| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
Merged (144): [maglev] Fix clobbering the data view length Bug: 466701290 Fixed: 469016617 (cherry picked from commit 6d301f6e0712a8be94cf4d1c994a7e5c39d3f640) Change-Id: I0acf274a371ae4bd185534a47e0d0166ceea4db7 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7265451 Commit-Queue: Marja Hölttä <marja@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/branch-heads/14.4@{#26} Cr-Branched-From: 80acc26727d5a34e77dabeebe7c9213ec1bd4768-refs/heads/14.4.258@{#1} Cr-Branched-From: ce7e597e90f6df3fa4b6df224bc613b80c635450-refs/heads/main@{#104020} | 6 个月前 | |
Merged (144): [maglev] Fix clobbering the data view length Bug: 466701290 Fixed: 469016617 (cherry picked from commit 6d301f6e0712a8be94cf4d1c994a7e5c39d3f640) Change-Id: I0acf274a371ae4bd185534a47e0d0166ceea4db7 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7265451 Commit-Queue: Marja Hölttä <marja@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/branch-heads/14.4@{#26} Cr-Branched-From: 80acc26727d5a34e77dabeebe7c9213ec1bd4768-refs/heads/14.4.258@{#1} Cr-Branched-From: ce7e597e90f6df3fa4b6df224bc613b80c635450-refs/heads/main@{#104020} | 6 个月前 | |
Merged: PPC/s390: [maglev] Fix clobbering the data view length Port 6d301f6e0712a8be94cf4d1c994a7e5c39d3f640 Port b2e339cd307a56363308692410e80da46e4cc8e9 R=marja@chromium.org, junyan1@ibm.com BUG= LOG=N (cherry picked from commit ef62c050002e3fdf4b524cd9424dd659f306aec2) Change-Id: If7dd1428c16f1b2f79f24d985f043fd3f010d894 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7277820 Auto-Submit: Milad Farazmand <mfarazma@ibm.com> Commit-Queue: Milad Farazmand <mfarazma@ibm.com> Reviewed-by: Lutz Vahl <vahl@chromium.org> Cr-Commit-Position: refs/branch-heads/14.4@{#30} Cr-Branched-From: 80acc26727d5a34e77dabeebe7c9213ec1bd4768-refs/heads/14.4.258@{#1} Cr-Branched-From: ce7e597e90f6df3fa4b6df224bc613b80c635450-refs/heads/main@{#104020} | 6 个月前 | |
[riscv][maglev] Fix an issue where SMI values do not overflow correctly For positive values, overflow is detected when the result is less than src. For negative values, overflow occurs when the result is greater than src. The fix also enables failing test expectation for 'es6/for-of-array-iterator-optimization-maglev' from the RISC-V pointer compression configuration Change-Id: I08574d44d14987aa27bfe9007fa4e4387d558e68 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7202584 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Leszek Swirski <leszeks@chromium.org> Auto-Submit: Yahan Lu (LuYahan) <yahan@iscas.ac.cn> Reviewed-by: Ji Qiu <qiuji@iscas.ac.cn> Reviewed-by: Kasper Lund <kasperl@rivosinc.com> Cr-Commit-Position: refs/heads/main@{#103965} | 7 个月前 | |
Merged: PPC/s390: [maglev] Fix clobbering the data view length Port 6d301f6e0712a8be94cf4d1c994a7e5c39d3f640 Port b2e339cd307a56363308692410e80da46e4cc8e9 R=marja@chromium.org, junyan1@ibm.com BUG= LOG=N (cherry picked from commit ef62c050002e3fdf4b524cd9424dd659f306aec2) Change-Id: If7dd1428c16f1b2f79f24d985f043fd3f010d894 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7277820 Auto-Submit: Milad Farazmand <mfarazma@ibm.com> Commit-Queue: Milad Farazmand <mfarazma@ibm.com> Reviewed-by: Lutz Vahl <vahl@chromium.org> Cr-Commit-Position: refs/branch-heads/14.4@{#30} Cr-Branched-From: 80acc26727d5a34e77dabeebe7c9213ec1bd4768-refs/heads/14.4.258@{#1} Cr-Branched-From: ce7e597e90f6df3fa4b6df224bc613b80c635450-refs/heads/main@{#104020} | 6 个月前 | |
Merged (144): [maglev] Fix clobbering the data view length Bug: 466701290 Fixed: 469016617 (cherry picked from commit 6d301f6e0712a8be94cf4d1c994a7e5c39d3f640) Change-Id: I0acf274a371ae4bd185534a47e0d0166ceea4db7 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7265451 Commit-Queue: Marja Hölttä <marja@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/branch-heads/14.4@{#26} Cr-Branched-From: 80acc26727d5a34e77dabeebe7c9213ec1bd4768-refs/heads/14.4.258@{#1} Cr-Branched-From: ce7e597e90f6df3fa4b6df224bc613b80c635450-refs/heads/main@{#104020} | 6 个月前 | |
[maglev] Remove BaselineAssembler dep from Maglev We should not mix Baseline vs Maglev ScratchScope. x14 is considered an extra-scratch register in arm64 for Baseline, but not for Maglev, which has a more comprehensive way to allocate extra scratches. Bug: v8:7700, chromium:1410970 Change-Id: Ia7eb77ff7fffc3c91d572931aa2ea001c90c1ffc Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4212388 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Auto-Submit: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#85590} | 3 年前 | |
buganizer: fix component IDs in DIR_METADATA This only matches the old monorail components. Bug: 341800538 Change-Id: Id74fbdb3b9be0c858b77af84966c6c37adf78c5c Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6025833 Reviewed-by: Michael Achenbach <machenbach@chromium.org> Reviewed-by: Michael Lippautz <mlippautz@chromium.org> Auto-Submit: Paul Semel <paulsemel@chromium.org> Commit-Queue: Paul Semel <paulsemel@chromium.org> Cr-Commit-Position: refs/heads/main@{#97252} | 1 年前 | |
[maglev] Add olivf to OWNERS Bug: v8:7700 Change-Id: I068132c5acda29c3a6b909e3843b00c7771e43a8 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5599192 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Olivier Flückiger <olivf@chromium.org> Cr-Commit-Position: refs/heads/main@{#94280} | 2 年前 | |
[sandbox][maglev] Generate direct calls only to compatible builtins ... i.e. to enabled JS builtins having compatible parameter count and which are not JS trampolines (it doesn't make sense to call them from generated code). NO_IFTTT=Introducing IFTTT, no logical change. Fixed: 454927471 Change-Id: I91914ffe5854b5d2e19b3644c7d28b93d7598e38 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7102180 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Igor Sheludko <ishell@chromium.org> Cr-Commit-Position: refs/heads/main@{#103439} | 8 个月前 | |
[maglev] Cache the DataView's data pointer for element access This way we don't need to read the data pointer multiple times if we access several elements. Bug: 431933185 Change-Id: Ief07064b07ef208cbbd6119ecb490141df77ede3 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7141782 Commit-Queue: Marja Hölttä <marja@chromium.org> Reviewed-by: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#103665} | 7 个月前 | |
[maglev] Avoid emitting veneer pool right after CallSelf again The previous fix at https://crrev.com/c/7096818 was buggy since the relevant path in Maglev did not actually call masm::Bl (where the fix was), but the lower-level Assembler::bl. This CL completes the fix by removing all MaglevAssembler::Call overloads - with the arm64 fix, they all equal the MacroAssembler::Call implementation. Fixed: 460985178 Change-Id: I418c55db460180fea61dd6364ef32fd92a6fc2ba Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7166408 Commit-Queue: Darius Mercadier <dmercadier@chromium.org> Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Auto-Submit: Jakob Linke <jgruber@chromium.org> Commit-Queue: Jakob Linke <jgruber@chromium.org> Cr-Commit-Position: refs/heads/main@{#103775} | 7 个月前 | |
[maglev] Skip unreachable blocks in the optimizer pass This fixes an issue where unreachable exception handler blocks did not have a proper KNA. Ie, no throwable node had merge its KNA to it. Drive-by: use the bitfield to record AbortReason in Abort, so that Abort is the smallest possible TerminalBlock and it can overwrite any control node. Bug: 424157317 Change-Id: Ibb67b7de0df0da0020f717fef15867814f3100d2 Fixed: 447520177 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7016011 Commit-Queue: Darius Mercadier <dmercadier@chromium.org> Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Auto-Submit: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#102958} | 8 个月前 | |
[maglev] Move single-pass data out of BasicBlocks Remove data from basic blocks which is only used in limited parts of the pipeline or only on some types of blocks. Instead add a stable id to every basic block which can be used to index into side tables. Change-Id: I2d81677e0b36e05d749f88b50795a4367e3d25ba Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6387160 Commit-Queue: Olivier Flückiger <olivf@chromium.org> Auto-Submit: Olivier Flückiger <olivf@chromium.org> Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Reviewed-by: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#99452} | 1 年前 | |
[maglev] Add source position collection This change adds support for collecting source positions in Maglev for profiling. It wires a SourcePositionTableBuilder through the code generator and uses the existing source positions from the graph labeller. Fixed: 436575053 Change-Id: I64fa1e8829b036e498fa1d756c996716d16fb2a8 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6897146 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Auto-Submit: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#102119} | 10 个月前 | |
[maglev type system] Make BuildInlinedAllocation return a ReduceResult This prepares for GetTaggedValue returning a ReduceResult soon. Bug: 428667907 Change-Id: I4bcb736a5438ca9b830f1c43b06b2f6e78ce9998 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7157635 Auto-Submit: Marja Hölttä <marja@chromium.org> Commit-Queue: Marja Hölttä <marja@chromium.org> Reviewed-by: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#103753} | 7 个月前 | |
[maglev] Add source position collection This change adds support for collecting source positions in Maglev for profiling. It wires a SourcePositionTableBuilder through the code generator and uses the existing source positions from the graph labeller. Fixed: 436575053 Change-Id: I64fa1e8829b036e498fa1d756c996716d16fb2a8 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6897146 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Auto-Submit: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#102119} | 10 个月前 | |
Merged: [contexts] Cleanup NativeContext::IsDetached() and friends In particular: - remove Isolate parameter from JSGlobalProxy::IsDetachedFrom() and IsDetached() methods, - add more efficient implementations of global_proxy() and global_object() accessors to NativeContext compared to generic ones in Context, - make Isolate::DetachGlobal() do nothing if the context is already detached. Bug: 466990858 (cherry picked from commit bdded6d6795a1fcf21ba9bdb31071f74b7436402) Change-Id: I659378a43a472bc49ca60e3b6bf5accebfc08b46 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7241452 Commit-Queue: Toon Verwaest <verwaest@chromium.org> Auto-Submit: Igor Sheludko <ishell@chromium.org> Reviewed-by: Toon Verwaest <verwaest@chromium.org> Cr-Commit-Position: refs/branch-heads/14.4@{#12} Cr-Branched-From: 80acc26727d5a34e77dabeebe7c9213ec1bd4768-refs/heads/14.4.258@{#1} Cr-Branched-From: ce7e597e90f6df3fa4b6df224bc613b80c635450-refs/heads/main@{#104020} | 6 个月前 | |
Reland "[maglev] truncate passed arguments length to known js functions when they are unreachable" This is a reland of commit 39c9925e68f250813b65d624372c141b4ab1fc50 Original change's description: > [maglev] truncate passed arguments length to known js functions when they are unreachable > > Change-Id: I151825fbda0596d12e397fadf80a0fe5a244fa26 > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7053222 > Reviewed-by: Toon Verwaest <verwaest@chromium.org> > Commit-Queue: Dan Carney <dcarney@chromium.org> > Reviewed-by: Erik Corry <erikcorry@chromium.org> > Cr-Commit-Position: refs/heads/main@{#103343} Change-Id: I8743920af1748f221818e068bf32eda0ad49970e Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7079176 Commit-Queue: Dan Carney <dcarney@chromium.org> Reviewed-by: Toon Verwaest <verwaest@chromium.org> Reviewed-by: Erik Corry <erikcorry@chromium.org> Cr-Commit-Position: refs/heads/main@{#103353} | 8 个月前 | |
[maglev][cleanup] Propagate is_tracing_enabled This makes --trace-maglev-graph-building and --trace-maglev-inlining to respect Maglev's filter. In addition: - Creates a --maglev-print-bytecode, allowing one to disabled it - Remove --trace-maglev-inlining-verbose - Have a single place to enable tracing. Change-Id: Idbd70fd942a4a804d2534070f1b44bf309ac4554 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6732380 Reviewed-by: Marja Hölttä <marja@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#101402} | 11 个月前 | |
[maglev][cleanup] Propagate is_tracing_enabled This makes --trace-maglev-graph-building and --trace-maglev-inlining to respect Maglev's filter. In addition: - Creates a --maglev-print-bytecode, allowing one to disabled it - Remove --trace-maglev-inlining-verbose - Have a single place to enable tracing. Change-Id: Idbd70fd942a4a804d2534070f1b44bf309ac4554 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6732380 Reviewed-by: Marja Hölttä <marja@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#101402} | 11 个月前 | |
2026.03.30 arkweb_144代码蓝黄同步 Signed-off-by: jiujiaoxiaogula <sujiahao10@huawei.com> Change-Id: I00194d339064f999dedfc211cd5af5501cbed0fb | 3 个月前 | |
[maglev] Add tracing to show why compilations fail Bug: v8:7700 Change-Id: I217b00d9f7edf833b97f6627295ab4b8cddf5d53 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6286266 Reviewed-by: Toon Verwaest <verwaest@chromium.org> Auto-Submit: Olivier Flückiger <olivf@chromium.org> Commit-Queue: Toon Verwaest <verwaest@chromium.org> Cr-Commit-Position: refs/heads/main@{#98840} | 1 年前 | |
2026.03.30 arkweb_144代码蓝黄同步 Signed-off-by: jiujiaoxiaogula <sujiahao10@huawei.com> Change-Id: I00194d339064f999dedfc211cd5af5501cbed0fb | 3 个月前 | |
[cleanup] Get rid of dead ExportedMaglevCompilationInfo Change-Id: Iffbb965beabde65431cfff61aa78d0553a2d8d4b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6579376 Auto-Submit: Toon Verwaest <verwaest@chromium.org> Commit-Queue: Toon Verwaest <verwaest@chromium.org> Commit-Queue: Olivier Flückiger <olivf@chromium.org> Reviewed-by: Olivier Flückiger <olivf@chromium.org> Cr-Commit-Position: refs/heads/main@{#100469} | 1 年前 | |
[maglev][cleanup] Refactor conversion nodes Rename these to follow a naming convention: UncheckedXXX => UnsafeXXX Float64ToHoleyFloat64 => ChangeFloat64ToHoleyFloat64 Change-Id: I7adb4be8cf83f64e07409a3052766b84ddeef9a5 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7105443 Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Auto-Submit: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#103444} | 8 个月前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[v8] Fix CVE-491884710 CVE-470566252 CVE-484527367 CVE-483851888 CVE-495679730 CVE-487768771 CVE-496301615 CVE-486927780 TicketNo: DTS2026040900445 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I9cc86759f497b795aaa41f2cccab2efc3892eb26 Reviewed-by: j30014474,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/540 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026012010158 [v8] Fix CVE 64df2ca2a94233d7fa209bb3244843ceb12235ca This revert merge request !452 | 1 个月前 | |
[maglev] Make MaglevGraphLabeler thread_local Bug: 427955263 Change-Id: If5f31738fac28571a7a1857e947d78d64da09475 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6680607 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Raphaël Hérouart <rherouart@google.com> Cr-Commit-Position: refs/heads/main@{#101156} | 11 个月前 | |
[maglev] Add lazy inputs This CL refactors Input to be a lightweight, on-demand wrapper around a NodeBase* and an index. This avoids storing Input objects directly on nodes, reducing memory usage. InputLocations are only allocated by backend passes, making this change particularly beneficial for Turbolev, which does not require them. Bug: 436810970 Change-Id: I8a5e7e0231b5247597b4919e4f136e4a656cb41f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6828786 Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#101811} | 10 个月前 | |
[turbolev] Reduce string.slice(int32, int32) This allows eliding repeated calls in code like if (string.slice(0, -1) == ...) { ... } else if (string.slice(0, -1) == ...) { ... This works only if start and end are int32s. If they might be objects, we need to call the valueOf, and cannot elide repeated calls. Bug: 431933185 Change-Id: I2d2c5e2f3ef5737062474567f78d36d840c7698f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7207296 Commit-Queue: Marja Hölttä <marja@chromium.org> Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Cr-Commit-Position: refs/heads/main@{#104013} | 7 个月前 | |
[maglev] Better hole static check elimination Bug: 431933185 Change-Id: I7e3d70193d0bcd77e791c066c36276c0bf920a49 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7207566 Auto-Submit: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Marja Hölttä <marja@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#104002} | 7 个月前 | |
[interpreter] Improve bytecode disassembler output Pass the constant pool to the bytecode decoder, so that constants can be printed as part of the bytecode itself. Also improve printing of the new split index types. Change-Id: Ia65149765b03a8d2665810b1d377e5b497600d15 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7209311 Commit-Queue: Patrick Thier <pthier@chromium.org> Reviewed-by: Patrick Thier <pthier@chromium.org> Auto-Submit: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#104020} | 7 个月前 | |
[maglev] Thin nodes This change refactors the register allocation logic in Maglev to improve how node-specific information is managed. Previously, register allocation data (like live ranges, spill slots, and temporary registers) was stored directly within ValueNode and NodeBase. This created a tight coupling and made the node objects heavier than necessary, especially during earlier compilation phases where this information isn't needed. This is especially true for Turbolev, which only uses the frontend of Maglev and therefore do not benefit of these fat nodes. This patch introduces RegallocNodeInfo and RegallocValueNodeInfo classes to encapsulate all register allocation data. Now, NodeBase and ValueNode simply hold a pointer to these info objects, which are allocated only when the register allocation phase begins. A follow-up CL will also reduce the size of the inputs. Bug: 431933185 Change-Id: I1b3be1f1601f4548acf4081baddf5bd5413f9083 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6798209 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#101691} | 11 个月前 | |
[maglev] Centrally call set_may_have_unreachable_blocks when noticing ProcessResult::kTruncateBlock Change-Id: I175031388fd3d49184b96ae6afee0593afb20f65 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7186986 Commit-Queue: Marja Hölttä <marja@chromium.org> Reviewed-by: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#103903} | 7 个月前 | |
Revert^2 "[maglev][turbolev] Remove identity phis when possible" This reverts commit ff8e18f42b5d8e4cdf873c82bc68ccd43a2122c0. Reason for revert: causes crashes Original change's description: > Reland "[maglev][turbolev] Remove identity phis when possible" > > This is a reland of commit a530b2c29486d05e98fde344898cd007846cb50a > > In the reland we only apply this optimization to Turbolev and not to > Maglev (because it makes Malgev ~2% slower). A few bugs related to > Identities being in more places than before were also fixed. > > Original change's description: > > [maglev][turbolev] Remove identity phis when possible > > > > Where "identity phi" means a Phi whose inputs are all the same (except > > the backedge for loop phis, which should be the phi itself). > > > > Bug: 431933185 > > Change-Id: I4658594ea4b42c9973c8e9746c52901d839fb543 > > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7015048 > > Commit-Queue: Darius Mercadier <dmercadier@chromium.org> > > Reviewed-by: Victor Gomes <victorgomes@chromium.org> > > Cr-Commit-Position: refs/heads/main@{#103063} > > Bug: 431933185 > Change-Id: I71f19ca8487243cb23278643e2f46b0788d61198 > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7035792 > Commit-Queue: Darius Mercadier <dmercadier@chromium.org> > Auto-Submit: Darius Mercadier <dmercadier@chromium.org> > Reviewed-by: Victor Gomes <victorgomes@chromium.org> > Cr-Commit-Position: refs/heads/main@{#103464} Fixed: 457457928 Bug: 431933185 No-Presubmit: true No-Tree-Checks: true No-Try: true Change-Id: I819510053ef5c4b529d620bfb8386555e2dde72a Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7117318 Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com> Commit-Queue: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com> Auto-Submit: Darius Mercadier <dmercadier@chromium.org> Cr-Commit-Position: refs/heads/main@{#103481} | 7 个月前 | |
[turbolev] Better sweeping of dead catch handlers Fixed: 457690388 Change-Id: Ie995a274dfef052302bab6c6ca23ca35300d3f4b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7121987 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Auto-Submit: Darius Mercadier <dmercadier@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#103539} | 7 个月前 | |
Reland "[maglev] No implicit Float64 <=> HoleyFloat64 conversion" This reverts commit cfc9e609fb50a28bcfe49fbebd4c8fff62c35a43. Reland fixes a number of bugs by handling missing cases of HoleyFloat64 handling, introducing missing conversion nodes and relaxing some DCHECKs. Bug: 448997822, 455515497, 458609996, 458677902, 458790911, 458849015, 458957498, 459129418, 459130968, 459310839, 459335522, 459526523, 459526524, 459629118 Change-Id: I94d2fc32f4c4d04544afd185fcf67d1447386ed1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7137286 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Nico Hartmann <nicohartmann@chromium.org> Cr-Commit-Position: refs/heads/main@{#103671} | 7 个月前 | |
[maglev][cleanup] Add VarargsNodeTMixin It allows to easily define nodes with variadic number of arguments. Drive-by: consistently name the target/closure/function for a call/construct as Target. Change-Id: I190282dac9b5caba3c0256af5658c78ae57fb9a1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7203506 Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Marja Hölttä <marja@chromium.org> Cr-Commit-Position: refs/heads/main@{#103950} | 7 个月前 | |
[cleanup][*lev] Canonicalize printing format Always print "---- After Pass -----" for Maglev and Turbolev before all passes. Always print to CodeTrace buffer if Turbolev. Change-Id: If5182b82c639bbd8f02afb1a57bcf8e25678636a Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7130228 Auto-Submit: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Commit-Queue: Darius Mercadier <dmercadier@chromium.org> Cr-Commit-Position: refs/heads/main@{#103600} | 7 个月前 | |
[maglev] Disallow kNone as lhs in NodeTypeIs .. unless explicitly allowed using NodeTypeIsVariant::kAllowNone. A kNone lhs is usually unexpected, but can easily happen when we haven't yet bailed out of processing dead code. The resulting predicate calls NodeTypeIs(kNone, ...) will all return true, even if the underlying graph shape doesn't match expectations. Note that resulting code should ultimately be discarded, since we are looking at dead code. BUT, we may run into DCHECKs or such in the meantime. Bug: 428667907 Change-Id: I01d16587eab77a9f8be5f57d51b7392029fe6923 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7141499 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Jakob Linke <jgruber@chromium.org> Cr-Commit-Position: refs/heads/main@{#103926} | 7 个月前 | |
Revert^2 "[maglev][turbolev] Remove identity phis when possible" This reverts commit ff8e18f42b5d8e4cdf873c82bc68ccd43a2122c0. Reason for revert: causes crashes Original change's description: > Reland "[maglev][turbolev] Remove identity phis when possible" > > This is a reland of commit a530b2c29486d05e98fde344898cd007846cb50a > > In the reland we only apply this optimization to Turbolev and not to > Maglev (because it makes Malgev ~2% slower). A few bugs related to > Identities being in more places than before were also fixed. > > Original change's description: > > [maglev][turbolev] Remove identity phis when possible > > > > Where "identity phi" means a Phi whose inputs are all the same (except > > the backedge for loop phis, which should be the phi itself). > > > > Bug: 431933185 > > Change-Id: I4658594ea4b42c9973c8e9746c52901d839fb543 > > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7015048 > > Commit-Queue: Darius Mercadier <dmercadier@chromium.org> > > Reviewed-by: Victor Gomes <victorgomes@chromium.org> > > Cr-Commit-Position: refs/heads/main@{#103063} > > Bug: 431933185 > Change-Id: I71f19ca8487243cb23278643e2f46b0788d61198 > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7035792 > Commit-Queue: Darius Mercadier <dmercadier@chromium.org> > Auto-Submit: Darius Mercadier <dmercadier@chromium.org> > Reviewed-by: Victor Gomes <victorgomes@chromium.org> > Cr-Commit-Position: refs/heads/main@{#103464} Fixed: 457457928 Bug: 431933185 No-Presubmit: true No-Tree-Checks: true No-Try: true Change-Id: I819510053ef5c4b529d620bfb8386555e2dde72a Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7117318 Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com> Commit-Queue: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com> Auto-Submit: Darius Mercadier <dmercadier@chromium.org> Cr-Commit-Position: refs/heads/main@{#103481} | 7 个月前 | |
[maglev][cleanup] Add VarargsNodeTMixin It allows to easily define nodes with variadic number of arguments. Drive-by: consistently name the target/closure/function for a call/construct as Target. Change-Id: I190282dac9b5caba3c0256af5658c78ae57fb9a1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7203506 Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Marja Hölttä <marja@chromium.org> Cr-Commit-Position: refs/heads/main@{#103950} | 7 个月前 | |
[M144] [maglev] Exception phis can be the hole Original change's description: > [maglev] Exception phis can be the hole > > Fixed: 465730465 > Change-Id: If1deb6975acd515c2209d24549bc7642535ecd5b > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7223977 > Commit-Queue: Victor Gomes <victorgomes@chromium.org> > Auto-Submit: Victor Gomes <victorgomes@chromium.org> > Commit-Queue: Marja Hölttä <marja@chromium.org> > Reviewed-by: Marja Hölttä <marja@chromium.org> > Cr-Commit-Position: refs/heads/main@{#104099} (cherry picked from commit 5a96a3530f02f495eb17e5effa877aade940e8a2) Bug: 465957062,465730465 Change-Id: If1deb6975acd515c2209d24549bc7642535ecd5b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7228747 Auto-Submit: Chrome Cherry Picker <chrome-cherry-picker@chops-service-accounts.iam.gserviceaccount.com> Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com> Commit-Queue: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com> Cr-Commit-Position: refs/branch-heads/14.4@{#10} Cr-Branched-From: 80acc26727d5a34e77dabeebe7c9213ec1bd4768-refs/heads/14.4.258@{#1} Cr-Branched-From: ce7e597e90f6df3fa4b6df224bc613b80c635450-refs/heads/main@{#104020} | 6 个月前 | |
[v8] Fix CVE-498095290 495751197 497404188 TicketNo: DTS2026041307131 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I0685a6966e3fe17da7b8bb20d56b9699d170e9ba Reviewed-by: z30069899,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/552 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026041307131 [v8] CVE-498095290 495751197 497404188 8ac5be1238b0a137cdb8cbe2561e68832faedf46 This revert merge request !454 | 1 个月前 | |
[maglev][cleanup] Use declare input macro helper for all fixed input nodes Change-Id: I3957f6de7dc07002448da26a79948281e1a22fb1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7197966 Reviewed-by: Marja Hölttä <marja@chromium.org> Auto-Submit: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#103905} | 7 个月前 | |
[maglev] Disallow kNone as lhs in NodeTypeIs .. unless explicitly allowed using NodeTypeIsVariant::kAllowNone. A kNone lhs is usually unexpected, but can easily happen when we haven't yet bailed out of processing dead code. The resulting predicate calls NodeTypeIs(kNone, ...) will all return true, even if the underlying graph shape doesn't match expectations. Note that resulting code should ultimately be discarded, since we are looking at dead code. BUT, we may run into DCHECKs or such in the meantime. Bug: 428667907 Change-Id: I01d16587eab77a9f8be5f57d51b7392029fe6923 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7141499 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Jakob Linke <jgruber@chromium.org> Cr-Commit-Position: refs/heads/main@{#103926} | 7 个月前 | |
[maglev] Disallow kNone as lhs in NodeTypeIs .. unless explicitly allowed using NodeTypeIsVariant::kAllowNone. A kNone lhs is usually unexpected, but can easily happen when we haven't yet bailed out of processing dead code. The resulting predicate calls NodeTypeIs(kNone, ...) will all return true, even if the underlying graph shape doesn't match expectations. Note that resulting code should ultimately be discarded, since we are looking at dead code. BUT, we may run into DCHECKs or such in the meantime. Bug: 428667907 Change-Id: I01d16587eab77a9f8be5f57d51b7392029fe6923 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7141499 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Jakob Linke <jgruber@chromium.org> Cr-Commit-Position: refs/heads/main@{#103926} | 7 个月前 | |
2026.03.30 arkweb_144代码蓝黄同步 Signed-off-by: jiujiaoxiaogula <sujiahao10@huawei.com> Change-Id: I00194d339064f999dedfc211cd5af5501cbed0fb | 3 个月前 | |
Revert "[maglev] Avoid deopt loop when hosting untagged OSR values" This reverts commit 2402b9735f1a567128a89985874cd93f45d8f986. Reason for revert: regress JS2 https://chromeperf.appspot.com/group_report?bug_id=460772563&project_id=chromium Fixed: 460772563 Original change's description: > [maglev] Avoid deopt loop when hosting untagged OSR values > > Change-Id: I1c950c489dfb74e1663d06ab83fe853222c841da > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7156855 > Auto-Submit: Victor Gomes <victorgomes@chromium.org> > Reviewed-by: Olivier Flückiger <olivf@chromium.org> > Commit-Queue: Olivier Flückiger <olivf@chromium.org> > Cr-Commit-Position: refs/heads/main@{#103721} Change-Id: Iae05a1f5c62394a006e1479490597a6bbdc314e1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7156515 Auto-Submit: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com> Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com> Cr-Commit-Position: refs/heads/main@{#103737} | 7 个月前 | |
Fix chrome tracing by not missing TRACE_EVENT_END Change-Id: Ie25ad2cb31915af8a21f7b9f85c9193dd5010228 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5016050 Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Reviewed-by: Patrick Thier <pthier@chromium.org> Commit-Queue: Jing Bao <jing.bao@intel.com> Cr-Commit-Position: refs/heads/main@{#90896} | 2 年前 | |
Fix chrome tracing by not missing TRACE_EVENT_END Change-Id: Ie25ad2cb31915af8a21f7b9f85c9193dd5010228 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5016050 Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Reviewed-by: Patrick Thier <pthier@chromium.org> Commit-Queue: Jing Bao <jing.bao@intel.com> Cr-Commit-Position: refs/heads/main@{#90896} | 2 年前 | |
[v8] Fix CVE-498095290 495751197 497404188 TicketNo: DTS2026041307131 Description: [v8] Fix CVE Team:gitcode Feature or Bugfix: Binary Source: sync from gitcode PrivateCode(Yes/No):No Change-Id: I0685a6966e3fe17da7b8bb20d56b9699d170e9ba Reviewed-by: z30069899,y00500721 Approved-by: y00500721 Merged-on: https://open.codehub.huawei.com/OpenSourceCenter_CR/openharmony-tpc/chromium_v8/-/change_requests/552 Merged-by: public pjenkins Signed-off-by: gaojunyu <gaojunyu2@h-partners.com> revert merge request: DTS2026041307131 [v8] CVE-498095290 495751197 497404188 8ac5be1238b0a137cdb8cbe2561e68832faedf46 This revert merge request !454 | 1 个月前 | |
[maglev] Fix unwrapping identities in VirtualObject Prior to https://crrev.com/c/6974676, the non-const version of ForEachNestedRuntimeInput would update the slots_ table with the result of value->UnwrapIdentities (because the value pointer was passed by reference). This CL restores that behavior. In future work, we should refactor maglev's non-const ForEach functions to not do anything other than the expected iteration. We also DCHECK inside ForEachNestedRuntimeInput that identities have been unwrapped, and add CHECKs guarding DeoptInfo::input_locations iteration. Fixed: 458024244 Change-Id: I1482edbc3f351c1d2fbca82e05fd30121c6cdd18 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7124327 Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Auto-Submit: Jakob Linke <jgruber@chromium.org> Commit-Queue: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Jakob Linke <jgruber@chromium.org> Reviewed-by: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#103572} | 7 个月前 | |
[maglev] Fix range analysis control flow narrowing When narrowing, we should update the ranges in the same block for both sides with the inverse mirror of the operation, not the negation of it. That is, if we updating range of a in a <= b, we should update the range of b with the constraint b >= a, not b > a. However, the negated block of the condition should get (in this example), a > b and b < b. Fixed: 463722459 Change-Id: Ib263b3bcc624d4a9d20035f9a1cdd4a532a06ad1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7206208 Auto-Submit: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Marja Hölttä <marja@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Marja Hölttä <marja@chromium.org> Cr-Commit-Position: refs/heads/main@{#103968} | 7 个月前 | |
[maglev] Add range verification pass Bug: 447172725 Change-Id: Ib23b0d94795f56ffc5b5e7da56069ff11bbd4a87 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7170030 Auto-Submit: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Commit-Queue: Darius Mercadier <dmercadier@chromium.org> Cr-Commit-Position: refs/heads/main@{#103817} | 7 个月前 | |
[maglev] Add range verification pass Bug: 447172725 Change-Id: Ib23b0d94795f56ffc5b5e7da56069ff11bbd4a87 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7170030 Auto-Submit: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Darius Mercadier <dmercadier@chromium.org> Commit-Queue: Darius Mercadier <dmercadier@chromium.org> Cr-Commit-Position: refs/heads/main@{#103817} | 7 个月前 | |
[maglev] Return false in Range:contains when range is empty Empty range denotes an impossibility, not an empty set. So it is not contained in any other range. Fixed: 461137357 Change-Id: I8efe1c4b8f834ca2c9b576281802cb8d93540ab6 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7157634 Commit-Queue: Marja Hölttä <marja@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Marja Hölttä <marja@chromium.org> Auto-Submit: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#103746} | 7 个月前 | |
[maglev] Use CheckedSmiTagHoleyFloa64 for HoleyFloat64 values Bug: 463546420 Change-Id: Ie3fee8e9b1516bb86f6284312f308cb127de6e60 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7203289 Auto-Submit: Nico Hartmann <nicohartmann@chromium.org> Reviewed-by: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#103955} | 7 个月前 | |
[maglev type system] Make BuildNumberOrOddballToFloat64OrHoleyFloat64 return a ReduceResult Side product: we can remove the temporary AddNewNodeNoAbort now. Bug: 428667907 Change-Id: I870a21e49c10c9989a46a72ee566f3d809d23bb0 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7197950 Commit-Queue: Victor Gomes <victorgomes@chromium.org> Auto-Submit: Marja Hölttä <marja@chromium.org> Reviewed-by: Victor Gomes <victorgomes@chromium.org> Cr-Commit-Position: refs/heads/main@{#103927} | 7 个月前 | |
Revert "[base] Change PointerWithPayload to accept incomplete types" This reverts commit aadbcd5a98d3cf3b307be77ea056e2661c5ee559. Reason for revert: static_assert about the alignment is now incorrect. Original change's description: > [base] Change PointerWithPayload to accept incomplete types > > Currently PointerWithPayload is templatize by using a complete type, > which means that we cannot define a PointerWithPayload of a not yet > defined type, eg: > > class MyType; > PointerWithPayload<MyType>; // Fails compilation > > However PointerWithPayload is essentially a pointer, so if we > pass the pointer type instead, we can allow incomplete types. > > Change-Id: I3a273419599bdfbd2f21060d1fa749d82ce3adea > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5553986 > Commit-Queue: Igor Sheludko <ishell@chromium.org> > Reviewed-by: Marja Hölttä <marja@chromium.org> > Reviewed-by: Igor Sheludko <ishell@chromium.org> > Commit-Queue: Victor Gomes <victorgomes@chromium.org> > Auto-Submit: Victor Gomes <victorgomes@chromium.org> > Cr-Commit-Position: refs/heads/main@{#94025} Change-Id: If82d69284c2f59410e9525d7f452d6c6f8bed86b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5573728 Auto-Submit: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Marja Hölttä <marja@chromium.org> Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com> Reviewed-by: Igor Sheludko <ishell@chromium.org> Commit-Queue: Marja Hölttä <marja@chromium.org> Cr-Commit-Position: refs/heads/main@{#94141} | 2 年前 | |
[maglev] Add lazy inputs This CL refactors Input to be a lightweight, on-demand wrapper around a NodeBase* and an index. This avoids storing Input objects directly on nodes, reducing memory usage. InputLocations are only allocated by backend passes, making this change particularly beneficial for Turbolev, which does not require them. Bug: 436810970 Change-Id: I8a5e7e0231b5247597b4919e4f136e4a656cb41f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6828786 Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#101811} | 10 个月前 | |
Reland "[maglev] No implicit Float64 <=> HoleyFloat64 conversion" This reverts commit cfc9e609fb50a28bcfe49fbebd4c8fff62c35a43. Reland fixes a number of bugs by handling missing cases of HoleyFloat64 handling, introducing missing conversion nodes and relaxing some DCHECKs. Bug: 448997822, 455515497, 458609996, 458677902, 458790911, 458849015, 458957498, 459129418, 459130968, 459310839, 459335522, 459526523, 459526524, 459629118 Change-Id: I94d2fc32f4c4d04544afd185fcf67d1447386ed1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7137286 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Nico Hartmann <nicohartmann@chromium.org> Cr-Commit-Position: refs/heads/main@{#103671} | 7 个月前 | |
[maglev] Fix left over register allocations from regalloc The regalloc should clear the node allocations when it is done. Failing to do so can cause the codegen to use stale register state. In this concrete example the exception handler trampolines would not load from the spill slot due to the left over allocation. Bug: 457351015 Change-Id: Ia113c0b3373b5b11250e11d66d63b6a67b63b13f Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7119379 Auto-Submit: Olivier Flückiger <olivf@chromium.org> Commit-Queue: Leszek Swirski <leszeks@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#103535} | 7 个月前 | |
[zone] Rename Zone::NewArray to Zone::AllocateArray The function does not construct the objects in the array and therefore is not comparable to new T[length] in C++. Follow-up change for renaming NewVector: https://crrev.com/c/4685550 Change-Id: I0db92dae2895bbb1162a3f7a483025ca89adf819 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4686973 Reviewed-by: Tobias Tebbi <tebbi@chromium.org> Commit-Queue: Matthias Liedtke <mliedtke@chromium.org> Cr-Commit-Position: refs/heads/main@{#88985} | 2 年前 | |
[maglev][cleanup] Unify maglev range The truncation pass was using its own distinct Range type. This commit unifies it with the Range type introduced by the range analysis pass, eliminating the redundant type and ensuring only a single, consistent Range representation is used across Maglev. Nodes now have a _static_ range method, aka, an approximation of the range at the point where the node is created. Bug: 447172725 Change-Id: I46f25148e2021b3c9f03e4a1cd08c80b1b528558 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7156693 Commit-Queue: Victor Gomes <victorgomes@chromium.org> Reviewed-by: Marja Hölttä <marja@chromium.org> Cr-Commit-Position: refs/heads/main@{#103722} | 7 个月前 | |
Reland "[maglev] No implicit Float64 <=> HoleyFloat64 conversion" This reverts commit cfc9e609fb50a28bcfe49fbebd4c8fff62c35a43. Reland fixes a number of bugs by handling missing cases of HoleyFloat64 handling, introducing missing conversion nodes and relaxing some DCHECKs. Bug: 448997822, 455515497, 458609996, 458677902, 458790911, 458849015, 458957498, 459129418, 459130968, 459310839, 459335522, 459526523, 459526524, 459629118 Change-Id: I94d2fc32f4c4d04544afd185fcf67d1447386ed1 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7137286 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Nico Hartmann <nicohartmann@chromium.org> Cr-Commit-Position: refs/heads/main@{#103671} | 7 个月前 | |
[tools] Add separate RCS categories for maglev - Add new optimize-maglev, and optimise-maglev-background RCS groups - Rename RCS .*NonConcurrent.* to .*Synchronous.* to avoid misgrouping Change-Id: I553cf176b8586d4c990788987dbda7cf77ba5b98 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6439505 Reviewed-by: Victor Gomes <victorgomes@chromium.org> Commit-Queue: Camillo Bruni <cbruni@chromium.org> Cr-Commit-Position: refs/heads/main@{#99729} | 1 年前 | |
Remove unnecessary includes from various headers Clean up unnecessary inclides in a few headers, and then add forward declarations and do IWYU to fix the build. Also remove a few instances of "v8::" usage inside namespace v8. Change-Id: I52717f321fe2fa584f266b53eab9b38adf6041ea Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5384986 Reviewed-by: Toon Verwaest <verwaest@chromium.org> Commit-Queue: Lei Zhang <thestig@chromium.org> Cr-Commit-Position: refs/heads/main@{#93124} | 2 年前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 6 个月前 | ||
| 6 个月前 | ||
| 6 个月前 | ||
| 7 个月前 | ||
| 6 个月前 | ||
| 6 个月前 | ||
| 3 年前 | ||
| 1 年前 | ||
| 2 年前 | ||
| 8 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 8 个月前 | ||
| 1 年前 | ||
| 10 个月前 | ||
| 7 个月前 | ||
| 10 个月前 | ||
| 6 个月前 | ||
| 8 个月前 | ||
| 11 个月前 | ||
| 11 个月前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 8 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 11 个月前 | ||
| 10 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 11 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 6 个月前 | ||
| 1 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 3 个月前 | ||
| 7 个月前 | ||
| 2 年前 | ||
| 2 年前 | ||
| 1 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 2 年前 | ||
| 10 个月前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 2 年前 | ||
| 7 个月前 | ||
| 7 个月前 | ||
| 1 年前 | ||
| 2 年前 |