v8/test/mjsunit/regress
danno@chromium.org 06c7620302 Fixed crashes exposed though fuzzing.
The %_OneByteSeqStringSetChar intrinsic expects its arguments to be checked before being called for efficiency reasons, but the fuzzer provided no such checks. Now the intrinsic is robust to bad input if FLAG_debug_code is set.

R=yangguo@chromium.org
TEST=test/mjsunit/regress/regress-320948.js
BUG=chromium:320948
LOG=Y

Review URL: https://codereview.chromium.org/72813004

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@17886 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
2013-11-19 16:41:07 +00:00
..
bitops-register-alias.js Fix fuzzer-found error where left and right were the same register in bitops. 2010-08-10 12:30:14 +00:00
clear-keyed-call.js Reland and fix "Add support for keyed-call on arrays of fast elements" 2013-11-15 10:52:05 +00:00
consolidated-holey-load.js Fix "Hole" leak in TryBuildConsolidatedElementLoad 2013-08-21 15:31:03 +00:00
debug-prepare-step-in.js Never clear debug-stub call ICs. Make a clear distinction between is_debug_stub 2013-08-22 12:16:00 +00:00
external-and-normal-array-polymorphism.js Remove bogus test flags 2013-03-25 17:59:15 +00:00
json-stringifier-emptyhandle.js Check for empty handle in JSON stringifier 2013-08-07 16:34:13 +00:00
negative_lookup.js Change LookupForWrite to always do a full lookup and check the result. 2013-03-25 12:55:27 +00:00
poly_count_operation.js Fix wrong bailout id in polymorphic stores. 2013-07-19 08:45:47 +00:00
post-increment-close-context.js Properly close the CountOperation value/effect context after leaving the store effect context. 2013-09-05 12:33:14 +00:00
readonly1.js Change LookupForWrite to always do a full lookup and check the result. 2013-03-25 12:55:27 +00:00
readonly2.js Change LookupForWrite to always do a full lookup and check the result. 2013-03-25 12:55:27 +00:00
readonly3.js Change LookupForWrite to always do a full lookup and check the result. 2013-03-25 12:55:27 +00:00
readonly4.js Change LookupForWrite to always do a full lookup and check the result. 2013-03-25 12:55:27 +00:00
readonly5.js Always check global property cells for readonliness before storing. 2013-04-09 08:09:05 +00:00
regress-6-9-regexp.js Fix regexp bug reported by Ian where [6-9] would match any digit. 2009-06-20 17:57:09 +00:00
regress-35.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-57.js Quick fix: copyright header 2008-09-10 13:05:26 +00:00
regress-69.js Fix http://code.google.com/p/v8/issues/detail?id=69 : 2008-09-16 11:23:02 +00:00
regress-74.js Change the handling of catch blocks to use context extension objects 2009-01-16 09:42:08 +00:00
regress-86.js Fix issue 86 by keeping track of the fact that finally blocks 2008-10-01 07:43:00 +00:00
regress-87.js Make regexp flag parsing stricter. 2011-08-19 11:02:41 +00:00
regress-91.js Fix for issue 91 (http://code.google.com/p/v8/issues/detail?id=91) 2009-01-07 09:58:58 +00:00
regress-105.js Add test to check that Function.caller must not expose native functions. 2013-03-28 14:31:48 +00:00
regress-114.js Fixed bug 114 2008-10-14 09:13:23 +00:00
regress-116.js Fix issue 116 by returning the value from SetFastElement. 2008-10-17 06:36:35 +00:00
regress-124.js Fix receiver for calls to strict-mode and builtin functions that are 2011-05-31 07:57:22 +00:00
regress-137.js If a HeapNumber is the incoming value, it must be converted to Smi before 2008-11-03 13:33:13 +00:00
regress-149.js Merge regexp2000 back into bleeding_edge 2008-11-25 11:07:48 +00:00
regress-171.js Fix for issue 171: 2009-01-07 23:26:31 +00:00
regress-176.js Cleanup of mjsunit.js code and make assertEquals more strict. 2011-04-15 11:35:36 +00:00
regress-186.js Fix issue 186: 2009-01-14 12:13:26 +00:00
regress-187.js Cleanup of mjsunit.js code and make assertEquals more strict. 2011-04-15 11:35:36 +00:00
regress-189.js Fix handling of const initialization. We did not handle the fact that 2009-01-22 13:53:06 +00:00
regress-191.js Fix issue 191: 2009-01-15 11:31:08 +00:00
regress-192.js Avoid calling inherited setters when creating object literals and their boilerplates. 2011-01-06 14:00:50 +00:00
regress-193.js Make sure that eval and try-catch introduced context extension objects 2009-01-23 12:16:03 +00:00
regress-201.js Do not violate the assumption that fast-case arrays have Smi length 2009-01-23 13:08:29 +00:00
regress-219.js Make regexp flag parsing stricter. 2011-08-19 11:02:41 +00:00
regress-220.js Follow the spec in disallowing function declarations without a name. We 2009-10-02 12:47:15 +00:00
regress-225.js Fix bug 225 in regexp replace with function. 2009-02-05 13:24:13 +00:00
regress-227.js Issue 227 Fixed. Properly handles non-ASCII characters in quick-check on ASCII strings. 2009-02-11 11:54:30 +00:00
regress-231.js Issue 231 - Irregexp backtracking stack pointer could become corrupted. 2009-02-12 13:07:58 +00:00
regress-233.js Missing handle check. Triggers bug if the runtime stack overflows and it is detected by a global regexp. 2009-02-13 09:40:15 +00:00
regress-244.js Fix a number of tests that incorrectly used assertUnreachable. 2011-05-31 08:08:42 +00:00
regress-246.js Change dos line endings to unix line endings in a number of mjsunit test files. 2010-08-09 12:21:50 +00:00
regress-253.js Fixed issue 253. No longer assuming that the target of a property lookup is a JSObject. 2009-03-04 11:57:24 +00:00
regress-254.js Add regression test case for http://crbug.com/18639 which 2009-09-08 07:22:35 +00:00
regress-259.js Reapply r1434 and port to ARM. 2009-03-06 14:18:03 +00:00
regress-260.js Work around issue 260 for now by disabling duplication of the loop 2009-03-09 14:12:20 +00:00
regress-263.js Fix issue 263: 2009-03-09 10:51:57 +00:00
regress-265.js Fix issue 265 by handling extra statement state on the frame based on 2009-03-11 06:17:19 +00:00
regress-267.js Issue 267: Calls to arguments in eval-tainted function scope uses global object as receiver. 2009-03-10 12:28:34 +00:00
regress-269.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-279.js Reapply revisions 1432, 1433, 1469 and 1472 while fixing issue 279. 2009-03-23 07:27:47 +00:00
regress-284.js Fix issue 284. 2009-03-24 08:29:24 +00:00
regress-286.js Fix issue 286. Ensure frame elements are invalidated by 2009-03-24 12:42:28 +00:00
regress-294.js Fix issue 294 by ensuring that we don't lose the copy flag on memory 2009-03-31 14:01:25 +00:00
regress-312.js Change the function name collector to tolerate expressions that contain 2009-04-15 13:14:23 +00:00
regress-317.js Fix for Issue 317 - bug in string.replace(string, "$foo"). 2009-04-22 11:43:05 +00:00
regress-318.js Fix regression test by wrapping expression in a thunk^H^H^H^H^Hstring. 2009-04-22 17:44:28 +00:00
regress-326.js Fix Issue 326. Handle sorting of non-array objects correctly. 2009-04-27 11:16:59 +00:00
regress-334.js Implement correct checking for inherited readonliness on assignment. 2012-06-01 10:51:36 +00:00
regress-341.js Fix for issue 341. In the stub for instanceof, we could try to read 2009-05-12 11:40:14 +00:00
regress-345.js Fix issue 345 by avoiding duplicates in the list of escaping labels 2009-07-15 08:57:25 +00:00
regress-349.js Fix for issue 349: Make initial boundary check for BM text search. 2009-05-19 09:01:03 +00:00
regress-351.js Fix for issue 351 - lastIndexOf. 2009-05-26 15:42:06 +00:00
regress-386.js Fix issue 386, a bug in JSObject::ReplaceSlowProperty with constant transitions. 2009-06-22 07:41:15 +00:00
regress-392.js Fix issue 392 by disabling the TakeValue optimization for 2009-06-29 06:20:52 +00:00
regress-394.js Handle JavaScript accessors on the global object. 2009-07-01 11:20:33 +00:00
regress-396.js Add regression test case for issue 396. 2009-07-02 09:08:15 +00:00
regress-397.js Quickfix for DoMathPowHalf. 2011-12-02 13:16:49 +00:00
regress-399.js Cleanup of mjsunit.js code and make assertEquals more strict. 2011-04-15 11:35:36 +00:00
regress-406.js Fix ARM compiler crash in short-circuited boolean expressions. 2009-07-23 11:40:14 +00:00
regress-416.js Add safe handling of NaN to Posix platform-dependent time functions. 2009-08-04 09:41:18 +00:00
regress-475.js Fix issue 475 2009-10-20 12:13:31 +00:00
regress-483.js Fix issue with running some constructors having only this.x = ... assignments. 2009-10-23 12:18:47 +00:00
regress-485.js Reapply change to Pass undefined to JS builtins when called with 2011-05-30 13:49:22 +00:00
regress-486.js Fix bug 486, Cyrillic character ranges in case independent regexps. 2009-11-06 11:15:20 +00:00
regress-490.js Don't use string slices when processing RexExp replace (re-apply r3153) 2009-11-02 12:21:43 +00:00
regress-491.js Fix issue 491: constantpool dump violates ARM debugger assertion for return point 2009-11-04 14:45:50 +00:00
regress-492.js Allow lazy compilation (and thus optimisation) of functions inside eval. 2012-12-07 10:35:50 +00:00
regress-496.js Fix case where we treat an unaliased call to eval as an aliased call 2009-11-05 11:19:37 +00:00
regress-502.js Fix inline constructor code bailout. 2009-11-11 09:00:09 +00:00
regress-503.js Fix bug 503: undefined <= undefined should return false on ARM. 2009-11-16 14:12:27 +00:00
regress-515.js Fix crash in string replace with regexp. If the suffix of the subject 2009-11-18 18:48:04 +00:00
regress-524.js Extend the maximum size map space 2009-12-17 08:53:18 +00:00
regress-526.js Fix bug in the fast compiler's object literal code 2009-11-26 21:13:20 +00:00
regress-540.js The toplevel code generator assumed that declarations did not shadow 2009-12-07 13:31:47 +00:00
regress-545.js Fix for issue 545: don't reuse this VariableProxy. 2009-12-08 09:43:51 +00:00
regress-580.js Update V8 to version 3.0 (re-land r5920). 2010-12-07 11:31:57 +00:00
regress-581.js Fix Array.prototype.concat when exceeding array size limit. 2013-04-05 15:12:59 +00:00
regress-603.js Make RegExp objects not callable. 2011-05-26 07:35:09 +00:00
regress-612.js Normalize the object before updating getter/setter info. 2010-02-17 06:53:19 +00:00
regress-618.js Remove the optimized construct stub. 2013-06-05 08:43:25 +00:00
regress-619.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-634.js Fix stack tweaking in array allocation 2010-03-05 13:43:53 +00:00
regress-636.js Correct handling of adding a string and a smal integer 2010-03-09 09:40:35 +00:00
regress-641.js Fix treatment of const variables in assigned variable analysis. 2010-03-12 10:20:31 +00:00
regress-643.js Fix bug in assigned variables analysis. 2010-03-12 13:12:08 +00:00
regress-646.js Don't generate inline constructors if this.__proto__ is assigned. 2010-03-17 13:23:53 +00:00
regress-675.js Reapply load ICs for nonexistent properties. 2010-04-15 11:25:41 +00:00
regress-681.js Add missing smi check in IC for nonexistent properties. 2010-04-20 10:20:39 +00:00
regress-685.js Fix bug in KeyedLoadIC generic stub where signed instead of unsigned 2010-04-23 12:57:41 +00:00
regress-687.js Change Object.defineProperty to accept undefined as getters and setters and to correctly accept overriding an accessor with a data property. 2010-12-16 12:21:08 +00:00
regress-696.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-697.js Fixed issue 619 allowing Object.create to be called with a function. 2010-05-09 08:43:59 +00:00
regress-712.js Fixes issue 712 causing non-configurable accessors to be overwritable by using 2010-05-25 06:25:27 +00:00
regress-720.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-728.js Add regression tests for issues 728, 732 2010-06-07 10:54:42 +00:00
regress-732.js Add regression tests for issues 728, 732 2010-06-07 10:54:42 +00:00
regress-747.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-752.js Make RegExp objects not callable. 2011-05-26 07:35:09 +00:00
regress-753.js Extend test coverage for JSON.stringify's slow path. 2013-03-20 14:07:30 +00:00
regress-754.js Fixes bug in Array.prototype.lastIndexOf when called with null or undefined as fromIndex argument. (fixes issue 754). 2010-06-25 09:28:38 +00:00
regress-760-1.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-760-2.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-784.js Fix error in optimized x.apply(y, arguments) code generation on ARM. Fixes issue 784. Adds regression test. 2010-07-28 12:50:27 +00:00
regress-794.js Ensure that bound functions does not have a prototype (fixes issue 794) 2011-06-15 10:47:37 +00:00
regress-798.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-806.js Fix issue 806. 2010-08-02 09:14:44 +00:00
regress-815.js ARM: Ensure that we are not in a spilled scope when calling 2010-08-16 11:43:30 +00:00
regress-842.js Fixes bug in Object.freeze and Object.seal causing them to misbehave when Array.prototype has changed. 2010-08-26 08:35:49 +00:00
regress-851.js Fix regress-851.js to use assertNull instead of assertFalse. 2010-08-27 13:23:14 +00:00
regress-857.js make Date.parse properly handle TZ offsets 2010-09-10 07:00:28 +00:00
regress-874.js Fix getOwnPropertyDescriptor() support for index properties. 2010-09-23 11:25:01 +00:00
regress-900.js Allow getters and setters on JSArray elements. 2011-01-04 13:59:34 +00:00
regress-918.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-927.js Add check for overflow after MUL operations in side-effect free int32 expressions. 2010-11-09 19:32:49 +00:00
regress-931.js Change the order of evaluation of sub-expressions for keyed call 2010-11-17 13:59:07 +00:00
regress-944.js make DateParser::TimeComposer handle 1-2 digits millisecond values 2010-11-26 11:48:35 +00:00
regress-955.js Don't allow whitespace after sign characters in parseInt. 2011-05-03 07:11:17 +00:00
regress-962.js Introduce runtime function %OptimizeFunctionOnNextCall to manually trigger optimization. 2011-04-11 13:24:50 +00:00
regress-969.js Rename regression test and reenable disabled test. 2010-12-13 16:52:04 +00:00
regress-974.js Fix issue 974. 2010-12-15 16:14:29 +00:00
regress-982.js Fix issue 982. 2010-12-15 14:35:46 +00:00
regress-992.js Fix bugs 992, 1083 and 1092 2011-02-03 19:29:10 +00:00
regress-995.js A number of instructions use GVN but do not provide a comparison 2010-12-16 15:40:02 +00:00
regress-1015.js Avoid calling inherited setters when creating object literals and their boilerplates. 2011-01-06 14:00:50 +00:00
regress-1017.js Fix bug that happens when the first non-ASCII character of a literal is at a power-of-two position. 2011-01-04 11:25:59 +00:00
regress-1020.js Fix bug in instanceof stub 2011-01-05 14:19:12 +00:00
regress-1060.js Fix an assertion failure in the full code generator. 2011-01-19 15:26:54 +00:00
regress-1079.js Introduce runtime function %OptimizeFunctionOnNextCall to manually trigger optimization. 2011-04-11 13:24:50 +00:00
regress-1083.js Fix bugs 992, 1083 and 1092 2011-02-03 19:29:10 +00:00
regress-1092.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-1099.js Replace long running loops by OptimizeFunctionOnNextCall in some tests that are often timing out on ARM. 2011-05-03 13:53:08 +00:00
regress-1103.js Make sure that we never call prevent extension on the global proxy, 2011-02-08 12:41:16 +00:00
regress-1104.js Fix a possible duplicate AST ID for deoptimization. 2011-02-08 14:00:22 +00:00
regress-1106.js Introduce runtime function %OptimizeFunctionOnNextCall to manually trigger optimization. 2011-04-11 13:24:50 +00:00
regress-1107.js Propagate exceptions thrown when setting elements. 2011-02-08 19:42:14 +00:00
regress-1110.js Don't preparse large files to find boundaries of lazy functions. 2011-11-25 09:36:31 +00:00
regress-1112.js Fix issues with using defineProperty on the global proxy object. 2011-02-08 16:31:58 +00:00
regress-1117.js Avoid wrong imul deopt on ia32 and x64 (fixes v8 bug 2339). 2012-09-26 09:57:30 +00:00
regress-1118.js Fix many tests that try to force an OSR by checking OptimizationStatus() to instead check OptimizationCount(). 2013-07-30 09:28:55 +00:00
regress-1119.js Put new global var semantics behind a flag until WebKit tests are cleaned up. 2012-04-20 13:35:09 +00:00
regress-1120.js Make sure that we do not call is_extensible on the global proxy. 2011-02-08 13:09:07 +00:00
regress-1121.js Check if Array.prototype.__proto__ has been reset to null. 2011-02-08 19:56:44 +00:00
regress-1122.js Turn Flags into a uint32_t typedef. 2013-03-19 13:11:49 +00:00
regress-1125.js Use GC-safe version when setting elements. 2011-02-09 11:38:10 +00:00
regress-1126.js Fix incorrect asserts in scanner. 2011-02-09 14:16:25 +00:00
regress-1129.js Fix typo in ASSERT in object-verifier for RegExp. 2011-02-10 16:43:01 +00:00
regress-1130.js Fix a number of tests that incorrectly used assertUnreachable. 2011-05-31 08:08:42 +00:00
regress-1131.js Bailout from PrepareSlowElementsForSort when hiting a key outside of smi-range. 2011-02-10 12:33:34 +00:00
regress-1132.js Fix a number of tests that incorrectly used assertUnreachable. 2011-05-31 08:08:42 +00:00
regress-1145.js Clear exceptions set during attempts to lazily optimize. 2011-02-25 11:17:31 +00:00
regress-1146.js Fix a potential crash bug in keyed calls for non-string keys. 2011-02-14 13:13:41 +00:00
regress-1149.js Fix a duplicate AST ID recorded for for/in. 2011-02-14 12:51:25 +00:00
regress-1150.js Add support for the global object in Object.keys (fixes issue 1150) 2011-02-14 07:49:13 +00:00
regress-1151.js Fix second half of issue 1151, the first change (r6765) only fixed FunctionGetPrototype, not FunctionSetPrototype. 2011-02-22 12:27:36 +00:00
regress-1156.js Make sure we always have room for patching the reloc info during lazy deoptimization (fixes issue 1156). 2011-02-15 14:36:12 +00:00
regress-1160.js Fix a number of tests that incorrectly used assertUnreachable. 2011-05-31 08:08:42 +00:00
regress-1166.js Introduce runtime function %OptimizeFunctionOnNextCall to manually trigger optimization. 2011-04-11 13:24:50 +00:00
regress-1167.js Introduce runtime function %OptimizeFunctionOnNextCall to manually trigger optimization. 2011-04-11 13:24:50 +00:00
regress-1170.js Put new global var semantics behind a flag until WebKit tests are cleaned up. 2012-04-20 13:35:09 +00:00
regress-1172-bis.js Fix a number of tests that incorrectly used assertUnreachable. 2011-05-31 08:08:42 +00:00
regress-1172.js Use [[DefineOwnProperty]] to put 'constructor' field on the protoype object. 2011-02-18 10:53:38 +00:00
regress-1174.js Add more generic version of reloc info padding to ensure enough space for reloc patching during deoptimization (fixes issue 1174). 2011-02-22 12:28:33 +00:00
regress-1176.js Fix for bug http://code.google.com/p/v8/issues/detail?id=1176. 2011-02-22 17:20:25 +00:00
regress-1181.js ARM: Fix DoubleToI. 2011-02-24 10:07:35 +00:00
regress-1184.js Properly reset external catcher if exception couldn't be externally caught. 2011-02-23 06:55:47 +00:00
regress-1207.js Add lazy deoptimization environment to instanceof by marking it as a call. 2011-03-01 15:37:24 +00:00
regress-1209.js When checking number of parameters in MakeCrankshaft code don't forget about receiver. 2011-02-28 13:20:10 +00:00
regress-1210.js Replace loops by OptimizeFunctionOnNextCall in regress-1085 and regress-1210. 2011-05-06 09:10:28 +00:00
regress-1213.js Do not allow non-configurable global properties to be made configurable (fixes issue 1213). 2011-03-01 08:09:17 +00:00
regress-1215.js Add regression test for issue 1215, expand regression test for issue 1447. 2011-09-06 07:43:51 +00:00
regress-1217.js Fix source property of empty RegExp objects. 2012-04-23 13:59:43 +00:00
regress-1218.js Remove Error.prototype.toStrings prototype property. 2011-02-28 13:29:05 +00:00
regress-1229.js Fix compile with debuggersupport=off. 2012-03-07 10:57:36 +00:00
regress-1233.js Fix a problem where Object.getOwnPropertyDescriptor and related functions unintentionally called toString on the values of an object's properties. Fixes issue 1233. 2011-03-11 13:57:20 +00:00
regress-1236.js Fix bug in X64 RegExpExec stub. 2011-03-08 14:15:25 +00:00
regress-1237.js Introduce runtime function %OptimizeFunctionOnNextCall to manually trigger optimization. 2011-04-11 13:24:50 +00:00
regress-1240.js Follow Safari on not throwing when __defineGetter__ fails. 2011-03-15 14:19:18 +00:00
regress-1246.js Fix "illegal access" when calling parseInt with a radix that is not a smi. 2011-06-28 12:31:42 +00:00
regress-1257.js Make HDeoptimize to explicitly use environment values. 2011-03-17 12:22:49 +00:00
regress-1278.js ARM: Check for minus zero when converting binary operation result to smi 2011-03-29 07:43:27 +00:00
regress-1309.js 1309 fix 2011-04-06 16:22:06 +00:00
regress-1323.js Fix load/store of external float arrays on ARM 2011-04-12 15:20:26 +00:00
regress-1337.js Make throw inlineable only if the exception is inlineable. 2011-04-20 09:15:52 +00:00
regress-1351.js Be more discriminating about uses of the arguments object in optimized code. 2011-05-02 11:35:51 +00:00
regress-1355.js Change calls to undefined property setters to not throw (fixes issue 1355). 2011-05-25 08:37:38 +00:00
regress-1360.js Do not pass the global object as the receiver to strict-mode and 2011-06-30 12:29:19 +00:00
regress-1365.js Fix receiver for calls to strict-mode and builtin functions that are 2011-05-31 07:57:22 +00:00
regress-1369.js Only send null or undefined as receiver for es5 natives, not generally 2011-05-13 07:26:44 +00:00
regress-1383.js Do not allow invocation of ArrayBuffer and array buffer views' constructors as functions. 2013-06-27 07:42:08 +00:00
regress-1387.js Change strict mode poison pill to be the samme type error function (fixes issue 1387). 2011-05-24 11:07:06 +00:00
regress-1389.js Fix error in postfix ++ in Crankshaft. 2011-05-17 11:41:59 +00:00
regress-1401.js Add regression test for issue 1401 2011-05-23 13:03:45 +00:00
regress-1403.js Handle changes to the Object prototype in fast handling of arrays 2011-05-24 12:28:10 +00:00
regress-1412.js Update apply with arguments optimization for strict mode functions and builtins. 2011-05-31 10:38:41 +00:00
regress-1415.js Fix issue 1415 - allow surrogate pair codes in decodeURIComponent. 2011-10-04 07:15:07 +00:00
regress-1419.js Ensure that the length property of bound functions are actual unique 2011-08-03 12:44:17 +00:00
regress-1423.js Fix a bug in Lithium environment iteration. 2011-06-06 11:30:17 +00:00
regress-1434.js Add boolean flag to HChange and LNumberUntagD to not convert undefined to NaN. 2011-06-09 12:27:28 +00:00
regress-1436.js Fix Array.prototype.{reduce,reduceRight} to pass undefined as receiver for strict mode callbacks. 2011-06-09 09:05:15 +00:00
regress-1447.js Add regression test for issue 1215, expand regression test for issue 1447. 2011-09-06 07:43:51 +00:00
regress-1472.js Refix issue 1472. The previous fix worked for the example in the bug 2011-06-17 08:01:12 +00:00
regress-1476.js Add missing branches in code generated for LModI with power-of-2 divisor. 2011-06-15 19:57:39 +00:00
regress-1491.js Correctly handle non-array receivers in Array length setter. 2011-06-21 08:07:45 +00:00
regress-1513.js Fix problem with arguments object ICs not checking for dictionary mode elements. 2011-06-30 14:56:06 +00:00
regress-1521.js Remove redundant allow-natives flag from CompilationInfo. 2011-10-17 09:02:26 +00:00
regress-1523.js Fix debug break on binary boolean operators 2011-07-06 10:16:57 +00:00
regress-1528.js Fix a bug in with and catch context allocation. 2011-07-04 09:34:47 +00:00
regress-1529.js Fix bug 1529: check for NULL handle in v8::TryCatch::StackTrace. 2011-07-04 13:29:56 +00:00
regress-1530.js Fix handling of foreign callbacks in DefineOwnProperty. 2011-12-20 08:49:51 +00:00
regress-1531.js Fix a bug in for/in iteration of arguments objects. 2011-07-08 07:31:48 +00:00
regress-1546.js Fix bug in scanner. 2011-08-05 11:21:04 +00:00
regress-1548.js Make arguments and caller always be null on native functions (fixes issue 1548 and issue 1643). 2011-09-01 11:09:11 +00:00
regress-1560.js Add map check for COW elements to crankshaft array handling code. 2011-07-14 14:45:20 +00:00
regress-1563.js Further extend TypedArray support in d8: 2012-06-28 16:29:53 +00:00
regress-1582.js Check for phi-uses of arguments object before eliminating dead phi's. 2011-08-02 09:32:28 +00:00
regress-1583.js Fix a bug in named getter/setter compilation. 2011-08-09 12:43:08 +00:00
regress-1586.js Fix DebugEvaluate crash within a catch in a function without local context. 2011-08-05 12:00:57 +00:00
regress-1591.js Do not use user-defined __lookupGetter__ when generating stack trace. 2012-07-11 11:35:19 +00:00
regress-1592.js Fix fun.apply(receiver, arguments) optimization. 2011-08-10 16:05:17 +00:00
regress-1620.js Make scanner handle invalid unicode escapes in identifiers correctly. 2011-08-18 12:47:23 +00:00
regress-1624-strict.js Fix declarations escaping global strict eval. 2012-03-15 13:02:21 +00:00
regress-1624.js Fix declarations escaping global strict eval. 2012-03-15 13:02:21 +00:00
regress-1625.js Use InternalArray in Object.defineProperties to avoid issues with overwriten properties on Array.prototype 2011-08-18 08:39:06 +00:00
regress-1639-2.js Modify two regression tests to actually fail when failing. 2012-05-03 11:52:56 +00:00
regress-1639.js Modify two regression tests to actually fail when failing. 2012-05-03 11:52:56 +00:00
regress-1647.js Introduce local function declarations in Crankshaft and fix issue 1647. 2011-08-31 13:26:08 +00:00
regress-1650.js Do constant function check earlier in TryCallApply and ensure correct environment for deopt. 2011-09-01 10:33:59 +00:00
regress-1692.js Clean-up refactoring to eliminate GetLocalElementKind. 2012-11-16 13:28:34 +00:00
regress-1708.js Fix transferal of marking bits on array trimming. 2011-09-22 13:03:22 +00:00
regress-1711.js Fixed string.split: always convert non-regexp separator to string. 2011-09-22 08:18:58 +00:00
regress-1748.js Fix bug in x64 RegExp detecting start of string. 2011-10-03 10:31:01 +00:00
regress-1757.js Fixing issue 1757 (string slices of external strings). 2011-10-10 16:09:03 +00:00
regress-1790.js Fix sequence of element access in array builtins. 2012-02-17 10:06:26 +00:00
regress-1849.js Implement tracking and optimizations of packed arrays 2012-05-23 14:24:29 +00:00
regress-1853.js Add support for //# sourceURL similar to deprecated //@ sourceURL one. 2013-05-29 12:40:21 +00:00
regress-1878.js Implement tracking and optimizations of packed arrays 2012-05-23 14:24:29 +00:00
regress-1898.js Fixing issue 1898 (using HChange outside the insert-representation-changes phase). 2012-01-13 07:48:44 +00:00
regress-1924.js Fix handling of 'c: if (0) break c; else ()' where a parser optimization 2012-02-08 08:40:11 +00:00
regress-1945.js Ensure using byte registers for byte instructions on ia32 and x64. 2012-02-16 12:48:02 +00:00
regress-1973.js Fix wrapping of receiver for non-strict callbacks. 2012-03-14 17:42:19 +00:00
regress-1980.js Remove 'type' and 'arguments' properties from Error object. 2012-11-14 09:14:47 +00:00
regress-2027.js Fix the return type of the date set methods. 2012-03-26 10:13:03 +00:00
regress-2030.js Fix polymorphic load on named fields. 2012-03-27 10:42:38 +00:00
regress-2032.js Fix broken test. 2012-03-27 09:10:58 +00:00
regress-2034.js Fix hidden properties to ignore [[Extensible]]. 2012-04-02 08:26:30 +00:00
regress-2045.js Ensure that arguments object is materialized when deoptimizing from inlined function. 2012-03-30 13:22:39 +00:00
regress-2054.js Fix rewriter to not treat throw as an expression. 2012-04-04 13:41:05 +00:00
regress-2055.js Fix array boilerplate object transitioning. 2012-04-03 16:54:28 +00:00
regress-2056.js Check for NaN in inlined versions of Math.min, Math.max. 2012-04-05 13:24:52 +00:00
regress-2058.js Ensure that a call to String.prototype.match with a 2012-04-10 10:42:25 +00:00
regress-2071.js Disable optimization for functions that have scopes that cannot be reconstructed from the context chain. 2012-05-18 13:06:16 +00:00
regress-2073.js Make embedded maps in optimized code weak. 2013-01-24 11:55:05 +00:00
regress-2110.js Fixed corner cases in truncation behavior when storing to TypedArrays. 2012-04-30 15:17:59 +00:00
regress-2119.js Correctly throw reference error in strict mode with ICs disabled. 2012-06-25 13:28:11 +00:00
regress-2132.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-2153.js Fixed JSObject::SetPropertyForResult (issue 2153) 2012-05-29 12:42:22 +00:00
regress-2156.js Fix performance regression caused by r11202. 2012-06-13 11:58:18 +00:00
regress-2163.js ClearNonLiveTransitions has to hold on to non-map values. 2012-06-05 11:36:57 +00:00
regress-2170.js Fix EnsureCanContainElements to properly handle double values. 2012-06-11 08:41:48 +00:00
regress-2172.js Add missing string length check in regexp engine. 2012-06-14 13:59:48 +00:00
regress-2185-2.js Speed up quicksort test to avoid timeouts on simulators. 2012-07-31 13:36:24 +00:00
regress-2185.js allocation-site-info.js broken on arm with new changes. Reverting to previous version until diagnosed. 2013-01-21 16:15:08 +00:00
regress-2186.js Fix handling of numbers in SameValue method. 2012-06-18 14:21:29 +00:00
regress-2193.js Fix sharing of literal boilerplates for optimized code. 2012-06-22 13:55:15 +00:00
regress-2219.js Fix unhandlified code calling Harmony Proxy traps. 2012-07-06 11:34:22 +00:00
regress-2225.js Fix inline constructors for Harmony Proxy prototypes. 2012-07-10 11:28:33 +00:00
regress-2226.js After transitioning to constant function, return the constant function as result of the assignment. 2012-07-10 09:31:30 +00:00
regress-2234.js Fix transcendental cache on ARM in optimized code. 2012-07-16 09:44:59 +00:00
regress-2243.js Simplify implementation of assignment-to-const checks. 2012-12-18 12:00:50 +00:00
regress-2249.js Fix bootstrapping without snapshot and low GC interval. 2012-07-23 16:18:25 +00:00
regress-2250.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-2261.js Fix arguments object materialization during deopt. 2012-09-12 12:28:42 +00:00
regress-2263.js Fix Array.prototype.join evaluation order. 2012-11-16 12:45:23 +00:00
regress-2273.js Do not implicitly convert non-object receivers for strict mode functions. 2013-04-05 11:57:02 +00:00
regress-2284.js Remove prototype of global builtins object. 2012-08-13 15:34:49 +00:00
regress-2285.js Check for function in %_CallFunction. 2012-08-13 12:11:26 +00:00
regress-2286.js Move regress-2286.js where it belongs 2012-09-20 09:55:19 +00:00
regress-2289.js Ensure capacity when adding parts in String.replace. 2012-08-14 11:33:12 +00:00
regress-2291.js Fix bug in compare IC. BUG=2291 2012-08-15 15:08:42 +00:00
regress-2294.js Fix rounding in Uint8ClampedArray setter. 2012-08-22 14:27:11 +00:00
regress-2296.js Add input check to %DebugSetScriptSource. 2012-08-17 15:21:15 +00:00
regress-2315.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-2318.js Change regress-2318 to trigger more quickly and reliably. 2012-09-17 13:21:59 +00:00
regress-2322.js Make sure that names of temporaries do not clash with real variables. 2012-10-05 12:47:34 +00:00
regress-2326.js Fix caching of optimized code for OSR. 2012-09-14 10:41:31 +00:00
regress-2336.js Fix misplaced assert in heap.cc. 2012-09-17 11:38:24 +00:00
regress-2339.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-2346.js x64 and ARM: Fix issue 2346 (order of operations in keyed store 2012-09-25 13:35:42 +00:00
regress-2373.js Fixed error introduced in r12761. 2012-10-18 18:43:19 +00:00
regress-2374.js Extend test coverage for JSON.stringify's slow path. 2013-03-20 14:07:30 +00:00
regress-2398.js Make formatting error message side-effect-free. 2012-11-12 10:33:20 +00:00
regress-2410.js When using an Object as a set in Object.getOwnPropertyNames, null out the proto 2012-11-16 09:32:39 +00:00
regress-2416.js Fix corner case in x64 compare stubs. 2012-11-20 15:57:10 +00:00
regress-2419.js Check for read-only-ness when preparing for array sort. 2013-01-04 15:24:47 +00:00
regress-2433.js CopyPackedSmiToDoubleElements should fill the FixedDoubleArray with holes 2012-11-29 08:34:19 +00:00
regress-2437.js Fix additional spec violations wrt RegExp.lastIndex. 2013-01-25 10:53:26 +00:00
regress-2438.js Fix spec violations related to regexp.lastIndex 2012-12-05 12:32:25 +00:00
regress-2441.js Make __proto__ a foreign callback on Object.prototype. 2013-02-26 10:46:00 +00:00
regress-2443.js Fix spec violations in methods of Number.prototype. 2012-12-07 10:20:35 +00:00
regress-2444.js Iterate through all arguments for side effects in Math.min/max. 2012-12-06 13:13:38 +00:00
regress-2451.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-2470.js Restore Function()'s expected string representation. 2013-03-08 11:47:20 +00:00
regress-2489.js Fix arguments materialization for inlined apply(). 2013-01-16 09:25:45 +00:00
regress-2499.js Fix pattern detection for replacing shifts by rotation. 2013-01-22 13:55:22 +00:00
regress-2537.js Refactoring and cleanup of control instructions 2013-07-05 10:40:14 +00:00
regress-2539.js Fix f.apply() optimization when declared arguments are mutated. 2013-02-14 15:12:49 +00:00
regress-2564.js Stack trace API: poison stack frames below the first strict mode frame. 2013-03-28 10:40:07 +00:00
regress-2565.js Add workaround for redefinition of __proto__ property. 2013-03-04 17:53:40 +00:00
regress-2566.js Properly handle misses for StoreArrayLengthStub on ia32 and x64 2013-03-05 16:31:11 +00:00
regress-2568.js Fix Array.length, String.length and Function.prototype LoadICs on x64. 2013-03-06 18:19:35 +00:00
regress-2570.js Extend test coverage for JSON.stringify's slow path. 2013-03-20 14:07:30 +00:00
regress-2593.js Add extra flag for load-ic stubs in code cache. 2013-04-04 08:29:25 +00:00
regress-2594.js Fix scoping of function declarations in eval inside non-trivial local scope 2013-08-23 09:25:37 +00:00
regress-2595.js Let ComputeTarget fail if it skips over NORMAL objects. 2013-04-09 16:38:51 +00:00
regress-2596.js Canonicalize NaNs on store to Fast(Float|Double) arrays 2013-03-28 13:30:16 +00:00
regress-2606.js Make __proto__ a real JavaScript accessor property. 2013-04-04 12:10:23 +00:00
regress-2612.js Tune mjsunit/regress/regress-2612. 2013-10-24 13:07:16 +00:00
regress-2618.js Fix many tests that try to force an OSR by checking OptimizationStatus() to instead check OptimizationCount(). 2013-07-30 09:28:55 +00:00
regress-2624.js Fix OOB write in --print-code. 2013-04-15 15:19:51 +00:00
regress-2646.js Adds EXTERNAL_DOUBLE_ARRAY to a list of instance types 2013-04-23 17:02:09 +00:00
regress-2653.js Do not emit Simulates in HandlePolymorphicElementAccess. 2013-04-23 15:28:44 +00:00
regress-2671-1.js Fix environment in HOptimizedGraphBuilder::VisitCountOperation. Follow-up for r14584. 2013-05-08 14:58:06 +00:00
regress-2671.js Do not change environment between simulate and scope with no observable side-effects in HandlePropertyAssignment. 2013-05-08 07:40:28 +00:00
regress-2681.js Don't flush code for generator functions. 2013-05-13 17:36:26 +00:00
regress-2686.js Function constructor should avoid String.prototype methods 2013-05-15 10:52:06 +00:00
regress-2690.js Regexp parser: reset flag after scanning ahead for capture groups. 2013-05-27 10:53:37 +00:00
regress-2691.js Use keyed-call inline caches in delegating yield 2013-06-13 10:18:28 +00:00
regress-2711.js Don't use StoreIC_ArrayLength on frozen arrays 2013-07-14 22:03:46 +00:00
regress-2717.js Fix re-initialization of existing double field. 2013-06-10 11:55:47 +00:00
regress-2790.js Lower kInitialMaxFastElementArray constant to 95K 2013-08-26 13:04:05 +00:00
regress-2813.js Regression test for issue 2813 / r16008 2013-08-02 12:17:19 +00:00
regress-2829.js Fix hidden properties on object with frozen prototype. 2013-08-22 13:51:32 +00:00
regress-2836.js Fix overflow check computation for Smi Phis 2013-08-13 18:18:24 +00:00
regress-2843.js Delete HAbnormalExit. It does more harm than good. 2013-08-28 15:00:30 +00:00
regress-2855.js Reland "Clean up after r16292 (disable optimization for StringWrappers)." 2013-09-12 16:17:58 +00:00
regress-2931.js Do not look up ArrayBuffer on global object in typed array constructor. 2013-10-15 11:27:12 +00:00
regress-2980.js Add missing negative dictionary lookup to NonexistentHandlerFrontend 2013-11-04 14:14:09 +00:00
regress-2984.js Fix y-umlaut to uppercase. 2013-11-07 09:08:34 +00:00
regress-2987.js Make HCapturedObjects non-deletable for DCE. 2013-11-07 16:07:19 +00:00
regress-2988.js Fix invalid reuse of weak global handle in GetScriptWrapper. 2013-11-11 16:27:36 +00:00
regress-3010.js Match max property descriptor length to corresponding bit fields 2013-11-18 11:44:06 +00:00
regress-45469.js Fix bug in regexp exec with global regexps. 2010-06-25 07:00:29 +00:00
regress-52801.js Update V8 to version 3.0 (re-land r5920). 2010-12-07 11:31:57 +00:00
regress-58740.js Fix bug in cache handling of lastIndex on global regexps. 2010-10-14 08:51:20 +00:00
regress-70066.js Merge arguments branch to bleeding edge (second try). 2011-06-16 14:12:58 +00:00
regress-71647.js Require typed input representation for HTypeof hydrogen instruction. 2011-02-02 09:52:57 +00:00
regress-78270.js In LCodeGen::DoDeferredLInstanceOfKnownGlobal emit safepoint with registers for the call to stub. 2011-04-07 13:32:45 +00:00
regress-82769.js Add regression test for http://crbug.com/82769 2011-05-18 12:46:21 +00:00
regress-84234.js Fix traversal of the map transition tree to take the prototype 2011-06-03 14:48:09 +00:00
regress-85177.js Fix bug with GVN on array loads. 2011-06-09 11:15:03 +00:00
regress-88591.js Fix a potential crash in const declaration. 2011-07-11 14:07:12 +00:00
regress-88858.js Allow JSObject::PreventExtensions to work for arguments objects. 2011-07-11 06:48:19 +00:00
regress-91008.js Properly handle FixedDoubleArrays in sort() 2011-08-02 14:05:11 +00:00
regress-91010.js Properly handle FastDoubleArrays in Runtime_MoveArrayContents 2011-08-02 09:28:55 +00:00
regress-91013.js Ensure that GenerateStoreFastDoubleElement returns stored value on all paths. 2011-08-02 13:36:38 +00:00
regress-91120.js Revert "Revert "Fix a bug in scope analysis."" 2011-08-03 09:10:35 +00:00
regress-91787.js Avoid infinite recursion for unterminated non-ASCII JSON string literals. 2011-08-05 12:55:29 +00:00
regress-94425.js Fix bug in Page::GetRegionMaskForSpan. 2011-09-06 11:24:48 +00:00
regress-94873.js Initialize pre-allocated fields of JSObject with undefined. 2011-09-20 10:06:23 +00:00
regress-95113.js Reland 10309: Ensure large Smi-only arrays don't transition to FAST_DOUBLE_ARRAY 2011-12-30 14:28:14 +00:00
regress-95485.js Fix a bug in abrupt exit from with or catch inside finally. 2011-09-07 09:21:44 +00:00
regress-95920.js Don't allow seal or element property re-definition on external arrays. 2011-09-09 14:30:00 +00:00
regress-96523.js Mark variables as being accessed from any inner scope, not only function scopes 2011-09-14 13:51:29 +00:00
regress-97116.js Ensure that non-optimized code objects are not flushed for inlined functions. 2011-12-08 16:07:07 +00:00
regress-97116b.js Fix %NeverOptimizeFunction runtime call. 2013-07-19 08:25:44 +00:00
regress-98773.js Fix preparation for sorting of external arrays. 2011-10-04 13:49:50 +00:00
regress-99167.js Add a regression test for an already fixed issue. 2011-10-10 10:46:27 +00:00
regress-100409.js Take loop side-effects into account when collecting side-effects on the path between two blocks. 2011-10-25 15:39:55 +00:00
regress-100702.js Fix handling of non-object receivers for array builtins. 2011-10-19 09:24:37 +00:00
regress-102153.js Set debug break slot at init of loop variable in a for loop. 2012-03-08 10:21:43 +00:00
regress-103259.js Fixing issue 103259. 2011-11-08 14:59:40 +00:00
regress-108296.js Avoid embedding new space objects into code objects in the lithium gap resolver. 2011-12-23 10:39:01 +00:00
regress-109195.js Adjust position recorded for call expressions. 2012-01-06 10:26:17 +00:00
regress-110509.js Ensure that LRandom restores rsi after call to the C function on x64. 2012-01-19 08:43:34 +00:00
regress-113924.js Fix crashing bugs in store-and-grow IC for double values. 2012-02-14 15:09:49 +00:00
regress-115100.js Fix crash bug in Hydrogen occurring with empty prototype chain. 2012-06-19 13:44:07 +00:00
regress-115452.js Put new global var semantics behind a flag until WebKit tests are cleaned up. 2012-04-20 13:35:09 +00:00
regress-117409.js Implement tracking and optimizations of packed arrays 2012-05-23 14:24:29 +00:00
regress-117794.js Ensure there is a smi check of the receiver for global load and call ICs. 2012-03-13 11:39:30 +00:00
regress-119429.js Adjust stack limit again to avoid overflow on 64 bit windows 2012-04-05 14:01:39 +00:00
regress-119609.js Untabify test/mjsunit/regress/regress-119609.js. 2012-04-12 20:29:48 +00:00
regress-119925.js Check double array bounds in HasElementImpl. 2012-03-25 14:21:51 +00:00
regress-120099.js Add missing regression test for r11173. 2012-03-28 15:17:14 +00:00
regress-121407.js Avoid double initialization of arrays. 2012-11-27 12:01:14 +00:00
regress-123512.js Fix fast array literals to ignore prototype chain. 2012-04-17 11:12:37 +00:00
regress-123919.js Fix missing GVN flag for new-space promotion. 2012-04-19 07:49:11 +00:00
regress-124594.js Fix deopted construct stub frame to contain code object. 2012-04-25 13:22:04 +00:00
regress-125515.js Ensure reload of elements pointer in StoreFastDoubleElement stub. 2012-05-02 09:58:42 +00:00
regress-126412.js Regexp: Fix overflow in min-match-length calculation. Crbug=126412. 2012-05-08 12:18:08 +00:00
regress-128018.js Always transition empty FAST_DOUBLE_ARRAYs on push 2012-05-15 16:17:53 +00:00
regress-128146.js Re-land: Use map transitions when defining accessor properties. 2012-05-24 10:40:24 +00:00
regress-131923.js Fix optimization of Unicode regexp with ASCII subject to respect repeat counts. 2012-06-11 11:18:04 +00:00
regress-131994.js Correctly resolve local var shadowing a context-allocated var in debugger. 2012-06-19 11:25:49 +00:00
regress-133211.js Make sure we don't leak map transitions from AccessorPairs to the Javascript world. 2012-06-19 10:58:15 +00:00
regress-133211b.js Fixing ClearNonLiveTransition bug in combination with AccessorPairs. 2012-06-19 13:16:39 +00:00
regress-136048.js Correctly advance the scanner when scanning unicode regexp flag. 2012-07-06 14:04:15 +00:00
regress-137768.js Add dependency to HLoadKeyed* instructions to prevent invalid hoisting 2012-07-23 13:59:24 +00:00
regress-143967.js Fixed Accessors::FunctionGetPrototype's proto chain traversal. 2012-10-08 12:58:46 +00:00
regress-145201.js Fix some corner cases in skipping native methods using caller. 2012-09-05 08:19:49 +00:00
regress-147497.js Sync laziness between BuildFunctionInfo and MakeFunctionInfo. 2013-01-15 10:16:52 +00:00
regress-148378.js Correctly initialize regexp global cache. 2012-09-12 15:26:43 +00:00
regress-155924.js Fix an error in a keyed lookup stub - HeapNumbers treated as strings. 2009-07-23 13:01:17 +00:00
regress-164442.js Fix x64 MathMinMax for negative untagged int32 arguments. 2012-12-21 17:52:00 +00:00
regress-165637.js Make the GC stress builder go green. 2013-02-06 13:21:28 +00:00
regress-166379.js Deopt on overflow in integer mod. 2012-12-19 12:01:22 +00:00
regress-166553.js Correctly handle negative codes in String.fromCharCode() 2012-12-18 12:37:57 +00:00
regress-171641.js Correctly set kCanBeDivByZero flag for HMathFloorOfDiv. 2013-01-23 15:58:49 +00:00
regress-173361.js Fix sloppy-mode 'const' under Harmony flag. 2013-07-15 14:12:20 +00:00
regress-201590.js Ensure UseRegisterAtStart not used with fixed temp/return register 2013-04-03 14:45:39 +00:00
regress-234101.js Do not emit double values at their use sites. 2013-04-23 13:08:10 +00:00
regress-235311.js Fix beyond-heap load on x64 Crankshafted StringCharFromCode 2013-04-29 14:34:24 +00:00
regress-237617.js Fix edge case in stack trace formatting. 2013-05-24 11:33:46 +00:00
regress-241344.js Fix unexpected elements transition in JSON.parse 2013-05-22 13:24:18 +00:00
regress-247688.js ARM: Ensure space for lazy deoptimization before calling IC. 2013-07-22 17:21:41 +00:00
regress-252797.js Turn on parallel recompilation for tests that assert optimization status. 2013-07-22 09:16:33 +00:00
regress-264203.js Fix Array index dehoisting. 2013-08-06 16:38:39 +00:00
regress-298269.js Do not add values to HGraph in Lithium. 2013-11-08 14:16:34 +00:00
regress-319120.js Fix overflow in TypedArray initialization function 2013-11-14 06:20:48 +00:00
regress-319722-ArrayBuffer.js Use mock ArrayBuffer allocator to avoid really allocating 1Gb. 2013-11-18 14:50:45 +00:00
regress-319722-TypedArrays.js Limit the size for typed arrays to MaxSmi. 2013-11-15 16:37:15 +00:00
regress-320532.js Bugfix: dependent code field in AllocationSite was keeping code objects alive even after context death. 2013-11-19 10:17:33 +00:00
regress-320948.js Fixed crashes exposed though fuzzing. 2013-11-19 16:41:07 +00:00
regress-588599.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-662254.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-666721.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-667061.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-670147.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-674753.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-676025.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-678525.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-682649.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-734862.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-737588.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-780423.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-799761.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-806473.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-842017.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-874178.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-875031.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-877615.js Fix issue 1361 - Implement ES5 Array.prototype.toString. 2011-10-05 07:08:23 +00:00
regress-892742.js Make line-terminators inside multi-line comments count. 2011-06-17 07:23:07 +00:00
regress-900055.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-900966.js Create specialized code stubs for PixelArray loads. 2011-02-03 12:50:50 +00:00
regress-925537.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-937896.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-990205.js Make invalid break/continue statements an early syntax error. 2011-01-17 09:36:10 +00:00
regress-992733.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-996542.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-998565.js Changed the debugger API to allow only one debug event listener to be registered. The public API now only has SetDebugEventListener instead of AddDebugEventListener and RemoveDebugEventListener. 2009-02-03 07:59:12 +00:00
regress-1030466.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1036894.js Make invalid break/continue statements an early syntax error. 2011-01-17 09:36:10 +00:00
regress-1039610.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1050043.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1062422.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1066899.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1081309.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-1102760.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1110164.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1112051.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1114040.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1134697.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1170187.js Changed the debugger API to allow only one debug event listener to be registered. The public API now only has SetDebugEventListener instead of AddDebugEventListener and RemoveDebugEventListener. 2009-02-03 07:59:12 +00:00
regress-1173979.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1175390.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1177518.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1177809.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1178598.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1182832.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1187524.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1199401.js X64: Convert smis to holding 32 bits of payload. 2009-10-08 12:36:12 +00:00
regress-1199637.js Implement correct checking for inherited readonliness on assignment. 2012-06-01 10:51:36 +00:00
regress-1200351.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1201933.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1203459.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1207276.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1213516.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1213575.js Change global const handling to silently ignore redeclarations 2011-09-15 12:00:30 +00:00
regress-1215653.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1254366.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1327557.js Fix a number of tests that incorrectly used assertUnreachable. 2011-05-31 08:08:42 +00:00
regress-1346700.js Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
regress-1439135.js Fix bug 1439135 (slicedstring on constring not flat) 2008-10-21 08:08:17 +00:00
regress-1493017.js Simplify the map collection regression test. This test is the minimal 2009-03-10 07:23:22 +00:00
regress-1919169.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-2249423.js Add a regression test that exposes a stack corruption problem. 2009-11-13 13:58:48 +00:00
regress-3006390.js Update V8 to version 3.0 (re-land r5920). 2010-12-07 11:31:57 +00:00
regress-3185905.js Update V8 to version 3.0 (re-land r5920). 2010-12-07 11:31:57 +00:00
regress-3199913.js Update V8 to version 3.0 (re-land r5920). 2010-12-07 11:31:57 +00:00
regress-3218530.js Update V8 to version 3.0 (re-land r5920). 2010-12-07 11:31:57 +00:00
regress-3218915.js Introduce runtime function %OptimizeFunctionOnNextCall to manually trigger optimization. 2011-04-11 13:24:50 +00:00
regress-3230771.js Update V8 to version 3.0 (re-land r5920). 2010-12-07 11:31:57 +00:00
regress-3247124.js mjsunit/regress/regress-3247124 takes a long time to run, and the original regression is hit 2010-12-14 08:29:33 +00:00
regress-3252443.js Update V8 to version 3.0 (re-land r5920). 2010-12-07 11:31:57 +00:00
regress-3408144.js Fix code generation bug on ARM in classic codegen. 2011-02-02 14:14:55 +00:00
regress-20070207.js Added check for trailing whitespaces and corrected existing violations. 2011-09-01 11:28:10 +00:00
regress-add-minus-zero.js Do not remove HAdd with zero if the other operand is a double. 2013-10-30 10:22:52 +00:00
regress-arguments-gc.js Add missing write barrier for arguments store ICs. 2011-06-23 09:20:07 +00:00
regress-array-pop-nonconfigurable.js Reland "Make Array.prototype.pop throw if the last element is not configurable." 2013-10-25 11:55:56 +00:00
regress-bind-receiver.js Fixed spurious character in test case, plus presubmit issues. 2011-09-14 07:30:51 +00:00
regress-binop-nosse2.js Fix Environment size mismatch in r6849. 2013-09-20 08:34:23 +00:00
regress-binop.js Only set binary operation side effects flags, when observable. 2013-10-10 16:49:25 +00:00
regress-builtin-array-op.js Always invoke the default Array.sort functions from builtin functions, part 2. 2012-10-19 12:30:18 +00:00
regress-cnlt-elements.js Fix CNLT regression. 2012-10-10 12:29:44 +00:00
regress-cnlt-enum-indices.js Fix CNLT for enum indices. 2012-09-20 15:18:00 +00:00
regress-cntl-descriptors-enum.js CNLT with descriptors but no valid enum fields has to clear the EnumCache. 2012-09-14 13:15:43 +00:00
regress-compare-constant-doubles.js ia32: Fix comparisons of two constant double operands when exactly one of them is in new space. 2013-10-29 14:34:07 +00:00
regress-conditional-position.js Improve positions recording for calls. 2010-11-04 15:12:03 +00:00
regress-convert-enum2.js Invalidate the enum cache when converting a transition across which the descriptors are shared. 2012-10-15 08:38:51 +00:00
regress-convert-enum.js Don't clear EnumLength but rather copy the enum cache. Added regression test for crashes from chromecrash. 2012-10-11 15:33:34 +00:00
regress-convert-function-to-double.js Store copied value rather than the original double. 2013-08-16 15:43:42 +00:00
regress-convert-hole2.js Never hchange nan-hole to hole or hole to nan-hole. 2013-08-14 08:54:27 +00:00
regress-convert-hole.js Fix DeferredTaggedToINoSSE2 to not unconditionally untag undefined to 0. 2013-05-31 08:37:34 +00:00
regress-convert-transition.js Fix transition conversion from CONSTANT_FUNCTION to FIELD. 2012-10-10 12:31:50 +00:00
regress-copy-hole-to-field.js Don't allow copying holes to fields. 2013-05-22 15:33:53 +00:00
regress-crbug-3184.js Fix build problems. 2010-01-15 20:15:47 +00:00
regress-crbug-3867.js Handle insertion order for simple constructors 2010-02-02 13:33:29 +00:00
regress-crbug-18639.js Fix spec violations in methods of Number.prototype. 2012-12-07 10:20:35 +00:00
regress-crbug-37853.js Fix code cache lookup for keyed IC's 2010-03-11 08:52:31 +00:00
regress-crbug-39160.js Re-apply "Inline floating point compare" 2010-03-25 12:04:34 +00:00
regress-crbug-40931.js Added regression test for crbug 40931 http://crbug.com/40931 2010-04-26 13:26:11 +00:00
regress-crbug-72736.js Use ForceSetObjectProperty in DefineOrRedefineDataProperty (fixes crbug 72736). 2011-02-14 10:43:21 +00:00
regress-crbug-87478.js Fix receiver check in arguments ICs. 2011-06-27 13:02:51 +00:00
regress-crbug-100859.js Fix crash in d8 when external array ctor hits stack overflow 2011-12-13 13:51:58 +00:00
regress-crbug-107996.js Do not ignore an empty context with extension when creating a scope object. 2012-02-02 09:35:12 +00:00
regress-crbug-119926.js Remove trailing whitespace 2012-09-24 10:44:04 +00:00
regress-crbug-122271.js Implement tracking and optimizations of packed arrays 2012-05-23 14:24:29 +00:00
regress-crbug-125148.js Added Crankshaft support for setters. 2012-07-13 07:14:28 +00:00
regress-crbug-126414.js Fix unsigned-Smi check in MappedArgumentsLookup 2012-05-07 10:05:39 +00:00
regress-crbug-134055.js Make near-jump check more strict in LoadNamedFieldPolymorphic on ia32/x64 2012-06-22 13:38:39 +00:00
regress-crbug-134609.js Fixed deoptimization of inlined getters. 2012-09-07 09:01:54 +00:00
regress-crbug-135008.js Fix lazy parsing heuristics to respect outer scope. 2012-06-28 14:56:28 +00:00
regress-crbug-135066.js Allow lazy compilation (and thus optimisation) of functions inside eval. 2012-12-07 10:35:50 +00:00
regress-crbug-137689.js When following an accessor transition for an already existing accessor, don't load the last added descriptor but the same descriptor as we already found previously. 2012-07-18 09:20:57 +00:00
regress-crbug-138887.js Always set the callee's context when calling a function from optimized code. 2012-07-26 12:49:08 +00:00
regress-crbug-140083.js Fixed compound/count operations with getter-only accessor properties. 2012-08-03 09:45:08 +00:00
regress-crbug-142087.js Fix indexing bug in regexp, part 2. 2012-08-13 15:53:40 +00:00
regress-crbug-142218.js Check that index and length are Smi in bounds check. 2012-08-21 16:46:25 +00:00
regress-crbug-145961.js Fixed test expectation. 2012-09-04 09:54:36 +00:00
regress-crbug-146910.js Restore correct regression test for crbug/146910. 2013-03-22 09:04:36 +00:00
regress-crbug-147475.js Fix deoptimizer for shared optimized code. 2012-09-10 11:05:17 +00:00
regress-crbug-148376.js Ensure correct enumeration indices in the dict 2012-09-13 08:52:55 +00:00
regress-crbug-150545.js Fix many tests that try to force an OSR by checking OptimizationStatus() to instead check OptimizationCount(). 2013-07-30 09:28:55 +00:00
regress-crbug-150729.js Fix LBoundsCheck on x64 to handle (stack slot + constant) correctly 2012-09-20 09:56:24 +00:00
regress-crbug-157019.js Fix slack tracking when instance prototype changes. 2012-11-08 11:56:44 +00:00
regress-crbug-157520.js Fix ugly typo in GenerateNewNonStrictFast. 2012-10-26 10:55:25 +00:00
regress-crbug-158185.js Treat leading zeros in JSON.parse correctly. 2012-10-29 12:01:29 +00:00
regress-crbug-160010.js Added %FlattenString and use it to speed up a regression test. 2013-01-09 09:32:12 +00:00
regress-crbug-162085.js Ensure we do not clobber the register holding the elements backing store. 2012-11-26 15:58:27 +00:00
regress-crbug-163530.js Fix materialization of arguments objects with unknown values. 2013-02-27 14:37:51 +00:00
regress-crbug-168545.js Fix missing exception check in typed array constructor (2). 2013-01-10 11:45:29 +00:00
regress-crbug-170856.js Correctly reset lastIndex in an RegExp object. 2013-01-23 12:28:16 +00:00
regress-crbug-171715.js Only copy with, block and catch scopes in DebugEvaluate. 2013-03-26 17:46:16 +00:00
regress-crbug-172345.js Do not try to collect the map if the monomorphic IC stub has no map. 2013-01-28 13:19:53 +00:00
regress-crbug-173907.js Add regression test for r13617 2013-02-07 15:38:24 +00:00
regress-crbug-173907b.js Fix %NeverOptimizeFunction runtime call. 2013-07-19 08:25:44 +00:00
regress-crbug-173974.js Tag stubs that rely on instance types as MEGAMORPHIC. 2013-02-04 13:12:03 +00:00
regress-crbug-178790.js Limit EatAtLeast recursion by a budget. 2013-03-01 14:50:14 +00:00
regress-crbug-181422.js Fix white space matching in latin-1 strings wrt \u00a0. 2013-03-11 11:52:11 +00:00
regress-crbug-196583.js Fix detection of |handle_smi| case in HOptimizedGraphBuilder::HandlePolymorphicCallNamed 2013-03-18 12:41:52 +00:00
regress-crbug-217858.js Enable weak embedded maps in optimized code. 2013-07-02 15:15:58 +00:00
regress-crbug-222893.js Correctly materialize arguments object in Runtime_DebugEvaluate. 2013-03-25 10:01:53 +00:00
regress-crbug-229923.js Fix JSON.stringify's slow path wrt sliced strings. 2013-04-11 09:53:00 +00:00
regress-crbug-233737.js Fix missing hole check for loads from Smi arrays when all uses are changes 2013-05-13 11:58:10 +00:00
regress-crbug-240032.js Fix embedded new-space pointer in LCmpObjectEqAndBranch. 2013-05-23 14:06:28 +00:00
regress-crbug-242502.js Add regression test for fix from r14732. 2013-05-21 14:20:42 +00:00
regress-crbug-242870.js Fix VisitLogicalExpression for empty blocks on RHS. 2013-05-22 13:27:00 +00:00
regress-crbug-242924.js Fix bogus deopt in BuildEmitDeepCopy for holey arrays. 2013-05-22 17:58:21 +00:00
regress-crbug-243868.js Fix IfBuilder::Deopt to clear the current block. 2013-05-28 15:30:49 +00:00
regress-crbug-244461.js Special Array constructor type feedback erroneously recorded when Array 2013-06-03 14:46:23 +00:00
regress-crbug-245424.js Fast literals: fixed initialization of non-copied in-object property fields 2013-05-31 15:50:19 +00:00
regress-crbug-245480.js Fix for bug 245480. Calling new Array(a) with a single argument could result in creating a holey array with a packed elements kind. 2013-06-12 18:04:16 +00:00
regress-crbug-248025.js Fix crasher when checking for "of", but next token has no literal buffer 2013-06-11 11:30:03 +00:00
regress-crbug-258519.js Add regression test for recently fixed bug 2013-07-26 14:58:30 +00:00
regress-crbug-259300.js Do not materialize context-allocated values for debug-evaluate. 2013-07-17 15:29:00 +00:00
regress-crbug-260345.js Synchronize Compare-Literal behavior in FullCodegen and Hydrogen 2013-07-17 13:13:38 +00:00
regress-crbug-263276.js Fix JSArray-specific length lookup in polymorphic array handling 2013-07-25 15:04:21 +00:00
regress-crbug-272564.js Fix Math.round/floor that had bogus Smi representation 2013-08-14 12:14:08 +00:00
regress-crbug-274438.js Mark HStringCompareAndBranch as potentially causing GCs. 2013-08-16 15:10:07 +00:00
regress-crbug-280333.js Always visit branches during HGraph building 2013-08-29 14:55:45 +00:00
regress-crbug-285355.js Fix bitwise negation on x64 2013-09-06 15:21:38 +00:00
regress-crbug-305309.js Fix HObjectAccess for loads from migrating prototypes 2013-10-23 15:15:15 +00:00
regress-crbug-306220.js Correctly load message from an Error object. 2013-11-05 13:04:51 +00:00
regress-crbug-306851.js Add regression test for optimized count operation. 2013-10-17 12:48:28 +00:00
regress-crbug-309623.js Fix uint32-to-smi conversion in Lithium 2013-10-31 10:18:51 +00:00
regress-crbug-318671.js Fix missing type feedback check for Generic*String addition. 2013-11-15 09:13:36 +00:00
regress-crbug-319835.js Limit size of dehoistable array indices 2013-11-15 17:24:10 +00:00
regress-crbug-319860.js Limit size of dehoistable array indices 2013-11-15 17:24:10 +00:00
regress-crbug-320922.js Fix register trashing in Emit*ByteSeqStringSetChar 2013-11-19 12:59:09 +00:00
regress-create-exception.js Follow jsc on not throwing when trying to add a property to a non-extensible object. 2011-03-28 06:11:08 +00:00
regress-debug-code-recompilation.js Allow multiple lines of custom flags in javascript tests. 2012-08-10 12:26:33 +00:00
regress-debug-deopt-while-recompile.js Rename "parallel recompilation" to "concurrent recompilation". 2013-08-22 16:14:37 +00:00
regress-deep-proto.js Fix r11780 to avoid bugs where near branches are used to labels that are out of range. 2012-06-13 09:54:34 +00:00
regress-delete-empty-double.js Ensure reducing the length of an array doesn't make it go holey. 2012-11-02 10:24:56 +00:00
regress-deopt-gc.js Merge experimental/gc branch to the bleeding_edge. 2011-09-19 18:36:47 +00:00
regress-deopt-gcb.js Fix %NeverOptimizeFunction runtime call. 2013-07-19 08:25:44 +00:00
regress-deopt-store-effect.js Fix deopt in store with effect context. 2013-07-19 13:45:26 +00:00
regress-embedded-cons-string.js Retire concurrent recompilation delay for non-stress testing. 2013-10-14 14:15:22 +00:00
regress-et-clobbers-doubles.js Store doubles before calling into the elements transition stub on ARM 2013-08-13 15:06:17 +00:00
regress-fast-literal-transition.js Fix LFastLiteral to check boilerplate elements kind. 2012-04-30 14:59:13 +00:00
regress-frame-details-null-receiver.js Do not implicitly convert receivers for builtin functions when inspecting frames. 2013-07-09 13:58:11 +00:00
regress-freeze.js Fix Object.freeze, Object.observe wrt CountOperation and CompoundAssignment. 2013-08-07 18:45:41 +00:00
regress-function-length-strict.js Fixed read-only attribute of Function.length in strict mode. 2013-06-18 07:51:50 +00:00
regress-fundecl.js Introduce local function declarations in Crankshaft and fix issue 1647. 2011-08-31 13:26:08 +00:00
regress-grow-store-smi-check.js Fix missing Smi check in grow mode keyed stores. 2013-04-18 14:18:27 +00:00
regress-hoist-load-named-field.js Make all load-named-fields depend on their map-check, unless explicitly ignored. 2013-08-09 18:40:10 +00:00
regress-inlining-function-literal-context.js On ia32 LFunctionLiteral instruction should get context from esi register instead of stack slot. 2012-02-21 12:10:04 +00:00
regress-int32-truncation.js Take all uses into account to clear int32 truncation. 2013-06-07 17:28:46 +00:00
regress-iteration-order.js Fix bug in __proto__ assignment transition cache where we forget the next enumeration index resulting in wrong iteration order. 2012-06-04 12:07:46 +00:00
regress-json-stringify-gc.js Fix slow path of JSON.stringifier when GC strikes. 2013-04-09 08:12:59 +00:00
regress-latin-1.js Extend test coverage for JSON.stringify's slow path. 2013-03-20 14:07:30 +00:00
regress-lazy-deopt-reloc.js Add regression test. 2011-03-24 11:03:08 +00:00
regress-load-elements.js Elements load depends on the type of the receiver. 2012-08-30 17:31:32 +00:00
regress-map-invalidation-1.js Fix regressions triggered by map invalidation during graph creation. 2013-08-12 14:10:25 +00:00
regress-map-invalidation-2.js Generate a custom OSR entrypoint for OSR compiles on all platforms, and transition to optimized code using the special entrypoint, instead of through the deoptimizer. Do not install the OSR compiled code as _the_ optimized code for a function. 2013-09-09 16:34:40 +00:00
regress-merge-descriptors.js Merge verbatim descriptors from other (the descriptor of the map being updated) rather than this (descriptors of the most updated map found in the transition tree). 2013-08-28 12:37:14 +00:00
regress-mul-canoverflow.js Fix overflow check in mul-i which was missing since r14322 2013-04-25 07:36:59 +00:00
regress-mul-canoverflowb.js Fix %NeverOptimizeFunction runtime call. 2013-07-19 08:25:44 +00:00
regress-observe-empty-double-array.js Object.observe: prevent observed objects from using fast elements. 2012-12-12 11:38:24 +00:00
regress-omit-checks.js Mark maps as unstable if their instances potentially transition away. 2013-07-30 16:33:58 +00:00
regress-opt-after-debug-deopt.js Retire concurrent recompilation delay for non-stress testing. 2013-10-14 14:15:22 +00:00
regress-parse-object-literal.js Unify and fix checkers for duplicate object literal properties. 2013-10-10 11:58:16 +00:00
regress-parse-use-strict.js Fix pre-parsing of 'use strict' directive after string literals. 2013-10-11 14:03:54 +00:00
regress-phi-truncation.js Fix bug in HPhi::SimplifyConstantInput 2013-08-13 16:47:27 +00:00
regress-polymorphic-load.js Only fold polymorphic into monomorphic load if all load from either receiver or same prototype. 2013-10-02 13:24:08 +00:00
regress-polymorphic-store.js Fix using monomorphic store instruction for polymorphic stores. 2013-06-19 18:07:35 +00:00
regress-prepare-break-while-recompile.js Retire concurrent recompilation delay for non-stress testing. 2013-10-14 14:15:22 +00:00
regress-push-args-twice.js Avoid pushing arguments twice in GenericBinaryOpStub. 2010-09-07 13:33:40 +00:00
regress-r3391.js Fix toLocaleString-related breakage on buildbot. 2009-12-01 14:19:23 +00:00
regress-r4998.js Fix error in x64 fast smi loops, change 4998. 2010-07-14 13:22:47 +00:00
regress-regexp-codeflush.js Ensure that regexps always have code object, even if GC happened while running multiple times in runtime. 2011-07-07 10:04:56 +00:00
regress-regexp-construct-result.js Fix bug in regexp result object construction. 2013-09-05 14:32:49 +00:00
regress-seqstrsetchar-ex1.js Fix code gen bug on arm and mips; SeqStringSetChar overwrites a register; Add better default PrintDataTo for HInstruction 2013-05-16 14:27:39 +00:00
regress-seqstrsetchar-ex2.js Fix code gen bug on arm and mips; SeqStringSetChar overwrites a register; Add better default PrintDataTo for HInstruction 2013-05-16 14:27:39 +00:00
regress-seqstrsetchar-ex3.js Add belated test for the SeqStringSetChar bug. 2013-05-24 08:37:27 +00:00
regress-smi-math-floor-round.js Fix smi-based math floor. 2013-08-09 11:21:03 +00:00
regress-smi-only-concat.js Implement tracking and optimizations of packed arrays 2012-05-23 14:24:29 +00:00
regress-sqrt.js Ensure consistency of Math.sqrt on Intel platforms. 2012-03-12 14:56:04 +00:00
regress-store-uncacheable.js Allow uncacheable identifiers to go generic. 2013-09-02 16:32:11 +00:00
regress-swapelements.js Fix presubmit error. 2010-12-15 11:43:35 +00:00
regress-transcendental.js Add missing test for transcendental functions. 2012-05-16 11:15:30 +00:00
regress-undefined-store-keyed-fast-element.js Deopt on storing undefined into double elements. 2012-09-20 13:41:00 +00:00
regress-x87.js Add X87 implementations for Integer32ToDouble, DoubleToI, DoubleToSmi 2013-08-20 13:01:54 +00:00
setter.js Change LookupForWrite to always do a full lookup and check the result. 2013-03-25 12:55:27 +00:00
short-circuit.js Merge experimental/gc branch to the bleeding_edge. 2011-09-19 18:36:47 +00:00
splice-missing-wb.js Fix missing writebarrier in ArraySplice builtin. 2011-04-28 16:03:40 +00:00
string-split-monkey-patching.js Avoid relying on monkey-patchable things in String.prototype.split. 2013-06-19 12:25:40 +00:00