v8/test/mjsunit/regress
danno@chromium.org 06c7620302 Fixed crashes exposed though fuzzing.
The %_OneByteSeqStringSetChar intrinsic expects its arguments to be checked before being called for efficiency reasons, but the fuzzer provided no such checks. Now the intrinsic is robust to bad input if FLAG_debug_code is set.

R=yangguo@chromium.org
TEST=test/mjsunit/regress/regress-320948.js
BUG=chromium:320948
LOG=Y

Review URL: https://codereview.chromium.org/72813004

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@17886 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
2013-11-19 16:41:07 +00:00
..
bitops-register-alias.js
clear-keyed-call.js Reland and fix "Add support for keyed-call on arrays of fast elements" 2013-11-15 10:52:05 +00:00
consolidated-holey-load.js Fix "Hole" leak in TryBuildConsolidatedElementLoad 2013-08-21 15:31:03 +00:00
debug-prepare-step-in.js Never clear debug-stub call ICs. Make a clear distinction between is_debug_stub 2013-08-22 12:16:00 +00:00
external-and-normal-array-polymorphism.js
json-stringifier-emptyhandle.js Check for empty handle in JSON stringifier 2013-08-07 16:34:13 +00:00
negative_lookup.js
poly_count_operation.js Fix wrong bailout id in polymorphic stores. 2013-07-19 08:45:47 +00:00
post-increment-close-context.js Properly close the CountOperation value/effect context after leaving the store effect context. 2013-09-05 12:33:14 +00:00
readonly1.js
readonly2.js
readonly3.js
readonly4.js
readonly5.js
regress-6-9-regexp.js
regress-35.js
regress-57.js
regress-69.js
regress-74.js
regress-86.js
regress-87.js
regress-91.js
regress-105.js
regress-114.js
regress-116.js
regress-124.js
regress-137.js
regress-149.js
regress-171.js
regress-176.js
regress-186.js
regress-187.js
regress-189.js
regress-191.js
regress-192.js
regress-193.js
regress-201.js
regress-219.js
regress-220.js
regress-225.js
regress-227.js
regress-231.js
regress-233.js
regress-244.js
regress-246.js
regress-253.js
regress-254.js
regress-259.js
regress-260.js
regress-263.js
regress-265.js
regress-267.js
regress-269.js
regress-279.js
regress-284.js
regress-286.js
regress-294.js
regress-312.js
regress-317.js
regress-318.js
regress-326.js
regress-334.js
regress-341.js
regress-345.js
regress-349.js
regress-351.js
regress-386.js
regress-392.js
regress-394.js
regress-396.js
regress-397.js
regress-399.js
regress-406.js
regress-416.js
regress-475.js
regress-483.js
regress-485.js
regress-486.js
regress-490.js
regress-491.js
regress-492.js
regress-496.js
regress-502.js
regress-503.js
regress-515.js
regress-524.js
regress-526.js
regress-540.js
regress-545.js
regress-580.js
regress-581.js
regress-603.js
regress-612.js
regress-618.js Remove the optimized construct stub. 2013-06-05 08:43:25 +00:00
regress-619.js
regress-634.js
regress-636.js
regress-641.js
regress-643.js
regress-646.js
regress-675.js
regress-681.js
regress-685.js
regress-687.js
regress-696.js
regress-697.js
regress-712.js
regress-720.js
regress-728.js
regress-732.js
regress-747.js
regress-752.js
regress-753.js
regress-754.js
regress-760-1.js
regress-760-2.js
regress-784.js
regress-794.js
regress-798.js
regress-806.js
regress-815.js
regress-842.js
regress-851.js
regress-857.js
regress-874.js
regress-900.js
regress-918.js
regress-927.js
regress-931.js
regress-944.js
regress-955.js
regress-962.js
regress-969.js
regress-974.js
regress-982.js
regress-992.js
regress-995.js
regress-1015.js
regress-1017.js
regress-1020.js
regress-1060.js
regress-1079.js
regress-1083.js
regress-1092.js
regress-1099.js
regress-1103.js
regress-1104.js
regress-1106.js
regress-1107.js
regress-1110.js
regress-1112.js
regress-1117.js
regress-1118.js Fix many tests that try to force an OSR by checking OptimizationStatus() to instead check OptimizationCount(). 2013-07-30 09:28:55 +00:00
regress-1119.js
regress-1120.js
regress-1121.js
regress-1122.js
regress-1125.js
regress-1126.js
regress-1129.js
regress-1130.js
regress-1131.js
regress-1132.js
regress-1145.js
regress-1146.js
regress-1149.js
regress-1150.js
regress-1151.js
regress-1156.js
regress-1160.js
regress-1166.js
regress-1167.js
regress-1170.js
regress-1172-bis.js
regress-1172.js
regress-1174.js
regress-1176.js
regress-1181.js
regress-1184.js
regress-1207.js
regress-1209.js
regress-1210.js
regress-1213.js
regress-1215.js
regress-1217.js
regress-1218.js
regress-1229.js
regress-1233.js
regress-1236.js
regress-1237.js
regress-1240.js
regress-1246.js
regress-1257.js
regress-1278.js
regress-1309.js
regress-1323.js
regress-1337.js
regress-1351.js
regress-1355.js
regress-1360.js
regress-1365.js
regress-1369.js
regress-1383.js Do not allow invocation of ArrayBuffer and array buffer views' constructors as functions. 2013-06-27 07:42:08 +00:00
regress-1387.js
regress-1389.js
regress-1401.js
regress-1403.js
regress-1412.js
regress-1415.js
regress-1419.js
regress-1423.js
regress-1434.js
regress-1436.js
regress-1447.js
regress-1472.js
regress-1476.js
regress-1491.js
regress-1513.js
regress-1521.js
regress-1523.js
regress-1528.js
regress-1529.js
regress-1530.js
regress-1531.js
regress-1546.js
regress-1548.js
regress-1560.js
regress-1563.js
regress-1582.js
regress-1583.js
regress-1586.js
regress-1591.js
regress-1592.js
regress-1620.js
regress-1624-strict.js
regress-1624.js
regress-1625.js
regress-1639-2.js
regress-1639.js
regress-1647.js
regress-1650.js
regress-1692.js
regress-1708.js
regress-1711.js
regress-1748.js
regress-1757.js
regress-1790.js
regress-1849.js
regress-1853.js Add support for //# sourceURL similar to deprecated //@ sourceURL one. 2013-05-29 12:40:21 +00:00
regress-1878.js
regress-1898.js
regress-1924.js
regress-1945.js
regress-1973.js
regress-1980.js
regress-2027.js
regress-2030.js
regress-2032.js
regress-2034.js
regress-2045.js
regress-2054.js
regress-2055.js
regress-2056.js
regress-2058.js
regress-2071.js
regress-2073.js
regress-2110.js
regress-2119.js
regress-2132.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-2153.js
regress-2156.js
regress-2163.js
regress-2170.js
regress-2172.js
regress-2185-2.js
regress-2185.js
regress-2186.js
regress-2193.js
regress-2219.js
regress-2225.js
regress-2226.js
regress-2234.js
regress-2243.js
regress-2249.js
regress-2250.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-2261.js
regress-2263.js
regress-2273.js
regress-2284.js
regress-2285.js
regress-2286.js
regress-2289.js
regress-2291.js
regress-2294.js
regress-2296.js
regress-2315.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-2318.js
regress-2322.js
regress-2326.js
regress-2336.js
regress-2339.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-2346.js
regress-2373.js
regress-2374.js
regress-2398.js
regress-2410.js
regress-2416.js
regress-2419.js
regress-2433.js
regress-2437.js
regress-2438.js
regress-2441.js
regress-2443.js
regress-2444.js
regress-2451.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-2470.js
regress-2489.js
regress-2499.js
regress-2537.js Refactoring and cleanup of control instructions 2013-07-05 10:40:14 +00:00
regress-2539.js
regress-2564.js
regress-2565.js
regress-2566.js
regress-2568.js
regress-2570.js
regress-2593.js
regress-2594.js Fix scoping of function declarations in eval inside non-trivial local scope 2013-08-23 09:25:37 +00:00
regress-2595.js
regress-2596.js
regress-2606.js
regress-2612.js Tune mjsunit/regress/regress-2612. 2013-10-24 13:07:16 +00:00
regress-2618.js Fix many tests that try to force an OSR by checking OptimizationStatus() to instead check OptimizationCount(). 2013-07-30 09:28:55 +00:00
regress-2624.js
regress-2646.js Adds EXTERNAL_DOUBLE_ARRAY to a list of instance types 2013-04-23 17:02:09 +00:00
regress-2653.js Do not emit Simulates in HandlePolymorphicElementAccess. 2013-04-23 15:28:44 +00:00
regress-2671-1.js Fix environment in HOptimizedGraphBuilder::VisitCountOperation. Follow-up for r14584. 2013-05-08 14:58:06 +00:00
regress-2671.js Do not change environment between simulate and scope with no observable side-effects in HandlePropertyAssignment. 2013-05-08 07:40:28 +00:00
regress-2681.js Don't flush code for generator functions. 2013-05-13 17:36:26 +00:00
regress-2686.js Function constructor should avoid String.prototype methods 2013-05-15 10:52:06 +00:00
regress-2690.js Regexp parser: reset flag after scanning ahead for capture groups. 2013-05-27 10:53:37 +00:00
regress-2691.js Use keyed-call inline caches in delegating yield 2013-06-13 10:18:28 +00:00
regress-2711.js Don't use StoreIC_ArrayLength on frozen arrays 2013-07-14 22:03:46 +00:00
regress-2717.js Fix re-initialization of existing double field. 2013-06-10 11:55:47 +00:00
regress-2790.js Lower kInitialMaxFastElementArray constant to 95K 2013-08-26 13:04:05 +00:00
regress-2813.js Regression test for issue 2813 / r16008 2013-08-02 12:17:19 +00:00
regress-2829.js Fix hidden properties on object with frozen prototype. 2013-08-22 13:51:32 +00:00
regress-2836.js Fix overflow check computation for Smi Phis 2013-08-13 18:18:24 +00:00
regress-2843.js Delete HAbnormalExit. It does more harm than good. 2013-08-28 15:00:30 +00:00
regress-2855.js Reland "Clean up after r16292 (disable optimization for StringWrappers)." 2013-09-12 16:17:58 +00:00
regress-2931.js Do not look up ArrayBuffer on global object in typed array constructor. 2013-10-15 11:27:12 +00:00
regress-2980.js Add missing negative dictionary lookup to NonexistentHandlerFrontend 2013-11-04 14:14:09 +00:00
regress-2984.js Fix y-umlaut to uppercase. 2013-11-07 09:08:34 +00:00
regress-2987.js Make HCapturedObjects non-deletable for DCE. 2013-11-07 16:07:19 +00:00
regress-2988.js Fix invalid reuse of weak global handle in GetScriptWrapper. 2013-11-11 16:27:36 +00:00
regress-3010.js Match max property descriptor length to corresponding bit fields 2013-11-18 11:44:06 +00:00
regress-45469.js
regress-52801.js
regress-58740.js
regress-70066.js
regress-71647.js
regress-78270.js
regress-82769.js
regress-84234.js
regress-85177.js
regress-88591.js
regress-88858.js
regress-91008.js
regress-91010.js
regress-91013.js
regress-91120.js
regress-91787.js
regress-94425.js
regress-94873.js
regress-95113.js
regress-95485.js
regress-95920.js
regress-96523.js
regress-97116.js
regress-97116b.js Fix %NeverOptimizeFunction runtime call. 2013-07-19 08:25:44 +00:00
regress-98773.js
regress-99167.js
regress-100409.js
regress-100702.js
regress-102153.js
regress-103259.js
regress-108296.js
regress-109195.js
regress-110509.js
regress-113924.js
regress-115100.js
regress-115452.js
regress-117409.js
regress-117794.js
regress-119429.js
regress-119609.js
regress-119925.js
regress-120099.js
regress-121407.js
regress-123512.js
regress-123919.js
regress-124594.js
regress-125515.js
regress-126412.js
regress-128018.js
regress-128146.js
regress-131923.js
regress-131994.js
regress-133211.js
regress-133211b.js
regress-136048.js
regress-137768.js
regress-143967.js
regress-145201.js
regress-147497.js
regress-148378.js
regress-155924.js
regress-164442.js
regress-165637.js
regress-166379.js
regress-166553.js
regress-171641.js
regress-173361.js Fix sloppy-mode 'const' under Harmony flag. 2013-07-15 14:12:20 +00:00
regress-201590.js
regress-234101.js
regress-235311.js Fix beyond-heap load on x64 Crankshafted StringCharFromCode 2013-04-29 14:34:24 +00:00
regress-237617.js Fix edge case in stack trace formatting. 2013-05-24 11:33:46 +00:00
regress-241344.js Fix unexpected elements transition in JSON.parse 2013-05-22 13:24:18 +00:00
regress-247688.js ARM: Ensure space for lazy deoptimization before calling IC. 2013-07-22 17:21:41 +00:00
regress-252797.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-264203.js Fix Array index dehoisting. 2013-08-06 16:38:39 +00:00
regress-298269.js Do not add values to HGraph in Lithium. 2013-11-08 14:16:34 +00:00
regress-319120.js Fix overflow in TypedArray initialization function 2013-11-14 06:20:48 +00:00
regress-319722-ArrayBuffer.js Use mock ArrayBuffer allocator to avoid really allocating 1Gb. 2013-11-18 14:50:45 +00:00
regress-319722-TypedArrays.js Limit the size for typed arrays to MaxSmi. 2013-11-15 16:37:15 +00:00
regress-320532.js Bugfix: dependent code field in AllocationSite was keeping code objects alive even after context death. 2013-11-19 10:17:33 +00:00
regress-320948.js Fixed crashes exposed though fuzzing. 2013-11-19 16:41:07 +00:00
regress-588599.js
regress-662254.js
regress-666721.js
regress-667061.js
regress-670147.js
regress-674753.js
regress-676025.js
regress-678525.js
regress-682649.js
regress-734862.js
regress-737588.js
regress-780423.js
regress-799761.js
regress-806473.js
regress-842017.js
regress-874178.js
regress-875031.js
regress-877615.js
regress-892742.js
regress-900055.js
regress-900966.js
regress-925537.js
regress-937896.js
regress-990205.js
regress-992733.js
regress-996542.js
regress-998565.js
regress-1030466.js
regress-1036894.js
regress-1039610.js
regress-1050043.js
regress-1062422.js
regress-1066899.js
regress-1081309.js
regress-1102760.js
regress-1110164.js
regress-1112051.js
regress-1114040.js
regress-1134697.js
regress-1170187.js
regress-1173979.js
regress-1175390.js
regress-1177518.js
regress-1177809.js
regress-1178598.js
regress-1182832.js
regress-1187524.js
regress-1199401.js
regress-1199637.js
regress-1200351.js
regress-1201933.js
regress-1203459.js
regress-1207276.js
regress-1213516.js
regress-1213575.js
regress-1215653.js
regress-1254366.js
regress-1327557.js
regress-1346700.js
regress-1439135.js
regress-1493017.js
regress-1919169.js
regress-2249423.js
regress-3006390.js
regress-3185905.js
regress-3199913.js
regress-3218530.js
regress-3218915.js
regress-3230771.js
regress-3247124.js
regress-3252443.js
regress-3408144.js
regress-20070207.js
regress-add-minus-zero.js Do not remove HAdd with zero if the other operand is a double. 2013-10-30 10:22:52 +00:00
regress-arguments-gc.js
regress-array-pop-nonconfigurable.js Reland "Make Array.prototype.pop throw if the last element is not configurable." 2013-10-25 11:55:56 +00:00
regress-bind-receiver.js
regress-binop-nosse2.js Fix Environment size mismatch in r6849. 2013-09-20 08:34:23 +00:00
regress-binop.js Only set binary operation side effects flags, when observable. 2013-10-10 16:49:25 +00:00
regress-builtin-array-op.js
regress-cnlt-elements.js
regress-cnlt-enum-indices.js
regress-cntl-descriptors-enum.js
regress-compare-constant-doubles.js ia32: Fix comparisons of two constant double operands when exactly one of them is in new space. 2013-10-29 14:34:07 +00:00
regress-conditional-position.js
regress-convert-enum2.js
regress-convert-enum.js
regress-convert-function-to-double.js Store copied value rather than the original double. 2013-08-16 15:43:42 +00:00
regress-convert-hole2.js Never hchange nan-hole to hole or hole to nan-hole. 2013-08-14 08:54:27 +00:00
regress-convert-hole.js Fix DeferredTaggedToINoSSE2 to not unconditionally untag undefined to 0. 2013-05-31 08:37:34 +00:00
regress-convert-transition.js
regress-copy-hole-to-field.js Don't allow copying holes to fields. 2013-05-22 15:33:53 +00:00
regress-crbug-3184.js
regress-crbug-3867.js
regress-crbug-18639.js
regress-crbug-37853.js
regress-crbug-39160.js
regress-crbug-40931.js
regress-crbug-72736.js
regress-crbug-87478.js
regress-crbug-100859.js
regress-crbug-107996.js
regress-crbug-119926.js
regress-crbug-122271.js
regress-crbug-125148.js
regress-crbug-126414.js
regress-crbug-134055.js
regress-crbug-134609.js
regress-crbug-135008.js
regress-crbug-135066.js
regress-crbug-137689.js
regress-crbug-138887.js
regress-crbug-140083.js
regress-crbug-142087.js
regress-crbug-142218.js
regress-crbug-145961.js
regress-crbug-146910.js
regress-crbug-147475.js
regress-crbug-148376.js
regress-crbug-150545.js Fix many tests that try to force an OSR by checking OptimizationStatus() to instead check OptimizationCount(). 2013-07-30 09:28:55 +00:00
regress-crbug-150729.js
regress-crbug-157019.js
regress-crbug-157520.js
regress-crbug-158185.js
regress-crbug-160010.js
regress-crbug-162085.js
regress-crbug-163530.js
regress-crbug-168545.js
regress-crbug-170856.js
regress-crbug-171715.js
regress-crbug-172345.js
regress-crbug-173907.js
regress-crbug-173907b.js Fix %NeverOptimizeFunction runtime call. 2013-07-19 08:25:44 +00:00
regress-crbug-173974.js
regress-crbug-178790.js
regress-crbug-181422.js
regress-crbug-196583.js
regress-crbug-217858.js Enable weak embedded maps in optimized code. 2013-07-02 15:15:58 +00:00
regress-crbug-222893.js
regress-crbug-229923.js
regress-crbug-233737.js Fix missing hole check for loads from Smi arrays when all uses are changes 2013-05-13 11:58:10 +00:00
regress-crbug-240032.js Fix embedded new-space pointer in LCmpObjectEqAndBranch. 2013-05-23 14:06:28 +00:00
regress-crbug-242502.js Add regression test for fix from r14732. 2013-05-21 14:20:42 +00:00
regress-crbug-242870.js Fix VisitLogicalExpression for empty blocks on RHS. 2013-05-22 13:27:00 +00:00
regress-crbug-242924.js Fix bogus deopt in BuildEmitDeepCopy for holey arrays. 2013-05-22 17:58:21 +00:00
regress-crbug-243868.js Fix IfBuilder::Deopt to clear the current block. 2013-05-28 15:30:49 +00:00
regress-crbug-244461.js Special Array constructor type feedback erroneously recorded when Array 2013-06-03 14:46:23 +00:00
regress-crbug-245424.js Fast literals: fixed initialization of non-copied in-object property fields 2013-05-31 15:50:19 +00:00
regress-crbug-245480.js Fix for bug 245480. Calling new Array(a) with a single argument could result in creating a holey array with a packed elements kind. 2013-06-12 18:04:16 +00:00
regress-crbug-248025.js Fix crasher when checking for "of", but next token has no literal buffer 2013-06-11 11:30:03 +00:00
regress-crbug-258519.js Add regression test for recently fixed bug 2013-07-26 14:58:30 +00:00
regress-crbug-259300.js Do not materialize context-allocated values for debug-evaluate. 2013-07-17 15:29:00 +00:00
regress-crbug-260345.js Synchronize Compare-Literal behavior in FullCodegen and Hydrogen 2013-07-17 13:13:38 +00:00
regress-crbug-263276.js Fix JSArray-specific length lookup in polymorphic array handling 2013-07-25 15:04:21 +00:00
regress-crbug-272564.js Fix Math.round/floor that had bogus Smi representation 2013-08-14 12:14:08 +00:00
regress-crbug-274438.js Mark HStringCompareAndBranch as potentially causing GCs. 2013-08-16 15:10:07 +00:00
regress-crbug-280333.js Always visit branches during HGraph building 2013-08-29 14:55:45 +00:00
regress-crbug-285355.js Fix bitwise negation on x64 2013-09-06 15:21:38 +00:00
regress-crbug-305309.js Fix HObjectAccess for loads from migrating prototypes 2013-10-23 15:15:15 +00:00
regress-crbug-306220.js Correctly load message from an Error object. 2013-11-05 13:04:51 +00:00
regress-crbug-306851.js Add regression test for optimized count operation. 2013-10-17 12:48:28 +00:00
regress-crbug-309623.js Fix uint32-to-smi conversion in Lithium 2013-10-31 10:18:51 +00:00
regress-crbug-318671.js Fix missing type feedback check for Generic*String addition. 2013-11-15 09:13:36 +00:00
regress-crbug-319835.js Limit size of dehoistable array indices 2013-11-15 17:24:10 +00:00
regress-crbug-319860.js Limit size of dehoistable array indices 2013-11-15 17:24:10 +00:00
regress-crbug-320922.js Fix register trashing in Emit*ByteSeqStringSetChar 2013-11-19 12:59:09 +00:00
regress-create-exception.js
regress-debug-code-recompilation.js
regress-debug-deopt-while-recompile.js Rename "parallel recompilation" to "concurrent recompilation". 2013-08-22 16:14:37 +00:00
regress-deep-proto.js
regress-delete-empty-double.js
regress-deopt-gc.js
regress-deopt-gcb.js Fix %NeverOptimizeFunction runtime call. 2013-07-19 08:25:44 +00:00
regress-deopt-store-effect.js Fix deopt in store with effect context. 2013-07-19 13:45:26 +00:00
regress-embedded-cons-string.js Retire concurrent recompilation delay for non-stress testing. 2013-10-14 14:15:22 +00:00
regress-et-clobbers-doubles.js Store doubles before calling into the elements transition stub on ARM 2013-08-13 15:06:17 +00:00
regress-fast-literal-transition.js
regress-frame-details-null-receiver.js Do not implicitly convert receivers for builtin functions when inspecting frames. 2013-07-09 13:58:11 +00:00
regress-freeze.js Fix Object.freeze, Object.observe wrt CountOperation and CompoundAssignment. 2013-08-07 18:45:41 +00:00
regress-function-length-strict.js Fixed read-only attribute of Function.length in strict mode. 2013-06-18 07:51:50 +00:00
regress-fundecl.js
regress-grow-store-smi-check.js
regress-hoist-load-named-field.js Make all load-named-fields depend on their map-check, unless explicitly ignored. 2013-08-09 18:40:10 +00:00
regress-inlining-function-literal-context.js
regress-int32-truncation.js Take all uses into account to clear int32 truncation. 2013-06-07 17:28:46 +00:00
regress-iteration-order.js
regress-json-stringify-gc.js
regress-latin-1.js
regress-lazy-deopt-reloc.js
regress-load-elements.js
regress-map-invalidation-1.js Fix regressions triggered by map invalidation during graph creation. 2013-08-12 14:10:25 +00:00
regress-map-invalidation-2.js Generate a custom OSR entrypoint for OSR compiles on all platforms, and transition to optimized code using the special entrypoint, instead of through the deoptimizer. Do not install the OSR compiled code as _the_ optimized code for a function. 2013-09-09 16:34:40 +00:00
regress-merge-descriptors.js Merge verbatim descriptors from other (the descriptor of the map being updated) rather than this (descriptors of the most updated map found in the transition tree). 2013-08-28 12:37:14 +00:00
regress-mul-canoverflow.js Fix overflow check in mul-i which was missing since r14322 2013-04-25 07:36:59 +00:00
regress-mul-canoverflowb.js Fix %NeverOptimizeFunction runtime call. 2013-07-19 08:25:44 +00:00
regress-observe-empty-double-array.js
regress-omit-checks.js Mark maps as unstable if their instances potentially transition away. 2013-07-30 16:33:58 +00:00
regress-opt-after-debug-deopt.js Retire concurrent recompilation delay for non-stress testing. 2013-10-14 14:15:22 +00:00
regress-parse-object-literal.js Unify and fix checkers for duplicate object literal properties. 2013-10-10 11:58:16 +00:00
regress-parse-use-strict.js Fix pre-parsing of 'use strict' directive after string literals. 2013-10-11 14:03:54 +00:00
regress-phi-truncation.js Fix bug in HPhi::SimplifyConstantInput 2013-08-13 16:47:27 +00:00
regress-polymorphic-load.js Only fold polymorphic into monomorphic load if all load from either receiver or same prototype. 2013-10-02 13:24:08 +00:00
regress-polymorphic-store.js Fix using monomorphic store instruction for polymorphic stores. 2013-06-19 18:07:35 +00:00
regress-prepare-break-while-recompile.js Retire concurrent recompilation delay for non-stress testing. 2013-10-14 14:15:22 +00:00
regress-push-args-twice.js
regress-r3391.js
regress-r4998.js
regress-regexp-codeflush.js
regress-regexp-construct-result.js Fix bug in regexp result object construction. 2013-09-05 14:32:49 +00:00
regress-seqstrsetchar-ex1.js Fix code gen bug on arm and mips; SeqStringSetChar overwrites a register; Add better default PrintDataTo for HInstruction 2013-05-16 14:27:39 +00:00
regress-seqstrsetchar-ex2.js Fix code gen bug on arm and mips; SeqStringSetChar overwrites a register; Add better default PrintDataTo for HInstruction 2013-05-16 14:27:39 +00:00
regress-seqstrsetchar-ex3.js Add belated test for the SeqStringSetChar bug. 2013-05-24 08:37:27 +00:00
regress-smi-math-floor-round.js Fix smi-based math floor. 2013-08-09 11:21:03 +00:00
regress-smi-only-concat.js
regress-sqrt.js
regress-store-uncacheable.js Allow uncacheable identifiers to go generic. 2013-09-02 16:32:11 +00:00
regress-swapelements.js
regress-transcendental.js
regress-undefined-store-keyed-fast-element.js
regress-x87.js Add X87 implementations for Integer32ToDouble, DoubleToI, DoubleToSmi 2013-08-20 13:01:54 +00:00
setter.js
short-circuit.js
splice-missing-wb.js
string-split-monkey-patching.js Avoid relying on monkey-patchable things in String.prototype.split. 2013-06-19 12:25:40 +00:00