Bug 176060

Summary:

Throwing an exception in the DFG/FTL should not cause a jettison

Product:

WebKit

Reporter:

Saam Barati <saam>

Component:

JavaScriptCore

Assignee:

Saam Barati <saam>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

benjamin, buildbot, commit-queue, fpizlo, ggaren, gskachkov, jfbastien, keith_miller, mark.lam, msaboff, rmorisset, ryanhaddad, ticaiolima, webkit-bug-importer, ysuzuki

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Bug Depends on:

176090

Bug Blocks:

175396

Attachments:

Description	Flags
patch	msaboff: review+, msaboff: commit-queue-
patch	buildbot: commit-queue-
patch	keith_miller: review+
patch for landing	none

Saam Barati

Reported 2017-08-29 11:26:21 PDT

This is expected behavior, there is no reason we should repeatedly jettison and recompile.

Attachments
patch (4.28 KB, patch) 2017-08-29 14:49 PDT, Saam Barati	msaboff: review+ msaboff: commit-queue-	Details Formatted Diff Diff
patch (18.79 KB, patch) 2017-08-30 01:09 PDT, Saam Barati	buildbot: commit-queue-	Details Formatted Diff Diff
patch (18.54 KB, patch) 2017-08-30 12:48 PDT, Saam Barati	keith_miller: review+	Details Formatted Diff Diff
patch for landing (19.55 KB, patch) 2017-08-31 16:42 PDT, Saam Barati	no flags	Details Formatted Diff Diff
Show Obsolete (3) View All Add attachment proposed patch, testcase, etc.

Saam Barati

Comment 1 2017-08-29 14:49:53 PDT

Created attachment 319285 [details] patch

Michael Saboff

Comment 2 2017-08-29 14:53:17 PDT

Comment on attachment 319285 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=319285&action=review r=me > Source/JavaScriptCore/ChangeLog:3 > + Throwing an exception in the DFG/FTL should not be a jittison-able OSR exit I think you want the bug title to be "... jettison-able ...".

Saam Barati

Comment 3 2017-08-29 14:55:40 PDT

fixed in: https://trac.webkit.org/changeset/221317/webkit

Radar WebKit Bug Importer

Comment 4 2017-08-29 14:56:41 PDT

<rdar://problem/34143348>

Ryan Haddad

Comment 5 2017-08-29 18:11:31 PDT

This change caused 3 JSC test failures: ** The following JSC stress test failures have been introduced: jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout-ftl-eager-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout-ftl-no-cjit https://build.webkit.org/builders/Apple%20Sierra%20Release%20JSC%20%28Tests%29/builds/3457

Saam Barati

Comment 6 2017-08-29 19:59:42 PDT

Will look into this in an hour or so.

Saam Barati

Comment 7 2017-08-29 20:49:05 PDT

Very weird, I can't reproduce this locally running the test manually. However, I can reproduce it when running it via run-jsc-stress-tests

Saam Barati

Comment 8 2017-08-29 20:51:28 PDT

Nevermind, I can reproduce it. This is super weird.

Saam Barati

Comment 9 2017-08-29 21:03:23 PDT

I think I see the bug. We're running the test with "testTheFTL=true", however, I don't think we're ever compiling for the FTL because we just repeatedly exit at the throw site. We also never increment our FTL optimization counter. The test in layout tests will ensure that we make it to the DFG, but the CodeBlock is lying and saying we're not in the DFG: unsigned CodeBlock::numberOfDFGCompiles() { ASSERT(JITCode::isBaselineCode(jitType())); if (Options::testTheFTL()) { if (m_didFailFTLCompilation) return 1000000; return (m_hasBeenCompiledWithFTL ? 1 : 0) + m_reoptimizationRetryCounter; } return (JITCode::isOptimizingJIT(replacement()->jitType()) ? 1 : 0) + m_reoptimizationRetryCounter; }

Saam Barati

Comment 10 2017-08-29 21:13:31 PDT

Ima roll out for now. I think we should just treat Throw/ThrowStaticError like a terminal and actually throw an exception from the DFG/FTL. Anybody have any reasons to oppose doing this?

WebKit Commit Bot

Comment 11 2017-08-29 21:15:17 PDT

Re-opened since this is blocked by bug 176090

Saam Barati

Comment 12 2017-08-30 01:09:57 PDT

Created attachment 319352 [details] patch Might be it. Let's see what EWS thinks.

Build Bot

Comment 13 2017-08-30 06:05:38 PDT

Comment on attachment 319352 [details] patch Attachment 319352 [details] did not pass jsc-ews (mac): Output: http://webkit-queues.webkit.org/results/4409440 New failing tests: microbenchmarks/exit-length-on-plain-object.js.dfg-maximal-flush-validate-no-cjit stress/promise-finally.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduce.js.dfg-maximal-flush-validate-no-cjit stress/generic-arguments-correct-delete-behavior.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-getownproperty-not-configurable.js.dfg-maximal-flush-validate-no-cjit stress/arguments-elimination-varargs-too-many-args-arg-count.js.dfg-maximal-flush-validate-no-cjit stress/super-method-calls-check-tdz.js.dfg-maximal-flush-validate-no-cjit stress/inlined-error-gets-correct-codeblock-for-bytecodeoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-keys.js.dfg-maximal-flush-validate-no-cjit stress/spec-empty-flows-through-cell-checks.js.dfg-maximal-flush-validate-no-cjit stress/reserved-word-with-escape.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-map.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-deltablue.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-arith-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-round-basics.js.dfg-maximal-flush-validate-no-cjit stress/fold-profiled-call-to-call.js.dfg-maximal-flush-validate-no-cjit stress/phantom-inadequacy.js.dfg-maximal-flush-validate-no-cjit stress/const-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-int32-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/SharedArrayBuffer-opt.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/argument-count-bytecode.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id-class.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-validate-input.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access-transitive-exports.js.dfg-maximal-flush-validate-no-cjit stress/builtin-function-is-construct-type-none.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object-or-string.js.dfg-maximal-flush-validate-no-cjit stress/new-regex-inline.js.dfg-maximal-flush-validate-no-cjit stress/ftl-shr-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-constructor.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-fill.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/pow-simple.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-1.js.dfg-maximal-flush-validate-no-cjit stress/parameter-scoping.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-2.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object.js.dfg-maximal-flush-validate-no-cjit stress/scoped-then-direct-arguments-get-by-val-in-baseline.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/large-map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/dfg-exception-try-catch-in-constructor-with-inlined-throw.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace.js.dfg-maximal-flush-validate-no-cjit stress/flatten-oversize-dictionary-object.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-string.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-of.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-double-constructor.js.dfg-maximal-flush-validate-no-cjit stress/proxy-has-property.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/for-in-invalidate-context-weird-assignments.js.dfg-maximal-flush-validate-no-cjit stress/create-this-with-callee-variants.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/branch-fold.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-oom-error-lazy-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/instanceof.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-varargs-call-throws.js.dfg-maximal-flush-validate-no-cjit stress/throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/instanceof-bound.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-id-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-div-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/compare-number-and-other.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-method.js.dfg-maximal-flush-validate-no-cjit stress/const-tdz.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-view-string-properties-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrow-functions-as-default-parameter-values.js.dfg-maximal-flush-validate-no-cjit stress/destructuring-rest-element.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/new-array-with-spread-with-normal-spread-and-phantom-spread.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-and-remove.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/call-apply-exponential-bytecode-size.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-others.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-superproperty.js.dfg-maximal-flush-validate-no-cjit stress/allocation-sinking-puthint-control-flow.js.dfg-maximal-flush-validate-no-cjit stress/async-arrow-functions-lexical-binding-in-class.js.dfg-maximal-flush-validate-no-cjit stress/cse-multi-get-by-offset-remove-checks.js.dfg-maximal-flush-validate-no-cjit stress/cloned-arguments-modification.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/locale-compare.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/proxy-is-array.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-many-arguments.js.dfg-maximal-flush-validate-no-cjit stress/array-reverse-proxy.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-earley-boyer.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-2.js.dfg-maximal-flush-validate-no-cjit stress/map-inherit-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-convert.js.dfg-maximal-flush-validate-no-cjit stress/dont-unwind-past-vm-entry-frame.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-getter.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-tdz.js.dfg-maximal-flush-validate-no-cjit stress/variable-named-eval-under-tdz.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-map.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/to-property-key-correctness.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined-optimized-in-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/fold-typed-array-properties.js.dfg-maximal-flush-validate-no-cjit stress/class-derived-from-null.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl.js.dfg-maximal-flush-validate-no-cjit stress/regress-156765.js.dfg-maximal-flush-validate-no-cjit stress/v8-splay-strict.js.dfg-maximal-flush-validate-no-cjit stress/pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/prop-type-struct-then-object-opt-fold.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/math-clz32-basics.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-having-a-bad-time.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw-interesting-value-recovery.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-double-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-slice.js.dfg-maximal-flush-validate-no-cjit stress/sink-object-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/constant-fold-multi-get-by-offset-to-get-by-offset-on-prototype-and-sink-allocation.js.dfg-maximal-flush-validate-no-cjit stress/sink-arguments-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/array-symbol-species-lazy-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-to-identity-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-host-call-throw.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-deep-stack.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-call.js.dfg-maximal-flush-validate-no-cjit stress/exception-in-to-property-key-should-be-handled-early.js.dfg-maximal-flush-validate-no-cjit stress/poly-call-stub-in-getter-stub.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-typeof.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-private-symbols.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-sane-chain-2.js.dfg-maximal-flush-validate-no-cjit stress/with.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-call-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop-no-inline-super.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-2.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit-2.js.dfg-maximal-flush-validate-no-cjit stress/arith-mul-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/dfg-try-catch-wrong-value-recovery-on-ic-miss.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-newtarget.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fail-to-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-apply.js.dfg-maximal-flush-validate-no-cjit stress/spread-correct-global-object-on-exception.js.dfg-maximal-flush-validate-no-cjit stress/inferred-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-constructor.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-var-injection.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-promise.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-and-set-recursion-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/global-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-call.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-prototype-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-tail-call-inilned-caller.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/proxy-property-descriptor.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/dfg-to-primitive-pass-symbol.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object.js.dfg-maximal-flush-validate-no-cjit stress/sink-function-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/Number-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rest-parameter-allocation-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/many-foreach-calls.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/deltablue-for-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-xor-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-max-min-no-arguments.js.dfg-maximal-flush-validate-no-cjit stress/activation-test-loop.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-bound.js.dfg-maximal-flush-validate-no-cjit stress/es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-not-cell.js.dfg-maximal-flush-validate-no-cjit stress/tailCallForwardArguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-max-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/delete-to-object-exception.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-array-type.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-3.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-constructor.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-custom-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/controlflow-recursive.js.dfg-maximal-flush-validate-no-cjit stress/branch-may-exit-due-to-object-or-other-use-kind.js.dfg-maximal-flush-validate-no-cjit stress/bug-131764.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-bad-getter.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbol-keys.js.dfg-maximal-flush-validate-no-cjit stress/v8-earley-boyer-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduceRight.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-double-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-functions-with-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-2.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mod-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/bound-function-lazy-name-generation.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/object-keys-map-values.js.dfg-maximal-flush-validate-no-cjit stress/set-clone.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-unchecked-addition.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-4.js.dfg-maximal-flush-validate-no-cjit stress/tagged-template-tdz.js.dfg-maximal-flush-validate-no-cjit stress/regress-174044.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition-skip-first.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-derived-default-constructor.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/lazy-array-species-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-sub-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-1.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-add-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/strcat-emtpy.js.dfg-maximal-flush-validate-no-cjit stress/dont-strength-reduce-valuerep-of-doublerep.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-empty.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-value-profiling.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-is-destructuring.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-int52.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-has-get-cse-opportunity.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-cloned-arguments.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-2.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-sunspider-access-nsieve.js.dfg-maximal-flush-validate-no-cjit stress/v8-raytrace-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-each.js.dfg-maximal-flush-validate-no-cjit stress/arith-modulo-twice.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-function.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-string-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-fib.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-trivial.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long-convert.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/modify-map-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-string-keys.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-by-val-direct-with-edge-numbers.js.dfg-maximal-flush-validate-no-cjit stress/array-species-config-array-constructor.js.dfg-maximal-flush-validate-no-cjit stress/async-await-mozilla.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/sorting-benchmark.js.dfg-maximal-flush-validate-no-cjit stress/fold-based-on-int32-proof-mul-branch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/string-prototype-methods-endsWith-startsWith-includes-correctness.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/equality-type-checking.js.dfg-maximal-flush-validate-no-cjit stress/spread-optimized-properly.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-8.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-array.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-recognize.js.dfg-maximal-flush-validate-no-cjit stress/proxy-class.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-of.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/import-basic.js.dfg-maximal-flush-validate-no-cjit stress/osr-enter-to-catch-with-set-local-type-check-failure.js.dfg-maximal-flush-validate-no-cjit stress/get-by-offset-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions-dataview.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-and-default-arguments.js.dfg-maximal-flush-validate-no-cjit stress/yield-reserved-word.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays2.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-from-abs-and-floor.js.dfg-maximal-flush-validate-no-cjit stress/const-semantics.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/argument-intrinsic-not-convert-to-get-argument.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-misc.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-block-with-let.js.dfg-maximal-flush-validate-no-cjit stress/async-await-syntax.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-cells.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-neg-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-values.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-complex-with-incorrect-object.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/to-lower-case-intrinsic-on-empty-rope.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-loop-tdz.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star-interface.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-neutered.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-with-scope.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-array-prototype-methods.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-mixed-case.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set-prototype-of.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/infer-closure-const-then-mov.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability-eager.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-1.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-custom-hasinstancesymbol.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this-2.js.dfg-maximal-flush-validate-no-cjit stress/construct-forward-varargs-for-inlined-escaped-arguments.js.dfg-maximal-flush-validate-no-cjit stress/function-constructor-reading-from-global-lexical-environment.js.dfg-maximal-flush-validate-no-cjit stress/set-inherit-add.js.dfg-maximal-flush-validate-no-cjit stress/dont-crash-in-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-add-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/reflect-set-proxy-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-setter-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-generic.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-out-of-bounds-bounds-then-do-in-bounds.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-getter.js.dfg-maximal-flush-validate-no-cjit stress/ftl-new-negative-array-size.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/apply-not-apply.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-subarray.js.dfg-maximal-flush-validate-no-cjit stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-in-and-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value-or-string.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/is-undefined-exit-on-masquerader.js.dfg-maximal-flush-validate-no-cjit stress/put-direct-index-broken-2.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-ic-fail-to-call-operation-throw-error.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-splay.js.dfg-maximal-flush-validate-no-cjit stress/catch-set-argument-speculation-failure.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/delta-blue-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-constant-key.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/dfg-call-class-constructor.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/math-unary-no-arg.js.dfg-maximal-flush-validate-no-cjit stress/phantom-new-array-with-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception.js.dfg-maximal-flush-validate-no-cjit stress/regress-153486.js.dfg-maximal-flush-validate-no-cjit stress/function-with-defaults-inlining.js.dfg-maximal-flush-validate-no-cjit stress/bug-171786.js.dfg-maximal-flush-validate-no-cjit stress/call-varargs-with-different-arguments-length-after-warmup.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-direct-arguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-operation-read-value.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-late-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/get-from-scope-dynamic-onto-proxy.js.dfg-maximal-flush-validate-no-cjit stress/number-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dont-dead-lock-put-by-val-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/op-add-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-contiguous-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-min-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-3.js.dfg-maximal-flush-validate-no-cjit stress/tagged-templates-raw-strings.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-every.js.dfg-maximal-flush-validate-no-cjit stress/tricky-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-patchpoint-with-volatile-registers.js.dfg-maximal-flush-validate-no-cjit stress/modify-set-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/regress-171079.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-no-double-allocate.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-basics.js.dfg-maximal-flush-validate-no-cjit stress/lexical-scoping-break-continue.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/value-to-boolean.js.dfg-maximal-flush-validate-no-cjit stress/map-clone.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail-barely.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/varargs-construct.js.dfg-maximal-flush-validate-no-cjit stress/pad-start-calls-repeat-character-with-double.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-richards.js.dfg-maximal-flush-validate-no-cjit stress/proxy-define-own-property.js.dfg-maximal-flush-validate-no-cjit stress/varargs-inlined-simple-exit-aliasing.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-regexp-search.js.dfg-maximal-flush-validate-no-cjit stress/v8-richards-strict.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-regexp.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-symbol-mixed.js.dfg-maximal-flush-validate-no-cjit stress/spread-calling.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-stub-routine-replaced.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-rehash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-redefine-const.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mul-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/to-number-throws-correct-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-constructor.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arguments-strict-mode.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-symbol-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/for-in-prototype.js.dfg-maximal-flush-validate-no-cjit stress/es6-for-of-loop-exception.js.dfg-maximal-flush-validate-no-cjit stress/sloppy-mode-function-hoisting.js.dfg-maximal-flush-validate-no-cjit stress/array-message-passing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-instanceof.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-4.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-3.js.dfg-maximal-flush-validate-no-cjit stress/sparse-array-entry-update-144067.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/concat-append-one.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/symbol-toprimitive.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-setter-throw.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-string.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-unbalanced-getter-setter.js.dfg-maximal-flush-validate-no-cjit stress/arith-add-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-sinthesize.js.dfg-maximal-flush-validate-no-cjit stress/const-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-without-reassign-to-let.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-tagcloud.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-before-throwing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-construct.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set.js.dfg-maximal-flush-validate-no-cjit stress/runtime-throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-cache-basics.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-function-name-captured.js.dfg-maximal-flush-validate-no-cjit stress/get-by-id-throw-from-getter-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-jettison-on-constructor-change.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/istypedarrayview-intrinsic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-word-count.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-and-clean-neg-zero-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/math-ceil-basics.js.dfg-maximal-flush-validate-no-cjit stress/array-copywithin.js.dfg-maximal-flush-validate-no-cjit stress/proxy-json.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/tricky-indirectly-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit stress/infer-uninitialized-closure-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/load-varargs-then-inlined-call-exit-in-foo.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/switch-char-constant.js.dfg-maximal-flush-validate-no-cjit stress/escape-object-in-diamond-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/number-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/proxy-delete.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/date-format-tofte.js.dfg-maximal-flush-validate-no-cjit stress/regress-132147.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-intrinsic.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-with-slow-indexingtypes.js.dfg-maximal-flush-validate-no-cjit stress/check-dom-with-signature.js.dfg-maximal-flush-validate-no-cjit stress/spread-non-array.js.dfg-maximal-flush-validate-no-cjit stress/arith-sub-on-double-array-with-holes.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add.js.dfg-maximal-flush-validate-no-cjit stress/global-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/pow-stable-results.js.dfg-maximal-flush-validate-no-cjit stress/fold-multi-get-by-offset-to-get-by-offset-without-folding-the-structure-check-new.js.dfg-maximal-flush-validate-no-cjit stress/check-sub-class.js.dfg-maximal-flush-validate-no-cjit stress/generator-frame-empty.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-typedarray.js.dfg-maximal-flush-validate-no-cjit stress/tier-up-in-loop-with-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-microtasks.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id.js.dfg-maximal-flush-validate-no-cjit stress/sink-multigetbyoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-forEach.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/no-abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-configure-index.js.dfg-maximal-flush-validate-no-cjit stress/proxy-revoke.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-proxy.js.dfg-maximal-flush-validate-no-cjit stress/ai-consistency-filter-cells.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-with-reassign-to-var.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object-then-object.js.dfg-maximal-flush-validate-no-cjit stress/constant-folding-osr-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/hard-overflow-check-equal.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-async-from-sync.js.dfg-maximal-flush-validate-no-cjit stress/compare-strict-eq-integer-to-misc.js.dfg-maximal-flush-validate-no-cjit stress/v8-regexp-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rare-osr-exit-on-local.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-transcoding.js.dfg-maximal-flush-validate-no-cjit stress/math-trunc-basics.js.dfg-maximal-flush-validate-no-cjit stress/create-subclass-structure-might-throw.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-monomorphic-neutered.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-but-they-do-not-escape.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbols-and-strings.js.dfg-maximal-flush-validate-no-cjit stress/tricky-array-bounds-checks.js.dfg-maximal-flush-validate-no-cjit stress/math-floor-basics.js.dfg-maximal-flush-validate-no-cjit stress/get-local-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/typed-array-subarray.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-entries.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-throw-from-catch-block.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-array.js.dfg-maximal-flush-validate-no-cjit stress/proxy-own-keys.js.dfg-maximal-flush-validate-no-cjit stress/operation-in-throw-error.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-stable-results.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-crypto.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-some.js.dfg-maximal-flush-validate-no-cjit stress/for-in-modify-int-loop-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-resolving.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-resolving.js.dfg-maximal-flush-validate-no-cjit stress/v8-crypto-strict.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-6.js.dfg-maximal-flush-validate-no-cjit stress/promise-infinite-recursion-should-not-crash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-int52-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long.js.dfg-maximal-flush-validate-no-cjit stress/super-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/reflect-construct.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-global-of-eval.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-prototype.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-getter.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-inlined-frame-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/dead-osr-entry-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-variable-tdz.js.dfg-maximal-flush-validate-no-cjit stress/block-scoped-function-declarations.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/fake-iterators-that-throw-when-finished.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-basic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-each.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy-exception-check.js.dfg-maximal-flush-validate-no-cjit stress/global-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/ftl-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-type-check.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-forward-varargs.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/float32-array-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-super-in-eval.js.dfg-maximal-flush-validate-no-cjit

Build Bot

Comment 14 2017-08-30 07:59:46 PDT

Comment on attachment 319352 [details] patch Attachment 319352 [details] did not pass jsc-ews (mac): Output: http://webkit-queues.webkit.org/results/4409841 New failing tests: microbenchmarks/exit-length-on-plain-object.js.dfg-maximal-flush-validate-no-cjit stress/promise-finally.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduce.js.dfg-maximal-flush-validate-no-cjit stress/generic-arguments-correct-delete-behavior.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-getownproperty-not-configurable.js.dfg-maximal-flush-validate-no-cjit stress/arguments-elimination-varargs-too-many-args-arg-count.js.dfg-maximal-flush-validate-no-cjit stress/super-method-calls-check-tdz.js.dfg-maximal-flush-validate-no-cjit stress/inlined-error-gets-correct-codeblock-for-bytecodeoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-keys.js.dfg-maximal-flush-validate-no-cjit stress/spec-empty-flows-through-cell-checks.js.dfg-maximal-flush-validate-no-cjit stress/reserved-word-with-escape.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-map.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-deltablue.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-arith-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-round-basics.js.dfg-maximal-flush-validate-no-cjit stress/fold-profiled-call-to-call.js.dfg-maximal-flush-validate-no-cjit stress/phantom-inadequacy.js.dfg-maximal-flush-validate-no-cjit stress/const-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-int32-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/SharedArrayBuffer-opt.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/argument-count-bytecode.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id-class.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-validate-input.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access-transitive-exports.js.dfg-maximal-flush-validate-no-cjit stress/builtin-function-is-construct-type-none.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object-or-string.js.dfg-maximal-flush-validate-no-cjit stress/new-regex-inline.js.dfg-maximal-flush-validate-no-cjit stress/ftl-shr-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-constructor.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-fill.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/pow-simple.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-1.js.dfg-maximal-flush-validate-no-cjit stress/parameter-scoping.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-2.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object.js.dfg-maximal-flush-validate-no-cjit stress/scoped-then-direct-arguments-get-by-val-in-baseline.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/large-map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/dfg-exception-try-catch-in-constructor-with-inlined-throw.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace.js.dfg-maximal-flush-validate-no-cjit stress/flatten-oversize-dictionary-object.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-string.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-of.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-double-constructor.js.dfg-maximal-flush-validate-no-cjit stress/proxy-has-property.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/for-in-invalidate-context-weird-assignments.js.dfg-maximal-flush-validate-no-cjit stress/create-this-with-callee-variants.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/branch-fold.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-oom-error-lazy-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/instanceof.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-varargs-call-throws.js.dfg-maximal-flush-validate-no-cjit stress/throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/instanceof-bound.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-id-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-div-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/compare-number-and-other.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-method.js.dfg-maximal-flush-validate-no-cjit stress/const-tdz.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-view-string-properties-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrow-functions-as-default-parameter-values.js.dfg-maximal-flush-validate-no-cjit stress/destructuring-rest-element.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/new-array-with-spread-with-normal-spread-and-phantom-spread.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-and-remove.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/call-apply-exponential-bytecode-size.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-others.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-superproperty.js.dfg-maximal-flush-validate-no-cjit stress/allocation-sinking-puthint-control-flow.js.dfg-maximal-flush-validate-no-cjit stress/async-arrow-functions-lexical-binding-in-class.js.dfg-maximal-flush-validate-no-cjit stress/cse-multi-get-by-offset-remove-checks.js.dfg-maximal-flush-validate-no-cjit stress/cloned-arguments-modification.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/locale-compare.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/proxy-is-array.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-many-arguments.js.dfg-maximal-flush-validate-no-cjit stress/array-reverse-proxy.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-earley-boyer.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-2.js.dfg-maximal-flush-validate-no-cjit stress/map-inherit-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-convert.js.dfg-maximal-flush-validate-no-cjit stress/dont-unwind-past-vm-entry-frame.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-getter.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-tdz.js.dfg-maximal-flush-validate-no-cjit stress/variable-named-eval-under-tdz.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-map.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/to-property-key-correctness.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined-optimized-in-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/fold-typed-array-properties.js.dfg-maximal-flush-validate-no-cjit stress/class-derived-from-null.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl.js.dfg-maximal-flush-validate-no-cjit stress/regress-156765.js.dfg-maximal-flush-validate-no-cjit stress/v8-splay-strict.js.dfg-maximal-flush-validate-no-cjit stress/pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/prop-type-struct-then-object-opt-fold.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/math-clz32-basics.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-having-a-bad-time.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw-interesting-value-recovery.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-double-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-slice.js.dfg-maximal-flush-validate-no-cjit stress/sink-object-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/constant-fold-multi-get-by-offset-to-get-by-offset-on-prototype-and-sink-allocation.js.dfg-maximal-flush-validate-no-cjit stress/sink-arguments-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/array-symbol-species-lazy-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-to-identity-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-host-call-throw.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-deep-stack.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-call.js.dfg-maximal-flush-validate-no-cjit stress/exception-in-to-property-key-should-be-handled-early.js.dfg-maximal-flush-validate-no-cjit stress/poly-call-stub-in-getter-stub.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-typeof.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-private-symbols.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-sane-chain-2.js.dfg-maximal-flush-validate-no-cjit stress/with.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-call-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop-no-inline-super.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-2.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit-2.js.dfg-maximal-flush-validate-no-cjit stress/arith-mul-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/dfg-try-catch-wrong-value-recovery-on-ic-miss.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-newtarget.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fail-to-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-apply.js.dfg-maximal-flush-validate-no-cjit stress/spread-correct-global-object-on-exception.js.dfg-maximal-flush-validate-no-cjit stress/inferred-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-constructor.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-promise.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-and-set-recursion-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/global-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-call.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-prototype-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-tail-call-inilned-caller.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/proxy-property-descriptor.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/dfg-to-primitive-pass-symbol.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object.js.dfg-maximal-flush-validate-no-cjit stress/sink-function-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/Number-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rest-parameter-allocation-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/many-foreach-calls.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/deltablue-for-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-xor-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-max-min-no-arguments.js.dfg-maximal-flush-validate-no-cjit stress/activation-test-loop.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-bound.js.dfg-maximal-flush-validate-no-cjit stress/es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-not-cell.js.dfg-maximal-flush-validate-no-cjit stress/tailCallForwardArguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-max-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/delete-to-object-exception.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-array-type.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-3.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-constructor.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-custom-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/controlflow-recursive.js.dfg-maximal-flush-validate-no-cjit stress/branch-may-exit-due-to-object-or-other-use-kind.js.dfg-maximal-flush-validate-no-cjit stress/bug-131764.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-bad-getter.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbol-keys.js.dfg-maximal-flush-validate-no-cjit stress/v8-earley-boyer-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduceRight.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-double-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-functions-with-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-2.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mod-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/bound-function-lazy-name-generation.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/object-keys-map-values.js.dfg-maximal-flush-validate-no-cjit stress/set-clone.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-unchecked-addition.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-4.js.dfg-maximal-flush-validate-no-cjit stress/tagged-template-tdz.js.dfg-maximal-flush-validate-no-cjit stress/regress-174044.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition-skip-first.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-derived-default-constructor.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/lazy-array-species-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-sub-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-1.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-add-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/strcat-emtpy.js.dfg-maximal-flush-validate-no-cjit stress/dont-strength-reduce-valuerep-of-doublerep.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-empty.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-value-profiling.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-is-destructuring.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-int52.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-has-get-cse-opportunity.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-cloned-arguments.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-2.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-sunspider-access-nsieve.js.dfg-maximal-flush-validate-no-cjit stress/v8-raytrace-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-each.js.dfg-maximal-flush-validate-no-cjit stress/arith-modulo-twice.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-function.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-string-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-fib.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-trivial.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long-convert.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/modify-map-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-string-keys.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-by-val-direct-with-edge-numbers.js.dfg-maximal-flush-validate-no-cjit stress/array-species-config-array-constructor.js.dfg-maximal-flush-validate-no-cjit stress/async-await-mozilla.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/sorting-benchmark.js.dfg-maximal-flush-validate-no-cjit stress/fold-based-on-int32-proof-mul-branch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/string-prototype-methods-endsWith-startsWith-includes-correctness.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/equality-type-checking.js.dfg-maximal-flush-validate-no-cjit stress/spread-optimized-properly.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-8.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-array.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-recognize.js.dfg-maximal-flush-validate-no-cjit stress/proxy-class.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-of.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/import-basic.js.dfg-maximal-flush-validate-no-cjit stress/osr-enter-to-catch-with-set-local-type-check-failure.js.dfg-maximal-flush-validate-no-cjit stress/get-by-offset-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions-dataview.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-and-default-arguments.js.dfg-maximal-flush-validate-no-cjit stress/yield-reserved-word.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays2.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-from-abs-and-floor.js.dfg-maximal-flush-validate-no-cjit stress/const-semantics.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/argument-intrinsic-not-convert-to-get-argument.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-misc.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-block-with-let.js.dfg-maximal-flush-validate-no-cjit stress/async-await-syntax.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-cells.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-neg-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-values.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-complex-with-incorrect-object.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/to-lower-case-intrinsic-on-empty-rope.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-loop-tdz.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star-interface.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-neutered.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-with-scope.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-array-prototype-methods.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-mixed-case.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set-prototype-of.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/infer-closure-const-then-mov.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability-eager.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-1.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-custom-hasinstancesymbol.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this-2.js.dfg-maximal-flush-validate-no-cjit stress/construct-forward-varargs-for-inlined-escaped-arguments.js.dfg-maximal-flush-validate-no-cjit stress/function-constructor-reading-from-global-lexical-environment.js.dfg-maximal-flush-validate-no-cjit stress/set-inherit-add.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-for-await-of.js.dfg-maximal-flush-validate-no-cjit stress/dont-crash-in-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-add-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/reflect-set-proxy-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-setter-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-generic.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-out-of-bounds-bounds-then-do-in-bounds.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-getter.js.dfg-maximal-flush-validate-no-cjit stress/ftl-new-negative-array-size.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/apply-not-apply.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-subarray.js.dfg-maximal-flush-validate-no-cjit stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-in-and-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value-or-string.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/is-undefined-exit-on-masquerader.js.dfg-maximal-flush-validate-no-cjit stress/put-direct-index-broken-2.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-ic-fail-to-call-operation-throw-error.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-splay.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-var-injection.js.dfg-maximal-flush-validate-no-cjit stress/catch-set-argument-speculation-failure.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/delta-blue-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-constant-key.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/dfg-call-class-constructor.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/math-unary-no-arg.js.dfg-maximal-flush-validate-no-cjit stress/phantom-new-array-with-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception.js.dfg-maximal-flush-validate-no-cjit stress/regress-153486.js.dfg-maximal-flush-validate-no-cjit stress/function-with-defaults-inlining.js.dfg-maximal-flush-validate-no-cjit stress/bug-171786.js.dfg-maximal-flush-validate-no-cjit stress/call-varargs-with-different-arguments-length-after-warmup.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-direct-arguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-operation-read-value.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-late-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/get-from-scope-dynamic-onto-proxy.js.dfg-maximal-flush-validate-no-cjit stress/number-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dont-dead-lock-put-by-val-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/op-add-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-contiguous-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-min-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-3.js.dfg-maximal-flush-validate-no-cjit stress/tagged-templates-raw-strings.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-every.js.dfg-maximal-flush-validate-no-cjit stress/tricky-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-patchpoint-with-volatile-registers.js.dfg-maximal-flush-validate-no-cjit stress/modify-set-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/regress-171079.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-no-double-allocate.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-basics.js.dfg-maximal-flush-validate-no-cjit stress/lexical-scoping-break-continue.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/value-to-boolean.js.dfg-maximal-flush-validate-no-cjit stress/map-clone.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail-barely.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/varargs-construct.js.dfg-maximal-flush-validate-no-cjit stress/pad-start-calls-repeat-character-with-double.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-richards.js.dfg-maximal-flush-validate-no-cjit stress/proxy-define-own-property.js.dfg-maximal-flush-validate-no-cjit stress/varargs-inlined-simple-exit-aliasing.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-regexp-search.js.dfg-maximal-flush-validate-no-cjit stress/v8-richards-strict.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-regexp.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-symbol-mixed.js.dfg-maximal-flush-validate-no-cjit stress/spread-calling.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-stub-routine-replaced.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-rehash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-redefine-const.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mul-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/to-number-throws-correct-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-constructor.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arguments-strict-mode.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-symbol-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/for-in-prototype.js.dfg-maximal-flush-validate-no-cjit stress/es6-for-of-loop-exception.js.dfg-maximal-flush-validate-no-cjit stress/sloppy-mode-function-hoisting.js.dfg-maximal-flush-validate-no-cjit stress/array-message-passing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-instanceof.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-4.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-3.js.dfg-maximal-flush-validate-no-cjit stress/sparse-array-entry-update-144067.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/concat-append-one.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/symbol-toprimitive.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-setter-throw.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-string.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-unbalanced-getter-setter.js.dfg-maximal-flush-validate-no-cjit stress/arith-add-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-sinthesize.js.dfg-maximal-flush-validate-no-cjit stress/const-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-without-reassign-to-let.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-tagcloud.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-before-throwing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-construct.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set.js.dfg-maximal-flush-validate-no-cjit stress/runtime-throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-cache-basics.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-function-name-captured.js.dfg-maximal-flush-validate-no-cjit stress/get-by-id-throw-from-getter-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-jettison-on-constructor-change.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/istypedarrayview-intrinsic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-word-count.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-and-clean-neg-zero-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/math-ceil-basics.js.dfg-maximal-flush-validate-no-cjit stress/array-copywithin.js.dfg-maximal-flush-validate-no-cjit stress/proxy-json.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/tricky-indirectly-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit stress/infer-uninitialized-closure-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/load-varargs-then-inlined-call-exit-in-foo.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/switch-char-constant.js.dfg-maximal-flush-validate-no-cjit stress/escape-object-in-diamond-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/number-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/proxy-delete.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/date-format-tofte.js.dfg-maximal-flush-validate-no-cjit stress/regress-132147.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-intrinsic.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-with-slow-indexingtypes.js.dfg-maximal-flush-validate-no-cjit stress/check-dom-with-signature.js.dfg-maximal-flush-validate-no-cjit stress/spread-non-array.js.dfg-maximal-flush-validate-no-cjit stress/arith-sub-on-double-array-with-holes.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add.js.dfg-maximal-flush-validate-no-cjit stress/global-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/pow-stable-results.js.dfg-maximal-flush-validate-no-cjit stress/fold-multi-get-by-offset-to-get-by-offset-without-folding-the-structure-check-new.js.dfg-maximal-flush-validate-no-cjit stress/check-sub-class.js.dfg-maximal-flush-validate-no-cjit stress/generator-frame-empty.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-typedarray.js.dfg-maximal-flush-validate-no-cjit stress/tier-up-in-loop-with-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-microtasks.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id.js.dfg-maximal-flush-validate-no-cjit stress/sink-multigetbyoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-forEach.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/no-abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-configure-index.js.dfg-maximal-flush-validate-no-cjit stress/proxy-revoke.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-proxy.js.dfg-maximal-flush-validate-no-cjit stress/ai-consistency-filter-cells.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-with-reassign-to-var.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object-then-object.js.dfg-maximal-flush-validate-no-cjit stress/constant-folding-osr-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/hard-overflow-check-equal.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-async-from-sync.js.dfg-maximal-flush-validate-no-cjit stress/compare-strict-eq-integer-to-misc.js.dfg-maximal-flush-validate-no-cjit stress/v8-regexp-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rare-osr-exit-on-local.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-transcoding.js.dfg-maximal-flush-validate-no-cjit stress/math-trunc-basics.js.dfg-maximal-flush-validate-no-cjit stress/create-subclass-structure-might-throw.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-monomorphic-neutered.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-but-they-do-not-escape.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbols-and-strings.js.dfg-maximal-flush-validate-no-cjit stress/tricky-array-bounds-checks.js.dfg-maximal-flush-validate-no-cjit stress/math-floor-basics.js.dfg-maximal-flush-validate-no-cjit stress/get-local-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/typed-array-subarray.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-entries.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-throw-from-catch-block.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-array.js.dfg-maximal-flush-validate-no-cjit stress/proxy-own-keys.js.dfg-maximal-flush-validate-no-cjit stress/operation-in-throw-error.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-stable-results.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-crypto.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-some.js.dfg-maximal-flush-validate-no-cjit stress/for-in-modify-int-loop-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-resolving.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-resolving.js.dfg-maximal-flush-validate-no-cjit stress/v8-crypto-strict.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-6.js.dfg-maximal-flush-validate-no-cjit stress/promise-infinite-recursion-should-not-crash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-int52-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long.js.dfg-maximal-flush-validate-no-cjit stress/super-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/reflect-construct.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-global-of-eval.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-prototype.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-getter.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-inlined-frame-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/dead-osr-entry-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-variable-tdz.js.dfg-maximal-flush-validate-no-cjit stress/block-scoped-function-declarations.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/fake-iterators-that-throw-when-finished.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-basic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-each.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy-exception-check.js.dfg-maximal-flush-validate-no-cjit stress/global-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/ftl-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-type-check.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-forward-varargs.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/float32-array-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-super-in-eval.js.dfg-maximal-flush-validate-no-cjit

Saam Barati

Comment 15 2017-08-30 12:48:43 PDT

Created attachment 319388 [details] patch

Keith Miller

Comment 16 2017-08-30 18:29:49 PDT

Comment on attachment 319388 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=319388&action=review r=me with nit. > Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:5222 > + uint32_t errorType = currentInstruction[2].u.unsignedValue; Nit: You could add names for throw_static_errors offsets! > Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:10296 > +#if USE(JSVALUE64) > + callOperation(operationThrowDFG, valueRegs.gpr()); > +#else > + callOperation(operationThrowDFG, valueRegs); > +#endif Nit: instead of an #if can you add a callOperation(V_JITOperation_EJssUi, JSValueRegs)?

Saam Barati

Comment 17 2017-08-31 16:28:22 PDT

Comment on attachment 319388 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=319388&action=review >> Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:5222 >> + uint32_t errorType = currentInstruction[2].u.unsignedValue; > > Nit: You could add names for throw_static_errors offsets! I'll embark on this journey in another patch >> Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:10296 >> +#endif > > Nit: instead of an #if can you add a callOperation(V_JITOperation_EJssUi, JSValueRegs)? will do

Saam Barati

Comment 18 2017-08-31 16:42:39 PDT

Created attachment 319540 [details] patch for landing

WebKit Commit Bot

Comment 19 2017-08-31 22:41:12 PDT

Comment on attachment 319540 [details] patch for landing Clearing flags on attachment: 319540 Committed r221472: <http://trac.webkit.org/changeset/221472>

WebKit Commit Bot

Comment 20 2017-08-31 22:41:14 PDT

All reviewed patches have been landed. Closing bug.

Note You need to log in before you can comment on or make changes to this bug.