| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
buganizer: fix component IDs in DIR_METADATA This only matches the old monorail components. Bug: 341800538 Change-Id: Id74fbdb3b9be0c858b77af84966c6c37adf78c5c Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6025833 Reviewed-by: Michael Achenbach <machenbach@chromium.org> Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Auto-Submit: Paul Semel <paulsemel@chromium.org> Commit-Queue: Paul Semel <paulsemel@chromium.org> Cr-Commit-Position: refs/heads/main@{#97252} | 1 年前 | |
Remove inactive accounts from OWNERS Remove jarin, mslekova, and tebbi from OWNERS files. Bug: 338340739 Change-Id: I9ec3708793a07ddf4d11ea4b186b711406e5668f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5540776 Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Commit-Queue: Adam Klein <adamk@chromium.org> Auto-Submit: Adam Klein <adamk@chromium.org> Cr-Commit-Position: refs/heads/main@{#93981} | 2 年前 | |
2026.03.30 arkweb_144代码蓝黄同步 Signed-off-by: jiujiaoxiaogula <sujiahao10@huawei.com> Change-Id: I00194d339064f999dedfc211cd5af5501cbed0fb | 3 个月前 | |
[runtime] Fix perf regression caused by lazy v8:PCI::Data() This CL partially reverts https://crrev.com/c/7156423, in particular the way PropertyCallbackArguments object is setup. Drive-by: move XxxCallbackArguments constructors to -inl.h file. Fixed: 461967153 Bug: 455600234 Change-Id: I7751b35cb8419fbff57eaf9472d5128131b609e7 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7170550 Commit-Queue: Igor Sheludko <ishell@chromium.org> Reviewed-by: Patrick Thier <pthier@chromium.org> Cr-Commit-Position: refs/heads/main@{#103866} | 7 个月前 | |
Merged: [api] Fix contextual accesses within detached context ... broken by https://crrev.com/c/7184979. The issue was that - for "contextual" accesses to JSGlobalObject properties V8 needs to provide respective JSGlobalProxy as the "holder" to the accessor/interceptor callbacks, - the "holder" was computed via JSGlobalObject::global_proxy() which in case of detached context might already be backed by another instance of JSGlobalObject. - as a result if an Api callback would try to access the detached global object via such "holder" it'd access wrong JSGlobalObject instance - it'd be the current one instead of original one. The fix is to create a new JSGlobalProxy instance during context detaching, wire it properly with the old JSGlobalObject instance and pass it as a "holder" value to Api callbacks. This other global proxy is stored in a new JSGlobalObject::global_proxy_for_api field. Thus, the detached global object gets new identity which can be observed only in accessor/interceptor callbacks as the "holder" will no longer be equal to any of the v8::Context::Global(). To summarize behavior changes related to Holder()->HolderV2() migration (avoid exposing JSGlobalObject through Api) for accessor/interceptors on the global object, previously we had the following: CHECK_NE(attached_context->Global(), info.Holder()); CHECK_NE(detached_context->Global(), info.Holder()); but now we'll have: CHECK_EQ(attached_context->Global(), info.HolderV2()); CHECK_NE(detached_context->Global(), info.HolderV2()); Additionally, this CL adds Realm.navigateSameOrigin(i) for testing. Bug: 464961493 Bug: 463593768 Bug: 333672197 Fixed: 466990858 (cherry picked from commit 32fd863235d5392b8333fc882e809677596c6848) Change-Id: I60c1c7bf882da5eee12c5090feaac3fca6e03300 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7245590 Commit-Queue: Igor Sheludko <ishell@chromium.org> Commit-Queue: Toon Verwaest <verwaest@chromium.org> Auto-Submit: Igor Sheludko <ishell@chromium.org> Reviewed-by: Toon Verwaest <verwaest@chromium.org> Cr-Commit-Position: refs/branch-heads/14.4@{#14} Cr-Branched-From: 80acc26727d5a34e77dabeebe7c9213ec1bd4768-refs/heads/14.4.258@{#1} Cr-Branched-From: ce7e597e90f6df3fa4b6df224bc613b80c635450-refs/heads/main@{#104020} | 6 个月前 | |
heap_dump_1 for jsvm TicketNo: AR20260205251565 Description: heap_dump_1 for jsvm Team:gitee Feature or Bugfix: Binary Source: sync from gitee PrivateCode(Yes/No):No Change-Id: I2c4bf8190cab99d9278a68c3c7f94092f0507054 Reviewed-by: y00500721 Approved-by: w00518651 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/558 Merged-by: public pjenkins Signed-off-by: huanghan18 <huanghan18@huawei.com> revert merge request: AR20260205251565 heap_dump_1 for jsvm 5fae5665635fc7a1b52e325454044501fafec68e This revert merge request !453 | 1 个月前 | |
[runtime] Optimize JSObject creation from JSON builder Add a fast path that avoids - the embedder field check - the write barrier for the properties in case we set the empty array - Compared to http://crrev.com/c/6915239 the stores are not using MemsetTagged as that seems to cause regressions. Bug: 442989225 Change-Id: I1b341a13cc6eb9f1aa1613a4c02f297cb5df2179 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6920390 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Michael Lippautz <mlippautz@chromium.org> Cr-Commit-Position: refs/heads/main@{#102345} | 9 个月前 | |
[runtime] Refactor TemplateInfo instantiation cache This is a preliminary step for making it possible to use TemplateInfo objects as keys in EphemeronHashTable. This CL ensures that once serial_number is assigned to a TemplateInfo object it never changes and thus it can be used for calculating TemplateInfo's hash. Drive-by: split TemplateInfo into TemplateInfo (stuff related to caching machinery) and TemplateInfoWithProperties. Bug: 399393891 Change-Id: I24402d3d693cb74ce7d360452a1c88fb34014412 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6328038 Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Igor Sheludko <ishell@chromium.org> Cr-Commit-Position: refs/heads/main@{#99072} | 1 年前 | |
[v8]arkweb JS OOM use hisysevent TicketNo: DTS2026031703156 Description: [v8]arkweb JS OOM use hisysevent Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No ------ DO NOT MODIFY, AUTO-GENERATED! ------ PR-Num: 423 gitcode-PR: https://gitcode.com/openharmony-tpc/chromium_v8/pull/423 UserId:30014474 Change-Id: I1774926181646c6e5ef7fedaa422fbb6d3f10079 Reviewed-by: h00886390,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/537 Merged-by: public pjenkins Signed-off-by: jiang-qunchao <jiangqunchao@huawei.com> revert merge request: DTS2026031703156 [v8]arkweb JS OOM use hisysevent 351414b4ddbbad9107cf7f18b48f3d8ed3016bbd This revert merge request !451 | 1 个月前 | |
[api] Avoid species lookup in v8::Promise::{Then,Catch} This aligns the C++ Promise API with the WebIDL specification by using the PerformPromiseThen abstract operation. This avoids species lookups, making the API more robust against monkey-patched Promise constructors and guaranteeing that the API result type can actually be v8::Promise. Drive-by clean up PromiseToLocal into ToLocal with the guaranteed type. Bug: 40050555 Change-Id: I0e1b1415cab4f35d63a0a30cf41d22e915fbe401 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7079568 Reviewed-by: Andreas Haas <ahaas@google.com> Reviewed-by: Olivier Flückiger <olivf@chromium.org> Commit-Queue: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#103373} | 8 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 1 年前 | ||
| 2 年前 | ||
| 3 个月前 | ||
| 7 个月前 | ||
| 6 个月前 | ||
| 1 个月前 | ||
| 9 个月前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 8 个月前 |