinger@chromium.org
Review URL: https://codereview.chromium.org/
260003006
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21083
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
haitao.feng@intel.com [Wed, 30 Apr 2014 09:23:41 +0000 (09:23 +0000)]
Introduce DropUnderReturnAddress for x64 port.
R=verwaest@chromium.org
Review URL: https://codereview.chromium.org/
242113005
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21082
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Wed, 30 Apr 2014 09:13:21 +0000 (09:13 +0000)]
Handlification TODOs in scanner and string stream resolved.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
251263004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21081
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
haitao.feng@intel.com [Wed, 30 Apr 2014 09:12:18 +0000 (09:12 +0000)]
Introduce PushQuad and PopQuad for x64 port.
R=verwaest@chromium.org
Review URL: https://codereview.chromium.org/
238253013
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21080
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
haitao.feng@intel.com [Wed, 30 Apr 2014 09:08:21 +0000 (09:08 +0000)]
Update SafeMove, SafePush, SmiToIndex and SmiToNegativeIndex for x32 port.
R=verwaest@chromium.org
Review URL: https://codereview.chromium.org/
240473009
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21079
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
mvstanton@chromium.org [Wed, 30 Apr 2014 09:04:17 +0000 (09:04 +0000)]
A new test needs to exit early on non-internationalization builds.
R=mstarzinger@chromium.org
Review URL: https://codereview.chromium.org/
265513003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21078
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
mstarzinger@chromium.org [Wed, 30 Apr 2014 08:52:00 +0000 (08:52 +0000)]
Fix some more missing ToObject on Array.prototype.
R=mvstanton@chromium.org
BUG=
Review URL: https://codereview.chromium.org/
254103002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21077
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Wed, 30 Apr 2014 08:40:33 +0000 (08:40 +0000)]
TODO in Dictionary resolved.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
251043008
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21076
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
haitao.feng@intel.com [Wed, 30 Apr 2014 08:38:20 +0000 (08:38 +0000)]
Update ElementsTransitionGenerator::GenerateSmiToDouble to support x32 port.
R=verwaest@chromium.org
Review URL: https://codereview.chromium.org/
242603002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21075
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
dslomov@chromium.org [Wed, 30 Apr 2014 08:28:29 +0000 (08:28 +0000)]
ES6: Add support for Array.prototype.fill()
BUG=v8:3273
LOG=Y
R=dslomov@chromium.org
Review URL: https://codereview.chromium.org/
240873002
Patch from Adrian Perez <aperez@igalia.com>.
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21074
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Wed, 30 Apr 2014 08:19:38 +0000 (08:19 +0000)]
Remove BootUpMemoryUse test.
BUG=
R=bmeurer@chromium.org
Review URL: https://codereview.chromium.org/
254273002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21073
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
mstarzinger@chromium.org [Wed, 30 Apr 2014 08:16:16 +0000 (08:16 +0000)]
Remove duplicate ToObject implementaion from i18n.
R=mvstanton@chromium.org
BUG=
Review URL: https://codereview.chromium.org/
255273004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21072
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
mvstanton@chromium.org [Wed, 30 Apr 2014 07:36:12 +0000 (07:36 +0000)]
Bugfix: internationalization routines fail on monkeypatching.
Calls to Object.defineProperty() and Object.apply() are not safe.
R=mstarzinger@chromium.org
Review URL: https://codereview.chromium.org/
253903003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21071
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Wed, 30 Apr 2014 07:07:39 +0000 (07:07 +0000)]
Enable concurrent sweeping.
BUG=
R=jarin@chromium.org
Review URL: https://codereview.chromium.org/
266463002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21070
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Wed, 30 Apr 2014 06:26:50 +0000 (06:26 +0000)]
Hide some more heap allocators.
R=mstarzinger@chromium.org
Review URL: https://codereview.chromium.org/
252213002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21069
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Tue, 29 Apr 2014 19:37:56 +0000 (19:37 +0000)]
Fix compile.
BUG=
Review URL: https://codereview.chromium.org/
260493003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21068
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Tue, 29 Apr 2014 19:01:41 +0000 (19:01 +0000)]
Wait for sweepter threads in idle notifcation with large hints.
BUG=
R=ulan@chromium.org
Review URL: https://codereview.chromium.org/
259243002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21067
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
verwaest@chromium.org [Tue, 29 Apr 2014 17:48:07 +0000 (17:48 +0000)]
Pass in the prototype to CreateApiFunction rather than setting it on the result.
BUG=
R=ishell@chromium.org
Review URL: https://codereview.chromium.org/
253603003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21066
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
rossberg@chromium.org [Tue, 29 Apr 2014 15:52:50 +0000 (15:52 +0000)]
Adapt more test expectations
TBR=danno@chromium.org
BUG=
Review URL: https://codereview.chromium.org/
259253003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21063
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
danno@chromium.org [Tue, 29 Apr 2014 15:11:57 +0000 (15:11 +0000)]
disable Object.observe
R=danno@chromium.org, danno
BUG=
Review URL: https://codereview.chromium.org/
252063003
Patch from Rafael Weinstein <rafaelw@chromium.org>.
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21062
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
rossberg@chromium.org [Tue, 29 Apr 2014 15:11:03 +0000 (15:11 +0000)]
Revert "Enable concurrent sweeping."
[Sheriff intervening.]
TBR=hpayer@chromium.org
BUG=
Review URL: https://codereview.chromium.org/
254003002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21061
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Tue, 29 Apr 2014 14:31:12 +0000 (14:31 +0000)]
WeakHashTable::Lookup() handlified and ObjectHashTable's interface cleaned up.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
251293002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21060
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Tue, 29 Apr 2014 14:23:03 +0000 (14:23 +0000)]
Enable concurrent sweeping.
BUG=
R=jarin@chromium.org
Review URL: https://codereview.chromium.org/
253923004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21059
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Tue, 29 Apr 2014 14:17:42 +0000 (14:17 +0000)]
Wait for sweeper threads in incremental marking step when sweeper threads are done sweeping.
BUG=
R=mstarzinger@chromium.org
Review URL: https://codereview.chromium.org/
252123006
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21058
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Tue, 29 Apr 2014 14:16:38 +0000 (14:16 +0000)]
OrderedHashTable::FindEntry() handlified.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
260313003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21057
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
rmcilroy@chromium.org [Tue, 29 Apr 2014 14:14:06 +0000 (14:14 +0000)]
Fix android_arm.debug after r20051
The ConstantPoolBuilder stores RelocInfo in an stl::vector, therefore RelocInfo
cannot subclass BASE_EMBEDDED.
R=jkummerow@chromium.org
Review URL: https://codereview.chromium.org/
253923005
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21056
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Tue, 29 Apr 2014 14:09:14 +0000 (14:09 +0000)]
OrderedHashMap::Lookup() and ObjectHashTable::Lookup() handlified.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
256743008
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21055
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Tue, 29 Apr 2014 14:03:06 +0000 (14:03 +0000)]
Rename debug event enum to be consistent.
R=aandrey@chromium.org
Review URL: https://codereview.chromium.org/
255163004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21054
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Tue, 29 Apr 2014 13:58:55 +0000 (13:58 +0000)]
Hide heap methods where possible.
Factory is already a friend class of Heap.
We introduce a TestHeap class in cctest.h to access protected methods.
R=mstarzinger@chromium.org
Review URL: https://codereview.chromium.org/
247263003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21053
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Tue, 29 Apr 2014 13:51:14 +0000 (13:51 +0000)]
JSObject::GetHiddenProperty() handlified.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
255153002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21052
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ishell@chromium.org [Tue, 29 Apr 2014 13:43:17 +0000 (13:43 +0000)]
Object::Lookup(), JSObject::*Lookup*() and JSReceiver::*Lookup*() handlified.
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
253843006
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21051
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
jkummerow@chromium.org [Tue, 29 Apr 2014 13:42:00 +0000 (13:42 +0000)]
arm: Fix Smi check in SubStringStub::Generate
R=ulan@chromium.org
Review URL: https://codereview.chromium.org/
256743007
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21050
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Tue, 29 Apr 2014 13:18:27 +0000 (13:18 +0000)]
Return MaybeHandle from Object::ToSmi.
R=ulan@chromium.org
Review URL: https://codereview.chromium.org/
260083011
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21047
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
dcarney@chromium.org [Tue, 29 Apr 2014 13:09:31 +0000 (13:09 +0000)]
Remove String::Visit
R=yangguo@chromium.org
BUG=
Review URL: https://codereview.chromium.org/
254763008
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21046
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ulan@chromium.org [Tue, 29 Apr 2014 12:52:42 +0000 (12:52 +0000)]
Check that JSArray::SetElementsLength does not throw in array.length accessor.
BUG=
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
252743010
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21045
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ulan@chromium.org [Tue, 29 Apr 2014 12:32:38 +0000 (12:32 +0000)]
Do not make objects in optimized code weak if collecting maps is disabled.
When collecting maps is disabled we do not clear non-live references.
BUG=
R=ishell@chromium.org
Review URL: https://codereview.chromium.org/
258163003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21044
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
danno@chromium.org [Tue, 29 Apr 2014 11:33:39 +0000 (11:33 +0000)]
Micro-optimizations to pop() and shift()
R=verwaest@chromium.org
LOG=N
Review URL: https://codereview.chromium.org/
247613002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21043
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Tue, 29 Apr 2014 11:01:42 +0000 (11:01 +0000)]
Don't unlink evacuation candidates before sweeping, move them to the end of their list of pages.
BUG=
R=mstarzinger@chromium.org
Review URL: https://codereview.chromium.org/
256743004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21042
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ulan@chromium.org [Tue, 29 Apr 2014 10:59:14 +0000 (10:59 +0000)]
Remove old-style accessor support from runtime.
BUG=
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
258243003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21041
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ulan@chromium.org [Tue, 29 Apr 2014 10:58:16 +0000 (10:58 +0000)]
Fix android_arm64 build after r21001.
BUG=
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/
253873010
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21040
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
jkummerow@chromium.org [Tue, 29 Apr 2014 08:52:17 +0000 (08:52 +0000)]
More runtime hardening
R=dslomov@chromium.org
Review URL: https://codereview.chromium.org/
256293002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21039
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Tue, 29 Apr 2014 08:25:24 +0000 (08:25 +0000)]
Make CreateInitialObjects more concise.
R=ishell@chromium.org
Review URL: https://codereview.chromium.org/
255003002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21038
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Tue, 29 Apr 2014 08:24:54 +0000 (08:24 +0000)]
Add missing length check when copying fixed arrays.
This was mistakenly removed in r21027.
R=bmeurer@chromium.org
Review URL: https://codereview.chromium.org/
259203002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21037
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Tue, 29 Apr 2014 07:02:11 +0000 (07:02 +0000)]
Refactor calls to CALL_HEAP_FUNCTION.
R=mvstanton@chromium.org
Review URL: https://codereview.chromium.org/
258953009
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21036
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
bmeurer@chromium.org [Tue, 29 Apr 2014 06:42:26 +0000 (06:42 +0000)]
Bulk update of Google copyright headers in source files.
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/
259183002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21035
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
bmeurer@chromium.org [Tue, 29 Apr 2014 06:05:54 +0000 (06:05 +0000)]
Copy the profiler ticks in %SetCode().
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/
257123005
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21034
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
bmeurer@chromium.org [Tue, 29 Apr 2014 04:59:37 +0000 (04:59 +0000)]
Remove invalid HCheckValue case in check elimination.
Also eliminate a useless copy of the map set in case of
HCheckMaps.
R=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/
256593011
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21033
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
rossberg@chromium.org [Mon, 28 Apr 2014 15:57:25 +0000 (15:57 +0000)]
Revert "PromiseThen should ignore non-function parameters."
Wrong Blink test expectations, need to fix later.
TBR=machenbach@chromium.org
BUG=
Review URL: https://codereview.chromium.org/
251813004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21028
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Mon, 28 Apr 2014 15:33:16 +0000 (15:33 +0000)]
Remove some remnants of MaybeObjects in objects.*.
R=hpayer@chromium.org
Review URL: https://codereview.chromium.org/
256993003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21027
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
rossberg@chromium.org [Mon, 28 Apr 2014 15:20:39 +0000 (15:20 +0000)]
Fix promises-aplus testcfg.py
Fix GetSourceForTest which returned an incorrect result.
With this fix promises-aplus shows correct sources when --cat option is specified.
BUG=
R=jkummerow@chromium.org
Review URL: https://codereview.chromium.org/
258763002
Patch from Yutaka Hirano <yhirano@chromium.org>.
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21026
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
rossberg@chromium.org [Mon, 28 Apr 2014 15:19:15 +0000 (15:19 +0000)]
PromiseThen should ignore non-function parameters.
When non-function parameters are given, PromiseThen should work as if
undefined parameters were given.
BUG=347455
LOG=Y
R=rossberg@chromium.org
Review URL: https://codereview.chromium.org/
180723011
Patch from Yutaka Hirano <yhirano@chromium.org>.
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21025
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
plind44@gmail.com [Mon, 28 Apr 2014 15:01:41 +0000 (15:01 +0000)]
MIPS: Revert r20974, r20991: Unify and simplify the FastCloneShallowArrayStub.
Port r21007 (3a5d22d)
Original commit message:
Due to Layout test redness.
BUG=
R=plind44@gmail.com
Review URL: https://codereview.chromium.org/
252023002
Patch from Balazs Kilvady <kilvadyb@homejinni.com>.
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21024
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ulan@chromium.org [Mon, 28 Apr 2014 14:59:29 +0000 (14:59 +0000)]
Convert array.length to API-style accessor.
BUG=
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
259773009
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21023
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Mon, 28 Apr 2014 13:42:03 +0000 (13:42 +0000)]
Tighten OpenHandle's extra checks.
R=jkummerow@chromium.org
Review URL: https://codereview.chromium.org/
240113010
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21022
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ulan@chromium.org [Mon, 28 Apr 2014 13:41:12 +0000 (13:41 +0000)]
Convert function.caller to API-style accessor.
BUG=
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
256803010
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21021
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
m.m.capewell@googlemail.com [Mon, 28 Apr 2014 13:33:14 +0000 (13:33 +0000)]
ARM64: Rename TryConvertDoubleToInt64 function
There are two TryConvertDoubleToInt64 functions: one rounds, the other checks
if a double can be exactly represented as an int. This patch renames the second
instance to reflect its purpose more clearly.
BUG=
R=ulan@chromium.org
Review URL: https://codereview.chromium.org/
258933008
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21020
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Mon, 28 Apr 2014 13:20:48 +0000 (13:20 +0000)]
Change concurrent sweeping CHECKs to ASSERTs.
BUG=
R=mstarzinger@chromium.org
Review URL: https://codereview.chromium.org/
256983002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21019
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
jochen@chromium.org [Mon, 28 Apr 2014 13:02:17 +0000 (13:02 +0000)]
Remove unnecessary includes of v8 headers from platform files
BUG=none
R=mstarzinger@chromium.org
LOG=n
Review URL: https://codereview.chromium.org/
251103003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21018
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
hpayer@chromium.org [Mon, 28 Apr 2014 12:58:32 +0000 (12:58 +0000)]
Simplify old space allocation strategy.
BUG=
R=mstarzinger@chromium.org
Review URL: https://codereview.chromium.org/
258733013
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21017
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Mon, 28 Apr 2014 12:14:36 +0000 (12:14 +0000)]
Error stack getter should not overwrite itself with a data property.
R=ulan@chromium.org
BUG=v8:3294
LOG=Y
Review URL: https://codereview.chromium.org/
258933007
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21016
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Mon, 28 Apr 2014 12:08:17 +0000 (12:08 +0000)]
Fix assertion when collecting stack trace from debug break.
R=mstarzinger@chromium.org
BUG=v8:3296
LOG=N
Review URL: https://codereview.chromium.org/
256113003
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21015
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
ulan@chromium.org [Mon, 28 Apr 2014 12:02:11 +0000 (12:02 +0000)]
Convert function.arguments to API-style accessor.
BUG=
R=yangguo@chromium.org
Review URL: https://codereview.chromium.org/
256693007
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21014
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
yangguo@chromium.org [Mon, 28 Apr 2014 11:42:19 +0000 (11:42 +0000)]
Ignore debug stepin in optimized code for array builtins.
R=dslomov@chromium.org
Review URL: https://codereview.chromium.org/
251933004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21013
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
bmeurer@chromium.org [Mon, 28 Apr 2014 11:09:07 +0000 (11:09 +0000)]
Fix and improve Map::CurrentMapForDeprecatedInternal().
Inline relevant bits from Map::FindUpdatedMap() and Map::IsMoreGeneralThan()
into Map::CurrentMapForDeprecatedInternal() to fix issues introduced
with field type tracking, avoid the useless second pass over the transition
tree, and finally make it easier to understand what this method actually
does.
TEST=mjsunit/regress/regress-365172-2
R=svenpanne@chromium.org
Committed: https://code.google.com/p/v8/source/detail?r=20997
Review URL: https://codereview.chromium.org/
257893004
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21010
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00
bmeurer@chromium.org [Mon, 28 Apr 2014 11:02:12 +0000 (11:02 +0000)]
Revert "Fix and cleanup Map::GeneralizeRepresentation()."
This reverts commit r21006 for performance regressions.
TBR=svenpanne@chromium.org
Review URL: https://codereview.chromium.org/
259003002
git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21009
ce2b1a6d-e550-0410-aec6-
3dcde31c8c00