v8/test/mjsunit/asm
Ben L. Titzer 9f1a7d3aa0 [arraybuffer] Use relaxed load/store for bitfield
A benign datarace can occur between the array buffer tracker and
using an arraybuffer as an asm.js memory. The former reads the
{is_shared} bit, which should never change, and the latter writes
the {is_asmjs_memory} bit, but no other bits. Since these bits are
packed into a single word, TSAN reports a race.

R=ulan@chromium.org
BUG=v8:9531

Change-Id: Icceff211368e13794b6678b5fd7748fb5b3235bf
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1714647
Commit-Queue: Ben Titzer <titzer@chromium.org>
Reviewed-by: Ulan Degenbaev <ulan@chromium.org>
Cr-Commit-Position: refs/heads/master@{#62866}
2019-07-23 10:12:26 +00:00
..
embenchen
poppler Fix common misspellings 2017-08-02 09:35:28 +00:00
sqlite3
asm-heap.js Reland "[asmjs] Properly validate asm.js heap sizes" 2018-08-21 09:00:04 +00:00
asm-memory.js [asm.js] Fix heap buffer checking during instantiation. 2017-04-27 14:47:03 +00:00
asm-stdlib.js [asm.js] Make validation of stdlib uses non-observable. 2017-05-10 16:29:05 +00:00
asm-validation.js [asm.js] Maintain global order of exported functions. 2017-05-12 12:11:06 +00:00
atomics-add.js
atomics-and.js
atomics-compareexchange.js
atomics-exchange.js
atomics-load.js
atomics-or.js
atomics-store.js
atomics-sub.js
atomics-xor.js
b5528-comma.js
call-annotation.js [asm.js] Test and fix "|0" annotation of calls. 2017-04-13 10:38:22 +00:00
call-collisions.js [asm.js] Test and fix call kind collisions. 2017-04-11 10:05:03 +00:00
call-stdlib.js [asm.js] Remove deprecated --fast-validate-asm flag. 2017-05-04 13:52:39 +00:00
do-while-false.js
do-while.js
float32array-negative-offset.js
float32array-outofbounds.js
float32array-store-div.js
float64array-negative-offset.js
float64array-outofbounds.js
float64array-store-div.js
float64mul.js
global-imports.js [asm.js] Ensure coercion of imports is non-observable. 2017-06-20 13:55:35 +00:00
if-cloning.js
if-folding.js
if-reduction.js
if-tonumber.js
immutable.js [asm.js] Test and fix function (table) immutability. 2017-05-11 12:25:26 +00:00
infinite-loops-taken.js
infinite-loops.js
int8array-negative-offset.js
int16array-negative-offset.js
int16array-outofbounds.js
int32-div.js
int32-mod.js
int32-mul.js [asm.js] Fix numeric literal negation in multiplication. 2017-04-26 14:53:09 +00:00
int32-tmod.js
int32-udiv.js
int32-umod.js
int32array-constant-key.js
int32array-negative-offset.js
int32array-outofbounds.js
int32array-unaligned.js
int32div.js
int32mod-constant.js
int32mod.js
int32modb.js
load-elimination.js
math-abs.js
math-ceil.js
math-clz32.js
math-floor.js
math-fround.js
math-max.js [asm.js] Fix Math.min/max signatures to take signed. 2017-09-25 12:58:57 +00:00
math-min.js [asm.js] Fix Math.min/max signatures to take signed. 2017-09-25 12:58:57 +00:00
noexpose-wasm.js [asmjs] --validate-asm should not expose the WASM API. 2017-09-04 13:31:32 +00:00
pointer-masking.js
redundancy1.js
redundancy2.js
regress-9531.js [arraybuffer] Use relaxed load/store for bitfield 2019-07-23 10:12:26 +00:00
regress-641885.js
regress-660813.js
regress-669899.js
regress-672045.js
regress-674089.js [fullcodegen] Remove --stress-fullcodegen flag. 2017-08-10 09:52:49 +00:00
regress-676573.js
regress-681707.js
regress-718745.js [asm.js] Fix checking of "fround" in parameter annotation. 2017-05-05 12:45:53 +00:00
regress-719866.js [asm.js] Fix associativity of multiplicative expressions. 2017-06-01 13:03:03 +00:00
regress-740325.js [wasm] Improve precision of slow DCHECK for WebAssembly-constructed internal objects. 2017-07-10 13:49:34 +00:00
regress-913822.js [asm.js] Fix semicolon insertion in presence of comments. 2018-12-12 14:43:05 +00:00
regress-920076.js [asm.js] Fix semicolon insertion in presence of Unicode. 2019-01-09 12:38:41 +00:00
regress-937650.js [asm.js] Fix undefined behavior with float32 constants. 2019-03-07 08:56:37 +00:00
return-types.js [asm.js] Test and fix return type validation. 2017-05-10 08:40:53 +00:00
sign-extend.js
switch.js
uint8array-outofbounds.js
uint32-less-than-shift.js
uint32div.js
uint32mod-constant.js
uint32mod.js
word32and.js
word32ror.js
zero-extend.js