Commit Graph

392 Commits

Author SHA1 Message Date
Brian Hackett
d8201c90c9 [INFER] Avoid INT_TO_JSID overflow when deleting element in array_shift, bug 642979. 2011-03-19 09:45:05 -07:00
Brian Hackett
475f37a01e [INFER] Improve type handler precision for Array.{slic,pop,shift}, bug 642412. 2011-03-18 08:17:22 -07:00
Brian Hackett
090e7aa4f0 [INFER] Use the 'this' array type as the result in Array.concat, bug 642412. 2011-03-18 07:56:50 -07:00
Brian Hackett
f24b762afb Merge TM -> JM 2011-03-14 22:41:04 -07:00
Andreas Gal
36269f6040 Inline GC mark path (bug 639729, r=billm). 2011-03-13 18:13:52 -07:00
Brian Hackett
d5363ae595 [INFER] Fix incorrect uses of getDenseArrayCapacity, bug 640203. 2011-03-10 09:56:51 -08:00
Brian Hackett
42dca7e4ba Merge TM -> JM 2011-03-09 09:58:49 -08:00
Brian Hackett
ca3296da88 [INFER] Stronger type-correctness assertions when setting or getting properties, bug 619693. 2011-03-06 15:35:09 -08:00
Brian Hackett
9b95d078c6 [INFER] Remove isTypeCallerMonitored and rejoin from native calls triggering recompilation, bug 638977. 2011-03-05 17:13:40 -08:00
Brian Hackett
08c135b748 [INFER] Fixes from botched merge. 2011-03-03 21:24:13 -08:00
Brian Hackett
81b4a51f7c [INFER] Fix OOM handling in type inference, convert inference to runtime option, bug 637674. 2011-03-03 14:07:48 -08:00
Brian Hackett
92e10c5077 [INFER] Condense type information during GC, bug 613221. 2011-03-01 13:10:05 -08:00
Brian Hackett
269f4956b9 Merge TM -> JM 2011-02-25 18:21:43 +13:00
Jeff Walden
70e937e769 Bug 637905 - Add (asserted-infallible) append methods to js::Vector, for use when the vector in question has previously had space reserved, and use them a bunch of places. r=luke 2011-02-18 18:32:29 -08:00
Andreas Gal
faed51e50f Remove ObjectOps trace hook (bug 639227, r=dvander). 2011-03-06 22:31:43 -08:00
Andreas Gal
e2ecb615ac Backout bug 639227 due to orange. 2011-03-06 21:37:13 -08:00
Andreas Gal
8b96babfed Remove ObjectOps trace hook (bug 639227, r=dvander). 2011-03-06 20:49:54 -08:00
Nicholas Nethercote
3c3c43f5fa Bug 600734 - TM: some jstracer.h clean-ups. r=dmandelin. 2011-03-03 19:59:00 -08:00
Jason Orendorff
c6bc3fe118 Remove bogus assertions in the tracer and in ArrayCompPushImpl helper function. Bug 630377, r=brendan. 2011-02-17 16:10:10 -06:00
Jim Blandy
2b4a76714e Bug 537873: Throw errors when strict mode code assigns to an array's length and the truncation would delete non-configurable elements. r=brendan
This is the patch that actually fixes the bug.
2011-02-09 11:31:40 -08:00
Jim Blandy
005f4f08aa Bug 537873: Add a 'strict' argument to C++ property setter functions. r=brendan
This changes the type of setters to JSStrictPropertyOp, which is just like
JSPropertyOp except that it takes a 'JSBool strict' argument. Most of the
patch is introducing distinct types and using the appropriate stubs.

The following are left for subsequent patches:

x Similar fixes to the browser outside SpiderMonkey.

x Actually *using* the newly available strictness information. This patch
  should have no user-visible effect. I didn't want the interesting stuff
  to get lost in this noise.
2011-02-09 11:31:40 -08:00
Bill McCloskey
3fc1a876f6 Bug 629817 - Add an AutoShapeVector to root shape vectors on the stack (r=luke) 2011-02-07 12:06:32 -08:00
Brian Hackett
361372d7f2 [INFER] Decouple type sets computed by inference from analysis information, store in new TypeScript struct, bug 621301. 2010-12-28 14:53:50 -05:00
Brian Hackett
a45ea14370 [INFER] Write barrier for sets to length on non-array objects in array natives, bug 619338. 2010-12-22 22:03:22 -08:00
Brian Hackett
d5042fced4 [INFER] Remove guessing mechanism for unpacked arrays. 2010-12-22 17:02:24 -08:00
Brian Hackett
92e1dc3d0f [INFER] Fixes for jstests, bug 620599, part 2. 2010-12-21 18:26:09 -08:00
Brian Hackett
943ffa00ec [INFER] Fixes for jstests, bug 620599, part 1. 2010-12-21 07:32:21 -08:00
Brian Hackett
e4b5d90dd3 [INFER] Fixes for botched merge. 2010-12-20 12:10:57 -08:00
Brian Hackett
fc509c0776 [INFER] Account for 'new' case in non-constructor type handlers, bug 618853. 2010-12-20 10:13:39 -08:00
Brian Hackett
9a3983e810 Merge TM -> JM 2010-12-20 09:06:43 -08:00
Brian Hackett
0c95b765de [INFER] Unwind getProto() changes outside of JS, fix test failures, bug 619271. 2010-12-19 12:21:15 -08:00
Brian Hackett
09a5a525ff [INFER] Objects with same shape have same type, objects with same type have same prototype, bug 619271. 2010-12-18 20:44:51 -08:00
Brian Hackett
1de05ba8b9 Don't call setProperty from dense array defineProperty, bug 618350. r=waldo 2010-12-16 13:33:49 -08:00
Brian Hackett
40c6be63b6 [INFER] Handle non-array arguments to Array.concat, bug 617750. 2010-12-13 11:15:56 -08:00
Brian Hackett
faf154a7d7 [INFER] Fix incorrect uses of getDenseArrayCapacity in array_concat, CloneDensePrimitiveArray, and stubs::GetElem. 2010-12-11 07:30:44 -08:00
Brian Hackett
4dd6d8d8ea [INFER] Fix incorrect use of getDenseArrayCapacity, bug 617745. 2010-12-11 07:07:02 -08:00
Brian Hackett
f3e5ab98d9 [INFER] Fix botched merge. 2010-12-08 06:52:49 -08:00
Brian Hackett
a567e7d35e Merge TM -> JM 2010-12-07 17:11:37 -08:00
Luke Wagner
8014a0fd10 Bug 609440, part 4 - make JSString::chars() fallible (r=waldo,dvander,igor,dwitte,njn) 2010-12-06 10:26:58 -08:00
Brian Hackett
0f6b40ab0a Merge TM -> JM 2010-11-30 09:04:25 -08:00
Brian Hackett
3a36969da3 [INFER] Overhaul handling of prototypes in type inference, bug 557407. 2010-11-24 20:41:52 -05:00
Jan de Mooij
c466d9bb5d Bug 614070 - Fix Array.prototype.unshift to always set the new length on this. r=jwalden 2010-11-24 23:22:44 +01:00
Brian Hackett
5fc44cdc9b Analysis and recompilation tuning for SS, bug 608746. 2010-11-20 15:45:52 -08:00
Brian Hackett
6004d8b9cb Merge TM -> JM 2010-11-18 21:09:24 -08:00
Chris Leary
0f8b348739 Tracer build fixes. (b=588021, r=dvander) 2010-11-23 13:58:34 -08:00
David Mandelin
7201bfb96a Bug 570385: notify iterators of dense array property deletion in DeleteArrayElement, r=igor 2010-11-19 17:01:26 -08:00
Brian Hackett
762ba0800e Merge TM -> JM. 2010-11-12 09:02:43 -08:00
Brian Hackett
c9539caef9 [INFER] Type inference fixes for generators, typed arrays, monitoring, ... bug 557407. 2010-11-09 14:40:10 -08:00
Brian Hackett
db1438df2f [INFER] Introduce packed arrays, bug 604045. 2010-11-05 07:37:09 -07:00
Brian Hackett
c02bec2cc1 Merge TM -> JM 2010-11-01 15:37:33 -07:00