Michael Starzinger 4a4bcda388 [turbofan] Introduce upper limit for table switch size. ... This introduces 2^16 as an upper limit for the allowed value range of a table switch on all architectures. It also fixes several overflows in the table size calculation. R=bmeurer@chromium.org TEST=mjsunit/regress/regress-crbug-736633 BUG=chromium:736633 Change-Id: I931bd226c99eb8a1ae1770c159fc314ff650bf57 Reviewed-on: https://chromium-review.googlesource.com/566829 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Michael Starzinger <mstarzinger@chromium.org> Cr-Commit-Position: refs/heads/master@{#46575}		2017-07-12 08:35:26 +00:00
..
benchmarks
cctest	[runtime] Introduce PropertyArray	2017-07-11 22:48:54 +00:00
common	Add Smi::ToInt helper method	2017-07-10 13:33:03 +00:00
debugger	Reland "[parser] moved load property position after dot"	2017-07-10 22:17:58 +00:00
fuzzer	[wasm] [fuzzer] Also test validation	2017-07-11 13:43:32 +00:00
inspector	[inspector] catch exception during object.toString() call for console	2017-07-12 06:01:42 +00:00
intl	Remove icu_case_mapping flag	2017-06-29 03:47:27 +00:00
js-perf-test	[builtins] Array.map should transition output arrays.	2017-07-05 14:08:08 +00:00
memory
message	Reland "[parser] moved load property position after dot"	2017-07-10 22:17:58 +00:00
mjsunit	[turbofan] Introduce upper limit for table switch size.	2017-07-12 08:35:26 +00:00
mkgrokdump	Fix compilation failure due to overload of virtual function	2017-05-24 21:19:48 +00:00
mozilla	[test] Fix test status file simulator_run not evaluate to boolean error	2017-06-28 21:32:19 +00:00
preparser
promises-aplus
test262	[runtime] Create only one instance of %ThrowTypeError%.	2017-07-10 08:26:02 +00:00
unittests	[Turbofan] Enable reducers to report their name to make reducer tracing clearer	2017-07-11 10:40:23 +00:00
wasm-spec-tests	[wasm] Update spec tests	2017-06-30 14:59:27 +00:00
webkit	[runtime] Create only one instance of %ThrowTypeError%.	2017-07-10 08:26:02 +00:00
bot_default.gyp
bot_default.isolate
BUILD.gn	[wasm] Remove the wasm-asmjs fuzzer	2017-06-21 10:59:35 +00:00
default.gyp
default.isolate
optimize_for_size.gyp
optimize_for_size.isolate
perf.gyp
perf.isolate