v8/src
Liu Yu 10aa4c5894 [mips32][liftoff] Fix a doubleword load operation
If dst.low_gp and src_op_upper.rm are the same register,
then the first Ulw destroys src_op_upper.rm and the second Ulw
reads the memory from bad address.

Change-Id: I5e385296c9a95707ad2416124a2595af29176a61
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3252869
Reviewed-by: Zhao Jiazhong <zhaojiazhong-hf@loongson.cn>
Commit-Queue: Zhao Jiazhong <zhaojiazhong-hf@loongson.cn>
Auto-Submit: Liu yu <liuyu@loongson.cn>
Cr-Commit-Position: refs/heads/main@{#77604}
2021-10-29 04:33:24 +00:00
..
api api: Provide write barrier in TracedReferenceBase 2021-10-28 12:00:32 +00:00
asmjs [asm] Disallow duplicate parameter names 2021-10-26 15:21:06 +00:00
ast Remove neis@ from owners file 2021-10-26 11:15:20 +00:00
base heap: Enable lazy commits for Fuchsia 2021-10-25 16:31:19 +00:00
baseline [ic,baseline] Add KeyedDefineOwnIC_Slow and use StoreOwnICBaseline in baseline 2021-10-28 11:34:23 +00:00
bigint [bigint][cleanup] Fix -Wshadow warning 2021-09-24 14:19:15 +00:00
builtins Reland "[turbofan] extend type asserts to cover all JS types" 2021-10-28 14:10:30 +00:00
codegen [x64] Implement 256-bit assembler for SSSE3/SSE4/SSE42_AVX instructions 2021-10-29 00:14:50 +00:00
common [ic,baseline] Add KeyedDefineOwnIC_Slow and use StoreOwnICBaseline in baseline 2021-10-28 11:34:23 +00:00
compiler [relaxed-simd][wasm] Prototype relaxed int-float trunc 2021-10-28 17:03:30 +00:00
compiler-dispatcher [ext-code-space] Introduce managed-inl.h and global-handles-inl.h 2021-09-20 10:29:29 +00:00
d8 [fastcall] Expose CTypeInfoBuilder publicly 2021-10-27 10:12:23 +00:00
date [date] Skip leading zeros when parsing date string 2021-10-28 11:49:10 +00:00
debug [cleanup] Remove compiler.h from js-function-inl.h 2021-10-28 17:20:30 +00:00
deoptimizer Remove neis@ from owners file 2021-10-26 11:15:20 +00:00
diagnostics Reland "[turbofan] extend type asserts to cover all JS types" 2021-10-28 14:10:30 +00:00
execution [riscv64] Add tests for RVV VI VF instructions 2021-10-28 13:57:31 +00:00
extensions [interpreter] Port GetDispatchCountersObject to internal 2021-08-25 09:50:51 +00:00
flags Reland "[turbofan] extend type asserts to cover all JS types" 2021-10-28 14:10:30 +00:00
handles heap: Add safe stack support for stack containment checks 2021-10-28 20:37:20 +00:00
heap heap: Add safe stack support for stack containment checks 2021-10-28 20:37:20 +00:00
ic [ic,baseline] Add KeyedDefineOwnIC_Slow and use StoreOwnICBaseline in baseline 2021-10-28 11:34:23 +00:00
init [runtime] Introduce explicit Execute::CallScript 2021-10-25 13:17:39 +00:00
inspector [heap-snapshot] Declaring progress counter as uint32_t (instead of int) 2021-10-26 13:26:21 +00:00
interpreter [interpreter] Use fast paths again for object literals with spread cloning 2021-10-18 16:54:00 +00:00
json [json] Fix some -Wshadow warnings 2021-10-13 15:50:23 +00:00
libplatform Introduce v8_enable_virtual_memory_cage 2021-08-11 16:13:42 +00:00
libsampler Reland "[include] Split out v8.h" 2021-08-24 13:08:55 +00:00
logging [tools][system-analyzer] Add FeedbackVector support 2021-10-27 09:40:41 +00:00
numbers [cleanup] Fix -Wshadow in src/numbers/ 2021-09-27 07:54:29 +00:00
objects [cleanup] Remove compiler.h from js-function-inl.h 2021-10-28 17:20:30 +00:00
parsing Improve error message when using await in DebugEvaluate 2021-10-28 09:56:40 +00:00
profiler Revert "[heap-snapshot] Preventing overflow in progress counter" 2021-10-28 11:33:22 +00:00
protobuf
regexp [regexp] Fix an invalid DCHECK 2021-10-27 13:03:08 +00:00
roots [wasm] Add WasmApiFunctionRef object 2021-10-27 13:17:32 +00:00
runtime [cleanup] Remove compiler.h from js-function-inl.h 2021-10-28 17:20:30 +00:00
sanitizer
security Align page allocation hint in VirtualMemoryCage initialization 2021-10-28 10:30:20 +00:00
snapshot [snapshot] Avoid second checksum after off-thread deserialize 2021-10-26 08:39:33 +00:00
strings [cleanup] Make PropertyLocation a scoped enum 2021-09-28 18:39:41 +00:00
tasks Remove rmcilroy from OWNERS. 2021-08-19 16:30:27 +00:00
third_party Reland "[include] Split out v8.h" 2021-08-24 13:08:55 +00:00
torque Reland "[turbofan] extend type asserts to cover all JS types" 2021-10-28 14:10:30 +00:00
tracing [base] Move utils/vector.h to base/vector.h 2021-06-18 13:33:13 +00:00
trap-handler [trap-handler] Fix -Wshadow warnings 2021-10-15 23:09:46 +00:00
utils [util] Fix LockedQueue size 2021-10-19 13:25:27 +00:00
wasm [mips32][liftoff] Fix a doubleword load operation 2021-10-29 04:33:24 +00:00
web-snapshot [web snapshots] Add an experimiental flag for treating scripts as web snapshots 2021-10-14 06:52:13 +00:00
zone Add PageInitializationMode enum for the BoundedPageAllocator 2021-10-07 12:55:39 +00:00
DEPS cppgc: Prohibit Oilpan usage from within V8 2021-08-25 08:24:33 +00:00
DIR_METADATA
OWNERS