Paul Leathers
|
2e514d7265
[CVE-2017-8609] On object pointer copy prop, check for mismatch between new pointer symbol and existing object type spec info. If there is a mismatch, then stale ObjTypeSpecFldInfo may lead to jitted code that accesses a bad address, so disable optimization of this load/store.
|
8 лет назад |
Rajat Dua
|
796a580cc0
Fix build [GlobOpt.cpp]
|
8 лет назад |
Rajat Dua
|
73d6109a24
[1.4>2.0] [MERGE #2959 @rajatd] 17-05 ChakraCore servicing release
|
8 лет назад |
Rajat Dua
|
a1345ad480
[CVE-2017-0234] Too aggressive bound check removal
|
8 лет назад |
Rajat Dua
|
d8ef97d90c
[CVE-2017-0229] Non-blinded constants remaining in jit
|
8 лет назад |
Paul Leathers
|
9587507cfb
[CVE-2017-266] Protect store-element to a float typed array from implicit call if BailOutOnArrayAccessHelperCall is set, as that bailout kind indicates that downstream code will assume no side-effects.
|
8 лет назад |
Tom Tan
|
7ab46c7152
[1.4>2.0] [MERGE #2538 @ThomsonTan] Fix operand types after hoisting IR instrs to landingpad
|
9 лет назад |
Tom Tan
|
b964fc2298
Fix operand types after hoisting IR instrs to landingpad
|
9 лет назад |
Tom Tan
|
a5f69fdfbe
Fix operand types after hoisting IR instrs to landingpad
|
9 лет назад |
Tom Tan
|
1a7734a46f
[1.4>master] [MERGE #2267 @ThomsonTan] Fix inconsistent type spec for Math.abs(INT32_MIN) in loops
|
9 лет назад |
Tom Tan
|
2f28746ae1
[MERGE #2267 @ThomsonTan] Fix inconsistent type spec for Math.abs(INT32_MIN) in loops
|
9 лет назад |
Louis Lafreniere
|
49e376d570
[1.4>master] [MERGE #2501 @LouisLaf] Fix kraken regressions
|
9 лет назад |
Louis Lafreniere
|
d5eaaad348
Fix kraken regressions
|
9 лет назад |
Tom Tan
|
b72448c234
Merge branch 'release/1.4' into FixMathAbs
|
9 лет назад |
Louis Lafreniere
|
1abaf3b726
[1.4>master] [MERGE #2467 @LouisLaf] Globopt bug fix.
|
9 лет назад |
Tom Tan
|
b8ac2e4280
Remove fix for -off:constfold to a new issue
|
9 лет назад |
Louis Lafreniere
|
bee75545b9
Don't load type specialized values from arrays when type-spec is disabled.
|
9 лет назад |
Tom Tan
|
d2fcf879ba
Trigger rejit for Math.abs(INT32_MIN)
|
9 лет назад |
Jianchun Xu
|
4c9b2e23ea
Merge branch 'master' into swb
|
9 лет назад |
Tom Tan
|
0b6e107a01
Fix inconsistent type spec for Math.abs() in loops
|
9 лет назад |
Tom Tan
|
2ac3f856b4
Fix typo for callSequence in the comment
|
9 лет назад |
Tom Tan
|
63adb4847e
Don't remove dead syms which are referenced in callSequence in infinite loop blocks
|
9 лет назад |
Jianchun Xu
|
3d72466243
Merge remote-tracking branch 'master' into swb
|
9 лет назад |
Derek Morris
|
72e791c0b8
Lift LdFld->LdLen change code to own function.
|
9 лет назад |
Derek Morris
|
a566452be7
Fix annotation of operand for ldlen.
|
9 лет назад |
Jianchun Xu
|
77dfebad40
swb: fix AllocateArray annotations
|
9 лет назад |
Derek Morris
|
add6acfafc
Address review issues.
|
9 лет назад |
Derek Morris
|
cafadc6640
Improve handling of static branches.
|
9 лет назад |
Derek Morris
|
dc1b868da7
Fix style issues and reorganize code.
|
9 лет назад |
Derek Morris
|
318cf1d960
Allow either 0<a or a>0 for determination of const compare arguments for
|
9 лет назад |