RESOLVED FIXED176060
Throwing an exception in the DFG/FTL should not cause a jettison
https://bugs.webkit.org/show_bug.cgi?id=176060
Summary Throwing an exception in the DFG/FTL should not cause a jettison
Saam Barati
Reported 2017-08-29 11:26:21 PDT
This is expected behavior, there is no reason we should repeatedly jettison and recompile.
Attachments
patch (4.28 KB, patch)
2017-08-29 14:49 PDT, Saam Barati
msaboff: review+
msaboff: commit-queue-
patch (18.79 KB, patch)
2017-08-30 01:09 PDT, Saam Barati
buildbot: commit-queue-
patch (18.54 KB, patch)
2017-08-30 12:48 PDT, Saam Barati
keith_miller: review+
patch for landing (19.55 KB, patch)
2017-08-31 16:42 PDT, Saam Barati
no flags
Saam Barati
Comment 1 2017-08-29 14:49:53 PDT
Michael Saboff
Comment 2 2017-08-29 14:53:17 PDT
Comment on attachment 319285 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=319285&action=review r=me > Source/JavaScriptCore/ChangeLog:3 > + Throwing an exception in the DFG/FTL should not be a jittison-able OSR exit I think you want the bug title to be "... jettison-able ...".
Saam Barati
Comment 3 2017-08-29 14:55:40 PDT
Radar WebKit Bug Importer
Comment 4 2017-08-29 14:56:41 PDT
Ryan Haddad
Comment 5 2017-08-29 18:11:31 PDT
This change caused 3 JSC test failures: ** The following JSC stress test failures have been introduced: jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout-ftl-eager-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout-ftl-no-cjit https://build.webkit.org/builders/Apple%20Sierra%20Release%20JSC%20%28Tests%29/builds/3457
Saam Barati
Comment 6 2017-08-29 19:59:42 PDT
Will look into this in an hour or so.
Saam Barati
Comment 7 2017-08-29 20:49:05 PDT
Very weird, I can't reproduce this locally running the test manually. However, I can reproduce it when running it via run-jsc-stress-tests
Saam Barati
Comment 8 2017-08-29 20:51:28 PDT
Nevermind, I can reproduce it. This is super weird.
Saam Barati
Comment 9 2017-08-29 21:03:23 PDT
I think I see the bug. We're running the test with "testTheFTL=true", however, I don't think we're ever compiling for the FTL because we just repeatedly exit at the throw site. We also never increment our FTL optimization counter. The test in layout tests will ensure that we make it to the DFG, but the CodeBlock is lying and saying we're not in the DFG: unsigned CodeBlock::numberOfDFGCompiles() { ASSERT(JITCode::isBaselineCode(jitType())); if (Options::testTheFTL()) { if (m_didFailFTLCompilation) return 1000000; return (m_hasBeenCompiledWithFTL ? 1 : 0) + m_reoptimizationRetryCounter; } return (JITCode::isOptimizingJIT(replacement()->jitType()) ? 1 : 0) + m_reoptimizationRetryCounter; }
Saam Barati
Comment 10 2017-08-29 21:13:31 PDT
Ima roll out for now. I think we should just treat Throw/ThrowStaticError like a terminal and actually throw an exception from the DFG/FTL. Anybody have any reasons to oppose doing this?
WebKit Commit Bot
Comment 11 2017-08-29 21:15:17 PDT
Re-opened since this is blocked by bug 176090
Saam Barati
Comment 12 2017-08-30 01:09:57 PDT
Created attachment 319352 [details] patch Might be it. Let's see what EWS thinks.
Build Bot
Comment 13 2017-08-30 06:05:38 PDT
Comment on attachment 319352 [details] patch Attachment 319352 [details] did not pass jsc-ews (mac): Output: http://webkit-queues.webkit.org/results/4409440 New failing tests: microbenchmarks/exit-length-on-plain-object.js.dfg-maximal-flush-validate-no-cjit stress/promise-finally.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduce.js.dfg-maximal-flush-validate-no-cjit stress/generic-arguments-correct-delete-behavior.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-getownproperty-not-configurable.js.dfg-maximal-flush-validate-no-cjit stress/arguments-elimination-varargs-too-many-args-arg-count.js.dfg-maximal-flush-validate-no-cjit stress/super-method-calls-check-tdz.js.dfg-maximal-flush-validate-no-cjit stress/inlined-error-gets-correct-codeblock-for-bytecodeoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-keys.js.dfg-maximal-flush-validate-no-cjit stress/spec-empty-flows-through-cell-checks.js.dfg-maximal-flush-validate-no-cjit stress/reserved-word-with-escape.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-map.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-deltablue.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-arith-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-round-basics.js.dfg-maximal-flush-validate-no-cjit stress/fold-profiled-call-to-call.js.dfg-maximal-flush-validate-no-cjit stress/phantom-inadequacy.js.dfg-maximal-flush-validate-no-cjit stress/const-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-int32-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/SharedArrayBuffer-opt.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/argument-count-bytecode.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id-class.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-validate-input.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access-transitive-exports.js.dfg-maximal-flush-validate-no-cjit stress/builtin-function-is-construct-type-none.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object-or-string.js.dfg-maximal-flush-validate-no-cjit stress/new-regex-inline.js.dfg-maximal-flush-validate-no-cjit stress/ftl-shr-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-constructor.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-fill.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/pow-simple.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-1.js.dfg-maximal-flush-validate-no-cjit stress/parameter-scoping.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-2.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object.js.dfg-maximal-flush-validate-no-cjit stress/scoped-then-direct-arguments-get-by-val-in-baseline.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/large-map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/dfg-exception-try-catch-in-constructor-with-inlined-throw.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace.js.dfg-maximal-flush-validate-no-cjit stress/flatten-oversize-dictionary-object.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-string.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-of.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-double-constructor.js.dfg-maximal-flush-validate-no-cjit stress/proxy-has-property.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/for-in-invalidate-context-weird-assignments.js.dfg-maximal-flush-validate-no-cjit stress/create-this-with-callee-variants.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/branch-fold.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-oom-error-lazy-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/instanceof.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-varargs-call-throws.js.dfg-maximal-flush-validate-no-cjit stress/throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/instanceof-bound.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-id-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-div-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/compare-number-and-other.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-method.js.dfg-maximal-flush-validate-no-cjit stress/const-tdz.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-view-string-properties-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrow-functions-as-default-parameter-values.js.dfg-maximal-flush-validate-no-cjit stress/destructuring-rest-element.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/new-array-with-spread-with-normal-spread-and-phantom-spread.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-and-remove.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/call-apply-exponential-bytecode-size.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-others.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-superproperty.js.dfg-maximal-flush-validate-no-cjit stress/allocation-sinking-puthint-control-flow.js.dfg-maximal-flush-validate-no-cjit stress/async-arrow-functions-lexical-binding-in-class.js.dfg-maximal-flush-validate-no-cjit stress/cse-multi-get-by-offset-remove-checks.js.dfg-maximal-flush-validate-no-cjit stress/cloned-arguments-modification.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/locale-compare.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/proxy-is-array.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-many-arguments.js.dfg-maximal-flush-validate-no-cjit stress/array-reverse-proxy.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-earley-boyer.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-2.js.dfg-maximal-flush-validate-no-cjit stress/map-inherit-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-convert.js.dfg-maximal-flush-validate-no-cjit stress/dont-unwind-past-vm-entry-frame.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-getter.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-tdz.js.dfg-maximal-flush-validate-no-cjit stress/variable-named-eval-under-tdz.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-map.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/to-property-key-correctness.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined-optimized-in-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/fold-typed-array-properties.js.dfg-maximal-flush-validate-no-cjit stress/class-derived-from-null.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl.js.dfg-maximal-flush-validate-no-cjit stress/regress-156765.js.dfg-maximal-flush-validate-no-cjit stress/v8-splay-strict.js.dfg-maximal-flush-validate-no-cjit stress/pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/prop-type-struct-then-object-opt-fold.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/math-clz32-basics.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-having-a-bad-time.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw-interesting-value-recovery.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-double-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-slice.js.dfg-maximal-flush-validate-no-cjit stress/sink-object-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/constant-fold-multi-get-by-offset-to-get-by-offset-on-prototype-and-sink-allocation.js.dfg-maximal-flush-validate-no-cjit stress/sink-arguments-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/array-symbol-species-lazy-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-to-identity-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-host-call-throw.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-deep-stack.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-call.js.dfg-maximal-flush-validate-no-cjit stress/exception-in-to-property-key-should-be-handled-early.js.dfg-maximal-flush-validate-no-cjit stress/poly-call-stub-in-getter-stub.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-typeof.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-private-symbols.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-sane-chain-2.js.dfg-maximal-flush-validate-no-cjit stress/with.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-call-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop-no-inline-super.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-2.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit-2.js.dfg-maximal-flush-validate-no-cjit stress/arith-mul-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/dfg-try-catch-wrong-value-recovery-on-ic-miss.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-newtarget.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fail-to-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-apply.js.dfg-maximal-flush-validate-no-cjit stress/spread-correct-global-object-on-exception.js.dfg-maximal-flush-validate-no-cjit stress/inferred-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-constructor.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-var-injection.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-promise.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-and-set-recursion-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/global-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-call.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-prototype-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-tail-call-inilned-caller.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/proxy-property-descriptor.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/dfg-to-primitive-pass-symbol.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object.js.dfg-maximal-flush-validate-no-cjit stress/sink-function-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/Number-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rest-parameter-allocation-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/many-foreach-calls.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/deltablue-for-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-xor-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-max-min-no-arguments.js.dfg-maximal-flush-validate-no-cjit stress/activation-test-loop.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-bound.js.dfg-maximal-flush-validate-no-cjit stress/es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-not-cell.js.dfg-maximal-flush-validate-no-cjit stress/tailCallForwardArguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-max-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/delete-to-object-exception.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-array-type.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-3.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-constructor.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-custom-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/controlflow-recursive.js.dfg-maximal-flush-validate-no-cjit stress/branch-may-exit-due-to-object-or-other-use-kind.js.dfg-maximal-flush-validate-no-cjit stress/bug-131764.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-bad-getter.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbol-keys.js.dfg-maximal-flush-validate-no-cjit stress/v8-earley-boyer-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduceRight.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-double-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-functions-with-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-2.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mod-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/bound-function-lazy-name-generation.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/object-keys-map-values.js.dfg-maximal-flush-validate-no-cjit stress/set-clone.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-unchecked-addition.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-4.js.dfg-maximal-flush-validate-no-cjit stress/tagged-template-tdz.js.dfg-maximal-flush-validate-no-cjit stress/regress-174044.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition-skip-first.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-derived-default-constructor.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/lazy-array-species-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-sub-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-1.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-add-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/strcat-emtpy.js.dfg-maximal-flush-validate-no-cjit stress/dont-strength-reduce-valuerep-of-doublerep.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-empty.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-value-profiling.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-is-destructuring.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-int52.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-has-get-cse-opportunity.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-cloned-arguments.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-2.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-sunspider-access-nsieve.js.dfg-maximal-flush-validate-no-cjit stress/v8-raytrace-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-each.js.dfg-maximal-flush-validate-no-cjit stress/arith-modulo-twice.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-function.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-string-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-fib.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-trivial.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long-convert.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/modify-map-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-string-keys.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-by-val-direct-with-edge-numbers.js.dfg-maximal-flush-validate-no-cjit stress/array-species-config-array-constructor.js.dfg-maximal-flush-validate-no-cjit stress/async-await-mozilla.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/sorting-benchmark.js.dfg-maximal-flush-validate-no-cjit stress/fold-based-on-int32-proof-mul-branch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/string-prototype-methods-endsWith-startsWith-includes-correctness.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/equality-type-checking.js.dfg-maximal-flush-validate-no-cjit stress/spread-optimized-properly.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-8.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-array.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-recognize.js.dfg-maximal-flush-validate-no-cjit stress/proxy-class.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-of.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/import-basic.js.dfg-maximal-flush-validate-no-cjit stress/osr-enter-to-catch-with-set-local-type-check-failure.js.dfg-maximal-flush-validate-no-cjit stress/get-by-offset-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions-dataview.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-and-default-arguments.js.dfg-maximal-flush-validate-no-cjit stress/yield-reserved-word.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays2.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-from-abs-and-floor.js.dfg-maximal-flush-validate-no-cjit stress/const-semantics.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/argument-intrinsic-not-convert-to-get-argument.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-misc.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-block-with-let.js.dfg-maximal-flush-validate-no-cjit stress/async-await-syntax.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-cells.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-neg-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-values.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-complex-with-incorrect-object.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/to-lower-case-intrinsic-on-empty-rope.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-loop-tdz.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star-interface.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-neutered.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-with-scope.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-array-prototype-methods.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-mixed-case.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set-prototype-of.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/infer-closure-const-then-mov.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability-eager.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-1.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-custom-hasinstancesymbol.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this-2.js.dfg-maximal-flush-validate-no-cjit stress/construct-forward-varargs-for-inlined-escaped-arguments.js.dfg-maximal-flush-validate-no-cjit stress/function-constructor-reading-from-global-lexical-environment.js.dfg-maximal-flush-validate-no-cjit stress/set-inherit-add.js.dfg-maximal-flush-validate-no-cjit stress/dont-crash-in-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-add-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/reflect-set-proxy-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-setter-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-generic.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-out-of-bounds-bounds-then-do-in-bounds.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-getter.js.dfg-maximal-flush-validate-no-cjit stress/ftl-new-negative-array-size.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/apply-not-apply.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-subarray.js.dfg-maximal-flush-validate-no-cjit stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-in-and-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value-or-string.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/is-undefined-exit-on-masquerader.js.dfg-maximal-flush-validate-no-cjit stress/put-direct-index-broken-2.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-ic-fail-to-call-operation-throw-error.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-splay.js.dfg-maximal-flush-validate-no-cjit stress/catch-set-argument-speculation-failure.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/delta-blue-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-constant-key.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/dfg-call-class-constructor.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/math-unary-no-arg.js.dfg-maximal-flush-validate-no-cjit stress/phantom-new-array-with-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception.js.dfg-maximal-flush-validate-no-cjit stress/regress-153486.js.dfg-maximal-flush-validate-no-cjit stress/function-with-defaults-inlining.js.dfg-maximal-flush-validate-no-cjit stress/bug-171786.js.dfg-maximal-flush-validate-no-cjit stress/call-varargs-with-different-arguments-length-after-warmup.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-direct-arguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-operation-read-value.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-late-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/get-from-scope-dynamic-onto-proxy.js.dfg-maximal-flush-validate-no-cjit stress/number-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dont-dead-lock-put-by-val-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/op-add-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-contiguous-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-min-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-3.js.dfg-maximal-flush-validate-no-cjit stress/tagged-templates-raw-strings.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-every.js.dfg-maximal-flush-validate-no-cjit stress/tricky-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-patchpoint-with-volatile-registers.js.dfg-maximal-flush-validate-no-cjit stress/modify-set-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/regress-171079.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-no-double-allocate.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-basics.js.dfg-maximal-flush-validate-no-cjit stress/lexical-scoping-break-continue.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/value-to-boolean.js.dfg-maximal-flush-validate-no-cjit stress/map-clone.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail-barely.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/varargs-construct.js.dfg-maximal-flush-validate-no-cjit stress/pad-start-calls-repeat-character-with-double.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-richards.js.dfg-maximal-flush-validate-no-cjit stress/proxy-define-own-property.js.dfg-maximal-flush-validate-no-cjit stress/varargs-inlined-simple-exit-aliasing.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-regexp-search.js.dfg-maximal-flush-validate-no-cjit stress/v8-richards-strict.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-regexp.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-symbol-mixed.js.dfg-maximal-flush-validate-no-cjit stress/spread-calling.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-stub-routine-replaced.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-rehash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-redefine-const.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mul-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/to-number-throws-correct-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-constructor.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arguments-strict-mode.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-symbol-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/for-in-prototype.js.dfg-maximal-flush-validate-no-cjit stress/es6-for-of-loop-exception.js.dfg-maximal-flush-validate-no-cjit stress/sloppy-mode-function-hoisting.js.dfg-maximal-flush-validate-no-cjit stress/array-message-passing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-instanceof.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-4.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-3.js.dfg-maximal-flush-validate-no-cjit stress/sparse-array-entry-update-144067.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/concat-append-one.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/symbol-toprimitive.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-setter-throw.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-string.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-unbalanced-getter-setter.js.dfg-maximal-flush-validate-no-cjit stress/arith-add-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-sinthesize.js.dfg-maximal-flush-validate-no-cjit stress/const-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-without-reassign-to-let.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-tagcloud.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-before-throwing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-construct.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set.js.dfg-maximal-flush-validate-no-cjit stress/runtime-throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-cache-basics.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-function-name-captured.js.dfg-maximal-flush-validate-no-cjit stress/get-by-id-throw-from-getter-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-jettison-on-constructor-change.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/istypedarrayview-intrinsic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-word-count.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-and-clean-neg-zero-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/math-ceil-basics.js.dfg-maximal-flush-validate-no-cjit stress/array-copywithin.js.dfg-maximal-flush-validate-no-cjit stress/proxy-json.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/tricky-indirectly-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit stress/infer-uninitialized-closure-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/load-varargs-then-inlined-call-exit-in-foo.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/switch-char-constant.js.dfg-maximal-flush-validate-no-cjit stress/escape-object-in-diamond-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/number-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/proxy-delete.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/date-format-tofte.js.dfg-maximal-flush-validate-no-cjit stress/regress-132147.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-intrinsic.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-with-slow-indexingtypes.js.dfg-maximal-flush-validate-no-cjit stress/check-dom-with-signature.js.dfg-maximal-flush-validate-no-cjit stress/spread-non-array.js.dfg-maximal-flush-validate-no-cjit stress/arith-sub-on-double-array-with-holes.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add.js.dfg-maximal-flush-validate-no-cjit stress/global-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/pow-stable-results.js.dfg-maximal-flush-validate-no-cjit stress/fold-multi-get-by-offset-to-get-by-offset-without-folding-the-structure-check-new.js.dfg-maximal-flush-validate-no-cjit stress/check-sub-class.js.dfg-maximal-flush-validate-no-cjit stress/generator-frame-empty.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-typedarray.js.dfg-maximal-flush-validate-no-cjit stress/tier-up-in-loop-with-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-microtasks.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id.js.dfg-maximal-flush-validate-no-cjit stress/sink-multigetbyoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-forEach.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/no-abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-configure-index.js.dfg-maximal-flush-validate-no-cjit stress/proxy-revoke.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-proxy.js.dfg-maximal-flush-validate-no-cjit stress/ai-consistency-filter-cells.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-with-reassign-to-var.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object-then-object.js.dfg-maximal-flush-validate-no-cjit stress/constant-folding-osr-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/hard-overflow-check-equal.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-async-from-sync.js.dfg-maximal-flush-validate-no-cjit stress/compare-strict-eq-integer-to-misc.js.dfg-maximal-flush-validate-no-cjit stress/v8-regexp-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rare-osr-exit-on-local.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-transcoding.js.dfg-maximal-flush-validate-no-cjit stress/math-trunc-basics.js.dfg-maximal-flush-validate-no-cjit stress/create-subclass-structure-might-throw.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-monomorphic-neutered.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-but-they-do-not-escape.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbols-and-strings.js.dfg-maximal-flush-validate-no-cjit stress/tricky-array-bounds-checks.js.dfg-maximal-flush-validate-no-cjit stress/math-floor-basics.js.dfg-maximal-flush-validate-no-cjit stress/get-local-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/typed-array-subarray.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-entries.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-throw-from-catch-block.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-array.js.dfg-maximal-flush-validate-no-cjit stress/proxy-own-keys.js.dfg-maximal-flush-validate-no-cjit stress/operation-in-throw-error.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-stable-results.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-crypto.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-some.js.dfg-maximal-flush-validate-no-cjit stress/for-in-modify-int-loop-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-resolving.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-resolving.js.dfg-maximal-flush-validate-no-cjit stress/v8-crypto-strict.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-6.js.dfg-maximal-flush-validate-no-cjit stress/promise-infinite-recursion-should-not-crash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-int52-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long.js.dfg-maximal-flush-validate-no-cjit stress/super-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/reflect-construct.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-global-of-eval.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-prototype.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-getter.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-inlined-frame-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/dead-osr-entry-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-variable-tdz.js.dfg-maximal-flush-validate-no-cjit stress/block-scoped-function-declarations.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/fake-iterators-that-throw-when-finished.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-basic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-each.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy-exception-check.js.dfg-maximal-flush-validate-no-cjit stress/global-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/ftl-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-type-check.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-forward-varargs.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/float32-array-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-super-in-eval.js.dfg-maximal-flush-validate-no-cjit
Build Bot
Comment 14 2017-08-30 07:59:46 PDT
Comment on attachment 319352 [details] patch Attachment 319352 [details] did not pass jsc-ews (mac): Output: http://webkit-queues.webkit.org/results/4409841 New failing tests: microbenchmarks/exit-length-on-plain-object.js.dfg-maximal-flush-validate-no-cjit stress/promise-finally.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduce.js.dfg-maximal-flush-validate-no-cjit stress/generic-arguments-correct-delete-behavior.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-getownproperty-not-configurable.js.dfg-maximal-flush-validate-no-cjit stress/arguments-elimination-varargs-too-many-args-arg-count.js.dfg-maximal-flush-validate-no-cjit stress/super-method-calls-check-tdz.js.dfg-maximal-flush-validate-no-cjit stress/inlined-error-gets-correct-codeblock-for-bytecodeoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-keys.js.dfg-maximal-flush-validate-no-cjit stress/spec-empty-flows-through-cell-checks.js.dfg-maximal-flush-validate-no-cjit stress/reserved-word-with-escape.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-map.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-deltablue.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-arith-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-round-basics.js.dfg-maximal-flush-validate-no-cjit stress/fold-profiled-call-to-call.js.dfg-maximal-flush-validate-no-cjit stress/phantom-inadequacy.js.dfg-maximal-flush-validate-no-cjit stress/const-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-int32-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/SharedArrayBuffer-opt.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/argument-count-bytecode.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id-class.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-validate-input.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access-transitive-exports.js.dfg-maximal-flush-validate-no-cjit stress/builtin-function-is-construct-type-none.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object-or-string.js.dfg-maximal-flush-validate-no-cjit stress/new-regex-inline.js.dfg-maximal-flush-validate-no-cjit stress/ftl-shr-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-constructor.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-fill.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/pow-simple.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-1.js.dfg-maximal-flush-validate-no-cjit stress/parameter-scoping.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-2.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object.js.dfg-maximal-flush-validate-no-cjit stress/scoped-then-direct-arguments-get-by-val-in-baseline.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/large-map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/dfg-exception-try-catch-in-constructor-with-inlined-throw.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace.js.dfg-maximal-flush-validate-no-cjit stress/flatten-oversize-dictionary-object.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-string.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-of.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-double-constructor.js.dfg-maximal-flush-validate-no-cjit stress/proxy-has-property.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/for-in-invalidate-context-weird-assignments.js.dfg-maximal-flush-validate-no-cjit stress/create-this-with-callee-variants.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/branch-fold.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-oom-error-lazy-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/instanceof.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-varargs-call-throws.js.dfg-maximal-flush-validate-no-cjit stress/throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/instanceof-bound.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-id-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-div-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/compare-number-and-other.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-method.js.dfg-maximal-flush-validate-no-cjit stress/const-tdz.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-view-string-properties-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrow-functions-as-default-parameter-values.js.dfg-maximal-flush-validate-no-cjit stress/destructuring-rest-element.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/new-array-with-spread-with-normal-spread-and-phantom-spread.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-and-remove.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/call-apply-exponential-bytecode-size.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-others.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-superproperty.js.dfg-maximal-flush-validate-no-cjit stress/allocation-sinking-puthint-control-flow.js.dfg-maximal-flush-validate-no-cjit stress/async-arrow-functions-lexical-binding-in-class.js.dfg-maximal-flush-validate-no-cjit stress/cse-multi-get-by-offset-remove-checks.js.dfg-maximal-flush-validate-no-cjit stress/cloned-arguments-modification.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/locale-compare.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/proxy-is-array.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-many-arguments.js.dfg-maximal-flush-validate-no-cjit stress/array-reverse-proxy.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-earley-boyer.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-2.js.dfg-maximal-flush-validate-no-cjit stress/map-inherit-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-convert.js.dfg-maximal-flush-validate-no-cjit stress/dont-unwind-past-vm-entry-frame.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-getter.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-tdz.js.dfg-maximal-flush-validate-no-cjit stress/variable-named-eval-under-tdz.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-map.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/to-property-key-correctness.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined-optimized-in-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/fold-typed-array-properties.js.dfg-maximal-flush-validate-no-cjit stress/class-derived-from-null.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl.js.dfg-maximal-flush-validate-no-cjit stress/regress-156765.js.dfg-maximal-flush-validate-no-cjit stress/v8-splay-strict.js.dfg-maximal-flush-validate-no-cjit stress/pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/prop-type-struct-then-object-opt-fold.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/math-clz32-basics.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-having-a-bad-time.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw-interesting-value-recovery.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-double-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-slice.js.dfg-maximal-flush-validate-no-cjit stress/sink-object-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/constant-fold-multi-get-by-offset-to-get-by-offset-on-prototype-and-sink-allocation.js.dfg-maximal-flush-validate-no-cjit stress/sink-arguments-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/array-symbol-species-lazy-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-to-identity-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-host-call-throw.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-deep-stack.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-call.js.dfg-maximal-flush-validate-no-cjit stress/exception-in-to-property-key-should-be-handled-early.js.dfg-maximal-flush-validate-no-cjit stress/poly-call-stub-in-getter-stub.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-typeof.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-private-symbols.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-sane-chain-2.js.dfg-maximal-flush-validate-no-cjit stress/with.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-call-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop-no-inline-super.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-2.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit-2.js.dfg-maximal-flush-validate-no-cjit stress/arith-mul-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/dfg-try-catch-wrong-value-recovery-on-ic-miss.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-newtarget.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fail-to-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-apply.js.dfg-maximal-flush-validate-no-cjit stress/spread-correct-global-object-on-exception.js.dfg-maximal-flush-validate-no-cjit stress/inferred-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-constructor.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-promise.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-and-set-recursion-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/global-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-call.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-prototype-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-tail-call-inilned-caller.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/proxy-property-descriptor.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/dfg-to-primitive-pass-symbol.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object.js.dfg-maximal-flush-validate-no-cjit stress/sink-function-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/Number-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rest-parameter-allocation-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/many-foreach-calls.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/deltablue-for-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-xor-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-max-min-no-arguments.js.dfg-maximal-flush-validate-no-cjit stress/activation-test-loop.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-bound.js.dfg-maximal-flush-validate-no-cjit stress/es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-not-cell.js.dfg-maximal-flush-validate-no-cjit stress/tailCallForwardArguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-max-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/delete-to-object-exception.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-array-type.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-3.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-constructor.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-custom-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/controlflow-recursive.js.dfg-maximal-flush-validate-no-cjit stress/branch-may-exit-due-to-object-or-other-use-kind.js.dfg-maximal-flush-validate-no-cjit stress/bug-131764.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-bad-getter.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbol-keys.js.dfg-maximal-flush-validate-no-cjit stress/v8-earley-boyer-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduceRight.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-double-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-functions-with-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-2.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mod-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/bound-function-lazy-name-generation.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/object-keys-map-values.js.dfg-maximal-flush-validate-no-cjit stress/set-clone.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-unchecked-addition.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-4.js.dfg-maximal-flush-validate-no-cjit stress/tagged-template-tdz.js.dfg-maximal-flush-validate-no-cjit stress/regress-174044.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition-skip-first.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-derived-default-constructor.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/lazy-array-species-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-sub-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-1.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-add-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/strcat-emtpy.js.dfg-maximal-flush-validate-no-cjit stress/dont-strength-reduce-valuerep-of-doublerep.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-empty.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-value-profiling.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-is-destructuring.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-int52.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-has-get-cse-opportunity.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-cloned-arguments.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-2.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-sunspider-access-nsieve.js.dfg-maximal-flush-validate-no-cjit stress/v8-raytrace-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-each.js.dfg-maximal-flush-validate-no-cjit stress/arith-modulo-twice.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-function.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-string-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-fib.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-trivial.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long-convert.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/modify-map-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-string-keys.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-by-val-direct-with-edge-numbers.js.dfg-maximal-flush-validate-no-cjit stress/array-species-config-array-constructor.js.dfg-maximal-flush-validate-no-cjit stress/async-await-mozilla.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/sorting-benchmark.js.dfg-maximal-flush-validate-no-cjit stress/fold-based-on-int32-proof-mul-branch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/string-prototype-methods-endsWith-startsWith-includes-correctness.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/equality-type-checking.js.dfg-maximal-flush-validate-no-cjit stress/spread-optimized-properly.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-8.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-array.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-recognize.js.dfg-maximal-flush-validate-no-cjit stress/proxy-class.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-of.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/import-basic.js.dfg-maximal-flush-validate-no-cjit stress/osr-enter-to-catch-with-set-local-type-check-failure.js.dfg-maximal-flush-validate-no-cjit stress/get-by-offset-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions-dataview.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-and-default-arguments.js.dfg-maximal-flush-validate-no-cjit stress/yield-reserved-word.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays2.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-from-abs-and-floor.js.dfg-maximal-flush-validate-no-cjit stress/const-semantics.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/argument-intrinsic-not-convert-to-get-argument.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-misc.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-block-with-let.js.dfg-maximal-flush-validate-no-cjit stress/async-await-syntax.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-cells.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-neg-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-values.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-complex-with-incorrect-object.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/to-lower-case-intrinsic-on-empty-rope.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-loop-tdz.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star-interface.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-neutered.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-with-scope.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-array-prototype-methods.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-mixed-case.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set-prototype-of.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/infer-closure-const-then-mov.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability-eager.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-1.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-custom-hasinstancesymbol.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this-2.js.dfg-maximal-flush-validate-no-cjit stress/construct-forward-varargs-for-inlined-escaped-arguments.js.dfg-maximal-flush-validate-no-cjit stress/function-constructor-reading-from-global-lexical-environment.js.dfg-maximal-flush-validate-no-cjit stress/set-inherit-add.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-for-await-of.js.dfg-maximal-flush-validate-no-cjit stress/dont-crash-in-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-add-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/reflect-set-proxy-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-setter-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-generic.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-out-of-bounds-bounds-then-do-in-bounds.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-getter.js.dfg-maximal-flush-validate-no-cjit stress/ftl-new-negative-array-size.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/apply-not-apply.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-subarray.js.dfg-maximal-flush-validate-no-cjit stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-in-and-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value-or-string.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/is-undefined-exit-on-masquerader.js.dfg-maximal-flush-validate-no-cjit stress/put-direct-index-broken-2.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-ic-fail-to-call-operation-throw-error.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-splay.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-var-injection.js.dfg-maximal-flush-validate-no-cjit stress/catch-set-argument-speculation-failure.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/delta-blue-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-constant-key.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/dfg-call-class-constructor.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/math-unary-no-arg.js.dfg-maximal-flush-validate-no-cjit stress/phantom-new-array-with-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception.js.dfg-maximal-flush-validate-no-cjit stress/regress-153486.js.dfg-maximal-flush-validate-no-cjit stress/function-with-defaults-inlining.js.dfg-maximal-flush-validate-no-cjit stress/bug-171786.js.dfg-maximal-flush-validate-no-cjit stress/call-varargs-with-different-arguments-length-after-warmup.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-direct-arguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-operation-read-value.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-late-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/get-from-scope-dynamic-onto-proxy.js.dfg-maximal-flush-validate-no-cjit stress/number-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dont-dead-lock-put-by-val-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/op-add-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-contiguous-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-min-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-3.js.dfg-maximal-flush-validate-no-cjit stress/tagged-templates-raw-strings.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-every.js.dfg-maximal-flush-validate-no-cjit stress/tricky-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-patchpoint-with-volatile-registers.js.dfg-maximal-flush-validate-no-cjit stress/modify-set-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/regress-171079.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-no-double-allocate.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-basics.js.dfg-maximal-flush-validate-no-cjit stress/lexical-scoping-break-continue.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/value-to-boolean.js.dfg-maximal-flush-validate-no-cjit stress/map-clone.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail-barely.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/varargs-construct.js.dfg-maximal-flush-validate-no-cjit stress/pad-start-calls-repeat-character-with-double.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-richards.js.dfg-maximal-flush-validate-no-cjit stress/proxy-define-own-property.js.dfg-maximal-flush-validate-no-cjit stress/varargs-inlined-simple-exit-aliasing.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-regexp-search.js.dfg-maximal-flush-validate-no-cjit stress/v8-richards-strict.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-regexp.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-symbol-mixed.js.dfg-maximal-flush-validate-no-cjit stress/spread-calling.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-stub-routine-replaced.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-rehash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-redefine-const.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mul-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/to-number-throws-correct-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-constructor.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arguments-strict-mode.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-symbol-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/for-in-prototype.js.dfg-maximal-flush-validate-no-cjit stress/es6-for-of-loop-exception.js.dfg-maximal-flush-validate-no-cjit stress/sloppy-mode-function-hoisting.js.dfg-maximal-flush-validate-no-cjit stress/array-message-passing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-instanceof.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-4.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-3.js.dfg-maximal-flush-validate-no-cjit stress/sparse-array-entry-update-144067.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/concat-append-one.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/symbol-toprimitive.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-setter-throw.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-string.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-unbalanced-getter-setter.js.dfg-maximal-flush-validate-no-cjit stress/arith-add-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-sinthesize.js.dfg-maximal-flush-validate-no-cjit stress/const-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-without-reassign-to-let.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-tagcloud.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-before-throwing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-construct.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set.js.dfg-maximal-flush-validate-no-cjit stress/runtime-throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-cache-basics.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-function-name-captured.js.dfg-maximal-flush-validate-no-cjit stress/get-by-id-throw-from-getter-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-jettison-on-constructor-change.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/istypedarrayview-intrinsic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-word-count.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-and-clean-neg-zero-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/math-ceil-basics.js.dfg-maximal-flush-validate-no-cjit stress/array-copywithin.js.dfg-maximal-flush-validate-no-cjit stress/proxy-json.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/tricky-indirectly-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit stress/infer-uninitialized-closure-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/load-varargs-then-inlined-call-exit-in-foo.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/switch-char-constant.js.dfg-maximal-flush-validate-no-cjit stress/escape-object-in-diamond-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/number-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/proxy-delete.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/date-format-tofte.js.dfg-maximal-flush-validate-no-cjit stress/regress-132147.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-intrinsic.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-with-slow-indexingtypes.js.dfg-maximal-flush-validate-no-cjit stress/check-dom-with-signature.js.dfg-maximal-flush-validate-no-cjit stress/spread-non-array.js.dfg-maximal-flush-validate-no-cjit stress/arith-sub-on-double-array-with-holes.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add.js.dfg-maximal-flush-validate-no-cjit stress/global-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/pow-stable-results.js.dfg-maximal-flush-validate-no-cjit stress/fold-multi-get-by-offset-to-get-by-offset-without-folding-the-structure-check-new.js.dfg-maximal-flush-validate-no-cjit stress/check-sub-class.js.dfg-maximal-flush-validate-no-cjit stress/generator-frame-empty.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-typedarray.js.dfg-maximal-flush-validate-no-cjit stress/tier-up-in-loop-with-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-microtasks.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id.js.dfg-maximal-flush-validate-no-cjit stress/sink-multigetbyoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-forEach.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/no-abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-configure-index.js.dfg-maximal-flush-validate-no-cjit stress/proxy-revoke.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-proxy.js.dfg-maximal-flush-validate-no-cjit stress/ai-consistency-filter-cells.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-with-reassign-to-var.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object-then-object.js.dfg-maximal-flush-validate-no-cjit stress/constant-folding-osr-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/hard-overflow-check-equal.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-async-from-sync.js.dfg-maximal-flush-validate-no-cjit stress/compare-strict-eq-integer-to-misc.js.dfg-maximal-flush-validate-no-cjit stress/v8-regexp-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rare-osr-exit-on-local.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-transcoding.js.dfg-maximal-flush-validate-no-cjit stress/math-trunc-basics.js.dfg-maximal-flush-validate-no-cjit stress/create-subclass-structure-might-throw.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-monomorphic-neutered.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-but-they-do-not-escape.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbols-and-strings.js.dfg-maximal-flush-validate-no-cjit stress/tricky-array-bounds-checks.js.dfg-maximal-flush-validate-no-cjit stress/math-floor-basics.js.dfg-maximal-flush-validate-no-cjit stress/get-local-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/typed-array-subarray.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-entries.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-throw-from-catch-block.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-array.js.dfg-maximal-flush-validate-no-cjit stress/proxy-own-keys.js.dfg-maximal-flush-validate-no-cjit stress/operation-in-throw-error.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-stable-results.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-crypto.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-some.js.dfg-maximal-flush-validate-no-cjit stress/for-in-modify-int-loop-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-resolving.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-resolving.js.dfg-maximal-flush-validate-no-cjit stress/v8-crypto-strict.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-6.js.dfg-maximal-flush-validate-no-cjit stress/promise-infinite-recursion-should-not-crash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-int52-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long.js.dfg-maximal-flush-validate-no-cjit stress/super-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/reflect-construct.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-global-of-eval.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-prototype.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-getter.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-inlined-frame-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/dead-osr-entry-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-variable-tdz.js.dfg-maximal-flush-validate-no-cjit stress/block-scoped-function-declarations.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/fake-iterators-that-throw-when-finished.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-basic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-each.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy-exception-check.js.dfg-maximal-flush-validate-no-cjit stress/global-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/ftl-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-type-check.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-forward-varargs.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/float32-array-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-super-in-eval.js.dfg-maximal-flush-validate-no-cjit
Saam Barati
Comment 15 2017-08-30 12:48:43 PDT
Keith Miller
Comment 16 2017-08-30 18:29:49 PDT
Comment on attachment 319388 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=319388&action=review r=me with nit. > Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:5222 > + uint32_t errorType = currentInstruction[2].u.unsignedValue; Nit: You could add names for throw_static_errors offsets! > Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:10296 > +#if USE(JSVALUE64) > + callOperation(operationThrowDFG, valueRegs.gpr()); > +#else > + callOperation(operationThrowDFG, valueRegs); > +#endif Nit: instead of an #if can you add a callOperation(V_JITOperation_EJssUi, JSValueRegs)?
Saam Barati
Comment 17 2017-08-31 16:28:22 PDT
Comment on attachment 319388 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=319388&action=review >> Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:5222 >> + uint32_t errorType = currentInstruction[2].u.unsignedValue; > > Nit: You could add names for throw_static_errors offsets! I'll embark on this journey in another patch >> Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:10296 >> +#endif > > Nit: instead of an #if can you add a callOperation(V_JITOperation_EJssUi, JSValueRegs)? will do
Saam Barati
Comment 18 2017-08-31 16:42:39 PDT
Created attachment 319540 [details] patch for landing
WebKit Commit Bot
Comment 19 2017-08-31 22:41:12 PDT
Comment on attachment 319540 [details] patch for landing Clearing flags on attachment: 319540 Committed r221472: <http://trac.webkit.org/changeset/221472>
WebKit Commit Bot
Comment 20 2017-08-31 22:41:14 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.