This is expected behavior, there is no reason we should repeatedly jettison and recompile.
Created attachment 319285 [details] patch
Comment on attachment 319285 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=319285&action=review r=me > Source/JavaScriptCore/ChangeLog:3 > + Throwing an exception in the DFG/FTL should not be a jittison-able OSR exit I think you want the bug title to be "... jettison-able ...".
fixed in: https://trac.webkit.org/changeset/221317/webkit
<rdar://problem/34143348>
This change caused 3 JSC test failures: ** The following JSC stress test failures have been introduced: jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout-ftl-eager-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout-ftl-no-cjit https://build.webkit.org/builders/Apple%20Sierra%20Release%20JSC%20%28Tests%29/builds/3457
Will look into this in an hour or so.
Very weird, I can't reproduce this locally running the test manually. However, I can reproduce it when running it via run-jsc-stress-tests
Nevermind, I can reproduce it. This is super weird.
I think I see the bug. We're running the test with "testTheFTL=true", however, I don't think we're ever compiling for the FTL because we just repeatedly exit at the throw site. We also never increment our FTL optimization counter. The test in layout tests will ensure that we make it to the DFG, but the CodeBlock is lying and saying we're not in the DFG: unsigned CodeBlock::numberOfDFGCompiles() { ASSERT(JITCode::isBaselineCode(jitType())); if (Options::testTheFTL()) { if (m_didFailFTLCompilation) return 1000000; return (m_hasBeenCompiledWithFTL ? 1 : 0) + m_reoptimizationRetryCounter; } return (JITCode::isOptimizingJIT(replacement()->jitType()) ? 1 : 0) + m_reoptimizationRetryCounter; }
Ima roll out for now. I think we should just treat Throw/ThrowStaticError like a terminal and actually throw an exception from the DFG/FTL. Anybody have any reasons to oppose doing this?
Re-opened since this is blocked by bug 176090
Created attachment 319352 [details] patch Might be it. Let's see what EWS thinks.
Comment on attachment 319352 [details] patch Attachment 319352 [details] did not pass jsc-ews (mac): Output: http://webkit-queues.webkit.org/results/4409440 New failing tests: microbenchmarks/exit-length-on-plain-object.js.dfg-maximal-flush-validate-no-cjit stress/promise-finally.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduce.js.dfg-maximal-flush-validate-no-cjit stress/generic-arguments-correct-delete-behavior.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-getownproperty-not-configurable.js.dfg-maximal-flush-validate-no-cjit stress/arguments-elimination-varargs-too-many-args-arg-count.js.dfg-maximal-flush-validate-no-cjit stress/super-method-calls-check-tdz.js.dfg-maximal-flush-validate-no-cjit stress/inlined-error-gets-correct-codeblock-for-bytecodeoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-keys.js.dfg-maximal-flush-validate-no-cjit stress/spec-empty-flows-through-cell-checks.js.dfg-maximal-flush-validate-no-cjit stress/reserved-word-with-escape.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-map.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-deltablue.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-arith-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-round-basics.js.dfg-maximal-flush-validate-no-cjit stress/fold-profiled-call-to-call.js.dfg-maximal-flush-validate-no-cjit stress/phantom-inadequacy.js.dfg-maximal-flush-validate-no-cjit stress/const-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-int32-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/SharedArrayBuffer-opt.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/argument-count-bytecode.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id-class.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-validate-input.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access-transitive-exports.js.dfg-maximal-flush-validate-no-cjit stress/builtin-function-is-construct-type-none.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object-or-string.js.dfg-maximal-flush-validate-no-cjit stress/new-regex-inline.js.dfg-maximal-flush-validate-no-cjit stress/ftl-shr-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-constructor.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-fill.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/pow-simple.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-1.js.dfg-maximal-flush-validate-no-cjit stress/parameter-scoping.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-2.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object.js.dfg-maximal-flush-validate-no-cjit stress/scoped-then-direct-arguments-get-by-val-in-baseline.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/large-map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/dfg-exception-try-catch-in-constructor-with-inlined-throw.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace.js.dfg-maximal-flush-validate-no-cjit stress/flatten-oversize-dictionary-object.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-string.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-of.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-double-constructor.js.dfg-maximal-flush-validate-no-cjit stress/proxy-has-property.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/for-in-invalidate-context-weird-assignments.js.dfg-maximal-flush-validate-no-cjit stress/create-this-with-callee-variants.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/branch-fold.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-oom-error-lazy-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/instanceof.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-varargs-call-throws.js.dfg-maximal-flush-validate-no-cjit stress/throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/instanceof-bound.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-id-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-div-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/compare-number-and-other.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-method.js.dfg-maximal-flush-validate-no-cjit stress/const-tdz.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-view-string-properties-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrow-functions-as-default-parameter-values.js.dfg-maximal-flush-validate-no-cjit stress/destructuring-rest-element.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/new-array-with-spread-with-normal-spread-and-phantom-spread.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-and-remove.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/call-apply-exponential-bytecode-size.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-others.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-superproperty.js.dfg-maximal-flush-validate-no-cjit stress/allocation-sinking-puthint-control-flow.js.dfg-maximal-flush-validate-no-cjit stress/async-arrow-functions-lexical-binding-in-class.js.dfg-maximal-flush-validate-no-cjit stress/cse-multi-get-by-offset-remove-checks.js.dfg-maximal-flush-validate-no-cjit stress/cloned-arguments-modification.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/locale-compare.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/proxy-is-array.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-many-arguments.js.dfg-maximal-flush-validate-no-cjit stress/array-reverse-proxy.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-earley-boyer.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-2.js.dfg-maximal-flush-validate-no-cjit stress/map-inherit-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-convert.js.dfg-maximal-flush-validate-no-cjit stress/dont-unwind-past-vm-entry-frame.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-getter.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-tdz.js.dfg-maximal-flush-validate-no-cjit stress/variable-named-eval-under-tdz.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-map.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/to-property-key-correctness.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined-optimized-in-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/fold-typed-array-properties.js.dfg-maximal-flush-validate-no-cjit stress/class-derived-from-null.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl.js.dfg-maximal-flush-validate-no-cjit stress/regress-156765.js.dfg-maximal-flush-validate-no-cjit stress/v8-splay-strict.js.dfg-maximal-flush-validate-no-cjit stress/pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/prop-type-struct-then-object-opt-fold.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/math-clz32-basics.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-having-a-bad-time.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw-interesting-value-recovery.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-double-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-slice.js.dfg-maximal-flush-validate-no-cjit stress/sink-object-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/constant-fold-multi-get-by-offset-to-get-by-offset-on-prototype-and-sink-allocation.js.dfg-maximal-flush-validate-no-cjit stress/sink-arguments-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/array-symbol-species-lazy-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-to-identity-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-host-call-throw.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-deep-stack.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-call.js.dfg-maximal-flush-validate-no-cjit stress/exception-in-to-property-key-should-be-handled-early.js.dfg-maximal-flush-validate-no-cjit stress/poly-call-stub-in-getter-stub.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-typeof.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-private-symbols.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-sane-chain-2.js.dfg-maximal-flush-validate-no-cjit stress/with.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-call-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop-no-inline-super.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-2.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit-2.js.dfg-maximal-flush-validate-no-cjit stress/arith-mul-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/dfg-try-catch-wrong-value-recovery-on-ic-miss.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-newtarget.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fail-to-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-apply.js.dfg-maximal-flush-validate-no-cjit stress/spread-correct-global-object-on-exception.js.dfg-maximal-flush-validate-no-cjit stress/inferred-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-constructor.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-var-injection.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-promise.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-and-set-recursion-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/global-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-call.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-prototype-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-tail-call-inilned-caller.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/proxy-property-descriptor.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/dfg-to-primitive-pass-symbol.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object.js.dfg-maximal-flush-validate-no-cjit stress/sink-function-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/Number-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rest-parameter-allocation-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/many-foreach-calls.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/deltablue-for-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-xor-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-max-min-no-arguments.js.dfg-maximal-flush-validate-no-cjit stress/activation-test-loop.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-bound.js.dfg-maximal-flush-validate-no-cjit stress/es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-not-cell.js.dfg-maximal-flush-validate-no-cjit stress/tailCallForwardArguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-max-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/delete-to-object-exception.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-array-type.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-3.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-constructor.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-custom-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/controlflow-recursive.js.dfg-maximal-flush-validate-no-cjit stress/branch-may-exit-due-to-object-or-other-use-kind.js.dfg-maximal-flush-validate-no-cjit stress/bug-131764.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-bad-getter.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbol-keys.js.dfg-maximal-flush-validate-no-cjit stress/v8-earley-boyer-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduceRight.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-double-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-functions-with-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-2.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mod-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/bound-function-lazy-name-generation.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/object-keys-map-values.js.dfg-maximal-flush-validate-no-cjit stress/set-clone.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-unchecked-addition.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-4.js.dfg-maximal-flush-validate-no-cjit stress/tagged-template-tdz.js.dfg-maximal-flush-validate-no-cjit stress/regress-174044.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition-skip-first.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-derived-default-constructor.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/lazy-array-species-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-sub-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-1.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-add-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/strcat-emtpy.js.dfg-maximal-flush-validate-no-cjit stress/dont-strength-reduce-valuerep-of-doublerep.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-empty.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-value-profiling.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-is-destructuring.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-int52.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-has-get-cse-opportunity.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-cloned-arguments.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-2.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-sunspider-access-nsieve.js.dfg-maximal-flush-validate-no-cjit stress/v8-raytrace-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-each.js.dfg-maximal-flush-validate-no-cjit stress/arith-modulo-twice.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-function.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-string-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-fib.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-trivial.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long-convert.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/modify-map-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-string-keys.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-by-val-direct-with-edge-numbers.js.dfg-maximal-flush-validate-no-cjit stress/array-species-config-array-constructor.js.dfg-maximal-flush-validate-no-cjit stress/async-await-mozilla.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/sorting-benchmark.js.dfg-maximal-flush-validate-no-cjit stress/fold-based-on-int32-proof-mul-branch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/string-prototype-methods-endsWith-startsWith-includes-correctness.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/equality-type-checking.js.dfg-maximal-flush-validate-no-cjit stress/spread-optimized-properly.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-8.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-array.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-recognize.js.dfg-maximal-flush-validate-no-cjit stress/proxy-class.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-of.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/import-basic.js.dfg-maximal-flush-validate-no-cjit stress/osr-enter-to-catch-with-set-local-type-check-failure.js.dfg-maximal-flush-validate-no-cjit stress/get-by-offset-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions-dataview.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-and-default-arguments.js.dfg-maximal-flush-validate-no-cjit stress/yield-reserved-word.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays2.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-from-abs-and-floor.js.dfg-maximal-flush-validate-no-cjit stress/const-semantics.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/argument-intrinsic-not-convert-to-get-argument.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-misc.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-block-with-let.js.dfg-maximal-flush-validate-no-cjit stress/async-await-syntax.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-cells.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-neg-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-values.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-complex-with-incorrect-object.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/to-lower-case-intrinsic-on-empty-rope.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-loop-tdz.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star-interface.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-neutered.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-with-scope.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-array-prototype-methods.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-mixed-case.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set-prototype-of.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/infer-closure-const-then-mov.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability-eager.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-1.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-custom-hasinstancesymbol.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this-2.js.dfg-maximal-flush-validate-no-cjit stress/construct-forward-varargs-for-inlined-escaped-arguments.js.dfg-maximal-flush-validate-no-cjit stress/function-constructor-reading-from-global-lexical-environment.js.dfg-maximal-flush-validate-no-cjit stress/set-inherit-add.js.dfg-maximal-flush-validate-no-cjit stress/dont-crash-in-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-add-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/reflect-set-proxy-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-setter-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-generic.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-out-of-bounds-bounds-then-do-in-bounds.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-getter.js.dfg-maximal-flush-validate-no-cjit stress/ftl-new-negative-array-size.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/apply-not-apply.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-subarray.js.dfg-maximal-flush-validate-no-cjit stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-in-and-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value-or-string.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/is-undefined-exit-on-masquerader.js.dfg-maximal-flush-validate-no-cjit stress/put-direct-index-broken-2.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-ic-fail-to-call-operation-throw-error.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-splay.js.dfg-maximal-flush-validate-no-cjit stress/catch-set-argument-speculation-failure.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/delta-blue-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-constant-key.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/dfg-call-class-constructor.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/math-unary-no-arg.js.dfg-maximal-flush-validate-no-cjit stress/phantom-new-array-with-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception.js.dfg-maximal-flush-validate-no-cjit stress/regress-153486.js.dfg-maximal-flush-validate-no-cjit stress/function-with-defaults-inlining.js.dfg-maximal-flush-validate-no-cjit stress/bug-171786.js.dfg-maximal-flush-validate-no-cjit stress/call-varargs-with-different-arguments-length-after-warmup.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-direct-arguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-operation-read-value.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-late-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/get-from-scope-dynamic-onto-proxy.js.dfg-maximal-flush-validate-no-cjit stress/number-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dont-dead-lock-put-by-val-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/op-add-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-contiguous-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-min-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-3.js.dfg-maximal-flush-validate-no-cjit stress/tagged-templates-raw-strings.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-every.js.dfg-maximal-flush-validate-no-cjit stress/tricky-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-patchpoint-with-volatile-registers.js.dfg-maximal-flush-validate-no-cjit stress/modify-set-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/regress-171079.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-no-double-allocate.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-basics.js.dfg-maximal-flush-validate-no-cjit stress/lexical-scoping-break-continue.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/value-to-boolean.js.dfg-maximal-flush-validate-no-cjit stress/map-clone.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail-barely.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/varargs-construct.js.dfg-maximal-flush-validate-no-cjit stress/pad-start-calls-repeat-character-with-double.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-richards.js.dfg-maximal-flush-validate-no-cjit stress/proxy-define-own-property.js.dfg-maximal-flush-validate-no-cjit stress/varargs-inlined-simple-exit-aliasing.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-regexp-search.js.dfg-maximal-flush-validate-no-cjit stress/v8-richards-strict.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-regexp.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-symbol-mixed.js.dfg-maximal-flush-validate-no-cjit stress/spread-calling.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-stub-routine-replaced.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-rehash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-redefine-const.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mul-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/to-number-throws-correct-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-constructor.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arguments-strict-mode.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-symbol-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/for-in-prototype.js.dfg-maximal-flush-validate-no-cjit stress/es6-for-of-loop-exception.js.dfg-maximal-flush-validate-no-cjit stress/sloppy-mode-function-hoisting.js.dfg-maximal-flush-validate-no-cjit stress/array-message-passing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-instanceof.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-4.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-3.js.dfg-maximal-flush-validate-no-cjit stress/sparse-array-entry-update-144067.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/concat-append-one.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/symbol-toprimitive.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-setter-throw.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-string.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-unbalanced-getter-setter.js.dfg-maximal-flush-validate-no-cjit stress/arith-add-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-sinthesize.js.dfg-maximal-flush-validate-no-cjit stress/const-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-without-reassign-to-let.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-tagcloud.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-before-throwing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-construct.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set.js.dfg-maximal-flush-validate-no-cjit stress/runtime-throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-cache-basics.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-function-name-captured.js.dfg-maximal-flush-validate-no-cjit stress/get-by-id-throw-from-getter-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-jettison-on-constructor-change.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/istypedarrayview-intrinsic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-word-count.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-and-clean-neg-zero-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/math-ceil-basics.js.dfg-maximal-flush-validate-no-cjit stress/array-copywithin.js.dfg-maximal-flush-validate-no-cjit stress/proxy-json.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/tricky-indirectly-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit stress/infer-uninitialized-closure-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/load-varargs-then-inlined-call-exit-in-foo.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/switch-char-constant.js.dfg-maximal-flush-validate-no-cjit stress/escape-object-in-diamond-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/number-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/proxy-delete.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/date-format-tofte.js.dfg-maximal-flush-validate-no-cjit stress/regress-132147.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-intrinsic.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-with-slow-indexingtypes.js.dfg-maximal-flush-validate-no-cjit stress/check-dom-with-signature.js.dfg-maximal-flush-validate-no-cjit stress/spread-non-array.js.dfg-maximal-flush-validate-no-cjit stress/arith-sub-on-double-array-with-holes.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add.js.dfg-maximal-flush-validate-no-cjit stress/global-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/pow-stable-results.js.dfg-maximal-flush-validate-no-cjit stress/fold-multi-get-by-offset-to-get-by-offset-without-folding-the-structure-check-new.js.dfg-maximal-flush-validate-no-cjit stress/check-sub-class.js.dfg-maximal-flush-validate-no-cjit stress/generator-frame-empty.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-typedarray.js.dfg-maximal-flush-validate-no-cjit stress/tier-up-in-loop-with-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-microtasks.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id.js.dfg-maximal-flush-validate-no-cjit stress/sink-multigetbyoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-forEach.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/no-abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-configure-index.js.dfg-maximal-flush-validate-no-cjit stress/proxy-revoke.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-proxy.js.dfg-maximal-flush-validate-no-cjit stress/ai-consistency-filter-cells.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-with-reassign-to-var.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object-then-object.js.dfg-maximal-flush-validate-no-cjit stress/constant-folding-osr-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/hard-overflow-check-equal.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-async-from-sync.js.dfg-maximal-flush-validate-no-cjit stress/compare-strict-eq-integer-to-misc.js.dfg-maximal-flush-validate-no-cjit stress/v8-regexp-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rare-osr-exit-on-local.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-transcoding.js.dfg-maximal-flush-validate-no-cjit stress/math-trunc-basics.js.dfg-maximal-flush-validate-no-cjit stress/create-subclass-structure-might-throw.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-monomorphic-neutered.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-but-they-do-not-escape.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbols-and-strings.js.dfg-maximal-flush-validate-no-cjit stress/tricky-array-bounds-checks.js.dfg-maximal-flush-validate-no-cjit stress/math-floor-basics.js.dfg-maximal-flush-validate-no-cjit stress/get-local-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/typed-array-subarray.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-entries.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-throw-from-catch-block.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-array.js.dfg-maximal-flush-validate-no-cjit stress/proxy-own-keys.js.dfg-maximal-flush-validate-no-cjit stress/operation-in-throw-error.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-stable-results.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-crypto.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-some.js.dfg-maximal-flush-validate-no-cjit stress/for-in-modify-int-loop-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-resolving.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-resolving.js.dfg-maximal-flush-validate-no-cjit stress/v8-crypto-strict.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-6.js.dfg-maximal-flush-validate-no-cjit stress/promise-infinite-recursion-should-not-crash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-int52-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long.js.dfg-maximal-flush-validate-no-cjit stress/super-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/reflect-construct.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-global-of-eval.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-prototype.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-getter.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-inlined-frame-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/dead-osr-entry-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-variable-tdz.js.dfg-maximal-flush-validate-no-cjit stress/block-scoped-function-declarations.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/fake-iterators-that-throw-when-finished.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-basic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-each.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy-exception-check.js.dfg-maximal-flush-validate-no-cjit stress/global-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/ftl-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-type-check.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-forward-varargs.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/float32-array-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-super-in-eval.js.dfg-maximal-flush-validate-no-cjit
Comment on attachment 319352 [details] patch Attachment 319352 [details] did not pass jsc-ews (mac): Output: http://webkit-queues.webkit.org/results/4409841 New failing tests: microbenchmarks/exit-length-on-plain-object.js.dfg-maximal-flush-validate-no-cjit stress/promise-finally.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduce.js.dfg-maximal-flush-validate-no-cjit stress/generic-arguments-correct-delete-behavior.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-getownproperty-not-configurable.js.dfg-maximal-flush-validate-no-cjit stress/arguments-elimination-varargs-too-many-args-arg-count.js.dfg-maximal-flush-validate-no-cjit stress/super-method-calls-check-tdz.js.dfg-maximal-flush-validate-no-cjit stress/inlined-error-gets-correct-codeblock-for-bytecodeoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-keys.js.dfg-maximal-flush-validate-no-cjit stress/spec-empty-flows-through-cell-checks.js.dfg-maximal-flush-validate-no-cjit stress/reserved-word-with-escape.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-map.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-deltablue.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-arith-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-round-basics.js.dfg-maximal-flush-validate-no-cjit stress/fold-profiled-call-to-call.js.dfg-maximal-flush-validate-no-cjit stress/phantom-inadequacy.js.dfg-maximal-flush-validate-no-cjit stress/const-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-int32-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/SharedArrayBuffer-opt.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/argument-count-bytecode.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id-class.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-validate-input.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access-transitive-exports.js.dfg-maximal-flush-validate-no-cjit stress/builtin-function-is-construct-type-none.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object-or-string.js.dfg-maximal-flush-validate-no-cjit stress/new-regex-inline.js.dfg-maximal-flush-validate-no-cjit stress/ftl-shr-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-constructor.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-fill.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/pow-simple.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-1.js.dfg-maximal-flush-validate-no-cjit stress/parameter-scoping.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-2.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object.js.dfg-maximal-flush-validate-no-cjit stress/scoped-then-direct-arguments-get-by-val-in-baseline.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/large-map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/dfg-exception-try-catch-in-constructor-with-inlined-throw.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace.js.dfg-maximal-flush-validate-no-cjit stress/flatten-oversize-dictionary-object.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-string.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-of.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-double-constructor.js.dfg-maximal-flush-validate-no-cjit stress/proxy-has-property.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/for-in-invalidate-context-weird-assignments.js.dfg-maximal-flush-validate-no-cjit stress/create-this-with-callee-variants.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/branch-fold.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-oom-error-lazy-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/instanceof.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-varargs-call-throws.js.dfg-maximal-flush-validate-no-cjit stress/throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/instanceof-bound.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-id-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-div-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/compare-number-and-other.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-method.js.dfg-maximal-flush-validate-no-cjit stress/const-tdz.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-view-string-properties-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrow-functions-as-default-parameter-values.js.dfg-maximal-flush-validate-no-cjit stress/destructuring-rest-element.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/new-array-with-spread-with-normal-spread-and-phantom-spread.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-and-remove.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/call-apply-exponential-bytecode-size.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-others.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-superproperty.js.dfg-maximal-flush-validate-no-cjit stress/allocation-sinking-puthint-control-flow.js.dfg-maximal-flush-validate-no-cjit stress/async-arrow-functions-lexical-binding-in-class.js.dfg-maximal-flush-validate-no-cjit stress/cse-multi-get-by-offset-remove-checks.js.dfg-maximal-flush-validate-no-cjit stress/cloned-arguments-modification.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/locale-compare.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/proxy-is-array.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-many-arguments.js.dfg-maximal-flush-validate-no-cjit stress/array-reverse-proxy.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-earley-boyer.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-2.js.dfg-maximal-flush-validate-no-cjit stress/map-inherit-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-convert.js.dfg-maximal-flush-validate-no-cjit stress/dont-unwind-past-vm-entry-frame.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-getter.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-tdz.js.dfg-maximal-flush-validate-no-cjit stress/variable-named-eval-under-tdz.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-map.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/to-property-key-correctness.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined-optimized-in-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/fold-typed-array-properties.js.dfg-maximal-flush-validate-no-cjit stress/class-derived-from-null.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl.js.dfg-maximal-flush-validate-no-cjit stress/regress-156765.js.dfg-maximal-flush-validate-no-cjit stress/v8-splay-strict.js.dfg-maximal-flush-validate-no-cjit stress/pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/prop-type-struct-then-object-opt-fold.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/math-clz32-basics.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-having-a-bad-time.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw-interesting-value-recovery.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-double-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-slice.js.dfg-maximal-flush-validate-no-cjit stress/sink-object-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/constant-fold-multi-get-by-offset-to-get-by-offset-on-prototype-and-sink-allocation.js.dfg-maximal-flush-validate-no-cjit stress/sink-arguments-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/array-symbol-species-lazy-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-to-identity-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-host-call-throw.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-deep-stack.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-call.js.dfg-maximal-flush-validate-no-cjit stress/exception-in-to-property-key-should-be-handled-early.js.dfg-maximal-flush-validate-no-cjit stress/poly-call-stub-in-getter-stub.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-typeof.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-private-symbols.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-sane-chain-2.js.dfg-maximal-flush-validate-no-cjit stress/with.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-call-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop-no-inline-super.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-2.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit-2.js.dfg-maximal-flush-validate-no-cjit stress/arith-mul-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/dfg-try-catch-wrong-value-recovery-on-ic-miss.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-newtarget.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fail-to-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-apply.js.dfg-maximal-flush-validate-no-cjit stress/spread-correct-global-object-on-exception.js.dfg-maximal-flush-validate-no-cjit stress/inferred-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-constructor.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-promise.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-and-set-recursion-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/global-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-call.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-prototype-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-tail-call-inilned-caller.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/proxy-property-descriptor.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/dfg-to-primitive-pass-symbol.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object.js.dfg-maximal-flush-validate-no-cjit stress/sink-function-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/Number-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rest-parameter-allocation-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/many-foreach-calls.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/deltablue-for-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-xor-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-max-min-no-arguments.js.dfg-maximal-flush-validate-no-cjit stress/activation-test-loop.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-bound.js.dfg-maximal-flush-validate-no-cjit stress/es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-not-cell.js.dfg-maximal-flush-validate-no-cjit stress/tailCallForwardArguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-max-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/delete-to-object-exception.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-array-type.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-3.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-constructor.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-custom-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/controlflow-recursive.js.dfg-maximal-flush-validate-no-cjit stress/branch-may-exit-due-to-object-or-other-use-kind.js.dfg-maximal-flush-validate-no-cjit stress/bug-131764.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-bad-getter.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbol-keys.js.dfg-maximal-flush-validate-no-cjit stress/v8-earley-boyer-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduceRight.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-double-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-functions-with-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-2.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mod-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/bound-function-lazy-name-generation.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/object-keys-map-values.js.dfg-maximal-flush-validate-no-cjit stress/set-clone.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-unchecked-addition.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-4.js.dfg-maximal-flush-validate-no-cjit stress/tagged-template-tdz.js.dfg-maximal-flush-validate-no-cjit stress/regress-174044.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition-skip-first.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-derived-default-constructor.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/lazy-array-species-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-sub-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-1.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-add-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/strcat-emtpy.js.dfg-maximal-flush-validate-no-cjit stress/dont-strength-reduce-valuerep-of-doublerep.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-empty.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-value-profiling.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-is-destructuring.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-int52.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-has-get-cse-opportunity.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-cloned-arguments.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-2.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-sunspider-access-nsieve.js.dfg-maximal-flush-validate-no-cjit stress/v8-raytrace-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-each.js.dfg-maximal-flush-validate-no-cjit stress/arith-modulo-twice.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-function.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-string-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-fib.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-trivial.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long-convert.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/modify-map-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-string-keys.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-by-val-direct-with-edge-numbers.js.dfg-maximal-flush-validate-no-cjit stress/array-species-config-array-constructor.js.dfg-maximal-flush-validate-no-cjit stress/async-await-mozilla.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/sorting-benchmark.js.dfg-maximal-flush-validate-no-cjit stress/fold-based-on-int32-proof-mul-branch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/string-prototype-methods-endsWith-startsWith-includes-correctness.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/equality-type-checking.js.dfg-maximal-flush-validate-no-cjit stress/spread-optimized-properly.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-8.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-array.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-recognize.js.dfg-maximal-flush-validate-no-cjit stress/proxy-class.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-of.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/import-basic.js.dfg-maximal-flush-validate-no-cjit stress/osr-enter-to-catch-with-set-local-type-check-failure.js.dfg-maximal-flush-validate-no-cjit stress/get-by-offset-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions-dataview.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-and-default-arguments.js.dfg-maximal-flush-validate-no-cjit stress/yield-reserved-word.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays2.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-from-abs-and-floor.js.dfg-maximal-flush-validate-no-cjit stress/const-semantics.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/argument-intrinsic-not-convert-to-get-argument.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-misc.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-block-with-let.js.dfg-maximal-flush-validate-no-cjit stress/async-await-syntax.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-cells.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-neg-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-values.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-complex-with-incorrect-object.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/to-lower-case-intrinsic-on-empty-rope.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-loop-tdz.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star-interface.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-neutered.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-with-scope.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-array-prototype-methods.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-mixed-case.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set-prototype-of.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/infer-closure-const-then-mov.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability-eager.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-1.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-custom-hasinstancesymbol.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this-2.js.dfg-maximal-flush-validate-no-cjit stress/construct-forward-varargs-for-inlined-escaped-arguments.js.dfg-maximal-flush-validate-no-cjit stress/function-constructor-reading-from-global-lexical-environment.js.dfg-maximal-flush-validate-no-cjit stress/set-inherit-add.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-for-await-of.js.dfg-maximal-flush-validate-no-cjit stress/dont-crash-in-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-add-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/reflect-set-proxy-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-setter-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-generic.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-out-of-bounds-bounds-then-do-in-bounds.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-getter.js.dfg-maximal-flush-validate-no-cjit stress/ftl-new-negative-array-size.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/apply-not-apply.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-subarray.js.dfg-maximal-flush-validate-no-cjit stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-in-and-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value-or-string.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/is-undefined-exit-on-masquerader.js.dfg-maximal-flush-validate-no-cjit stress/put-direct-index-broken-2.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-ic-fail-to-call-operation-throw-error.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-splay.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-var-injection.js.dfg-maximal-flush-validate-no-cjit stress/catch-set-argument-speculation-failure.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/delta-blue-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-constant-key.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/dfg-call-class-constructor.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/math-unary-no-arg.js.dfg-maximal-flush-validate-no-cjit stress/phantom-new-array-with-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception.js.dfg-maximal-flush-validate-no-cjit stress/regress-153486.js.dfg-maximal-flush-validate-no-cjit stress/function-with-defaults-inlining.js.dfg-maximal-flush-validate-no-cjit stress/bug-171786.js.dfg-maximal-flush-validate-no-cjit stress/call-varargs-with-different-arguments-length-after-warmup.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-direct-arguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-operation-read-value.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-late-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/get-from-scope-dynamic-onto-proxy.js.dfg-maximal-flush-validate-no-cjit stress/number-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dont-dead-lock-put-by-val-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/op-add-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-contiguous-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-min-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-3.js.dfg-maximal-flush-validate-no-cjit stress/tagged-templates-raw-strings.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-every.js.dfg-maximal-flush-validate-no-cjit stress/tricky-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-patchpoint-with-volatile-registers.js.dfg-maximal-flush-validate-no-cjit stress/modify-set-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/regress-171079.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-no-double-allocate.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-basics.js.dfg-maximal-flush-validate-no-cjit stress/lexical-scoping-break-continue.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/value-to-boolean.js.dfg-maximal-flush-validate-no-cjit stress/map-clone.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail-barely.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/varargs-construct.js.dfg-maximal-flush-validate-no-cjit stress/pad-start-calls-repeat-character-with-double.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-richards.js.dfg-maximal-flush-validate-no-cjit stress/proxy-define-own-property.js.dfg-maximal-flush-validate-no-cjit stress/varargs-inlined-simple-exit-aliasing.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-regexp-search.js.dfg-maximal-flush-validate-no-cjit stress/v8-richards-strict.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-regexp.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-symbol-mixed.js.dfg-maximal-flush-validate-no-cjit stress/spread-calling.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-stub-routine-replaced.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-rehash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-redefine-const.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mul-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/to-number-throws-correct-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-constructor.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arguments-strict-mode.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-symbol-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/for-in-prototype.js.dfg-maximal-flush-validate-no-cjit stress/es6-for-of-loop-exception.js.dfg-maximal-flush-validate-no-cjit stress/sloppy-mode-function-hoisting.js.dfg-maximal-flush-validate-no-cjit stress/array-message-passing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-instanceof.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-4.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-3.js.dfg-maximal-flush-validate-no-cjit stress/sparse-array-entry-update-144067.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/concat-append-one.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/symbol-toprimitive.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-setter-throw.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-string.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-unbalanced-getter-setter.js.dfg-maximal-flush-validate-no-cjit stress/arith-add-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-sinthesize.js.dfg-maximal-flush-validate-no-cjit stress/const-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-without-reassign-to-let.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-tagcloud.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-before-throwing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-construct.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set.js.dfg-maximal-flush-validate-no-cjit stress/runtime-throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-cache-basics.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-function-name-captured.js.dfg-maximal-flush-validate-no-cjit stress/get-by-id-throw-from-getter-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-jettison-on-constructor-change.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/istypedarrayview-intrinsic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-word-count.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-and-clean-neg-zero-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/math-ceil-basics.js.dfg-maximal-flush-validate-no-cjit stress/array-copywithin.js.dfg-maximal-flush-validate-no-cjit stress/proxy-json.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/tricky-indirectly-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit stress/infer-uninitialized-closure-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/load-varargs-then-inlined-call-exit-in-foo.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/switch-char-constant.js.dfg-maximal-flush-validate-no-cjit stress/escape-object-in-diamond-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/number-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/proxy-delete.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/date-format-tofte.js.dfg-maximal-flush-validate-no-cjit stress/regress-132147.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-intrinsic.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-with-slow-indexingtypes.js.dfg-maximal-flush-validate-no-cjit stress/check-dom-with-signature.js.dfg-maximal-flush-validate-no-cjit stress/spread-non-array.js.dfg-maximal-flush-validate-no-cjit stress/arith-sub-on-double-array-with-holes.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add.js.dfg-maximal-flush-validate-no-cjit stress/global-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/pow-stable-results.js.dfg-maximal-flush-validate-no-cjit stress/fold-multi-get-by-offset-to-get-by-offset-without-folding-the-structure-check-new.js.dfg-maximal-flush-validate-no-cjit stress/check-sub-class.js.dfg-maximal-flush-validate-no-cjit stress/generator-frame-empty.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-typedarray.js.dfg-maximal-flush-validate-no-cjit stress/tier-up-in-loop-with-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-microtasks.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id.js.dfg-maximal-flush-validate-no-cjit stress/sink-multigetbyoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-forEach.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/no-abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-configure-index.js.dfg-maximal-flush-validate-no-cjit stress/proxy-revoke.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-proxy.js.dfg-maximal-flush-validate-no-cjit stress/ai-consistency-filter-cells.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-with-reassign-to-var.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object-then-object.js.dfg-maximal-flush-validate-no-cjit stress/constant-folding-osr-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/hard-overflow-check-equal.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-async-from-sync.js.dfg-maximal-flush-validate-no-cjit stress/compare-strict-eq-integer-to-misc.js.dfg-maximal-flush-validate-no-cjit stress/v8-regexp-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rare-osr-exit-on-local.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-transcoding.js.dfg-maximal-flush-validate-no-cjit stress/math-trunc-basics.js.dfg-maximal-flush-validate-no-cjit stress/create-subclass-structure-might-throw.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-monomorphic-neutered.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-but-they-do-not-escape.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbols-and-strings.js.dfg-maximal-flush-validate-no-cjit stress/tricky-array-bounds-checks.js.dfg-maximal-flush-validate-no-cjit stress/math-floor-basics.js.dfg-maximal-flush-validate-no-cjit stress/get-local-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/typed-array-subarray.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-entries.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-throw-from-catch-block.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-array.js.dfg-maximal-flush-validate-no-cjit stress/proxy-own-keys.js.dfg-maximal-flush-validate-no-cjit stress/operation-in-throw-error.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-stable-results.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-crypto.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-some.js.dfg-maximal-flush-validate-no-cjit stress/for-in-modify-int-loop-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-resolving.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-resolving.js.dfg-maximal-flush-validate-no-cjit stress/v8-crypto-strict.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-6.js.dfg-maximal-flush-validate-no-cjit stress/promise-infinite-recursion-should-not-crash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-int52-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long.js.dfg-maximal-flush-validate-no-cjit stress/super-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/reflect-construct.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-global-of-eval.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-prototype.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-getter.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-inlined-frame-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/dead-osr-entry-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-variable-tdz.js.dfg-maximal-flush-validate-no-cjit stress/block-scoped-function-declarations.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/fake-iterators-that-throw-when-finished.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-basic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-each.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy-exception-check.js.dfg-maximal-flush-validate-no-cjit stress/global-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/ftl-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-type-check.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-forward-varargs.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/float32-array-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-super-in-eval.js.dfg-maximal-flush-validate-no-cjit
Created attachment 319388 [details] patch
Comment on attachment 319388 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=319388&action=review r=me with nit. > Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:5222 > + uint32_t errorType = currentInstruction[2].u.unsignedValue; Nit: You could add names for throw_static_errors offsets! > Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:10296 > +#if USE(JSVALUE64) > + callOperation(operationThrowDFG, valueRegs.gpr()); > +#else > + callOperation(operationThrowDFG, valueRegs); > +#endif Nit: instead of an #if can you add a callOperation(V_JITOperation_EJssUi, JSValueRegs)?
Comment on attachment 319388 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=319388&action=review >> Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:5222 >> + uint32_t errorType = currentInstruction[2].u.unsignedValue; > > Nit: You could add names for throw_static_errors offsets! I'll embark on this journey in another patch >> Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:10296 >> +#endif > > Nit: instead of an #if can you add a callOperation(V_JITOperation_EJssUi, JSValueRegs)? will do
Created attachment 319540 [details] patch for landing
Comment on attachment 319540 [details] patch for landing Clearing flags on attachment: 319540 Committed r221472: <http://trac.webkit.org/changeset/221472>
All reviewed patches have been landed. Closing bug.