AuroraMiddleware/v8
1
0
Fork 0
Code Issues 2 Pull Requests Releases Wiki Activity
b7990793cf
v8/test/cctest/compiler
History
mstarzinger b7990793cf [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 
This fixes the lifetime of nodes created by JSGlobalSpecialization that
contain a simplified operator. In the case where this reducer runs as
part of the inliner, the SimplifiedOperatorBuilder was instantiated with
the wrong zone. This led to use-after-free of simplified operators.

To avoid such situations in the future, we decided to move this operator
builder into the JSGraph and make the situation uniform with all other
operator builders.

R=bmeurer@chromium.org
BUG=chromium:543528
LOG=n

Review URL: https://codereview.chromium.org/1409993002

Cr-Commit-Position: refs/heads/master@{#31334}
2015-10-16 12:38:52 +00:00
..
c-signature.h [presubmit] Enable readability/namespace linter checking. 2015-09-30 13:47:11 +00:00
call-tester.h Reland: [turbofan] Various fixes to allow unboxed doubles as arguments in registers and on the stack. 2015-08-11 15:23:17 +00:00
codegen-tester.cc [turbofan] Drop V8_TURBOFAN_BACKEND and V8_TURBOFAN_TARGET defines. 2015-08-10 07:17:34 +00:00
codegen-tester.h [turbofan] Fix calls to computed code objects. 2015-10-01 17:11:56 +00:00
function-tester.h [presubmit] Enable readability/namespace linter checking. 2015-09-30 13:47:11 +00:00
graph-builder-tester.h Give the SupportedMachineOperatorFlags to GraphAndBuilders to allow the use of optional operators in tests. 2015-10-11 19:59:34 +00:00
test-basic-block-profiler.cc [turbofan] Drop V8_TURBOFAN_BACKEND and V8_TURBOFAN_TARGET defines. 2015-08-10 07:17:34 +00:00
test-branch-combine.cc [turbofan] Drop V8_TURBOFAN_BACKEND and V8_TURBOFAN_TARGET defines. 2015-08-10 07:17:34 +00:00
test-changes-lowering.cc [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 2015-10-16 12:38:52 +00:00
test-gap-resolver.cc Re-reland: Remove register index/code indirection 2015-10-02 16:55:22 +00:00
test-graph-visualizer.cc Reland "[turbofan] Checking of input counts on node creation" 2015-09-23 09:08:34 +00:00
test-instruction.cc Reland: [turbofan] add MachineType to AllocatedOperand 2015-04-29 19:36:25 +00:00
test-js-constant-cache.cc [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 2015-10-16 12:38:52 +00:00
test-js-context-specialization.cc [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 2015-10-16 12:38:52 +00:00
test-js-typed-lowering.cc [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 2015-10-16 12:38:52 +00:00
test-jump-threading.cc [turbofan] Ensure lazy bailout point in exception handler. 2015-06-17 05:40:42 +00:00
test-linkage.cc [turbofan] Drop V8_TURBOFAN_BACKEND and V8_TURBOFAN_TARGET defines. 2015-08-10 07:17:34 +00:00
test-loop-analysis.cc [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 2015-10-16 12:38:52 +00:00
test-loop-assignment-analysis.cc [presubmit] Enable readability/namespace linter checking. 2015-09-30 13:47:11 +00:00
test-machine-operator-reducer.cc [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 2015-10-16 12:38:52 +00:00
test-multiple-return.cc Using RegisterConfiguration in test-multiple-return. 2015-10-08 23:13:02 +00:00
test-node.cc Reland "[turbofan] Checking of input counts on node creation" 2015-09-23 09:08:34 +00:00
test-operator.cc Move SmartPointer to base. 2015-07-13 12:38:17 +00:00
test-osr.cc [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 2015-10-16 12:38:52 +00:00
test-pipeline.cc Deprecate semi-correct CompilationInfo::flags predicate. 2015-08-21 15:10:55 +00:00
test-representation-change.cc [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 2015-10-16 12:38:52 +00:00
test-run-bytecode-graph-builder.cc [runtime] Initial step towards switching Execution::Call to callable. 2015-09-17 17:11:54 +00:00
test-run-deopt.cc [turbofan] Remove obsolete --turbo-try-catch flag. 2015-09-10 09:38:40 +00:00
test-run-inlining.cc [turbofan] Rename --context-specialization to --function-context-specialization. 2015-09-25 11:33:38 +00:00
test-run-intrinsics.cc [heap] Cleanup string factory methods a bit. 2015-09-29 08:08:30 +00:00
test-run-jsbranches.cc First simple implementation of for-of in TurboFan. 2015-01-14 15:24:29 +00:00
test-run-jscalls.cc [es6] Fix missing bits for full @@toPrimitive support. 2015-10-01 16:08:49 +00:00
test-run-jsexceptions.cc [turbofan] Remove obsolete --turbo-try-catch flag. 2015-09-10 09:38:40 +00:00
test-run-jsobjects.cc [turbofan] Model arguments object materialization in graph. 2015-09-15 09:07:34 +00:00
test-run-jsops.cc [es6] Remove harmony-classes flag 2015-06-26 21:16:58 +00:00
test-run-machops.cc Added Popcnt as an optional operator and implement it on x64 and ia32. 2015-10-16 01:23:06 +00:00
test-run-native-calls.cc Re-reland: Remove register index/code indirection 2015-10-02 16:55:22 +00:00
test-run-properties.cc [turbofan] Rename --context-specialization to --function-context-specialization. 2015-09-25 11:33:38 +00:00
test-run-stackcheck.cc Implement inlined stack-check guards in TurboFan. 2014-10-01 14:03:02 +00:00
test-run-stubs.cc [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 2015-10-16 12:38:52 +00:00
test-run-variables.cc Remove --harmony-scoping flag. 2015-03-13 15:15:57 +00:00
test-simplified-lowering.cc [turbofan] Move SimplifiedOperatorBuilder into JSGraph. 2015-10-16 12:38:52 +00:00
value-helper.h [test] Add FOR_INT64_INPUTS and FOR_UINT64_INPUTS. 2015-09-23 11:05:00 +00:00