Toon Verwaest 46d2105337 [maglev] Spill values across throw->catch ... If a value is used after a try-block finishes, we need to make sure that the catch-block can restore its value. Otherwise we'd accidentally drop the value on register merge thinking we're in a liveness hole on the merge after the catch (since the catch cleared all the registers). This then breaks JumpLoops that need to restore the value in a specific register. Bug: v8:7700, chromium:1392061 Change-Id: I7255ccf9b36bf36583ad612882137b251c48caed Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4055111 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Auto-Submit: Toon Verwaest <verwaest@chromium.org> Commit-Queue: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Toon Verwaest <verwaest@chromium.org> Cr-Commit-Position: refs/heads/main@{#84483}		2022-11-25 11:56:05 +00:00
..
regress-6373.js	[maglev] Fast path instanceof	2022-11-02 14:37:48 +00:00
regress-1359382.js
regress-1359723.js	[maglev] Fix clobbered regs in TestUndetectable and more	2022-09-15 08:13:07 +00:00
regress-1359928.js
regress-1363450.js	[maglev] Fix clobbered register in ThrowIfNotSuperConstructor	2022-09-15 11:33:07 +00:00
regress-1364074.js	[maglev] Fix exception phi for receiver in constructors	2022-10-13 13:46:18 +00:00
regress-1368046.js	[maglev] Use the parallel move resolver for handler trampolines	2022-10-04 09:55:20 +00:00
regress-1381663.js	[maglev] Fix FunctionPrototypeCall for empty args	2022-11-07 14:08:34 +00:00
regress-1383712.js	[maglev] Fix known type for HeapNumber CheckMaps	2022-11-14 14:22:19 +00:00
regress-1392936.js	[maglev] Don't lower Function#call when there's no receiver	2022-11-24 11:16:50 +00:00
regress-crbug-1392061.js	[maglev] Spill values across throw->catch	2022-11-25 11:56:05 +00:00
regress-v8-13289.js	[maglev] Use PropertyAccessInfo to create deps for property loads	2022-09-19 13:10:31 +00:00