Search results

[JSC] Fix GetButterfly handling in DFG array allocation sinking

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

merging-blockedApplied to prevent a change from being mergedApplied to prevent a change from being merged

Status: Open (in progress).

WebKit/WebKitnumber 47364

#47364 In WebKit/WebKit;

· hyjorc1 opened on Jun 30, 2025

[JSC] Fold <code>RegExp#@@search</code> at DFG StrengthReduction phase

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

Status: Open (in progress).

WebKit/WebKitnumber 47337

#47337 In WebKit/WebKit;

· sosukesuzuki opened on Jun 28, 2025

WeakSet should count its heap allocations

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

merging-blockedApplied to prevent a change from being mergedApplied to prevent a change from being merged

Status: Open (in progress).

WebKit/WebKitnumber 47275

#47275 In WebKit/WebKit;

· justinmichaud opened on Jun 27, 2025

[JSC] Use same allocator for Subspaces

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

Status: Draft (not ready).

WebKit/WebKitnumber 47238

#47238 In WebKit/WebKit;

· Constellation opened on Jun 26, 2025

[JSC] Simplify double-to-string cache

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

Status: Draft (not ready).

WebKit/WebKitnumber 47173

#47173 In WebKit/WebKit;

· Constellation opened on Jun 25, 2025

[JSC] JIT archtectures must use builtin frame address

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

Status: Open (in progress).

WebKit/WebKitnumber 47094

#47094 In WebKit/WebKit;

· Constellation opened on Jun 24, 2025

[JSC] Add some missing "free" B3 opcodes

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

Status: Open (in progress).

WebKit/WebKitnumber 47040

#47040 In WebKit/WebKit;

· Constellation opened on Jun 22, 2025

[JSC] Sink TypedArray allocations

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

Status: Open (in progress).

WebKit/WebKitnumber 47027

#47027 In WebKit/WebKit;

· Constellation opened on Jun 21, 2025

[JSC] Optimize <code>Array#toSpliced</code> for an array contains hole

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

merging-blockedApplied to prevent a change from being mergedApplied to prevent a change from being merged

Status: Open (in progress).

WebKit/WebKitnumber 47021

#47021 In WebKit/WebKit;

· sosukesuzuki opened on Jun 21, 2025

[JSC] Extract the skeleton builder update for <code>NumberFormat</code> notation option

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

merging-blockedApplied to prevent a change from being mergedApplied to prevent a change from being merged

Status: Open (in progress).

WebKit/WebKitnumber 47015

#47015 In WebKit/WebKit;

· sosukesuzuki opened on Jun 21, 2025

[JSC] Use ErrorInstance's stack information in Exception

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

merging-blockedApplied to prevent a change from being mergedApplied to prevent a change from being merged

Status: Draft (not ready).

WebKit/WebKitnumber 47008

#47008 In WebKit/WebKit;

· Constellation opened on Jun 21, 2025

[JSC] Remove UInt32ToNumber with Checks when we know input is definitely positive

JavaScriptCoreFor bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.For bugs in JavaScriptCore, the JS engine used by WebKit, other than kxmlcore issues.

Status: Open (in progress).

WebKit/WebKitnumber 46940

#46940 In WebKit/WebKit;

· Constellation opened on Jun 19, 2025