|
|
Merged r19535, r19549, r19586, r19584 into trunk branch.
Fix for a smi stores optimization on x64 with a regression test.
Fix for failing asserts in HBoundsCheck code generation on x64: index register should be zero extended.
Fix putting of prototype transitions. The length is also subject to GC, just like entry.
Handle arguments objects in frame when materializing arguments
BUG= 345715, 345820, 347536, 347262
LOG=N
R=danno@chromium.org
Committed: https://code.google.com/p/v8/source/detail?r=19589
|
Unified diffs |
Side-by-side diffs |
Delta from patch set |
Stats (+174 lines, -34 lines) |
Patch |
 |
M |
src/deoptimizer.h
|
View
|
|
3 chunks |
+18 lines, -2 lines |
0 comments
|
Download
|
 |
M |
src/deoptimizer.cc
|
View
|
|
7 chunks |
+26 lines, -17 lines |
0 comments
|
Download
|
 |
M |
src/mark-compact.cc
|
View
|
|
1 chunk |
+1 line, -0 lines |
0 comments
|
Download
|
 |
M |
src/objects.cc
|
View
|
|
1 chunk |
+1 line, -1 line |
0 comments
|
Download
|
 |
M |
src/version.cc
|
View
|
|
1 chunk |
+1 line, -1 line |
0 comments
|
Download
|
 |
M |
src/x64/disasm-x64.cc
|
View
|
|
1 chunk |
+2 lines, -1 line |
0 comments
|
Download
|
 |
M |
src/x64/lithium-gap-resolver-x64.cc
|
View
|
|
1 chunk |
+1 line, -1 line |
0 comments
|
Download
|
 |
A + |
test/mjsunit/regress/regress-347262.js
|
View
|
|
1 chunk |
+31 lines, -11 lines |
0 comments
|
Download
|
 |
A |
test/mjsunit/regress/regress-crbug-345715.js
|
View
|
|
1 chunk |
+26 lines, -0 lines |
0 comments
|
Download
|
 |
A |
test/mjsunit/regress/regress-crbug-345820.js
|
View
|
|
1 chunk |
+18 lines, -0 lines |
0 comments
|
Download
|
 |
A |
test/mjsunit/regress/regress-put-prototype-transition.js
|
View
|
|
1 chunk |
+49 lines, -0 lines |
0 comments
|
Download
|
Total messages: 3 (0 generated)
|