| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
[interpreter] Cache FBV in the stack frame Bug: v8:14328 Change-Id: Ib8c55b213b323ec58436bae5c788f707badecd09 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4877033 Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#90072} | 2 年前 | |
[wasm] Rename kWasmInstanceOffset frame constants Use kWasmInstanceDataOffset for wasm frames, and kWasmInstanceObjectOffset for interpreter (drumbrake) frames. R=jkummerow@chromium.org Bug: 354408144 Change-Id: I6f0d535439fd88a3dfad80510edf380af5cded10 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5803203 Reviewed-by: Matthias Liedtke <mliedtke@chromium.org> Commit-Queue: Clemens Backes <clemensb@chromium.org> Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> Cr-Commit-Position: refs/heads/main@{#95782} | 1 年前 | |
Delete unneeded export statement kPACKeyIB is exported using V8_EXPORT_PRIVATE in its definition, but isn't tagged for export in its declaration. This inconsistency causes build failures on ARM64 Windows component builds. Because kPACKeyIB is a constant it doesn't need to be exported - it is fine for each DLL to have its own copy. With this change I can build debug component unittests. Change-Id: I81638163708b095a4ebc7ac0b91bb251bd24a878 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4299704 Reviewed-by: Jakob Linke <jgruber@chromium.org> Commit-Queue: Jakob Linke <jgruber@chromium.org> Auto-Submit: Bruce Dawson <brucedawson@chromium.org> Cr-Commit-Position: refs/heads/main@{#86188} | 3 年前 | |
[shadow stack] Build shadow stack in deoptimization Deoptimizer builds stack frames including return addresses, but shadow stack does not have the added return addresses. Therefore, it causes security exception due to the mismatch when CET shadow stack is enabled. This CL builds a valid shadow stack during the deoptimization. AdaptShadowStackForDeopt, which is called at the end DeoptimizationEntry, jumps to the previous instruction of each return address which is call AdaptShadowStackForDeopt. Therefore, it recursively pushes the return address onto the shadow stack. This implementation is based on the following doc. https://docs.google.com/presentation/d/1maphEn0mDldQkbbYnvv13dxl9BbHNwq0Q6iTXrkd_Iw Also, since we push the addresses onto the stack, and jump to them while building shadow stack, we must validate the addresses to prevent attackers from using this code and jumping to arbitrary code. This CL reuses IsValidReturnAddress in deoptimizer-cfi-builtins. It makes a crash if it's not one of the addresses in the allow list. WASM deopt is not supported yet in this CL. Bug: chromium:42201233 Change-Id: I93acd2279838f225de562509ae6660c0759cda67 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5855923 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Reviewed-by: Stephen Röttger <sroettger@google.com> Commit-Queue: Choongwoo Han <choongwoo.han@microsoft.com> Cr-Commit-Position: refs/heads/main@{#96965} | 1 年前 | |
[simulator][arm64] Add missing ProbeMemory calls Memory accesses in LoadStoreMultiStructHelper and LoadStorePairHelper were not tested with ProbeMemory. Added the missing calls, and converted the ProbeMemoryWithLandingPad test into a macro. Change-Id: I4aebc3dd15a3f43dfc4e55d9f8dff83068826cf9 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6700119 Commit-Queue: Jakob Kummerow <jkummerow@chromium.org> Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> Reviewed-by: Olivier Flückiger <olivf@chromium.org> Cr-Commit-Position: refs/heads/main@{#101293} | 11 个月前 | |
[wasm][turboshaft][arm64] MemoryFillOp MemoryFillOp has been introduced to Turboshaft to have the same semantics as memory.fill, except that the bounds check is not performed by the operation. AArch64 introduces SET- P, M and E instructions, as part of the MOPS extension, which can be used to lower the new Operation. Change-Id: I1e4b9476814b8153b26db520e7bd747a17a65a55 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6659444 Reviewed-by: Matthias Liedtke <mliedtke@chromium.org> Commit-Queue: Sam Parker-Haynes <sam.parker@arm.com> Reviewed-by: Jakob Kummerow <jkummerow@chromium.org> Cr-Commit-Position: refs/heads/main@{#101063} | 1 年前 | |
[cleanup] Use type trait typedefs (foo_t<T> over foo<T>::type) Run clang-tidy modernize-type-traits. Change-Id: Ie196acc5bfe1ee4a20a6e07aa0bec8fceb5844d7 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6087924 Reviewed-by: Clemens Backes <clemensb@chromium.org> Commit-Queue: Clemens Backes <clemensb@chromium.org> Auto-Submit: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#97729} | 1 年前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 2 年前 | ||
| 1 年前 | ||
| 3 年前 | ||
| 1 年前 | ||
| 11 个月前 | ||
| 1 年前 | ||
| 1 年前 |