WebKit Bugzilla
New
Browse
Search+
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
RESOLVED FIXED
176060
Throwing an exception in the DFG/FTL should not cause a jettison
https://bugs.webkit.org/show_bug.cgi?id=176060
Summary
Throwing an exception in the DFG/FTL should not cause a jettison
Saam Barati
Reported
2017-08-29 11:26:21 PDT
This is expected behavior, there is no reason we should repeatedly jettison and recompile.
Attachments
patch
(4.28 KB, patch)
2017-08-29 14:49 PDT
,
Saam Barati
msaboff
: review+
msaboff
: commit-queue-
Details
Formatted Diff
Diff
patch
(18.79 KB, patch)
2017-08-30 01:09 PDT
,
Saam Barati
buildbot
: commit-queue-
Details
Formatted Diff
Diff
patch
(18.54 KB, patch)
2017-08-30 12:48 PDT
,
Saam Barati
keith_miller
: review+
Details
Formatted Diff
Diff
patch for landing
(19.55 KB, patch)
2017-08-31 16:42 PDT
,
Saam Barati
no flags
Details
Formatted Diff
Diff
Show Obsolete
(3)
View All
Add attachment
proposed patch, testcase, etc.
Saam Barati
Comment 1
2017-08-29 14:49:53 PDT
Created
attachment 319285
[details]
patch
Michael Saboff
Comment 2
2017-08-29 14:53:17 PDT
Comment on
attachment 319285
[details]
patch View in context:
https://bugs.webkit.org/attachment.cgi?id=319285&action=review
r=me
> Source/JavaScriptCore/ChangeLog:3 > + Throwing an exception in the DFG/FTL should not be a jittison-able OSR exit
I think you want the bug title to be "... jettison-able ...".
Saam Barati
Comment 3
2017-08-29 14:55:40 PDT
fixed in:
https://trac.webkit.org/changeset/221317/webkit
Radar WebKit Bug Importer
Comment 4
2017-08-29 14:56:41 PDT
<
rdar://problem/34143348
>
Ryan Haddad
Comment 5
2017-08-29 18:11:31 PDT
This change caused 3 JSC test failures: ** The following JSC stress test failures have been introduced: jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout-ftl-eager-no-cjit jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout-ftl-no-cjit
https://build.webkit.org/builders/Apple%20Sierra%20Release%20JSC%20%28Tests%29/builds/3457
Saam Barati
Comment 6
2017-08-29 19:59:42 PDT
Will look into this in an hour or so.
Saam Barati
Comment 7
2017-08-29 20:49:05 PDT
Very weird, I can't reproduce this locally running the test manually. However, I can reproduce it when running it via run-jsc-stress-tests
Saam Barati
Comment 8
2017-08-29 20:51:28 PDT
Nevermind, I can reproduce it. This is super weird.
Saam Barati
Comment 9
2017-08-29 21:03:23 PDT
I think I see the bug. We're running the test with "testTheFTL=true", however, I don't think we're ever compiling for the FTL because we just repeatedly exit at the throw site. We also never increment our FTL optimization counter. The test in layout tests will ensure that we make it to the DFG, but the CodeBlock is lying and saying we're not in the DFG: unsigned CodeBlock::numberOfDFGCompiles() { ASSERT(JITCode::isBaselineCode(jitType())); if (Options::testTheFTL()) { if (m_didFailFTLCompilation) return 1000000; return (m_hasBeenCompiledWithFTL ? 1 : 0) + m_reoptimizationRetryCounter; } return (JITCode::isOptimizingJIT(replacement()->jitType()) ? 1 : 0) + m_reoptimizationRetryCounter; }
Saam Barati
Comment 10
2017-08-29 21:13:31 PDT
Ima roll out for now. I think we should just treat Throw/ThrowStaticError like a terminal and actually throw an exception from the DFG/FTL. Anybody have any reasons to oppose doing this?
WebKit Commit Bot
Comment 11
2017-08-29 21:15:17 PDT
Re-opened since this is blocked by
bug 176090
Saam Barati
Comment 12
2017-08-30 01:09:57 PDT
Created
attachment 319352
[details]
patch Might be it. Let's see what EWS thinks.
Build Bot
Comment 13
2017-08-30 06:05:38 PDT
Comment on
attachment 319352
[details]
patch
Attachment 319352
[details]
did not pass jsc-ews (mac): Output:
http://webkit-queues.webkit.org/results/4409440
New failing tests: microbenchmarks/exit-length-on-plain-object.js.dfg-maximal-flush-validate-no-cjit stress/promise-finally.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduce.js.dfg-maximal-flush-validate-no-cjit stress/generic-arguments-correct-delete-behavior.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-getownproperty-not-configurable.js.dfg-maximal-flush-validate-no-cjit stress/arguments-elimination-varargs-too-many-args-arg-count.js.dfg-maximal-flush-validate-no-cjit stress/super-method-calls-check-tdz.js.dfg-maximal-flush-validate-no-cjit stress/inlined-error-gets-correct-codeblock-for-bytecodeoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-keys.js.dfg-maximal-flush-validate-no-cjit stress/spec-empty-flows-through-cell-checks.js.dfg-maximal-flush-validate-no-cjit stress/reserved-word-with-escape.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-map.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-deltablue.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-arith-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-round-basics.js.dfg-maximal-flush-validate-no-cjit stress/fold-profiled-call-to-call.js.dfg-maximal-flush-validate-no-cjit stress/phantom-inadequacy.js.dfg-maximal-flush-validate-no-cjit stress/const-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-int32-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/SharedArrayBuffer-opt.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/argument-count-bytecode.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id-class.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-validate-input.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access-transitive-exports.js.dfg-maximal-flush-validate-no-cjit stress/builtin-function-is-construct-type-none.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object-or-string.js.dfg-maximal-flush-validate-no-cjit stress/new-regex-inline.js.dfg-maximal-flush-validate-no-cjit stress/ftl-shr-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-constructor.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-fill.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/pow-simple.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-1.js.dfg-maximal-flush-validate-no-cjit stress/parameter-scoping.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-2.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object.js.dfg-maximal-flush-validate-no-cjit stress/scoped-then-direct-arguments-get-by-val-in-baseline.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/large-map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/dfg-exception-try-catch-in-constructor-with-inlined-throw.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace.js.dfg-maximal-flush-validate-no-cjit stress/flatten-oversize-dictionary-object.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-string.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-of.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-double-constructor.js.dfg-maximal-flush-validate-no-cjit stress/proxy-has-property.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/for-in-invalidate-context-weird-assignments.js.dfg-maximal-flush-validate-no-cjit stress/create-this-with-callee-variants.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/branch-fold.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-oom-error-lazy-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/instanceof.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-varargs-call-throws.js.dfg-maximal-flush-validate-no-cjit stress/throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/instanceof-bound.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-id-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-div-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/compare-number-and-other.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-method.js.dfg-maximal-flush-validate-no-cjit stress/const-tdz.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-view-string-properties-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrow-functions-as-default-parameter-values.js.dfg-maximal-flush-validate-no-cjit stress/destructuring-rest-element.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/new-array-with-spread-with-normal-spread-and-phantom-spread.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-and-remove.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/call-apply-exponential-bytecode-size.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-others.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-superproperty.js.dfg-maximal-flush-validate-no-cjit stress/allocation-sinking-puthint-control-flow.js.dfg-maximal-flush-validate-no-cjit stress/async-arrow-functions-lexical-binding-in-class.js.dfg-maximal-flush-validate-no-cjit stress/cse-multi-get-by-offset-remove-checks.js.dfg-maximal-flush-validate-no-cjit stress/cloned-arguments-modification.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/locale-compare.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/proxy-is-array.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-many-arguments.js.dfg-maximal-flush-validate-no-cjit stress/array-reverse-proxy.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-earley-boyer.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-2.js.dfg-maximal-flush-validate-no-cjit stress/map-inherit-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-convert.js.dfg-maximal-flush-validate-no-cjit stress/dont-unwind-past-vm-entry-frame.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-getter.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-tdz.js.dfg-maximal-flush-validate-no-cjit stress/variable-named-eval-under-tdz.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-map.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/to-property-key-correctness.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined-optimized-in-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/fold-typed-array-properties.js.dfg-maximal-flush-validate-no-cjit stress/class-derived-from-null.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl.js.dfg-maximal-flush-validate-no-cjit stress/regress-156765.js.dfg-maximal-flush-validate-no-cjit stress/v8-splay-strict.js.dfg-maximal-flush-validate-no-cjit stress/pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/prop-type-struct-then-object-opt-fold.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/math-clz32-basics.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-having-a-bad-time.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw-interesting-value-recovery.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-double-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-slice.js.dfg-maximal-flush-validate-no-cjit stress/sink-object-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/constant-fold-multi-get-by-offset-to-get-by-offset-on-prototype-and-sink-allocation.js.dfg-maximal-flush-validate-no-cjit stress/sink-arguments-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/array-symbol-species-lazy-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-to-identity-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-host-call-throw.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-deep-stack.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-call.js.dfg-maximal-flush-validate-no-cjit stress/exception-in-to-property-key-should-be-handled-early.js.dfg-maximal-flush-validate-no-cjit stress/poly-call-stub-in-getter-stub.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-typeof.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-private-symbols.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-sane-chain-2.js.dfg-maximal-flush-validate-no-cjit stress/with.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-call-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop-no-inline-super.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-2.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit-2.js.dfg-maximal-flush-validate-no-cjit stress/arith-mul-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/dfg-try-catch-wrong-value-recovery-on-ic-miss.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-newtarget.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fail-to-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-apply.js.dfg-maximal-flush-validate-no-cjit stress/spread-correct-global-object-on-exception.js.dfg-maximal-flush-validate-no-cjit stress/inferred-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-constructor.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-var-injection.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-promise.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-and-set-recursion-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/global-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-call.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-prototype-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-tail-call-inilned-caller.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/proxy-property-descriptor.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/dfg-to-primitive-pass-symbol.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object.js.dfg-maximal-flush-validate-no-cjit stress/sink-function-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/Number-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rest-parameter-allocation-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/many-foreach-calls.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/deltablue-for-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-xor-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-max-min-no-arguments.js.dfg-maximal-flush-validate-no-cjit stress/activation-test-loop.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-bound.js.dfg-maximal-flush-validate-no-cjit stress/es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-not-cell.js.dfg-maximal-flush-validate-no-cjit stress/tailCallForwardArguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-max-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/delete-to-object-exception.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-array-type.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-3.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-constructor.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-custom-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/controlflow-recursive.js.dfg-maximal-flush-validate-no-cjit stress/branch-may-exit-due-to-object-or-other-use-kind.js.dfg-maximal-flush-validate-no-cjit stress/bug-131764.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-bad-getter.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbol-keys.js.dfg-maximal-flush-validate-no-cjit stress/v8-earley-boyer-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduceRight.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-double-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-functions-with-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-2.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mod-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/bound-function-lazy-name-generation.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/object-keys-map-values.js.dfg-maximal-flush-validate-no-cjit stress/set-clone.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-unchecked-addition.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-4.js.dfg-maximal-flush-validate-no-cjit stress/tagged-template-tdz.js.dfg-maximal-flush-validate-no-cjit stress/regress-174044.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition-skip-first.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-derived-default-constructor.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/lazy-array-species-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-sub-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-1.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-add-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/strcat-emtpy.js.dfg-maximal-flush-validate-no-cjit stress/dont-strength-reduce-valuerep-of-doublerep.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-empty.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-value-profiling.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-is-destructuring.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-int52.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-has-get-cse-opportunity.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-cloned-arguments.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-2.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-sunspider-access-nsieve.js.dfg-maximal-flush-validate-no-cjit stress/v8-raytrace-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-each.js.dfg-maximal-flush-validate-no-cjit stress/arith-modulo-twice.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-function.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-string-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-fib.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-trivial.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long-convert.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/modify-map-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-string-keys.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-by-val-direct-with-edge-numbers.js.dfg-maximal-flush-validate-no-cjit stress/array-species-config-array-constructor.js.dfg-maximal-flush-validate-no-cjit stress/async-await-mozilla.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/sorting-benchmark.js.dfg-maximal-flush-validate-no-cjit stress/fold-based-on-int32-proof-mul-branch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/string-prototype-methods-endsWith-startsWith-includes-correctness.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/equality-type-checking.js.dfg-maximal-flush-validate-no-cjit stress/spread-optimized-properly.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-8.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-array.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-recognize.js.dfg-maximal-flush-validate-no-cjit stress/proxy-class.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-of.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/import-basic.js.dfg-maximal-flush-validate-no-cjit stress/osr-enter-to-catch-with-set-local-type-check-failure.js.dfg-maximal-flush-validate-no-cjit stress/get-by-offset-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions-dataview.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-and-default-arguments.js.dfg-maximal-flush-validate-no-cjit stress/yield-reserved-word.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays2.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-from-abs-and-floor.js.dfg-maximal-flush-validate-no-cjit stress/const-semantics.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/argument-intrinsic-not-convert-to-get-argument.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-misc.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-block-with-let.js.dfg-maximal-flush-validate-no-cjit stress/async-await-syntax.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-cells.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-neg-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-values.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-complex-with-incorrect-object.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/to-lower-case-intrinsic-on-empty-rope.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-loop-tdz.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star-interface.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-neutered.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-with-scope.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-array-prototype-methods.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-mixed-case.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set-prototype-of.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/infer-closure-const-then-mov.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability-eager.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-1.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-custom-hasinstancesymbol.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this-2.js.dfg-maximal-flush-validate-no-cjit stress/construct-forward-varargs-for-inlined-escaped-arguments.js.dfg-maximal-flush-validate-no-cjit stress/function-constructor-reading-from-global-lexical-environment.js.dfg-maximal-flush-validate-no-cjit stress/set-inherit-add.js.dfg-maximal-flush-validate-no-cjit stress/dont-crash-in-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-add-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/reflect-set-proxy-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-setter-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-generic.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-out-of-bounds-bounds-then-do-in-bounds.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-getter.js.dfg-maximal-flush-validate-no-cjit stress/ftl-new-negative-array-size.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/apply-not-apply.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-subarray.js.dfg-maximal-flush-validate-no-cjit stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-in-and-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value-or-string.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/is-undefined-exit-on-masquerader.js.dfg-maximal-flush-validate-no-cjit stress/put-direct-index-broken-2.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-ic-fail-to-call-operation-throw-error.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-splay.js.dfg-maximal-flush-validate-no-cjit stress/catch-set-argument-speculation-failure.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/delta-blue-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-constant-key.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/dfg-call-class-constructor.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/math-unary-no-arg.js.dfg-maximal-flush-validate-no-cjit stress/phantom-new-array-with-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception.js.dfg-maximal-flush-validate-no-cjit stress/regress-153486.js.dfg-maximal-flush-validate-no-cjit stress/function-with-defaults-inlining.js.dfg-maximal-flush-validate-no-cjit stress/bug-171786.js.dfg-maximal-flush-validate-no-cjit stress/call-varargs-with-different-arguments-length-after-warmup.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-direct-arguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-operation-read-value.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-late-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/get-from-scope-dynamic-onto-proxy.js.dfg-maximal-flush-validate-no-cjit stress/number-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dont-dead-lock-put-by-val-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/op-add-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-contiguous-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-min-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-3.js.dfg-maximal-flush-validate-no-cjit stress/tagged-templates-raw-strings.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-every.js.dfg-maximal-flush-validate-no-cjit stress/tricky-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-patchpoint-with-volatile-registers.js.dfg-maximal-flush-validate-no-cjit stress/modify-set-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/regress-171079.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-no-double-allocate.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-basics.js.dfg-maximal-flush-validate-no-cjit stress/lexical-scoping-break-continue.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/value-to-boolean.js.dfg-maximal-flush-validate-no-cjit stress/map-clone.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail-barely.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/varargs-construct.js.dfg-maximal-flush-validate-no-cjit stress/pad-start-calls-repeat-character-with-double.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-richards.js.dfg-maximal-flush-validate-no-cjit stress/proxy-define-own-property.js.dfg-maximal-flush-validate-no-cjit stress/varargs-inlined-simple-exit-aliasing.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-regexp-search.js.dfg-maximal-flush-validate-no-cjit stress/v8-richards-strict.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-regexp.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-symbol-mixed.js.dfg-maximal-flush-validate-no-cjit stress/spread-calling.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-stub-routine-replaced.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-rehash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-redefine-const.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mul-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/to-number-throws-correct-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-constructor.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arguments-strict-mode.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-symbol-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/for-in-prototype.js.dfg-maximal-flush-validate-no-cjit stress/es6-for-of-loop-exception.js.dfg-maximal-flush-validate-no-cjit stress/sloppy-mode-function-hoisting.js.dfg-maximal-flush-validate-no-cjit stress/array-message-passing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-instanceof.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-4.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-3.js.dfg-maximal-flush-validate-no-cjit stress/sparse-array-entry-update-144067.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/concat-append-one.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/symbol-toprimitive.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-setter-throw.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-string.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-unbalanced-getter-setter.js.dfg-maximal-flush-validate-no-cjit stress/arith-add-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-sinthesize.js.dfg-maximal-flush-validate-no-cjit stress/const-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-without-reassign-to-let.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-tagcloud.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-before-throwing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-construct.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set.js.dfg-maximal-flush-validate-no-cjit stress/runtime-throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-cache-basics.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-function-name-captured.js.dfg-maximal-flush-validate-no-cjit stress/get-by-id-throw-from-getter-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-jettison-on-constructor-change.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/istypedarrayview-intrinsic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-word-count.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-and-clean-neg-zero-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/math-ceil-basics.js.dfg-maximal-flush-validate-no-cjit stress/array-copywithin.js.dfg-maximal-flush-validate-no-cjit stress/proxy-json.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/tricky-indirectly-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit stress/infer-uninitialized-closure-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/load-varargs-then-inlined-call-exit-in-foo.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/switch-char-constant.js.dfg-maximal-flush-validate-no-cjit stress/escape-object-in-diamond-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/number-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/proxy-delete.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/date-format-tofte.js.dfg-maximal-flush-validate-no-cjit stress/regress-132147.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-intrinsic.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-with-slow-indexingtypes.js.dfg-maximal-flush-validate-no-cjit stress/check-dom-with-signature.js.dfg-maximal-flush-validate-no-cjit stress/spread-non-array.js.dfg-maximal-flush-validate-no-cjit stress/arith-sub-on-double-array-with-holes.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add.js.dfg-maximal-flush-validate-no-cjit stress/global-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/pow-stable-results.js.dfg-maximal-flush-validate-no-cjit stress/fold-multi-get-by-offset-to-get-by-offset-without-folding-the-structure-check-new.js.dfg-maximal-flush-validate-no-cjit stress/check-sub-class.js.dfg-maximal-flush-validate-no-cjit stress/generator-frame-empty.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-typedarray.js.dfg-maximal-flush-validate-no-cjit stress/tier-up-in-loop-with-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-microtasks.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id.js.dfg-maximal-flush-validate-no-cjit stress/sink-multigetbyoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-forEach.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/no-abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-configure-index.js.dfg-maximal-flush-validate-no-cjit stress/proxy-revoke.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-proxy.js.dfg-maximal-flush-validate-no-cjit stress/ai-consistency-filter-cells.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-with-reassign-to-var.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object-then-object.js.dfg-maximal-flush-validate-no-cjit stress/constant-folding-osr-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/hard-overflow-check-equal.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-async-from-sync.js.dfg-maximal-flush-validate-no-cjit stress/compare-strict-eq-integer-to-misc.js.dfg-maximal-flush-validate-no-cjit stress/v8-regexp-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rare-osr-exit-on-local.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-transcoding.js.dfg-maximal-flush-validate-no-cjit stress/math-trunc-basics.js.dfg-maximal-flush-validate-no-cjit stress/create-subclass-structure-might-throw.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-monomorphic-neutered.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-but-they-do-not-escape.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbols-and-strings.js.dfg-maximal-flush-validate-no-cjit stress/tricky-array-bounds-checks.js.dfg-maximal-flush-validate-no-cjit stress/math-floor-basics.js.dfg-maximal-flush-validate-no-cjit stress/get-local-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/typed-array-subarray.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-entries.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-throw-from-catch-block.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-array.js.dfg-maximal-flush-validate-no-cjit stress/proxy-own-keys.js.dfg-maximal-flush-validate-no-cjit stress/operation-in-throw-error.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-stable-results.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-crypto.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-some.js.dfg-maximal-flush-validate-no-cjit stress/for-in-modify-int-loop-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-resolving.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-resolving.js.dfg-maximal-flush-validate-no-cjit stress/v8-crypto-strict.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-6.js.dfg-maximal-flush-validate-no-cjit stress/promise-infinite-recursion-should-not-crash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-int52-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long.js.dfg-maximal-flush-validate-no-cjit stress/super-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/reflect-construct.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-global-of-eval.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-prototype.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-getter.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-inlined-frame-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/dead-osr-entry-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-variable-tdz.js.dfg-maximal-flush-validate-no-cjit stress/block-scoped-function-declarations.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/fake-iterators-that-throw-when-finished.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-basic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-each.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy-exception-check.js.dfg-maximal-flush-validate-no-cjit stress/global-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/ftl-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-type-check.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-forward-varargs.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/float32-array-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-super-in-eval.js.dfg-maximal-flush-validate-no-cjit
Build Bot
Comment 14
2017-08-30 07:59:46 PDT
Comment on
attachment 319352
[details]
patch
Attachment 319352
[details]
did not pass jsc-ews (mac): Output:
http://webkit-queues.webkit.org/results/4409841
New failing tests: microbenchmarks/exit-length-on-plain-object.js.dfg-maximal-flush-validate-no-cjit stress/promise-finally.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduce.js.dfg-maximal-flush-validate-no-cjit stress/generic-arguments-correct-delete-behavior.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-getownproperty-not-configurable.js.dfg-maximal-flush-validate-no-cjit stress/arguments-elimination-varargs-too-many-args-arg-count.js.dfg-maximal-flush-validate-no-cjit stress/super-method-calls-check-tdz.js.dfg-maximal-flush-validate-no-cjit stress/inlined-error-gets-correct-codeblock-for-bytecodeoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-keys.js.dfg-maximal-flush-validate-no-cjit stress/spec-empty-flows-through-cell-checks.js.dfg-maximal-flush-validate-no-cjit stress/reserved-word-with-escape.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-map.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-deltablue.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-arith-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-round-basics.js.dfg-maximal-flush-validate-no-cjit stress/fold-profiled-call-to-call.js.dfg-maximal-flush-validate-no-cjit stress/phantom-inadequacy.js.dfg-maximal-flush-validate-no-cjit stress/const-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-int32-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/SharedArrayBuffer-opt.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/argument-count-bytecode.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id-class.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-validate-input.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access-transitive-exports.js.dfg-maximal-flush-validate-no-cjit stress/builtin-function-is-construct-type-none.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object-or-string.js.dfg-maximal-flush-validate-no-cjit stress/new-regex-inline.js.dfg-maximal-flush-validate-no-cjit stress/ftl-shr-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-constructor.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-fill.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/pow-simple.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-1.js.dfg-maximal-flush-validate-no-cjit stress/parameter-scoping.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-2.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-object.js.dfg-maximal-flush-validate-no-cjit stress/scoped-then-direct-arguments-get-by-val-in-baseline.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/large-map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/dfg-exception-try-catch-in-constructor-with-inlined-throw.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace.js.dfg-maximal-flush-validate-no-cjit stress/flatten-oversize-dictionary-object.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-string.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-of.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-double-constructor.js.dfg-maximal-flush-validate-no-cjit stress/proxy-has-property.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/for-in-invalidate-context-weird-assignments.js.dfg-maximal-flush-validate-no-cjit stress/create-this-with-callee-variants.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/branch-fold.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-oom-error-lazy-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/map-iteration.js.dfg-maximal-flush-validate-no-cjit stress/instanceof.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-varargs-call-throws.js.dfg-maximal-flush-validate-no-cjit stress/throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/instanceof-bound.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-id-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-div-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/compare-number-and-other.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-method.js.dfg-maximal-flush-validate-no-cjit stress/const-tdz.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-view-string-properties-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrow-functions-as-default-parameter-values.js.dfg-maximal-flush-validate-no-cjit stress/destructuring-rest-element.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/new-array-with-spread-with-normal-spread-and-phantom-spread.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-and-remove.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path.js.dfg-maximal-flush-validate-no-cjit stress/call-apply-exponential-bytecode-size.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-others.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-superproperty.js.dfg-maximal-flush-validate-no-cjit stress/allocation-sinking-puthint-control-flow.js.dfg-maximal-flush-validate-no-cjit stress/async-arrow-functions-lexical-binding-in-class.js.dfg-maximal-flush-validate-no-cjit stress/cse-multi-get-by-offset-remove-checks.js.dfg-maximal-flush-validate-no-cjit stress/cloned-arguments-modification.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/locale-compare.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/proxy-is-array.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-many-arguments.js.dfg-maximal-flush-validate-no-cjit stress/array-reverse-proxy.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-earley-boyer.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-2.js.dfg-maximal-flush-validate-no-cjit stress/map-inherit-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-convert.js.dfg-maximal-flush-validate-no-cjit stress/dont-unwind-past-vm-entry-frame.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-getter.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-tdz.js.dfg-maximal-flush-validate-no-cjit stress/variable-named-eval-under-tdz.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-map.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/to-property-key-correctness.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined-optimized-in-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/fold-typed-array-properties.js.dfg-maximal-flush-validate-no-cjit stress/class-derived-from-null.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl.js.dfg-maximal-flush-validate-no-cjit stress/regress-156765.js.dfg-maximal-flush-validate-no-cjit stress/v8-splay-strict.js.dfg-maximal-flush-validate-no-cjit stress/pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/prop-type-struct-then-object-opt-fold.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/math-clz32-basics.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-having-a-bad-time.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw-interesting-value-recovery.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-double-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-slice.js.dfg-maximal-flush-validate-no-cjit stress/sink-object-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/constant-fold-multi-get-by-offset-to-get-by-offset-on-prototype-and-sink-allocation.js.dfg-maximal-flush-validate-no-cjit stress/sink-arguments-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/array-symbol-species-lazy-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-to-identity-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-host-call-throw.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-deep-stack.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-call.js.dfg-maximal-flush-validate-no-cjit stress/exception-in-to-property-key-should-be-handled-early.js.dfg-maximal-flush-validate-no-cjit stress/poly-call-stub-in-getter-stub.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-typeof.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-private-symbols.js.dfg-maximal-flush-validate-no-cjit stress/ftl-operation-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-sane-chain-2.js.dfg-maximal-flush-validate-no-cjit stress/with.js.dfg-maximal-flush-validate-no-cjit stress/spread-forward-call-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop-no-inline-super.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-2.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit-2.js.dfg-maximal-flush-validate-no-cjit stress/arith-mul-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/dfg-try-catch-wrong-value-recovery-on-ic-miss.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-newtarget.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fail-to-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/call-spread-apply.js.dfg-maximal-flush-validate-no-cjit stress/spread-correct-global-object-on-exception.js.dfg-maximal-flush-validate-no-cjit stress/inferred-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-string-constructor.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-promise.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-and-set-recursion-stack-overflow.js.dfg-maximal-flush-validate-no-cjit stress/global-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-call.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/proxy-get-prototype-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-tail-call-inilned-caller.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/proxy-property-descriptor.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/dfg-to-primitive-pass-symbol.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object.js.dfg-maximal-flush-validate-no-cjit stress/sink-function-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit stress/Number-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rest-parameter-allocation-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/many-foreach-calls.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/deltablue-for-of.js.dfg-maximal-flush-validate-no-cjit stress/ftl-xor-exception.js.dfg-maximal-flush-validate-no-cjit stress/math-max-min-no-arguments.js.dfg-maximal-flush-validate-no-cjit stress/activation-test-loop.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-bound.js.dfg-maximal-flush-validate-no-cjit stress/es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-not-cell.js.dfg-maximal-flush-validate-no-cjit stress/tailCallForwardArguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-max-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/delete-to-object-exception.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-array-type.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-3.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-constructor.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-custom-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/module-namespace-access.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/controlflow-recursive.js.dfg-maximal-flush-validate-no-cjit stress/branch-may-exit-due-to-object-or-other-use-kind.js.dfg-maximal-flush-validate-no-cjit stress/bug-131764.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-bad-getter.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbol-keys.js.dfg-maximal-flush-validate-no-cjit stress/v8-earley-boyer-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-reduceRight.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-double-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-functions-with-neutered.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-2.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-fold.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mod-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/bound-function-lazy-name-generation.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/object-keys-map-values.js.dfg-maximal-flush-validate-no-cjit stress/set-clone.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-unchecked-addition.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-4.js.dfg-maximal-flush-validate-no-cjit stress/tagged-template-tdz.js.dfg-maximal-flush-validate-no-cjit stress/regress-174044.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition-skip-first.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-derived-default-constructor.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/lazy-array-species-watchpoints.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-sub-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-1.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-add-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/strcat-emtpy.js.dfg-maximal-flush-validate-no-cjit stress/dont-strength-reduce-valuerep-of-doublerep.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-empty.js.dfg-maximal-flush-validate-no-cjit stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-value-profiling.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-is-destructuring.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl.js.dfg-maximal-flush-validate-no-cjit stress/to-number-intrinsic-int52.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-has-get-cse-opportunity.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-cloned-arguments.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-2.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-sunspider-access-nsieve.js.dfg-maximal-flush-validate-no-cjit stress/v8-raytrace-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-for-each.js.dfg-maximal-flush-validate-no-cjit stress/arith-modulo-twice.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-function.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-string-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/generator-fib.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-on-undecided-trivial.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long-convert.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit stress/modify-map-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-string-keys.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-by-val-direct-with-edge-numbers.js.dfg-maximal-flush-validate-no-cjit stress/array-species-config-array-constructor.js.dfg-maximal-flush-validate-no-cjit stress/async-await-mozilla.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-val-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/sorting-benchmark.js.dfg-maximal-flush-validate-no-cjit stress/fold-based-on-int32-proof-mul-branch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-not-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-id.js.dfg-maximal-flush-validate-no-cjit stress/string-prototype-methods-endsWith-startsWith-includes-correctness.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/equality-type-checking.js.dfg-maximal-flush-validate-no-cjit stress/spread-optimized-properly.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-8.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-array.js.dfg-maximal-flush-validate-no-cjit stress/tail-call-recognize.js.dfg-maximal-flush-validate-no-cjit stress/proxy-class.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-of.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id-class.js.dfg-maximal-flush-validate-no-cjit stress/import-basic.js.dfg-maximal-flush-validate-no-cjit stress/osr-enter-to-catch-with-set-local-type-check-failure.js.dfg-maximal-flush-validate-no-cjit stress/get-by-offset-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-inlining-exceptions-dataview.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-and-default-arguments.js.dfg-maximal-flush-validate-no-cjit stress/yield-reserved-word.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays2.js.dfg-maximal-flush-validate-no-cjit stress/compare-eq-on-null-and-undefined.js.dfg-maximal-flush-validate-no-cjit stress/array-from-abs-and-floor.js.dfg-maximal-flush-validate-no-cjit stress/const-semantics.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/argument-intrinsic-not-convert-to-get-argument.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-misc.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-block-with-let.js.dfg-maximal-flush-validate-no-cjit stress/async-await-syntax.js.dfg-maximal-flush-validate-no-cjit stress/throw-from-ftl-call-ic-slow-path-cells.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-neg-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-values.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-complex-with-incorrect-object.js.dfg-maximal-flush-validate-no-cjit stress/fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/to-lower-case-intrinsic-on-empty-rope.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-loop-tdz.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-throw.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-yield-star-interface.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-neutered.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-eval-within-with-scope.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-loop-semantics.js.dfg-maximal-flush-validate-no-cjit stress/proxy-array-prototype-methods.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-mixed-case.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set-prototype-of.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/richards-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/ftl-library-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/infer-closure-const-then-mov.js.dfg-maximal-flush-validate-no-cjit stress/liveness-pruning-needed-for-osr-availability-eager.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-arguments-non-strict-1.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-custom-hasinstancesymbol.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-object-literal-to-this-2.js.dfg-maximal-flush-validate-no-cjit stress/construct-forward-varargs-for-inlined-escaped-arguments.js.dfg-maximal-flush-validate-no-cjit stress/function-constructor-reading-from-global-lexical-environment.js.dfg-maximal-flush-validate-no-cjit stress/set-inherit-add.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-for-await-of.js.dfg-maximal-flush-validate-no-cjit stress/dont-crash-in-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit stress/super-property-access-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-add-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/reflect-set-proxy-set.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-setter-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-replace-generic.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-out-of-bounds-bounds-then-do-in-bounds.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/get-by-val-with-symbol-getter.js.dfg-maximal-flush-validate-no-cjit stress/ftl-new-negative-array-size.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/apply-not-apply.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-subarray.js.dfg-maximal-flush-validate-no-cjit stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit stress/activation-sink-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit stress/int16-put-by-val-in-and-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value-or-string.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/is-undefined-exit-on-masquerader.js.dfg-maximal-flush-validate-no-cjit stress/put-direct-index-broken-2.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-getter-ic-fail-to-call-operation-throw-error.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-splay.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-var-injection.js.dfg-maximal-flush-validate-no-cjit stress/catch-set-argument-speculation-failure.js.dfg-maximal-flush-validate-no-cjit stress/lexical-let-tdz.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/delta-blue-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-constant-key.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-primitive-in-cfa.js.dfg-maximal-flush-validate-no-cjit stress/dfg-call-class-constructor.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit stress/math-unary-no-arg.js.dfg-maximal-flush-validate-no-cjit stress/phantom-new-array-with-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception.js.dfg-maximal-flush-validate-no-cjit stress/regress-153486.js.dfg-maximal-flush-validate-no-cjit stress/function-with-defaults-inlining.js.dfg-maximal-flush-validate-no-cjit stress/bug-171786.js.dfg-maximal-flush-validate-no-cjit stress/call-varargs-with-different-arguments-length-after-warmup.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-get-by-val-direct-arguments.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-operation-read-value.js.dfg-maximal-flush-validate-no-cjit stress/instanceof-late-constant-folding.js.dfg-maximal-flush-validate-no-cjit stress/get-from-scope-dynamic-onto-proxy.js.dfg-maximal-flush-validate-no-cjit stress/number-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dont-dead-lock-put-by-val-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit stress/op-add-exceptions.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-fail.js.dfg-maximal-flush-validate-no-cjit stress/regress-170896-with-contiguous-shape-profile.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-min-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/make-rope-3.js.dfg-maximal-flush-validate-no-cjit stress/tagged-templates-raw-strings.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-every.js.dfg-maximal-flush-validate-no-cjit stress/tricky-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-patchpoint-with-volatile-registers.js.dfg-maximal-flush-validate-no-cjit stress/modify-set-during-iteration.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/regress-171079.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-no-double-allocate.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/ftl-call-varargs-exception.js.dfg-maximal-flush-validate-no-cjit stress/rest-parameter-basics.js.dfg-maximal-flush-validate-no-cjit stress/lexical-scoping-break-continue.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/value-to-boolean.js.dfg-maximal-flush-validate-no-cjit stress/map-clone.js.dfg-maximal-flush-validate-no-cjit stress/dead-fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit stress/array-prototype-concat-of-long-spliced-arrays.js.dfg-maximal-flush-validate-no-cjit stress/fold-load-varargs-arity-check-fail-barely.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/varargs-construct.js.dfg-maximal-flush-validate-no-cjit stress/pad-start-calls-repeat-character-with-double.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-richards.js.dfg-maximal-flush-validate-no-cjit stress/proxy-define-own-property.js.dfg-maximal-flush-validate-no-cjit stress/varargs-inlined-simple-exit-aliasing.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-setter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-regexp-search.js.dfg-maximal-flush-validate-no-cjit stress/v8-richards-strict.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-regexp.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-array.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-symbol-mixed.js.dfg-maximal-flush-validate-no-cjit stress/spread-calling.js.dfg-maximal-flush-validate-no-cjit stress/ftl-get-by-id-getter-exception.js.dfg-maximal-flush-validate-no-cjit stress/try-catch-stub-routine-replaced.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/map-rehash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-setter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-redefine-const.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-object.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-mul-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/to-number-throws-correct-exception.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arrowfunction-call-in-class-constructor.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/arguments-strict-mode.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/get-by-val-with-symbol-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit stress/for-in-prototype.js.dfg-maximal-flush-validate-no-cjit stress/es6-for-of-loop-exception.js.dfg-maximal-flush-validate-no-cjit stress/sloppy-mode-function-hoisting.js.dfg-maximal-flush-validate-no-cjit stress/array-message-passing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-instanceof.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-tdz-4.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-supercall-3.js.dfg-maximal-flush-validate-no-cjit stress/sparse-array-entry-update-144067.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/concat-append-one.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-no-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit stress/symbol-toprimitive.js.dfg-maximal-flush-validate-no-cjit stress/ftl-try-catch-setter-throw.js.dfg-maximal-flush-validate-no-cjit stress/generator-fib-ftl-and-string.js.dfg-maximal-flush-validate-no-cjit stress/proxy-with-unbalanced-getter-setter.js.dfg-maximal-flush-validate-no-cjit stress/arith-add-with-constants.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-block-with-var-sinthesize.js.dfg-maximal-flush-validate-no-cjit stress/const-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-without-reassign-to-let.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/string-tagcloud.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-before-throwing.js.dfg-maximal-flush-validate-no-cjit stress/proxy-construct.js.dfg-maximal-flush-validate-no-cjit stress/proxy-set.js.dfg-maximal-flush-validate-no-cjit stress/runtime-throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-abs-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-cache-basics.js.dfg-maximal-flush-validate-no-cjit stress/IIFE-function-name-captured.js.dfg-maximal-flush-validate-no-cjit stress/get-by-id-throw-from-getter-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-jettison-on-constructor-change.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit stress/istypedarrayview-intrinsic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/try-catch-word-count.js.dfg-maximal-flush-validate-no-cjit stress/int52-ai-mul-and-clean-neg-zero-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit stress/math-ceil-basics.js.dfg-maximal-flush-validate-no-cjit stress/array-copywithin.js.dfg-maximal-flush-validate-no-cjit stress/proxy-json.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-neg-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit stress/tricky-indirectly-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit stress/infer-uninitialized-closure-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit stress/load-varargs-then-inlined-call-exit-in-foo.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/switch-char-constant.js.dfg-maximal-flush-validate-no-cjit stress/escape-object-in-diamond-then-exit.js.dfg-maximal-flush-validate-no-cjit stress/number-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/proxy-delete.js.dfg-maximal-flush-validate-no-cjit stress/tricky-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit sunspider-1.0/date-format-tofte.js.dfg-maximal-flush-validate-no-cjit stress/regress-132147.js.dfg-maximal-flush-validate-no-cjit stress/array-slice-intrinsic.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-with-slow-indexingtypes.js.dfg-maximal-flush-validate-no-cjit stress/check-dom-with-signature.js.dfg-maximal-flush-validate-no-cjit stress/spread-non-array.js.dfg-maximal-flush-validate-no-cjit stress/arith-sub-on-double-array-with-holes.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-add.js.dfg-maximal-flush-validate-no-cjit stress/global-is-finite.js.dfg-maximal-flush-validate-no-cjit stress/pow-stable-results.js.dfg-maximal-flush-validate-no-cjit stress/fold-multi-get-by-offset-to-get-by-offset-without-folding-the-structure-check-new.js.dfg-maximal-flush-validate-no-cjit stress/check-sub-class.js.dfg-maximal-flush-validate-no-cjit stress/generator-frame-empty.js.dfg-maximal-flush-validate-no-cjit stress/class-subclassing-typedarray.js.dfg-maximal-flush-validate-no-cjit stress/tier-up-in-loop-with-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit stress/generator-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit stress/sampling-profiler-microtasks.js.dfg-maximal-flush-validate-no-cjit stress/ftl-put-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-accessors-by-id.js.dfg-maximal-flush-validate-no-cjit stress/sink-multigetbyoffset.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-forEach.js.dfg-maximal-flush-validate-no-cjit stress/async-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/no-abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-configure-index.js.dfg-maximal-flush-validate-no-cjit stress/proxy-revoke.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-proxy.js.dfg-maximal-flush-validate-no-cjit stress/ai-consistency-filter-cells.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-within-eval-with-reassign-to-var.js.dfg-maximal-flush-validate-no-cjit stress/map-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-string-or-string-object-then-object.js.dfg-maximal-flush-validate-no-cjit stress/constant-folding-osr-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/int-or-other-sub.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/hard-overflow-check-equal.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-async-from-sync.js.dfg-maximal-flush-validate-no-cjit stress/compare-strict-eq-integer-to-misc.js.dfg-maximal-flush-validate-no-cjit stress/v8-regexp-strict.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/rare-osr-exit-on-local.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-transcoding.js.dfg-maximal-flush-validate-no-cjit stress/math-trunc-basics.js.dfg-maximal-flush-validate-no-cjit stress/create-subclass-structure-might-throw.js.dfg-maximal-flush-validate-no-cjit stress/typedarray-access-monomorphic-neutered.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val.js.dfg-maximal-flush-validate-no-cjit stress/infinite-loop-that-uses-captured-variables-but-they-do-not-escape.js.dfg-maximal-flush-validate-no-cjit stress/has-own-property-name-cache-symbols-and-strings.js.dfg-maximal-flush-validate-no-cjit stress/tricky-array-bounds-checks.js.dfg-maximal-flush-validate-no-cjit stress/math-floor-basics.js.dfg-maximal-flush-validate-no-cjit stress/get-local-elimination.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/typed-array-subarray.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/for-of-iterate-array-entries.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-throw-from-catch-block.js.dfg-maximal-flush-validate-no-cjit stress/to-string-on-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/is-array-for-array.js.dfg-maximal-flush-validate-no-cjit stress/proxy-own-keys.js.dfg-maximal-flush-validate-no-cjit stress/operation-in-throw-error.js.dfg-maximal-flush-validate-no-cjit stress/math-pow-stable-results.js.dfg-maximal-flush-validate-no-cjit v8-v6/v8-crypto.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/array-prototype-some.js.dfg-maximal-flush-validate-no-cjit stress/for-in-modify-int-loop-var.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-resolving.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-single-resolving.js.dfg-maximal-flush-validate-no-cjit stress/v8-crypto-strict.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-lexical-bind-this-6.js.dfg-maximal-flush-validate-no-cjit stress/promise-infinite-recursion-should-not-crash.js.dfg-maximal-flush-validate-no-cjit stress/dfg-put-getter-by-val-class.js.dfg-maximal-flush-validate-no-cjit stress/fold-to-int52-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-concat-long.js.dfg-maximal-flush-validate-no-cjit stress/super-get-by-id.js.dfg-maximal-flush-validate-no-cjit stress/reflect-construct.js.dfg-maximal-flush-validate-no-cjit stress/eval-func-decl-in-global-of-eval.js.dfg-maximal-flush-validate-no-cjit stress/arrowfunction-prototype.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-getter.js.dfg-maximal-flush-validate-no-cjit stress/exception-dfg-inlined-frame-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit stress/dead-osr-entry-value.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/string-repeat-small-not-resolving.js.dfg-maximal-flush-validate-no-cjit stress/global-lexical-variable-tdz.js.dfg-maximal-flush-validate-no-cjit stress/block-scoped-function-declarations.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/fake-iterators-that-throw-when-finished.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit stress/async-iteration-basic.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/v8-raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/set-for-each.js.dfg-maximal-flush-validate-no-cjit stress/async-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit stress/array-concat-spread-proxy-exception-check.js.dfg-maximal-flush-validate-no-cjit stress/global-is-nan.js.dfg-maximal-flush-validate-no-cjit stress/ftl-sub-exception.js.dfg-maximal-flush-validate-no-cjit stress/domjit-getter-type-check.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/super-get-by-id-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit stress/phantom-spread-forward-varargs.js.dfg-maximal-flush-validate-no-cjit microbenchmarks/simple-regexp-test-folding-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit stress/set-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit stress/float32-array-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit stress/class-syntax-super-in-eval.js.dfg-maximal-flush-validate-no-cjit
Saam Barati
Comment 15
2017-08-30 12:48:43 PDT
Created
attachment 319388
[details]
patch
Keith Miller
Comment 16
2017-08-30 18:29:49 PDT
Comment on
attachment 319388
[details]
patch View in context:
https://bugs.webkit.org/attachment.cgi?id=319388&action=review
r=me with nit.
> Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:5222 > + uint32_t errorType = currentInstruction[2].u.unsignedValue;
Nit: You could add names for throw_static_errors offsets!
> Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:10296 > +#if USE(JSVALUE64) > + callOperation(operationThrowDFG, valueRegs.gpr()); > +#else > + callOperation(operationThrowDFG, valueRegs); > +#endif
Nit: instead of an #if can you add a callOperation(V_JITOperation_EJssUi, JSValueRegs)?
Saam Barati
Comment 17
2017-08-31 16:28:22 PDT
Comment on
attachment 319388
[details]
patch View in context:
https://bugs.webkit.org/attachment.cgi?id=319388&action=review
>> Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:5222 >> + uint32_t errorType = currentInstruction[2].u.unsignedValue; > > Nit: You could add names for throw_static_errors offsets!
I'll embark on this journey in another patch
>> Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:10296 >> +#endif > > Nit: instead of an #if can you add a callOperation(V_JITOperation_EJssUi, JSValueRegs)?
will do
Saam Barati
Comment 18
2017-08-31 16:42:39 PDT
Created
attachment 319540
[details]
patch for landing
WebKit Commit Bot
Comment 19
2017-08-31 22:41:12 PDT
Comment on
attachment 319540
[details]
patch for landing Clearing flags on attachment: 319540 Committed
r221472
: <
http://trac.webkit.org/changeset/221472
>
WebKit Commit Bot
Comment 20
2017-08-31 22:41:14 PDT
All reviewed patches have been landed. Closing bug.
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug