Bug 176060 - Throwing an exception in the DFG/FTL should not cause a jettison
Summary: Throwing an exception in the DFG/FTL should not cause a jettison
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Saam Barati
URL:
Keywords: InRadar
Depends on: 176090
Blocks: 175396
  Show dependency treegraph
 
Reported: 2017-08-29 11:26 PDT by Saam Barati
Modified: 2017-08-31 22:41 PDT (History)
15 users (show)

See Also:


Attachments
patch (4.28 KB, patch)
2017-08-29 14:49 PDT, Saam Barati
msaboff: review+
msaboff: commit-queue-
Details | Formatted Diff | Diff
patch (18.79 KB, patch)
2017-08-30 01:09 PDT, Saam Barati
buildbot: commit-queue-
Details | Formatted Diff | Diff
patch (18.54 KB, patch)
2017-08-30 12:48 PDT, Saam Barati
keith_miller: review+
Details | Formatted Diff | Diff
patch for landing (19.55 KB, patch)
2017-08-31 16:42 PDT, Saam Barati
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Saam Barati 2017-08-29 11:26:21 PDT
This is expected behavior, there is no reason we should repeatedly jettison and recompile.
Comment 1 Saam Barati 2017-08-29 14:49:53 PDT
Created attachment 319285 [details]
patch
Comment 2 Michael Saboff 2017-08-29 14:53:17 PDT
Comment on attachment 319285 [details]
patch

View in context: https://bugs.webkit.org/attachment.cgi?id=319285&action=review

r=me

> Source/JavaScriptCore/ChangeLog:3
> +        Throwing an exception in the DFG/FTL should not be a jittison-able OSR exit

I think you want the bug title to be "... jettison-able ...".
Comment 3 Saam Barati 2017-08-29 14:55:40 PDT
fixed in:
https://trac.webkit.org/changeset/221317/webkit
Comment 4 Radar WebKit Bug Importer 2017-08-29 14:56:41 PDT
<rdar://problem/34143348>
Comment 5 Ryan Haddad 2017-08-29 18:11:31 PDT
This change caused 3 JSC test failures:
** The following JSC stress test failures have been introduced:
	jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout
	jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout-ftl-eager-no-cjit
	jsc-layout-tests.yaml/js/script-tests/dfg-activation-register-overwritten-in-throw.js.layout-ftl-no-cjit

https://build.webkit.org/builders/Apple%20Sierra%20Release%20JSC%20%28Tests%29/builds/3457
Comment 6 Saam Barati 2017-08-29 19:59:42 PDT
Will look into this in an hour or so.
Comment 7 Saam Barati 2017-08-29 20:49:05 PDT
Very weird, I can't reproduce this locally running the test manually. However, I can reproduce it when running it via run-jsc-stress-tests
Comment 8 Saam Barati 2017-08-29 20:51:28 PDT
Nevermind, I can reproduce it. This is super weird.
Comment 9 Saam Barati 2017-08-29 21:03:23 PDT
I think I see the bug. We're running the test with "testTheFTL=true", however, I don't think we're ever compiling for the FTL because we just repeatedly exit at the throw site. We also never increment our FTL optimization counter. The test in layout tests will ensure that we make it to the DFG, but the CodeBlock is lying and saying we're not in the DFG:

unsigned CodeBlock::numberOfDFGCompiles()
{
    ASSERT(JITCode::isBaselineCode(jitType()));
    if (Options::testTheFTL()) {
        if (m_didFailFTLCompilation)
            return 1000000;
        return (m_hasBeenCompiledWithFTL ? 1 : 0) + m_reoptimizationRetryCounter;
    }
    return (JITCode::isOptimizingJIT(replacement()->jitType()) ? 1 : 0) + m_reoptimizationRetryCounter;
}
Comment 10 Saam Barati 2017-08-29 21:13:31 PDT
Ima roll out for now. I think we should just treat Throw/ThrowStaticError like a terminal and actually throw an exception from the DFG/FTL. Anybody have any reasons to oppose doing this?
Comment 11 WebKit Commit Bot 2017-08-29 21:15:17 PDT
Re-opened since this is blocked by bug 176090
Comment 12 Saam Barati 2017-08-30 01:09:57 PDT
Created attachment 319352 [details]
patch

Might be it. Let's see what EWS thinks.
Comment 13 Build Bot 2017-08-30 06:05:38 PDT
Comment on attachment 319352 [details]
patch

Attachment 319352 [details] did not pass jsc-ews (mac):
Output: http://webkit-queues.webkit.org/results/4409440

New failing tests:
microbenchmarks/exit-length-on-plain-object.js.dfg-maximal-flush-validate-no-cjit
stress/promise-finally.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-reduce.js.dfg-maximal-flush-validate-no-cjit
stress/generic-arguments-correct-delete-behavior.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-getownproperty-not-configurable.js.dfg-maximal-flush-validate-no-cjit
stress/arguments-elimination-varargs-too-many-args-arg-count.js.dfg-maximal-flush-validate-no-cjit
stress/super-method-calls-check-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/inlined-error-gets-correct-codeblock-for-bytecodeoffset.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/for-of-iterate-array-keys.js.dfg-maximal-flush-validate-no-cjit
stress/spec-empty-flows-through-cell-checks.js.dfg-maximal-flush-validate-no-cjit
stress/reserved-word-with-escape.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-map.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-deltablue.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-arith-sub-exception.js.dfg-maximal-flush-validate-no-cjit
stress/math-round-basics.js.dfg-maximal-flush-validate-no-cjit
stress/fold-profiled-call-to-call.js.dfg-maximal-flush-validate-no-cjit
stress/phantom-inadequacy.js.dfg-maximal-flush-validate-no-cjit
stress/const-loop-semantics.js.dfg-maximal-flush-validate-no-cjit
stress/regress-170896-with-int32-shape-profile.js.dfg-maximal-flush-validate-no-cjit
stress/SharedArrayBuffer-opt.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit
stress/argument-count-bytecode.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-setter-by-id-class.js.dfg-maximal-flush-validate-no-cjit
sunspider-1.0/string-validate-input.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-abs-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/module-namespace-access-transitive-exports.js.dfg-maximal-flush-validate-no-cjit
stress/builtin-function-is-construct-type-none.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/super-get-by-val-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-object-or-string.js.dfg-maximal-flush-validate-no-cjit
stress/new-regex-inline.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-shr-exception.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-varargs-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-fill.js.dfg-maximal-flush-validate-no-cjit
stress/exception-dfg-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit
stress/pow-simple.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-get-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-supercall-1.js.dfg-maximal-flush-validate-no-cjit
stress/parameter-scoping.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-arguments-non-strict-2.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-object.js.dfg-maximal-flush-validate-no-cjit
stress/scoped-then-direct-arguments-get-by-val-in-baseline.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/large-map-iteration.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-exception-try-catch-in-constructor-with-inlined-throw.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-replace.js.dfg-maximal-flush-validate-no-cjit
stress/flatten-oversize-dictionary-object.js.dfg-maximal-flush-validate-no-cjit
stress/class-subclassing-string.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/map-for-of.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-double-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-has-property.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-neg-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/super-get-by-id-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-not-resolving.js.dfg-maximal-flush-validate-no-cjit
stress/for-in-invalidate-context-weird-assignments.js.dfg-maximal-flush-validate-no-cjit
stress/create-this-with-callee-variants.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-put-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/branch-fold.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-exception.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-oom-error-lazy-slow-path.js.dfg-maximal-flush-validate-no-cjit
stress/map-iteration.js.dfg-maximal-flush-validate-no-cjit
stress/instanceof.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-varargs-call-throws.js.dfg-maximal-flush-validate-no-cjit
stress/throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/instanceof-bound.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/get-by-id-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-div-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/compare-number-and-other.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/arrowfunction-call-in-class-method.js.dfg-maximal-flush-validate-no-cjit
stress/const-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-view-string-properties-neutered.js.dfg-maximal-flush-validate-no-cjit
stress/arrow-functions-as-default-parameter-values.js.dfg-maximal-flush-validate-no-cjit
stress/destructuring-rest-element.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/simple-regexp-test-folding-fail-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit
stress/new-array-with-spread-with-normal-spread-and-phantom-spread.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-block-with-var-and-remove.js.dfg-maximal-flush-validate-no-cjit
stress/throw-from-ftl-call-ic-slow-path.js.dfg-maximal-flush-validate-no-cjit
stress/call-apply-exponential-bytecode-size.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-others.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-superproperty.js.dfg-maximal-flush-validate-no-cjit
stress/allocation-sinking-puthint-control-flow.js.dfg-maximal-flush-validate-no-cjit
stress/async-arrow-functions-lexical-binding-in-class.js.dfg-maximal-flush-validate-no-cjit
stress/cse-multi-get-by-offset-remove-checks.js.dfg-maximal-flush-validate-no-cjit
stress/cloned-arguments-modification.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/locale-compare.js.dfg-maximal-flush-validate-no-cjit
stress/liveness-pruning-needed-for-osr-availability.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-library-inlining-exceptions.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-is-array.js.dfg-maximal-flush-validate-no-cjit
stress/rest-parameter-many-arguments.js.dfg-maximal-flush-validate-no-cjit
stress/array-reverse-proxy.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-earley-boyer.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-supercall-2.js.dfg-maximal-flush-validate-no-cjit
stress/map-inherit-set.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-concat-convert.js.dfg-maximal-flush-validate-no-cjit
stress/dont-unwind-past-vm-entry-frame.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-with-string-getter.js.dfg-maximal-flush-validate-no-cjit
stress/super-property-access-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/variable-named-eval-under-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-yield-star.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-map.js.dfg-maximal-flush-validate-no-cjit
stress/fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit
stress/to-property-key-correctness.js.dfg-maximal-flush-validate-no-cjit
stress/compare-eq-on-null-and-undefined-optimized-in-constant-folding.js.dfg-maximal-flush-validate-no-cjit
stress/fold-typed-array-properties.js.dfg-maximal-flush-validate-no-cjit
stress/class-derived-from-null.js.dfg-maximal-flush-validate-no-cjit
stress/generator-fib-ftl.js.dfg-maximal-flush-validate-no-cjit
stress/regress-156765.js.dfg-maximal-flush-validate-no-cjit
stress/v8-splay-strict.js.dfg-maximal-flush-validate-no-cjit
stress/pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit
stress/prop-type-struct-then-object-opt-fold.js.dfg-maximal-flush-validate-no-cjit
stress/spread-forward-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit
stress/math-clz32-basics.js.dfg-maximal-flush-validate-no-cjit
stress/rest-parameter-having-a-bad-time.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-getter-throw-interesting-value-recovery.js.dfg-maximal-flush-validate-no-cjit
stress/regress-170896-with-double-shape-profile.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-slice.js.dfg-maximal-flush-validate-no-cjit
stress/sink-object-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit
stress/constant-fold-multi-get-by-offset-to-get-by-offset-on-prototype-and-sink-allocation.js.dfg-maximal-flush-validate-no-cjit
stress/sink-arguments-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit
stress/array-symbol-species-lazy-watchpoints.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-operation-exception.js.dfg-maximal-flush-validate-no-cjit
stress/fold-to-primitive-to-identity-in-cfa.js.dfg-maximal-flush-validate-no-cjit
stress/tail-call-host-call-throw.js.dfg-maximal-flush-validate-no-cjit
stress/sampling-profiler-deep-stack.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/call-spread-call.js.dfg-maximal-flush-validate-no-cjit
stress/exception-in-to-property-key-should-be-handled-early.js.dfg-maximal-flush-validate-no-cjit
stress/poly-call-stub-in-getter-stub.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-typeof.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-with-private-symbols.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-operation-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-on-undecided-sane-chain-2.js.dfg-maximal-flush-validate-no-cjit
stress/with.js.dfg-maximal-flush-validate-no-cjit
stress/spread-forward-call-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz-in-loop-no-inline-super.js.dfg-maximal-flush-validate-no-cjit
stress/make-rope-2.js.dfg-maximal-flush-validate-no-cjit
stress/activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit
stress/throw-from-ftl-call-ic-slow-path-undefined.js.dfg-maximal-flush-validate-no-cjit
stress/array-slice-osr-exit-2.js.dfg-maximal-flush-validate-no-cjit
stress/arith-mul-with-constants.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-try-catch-wrong-value-recovery-on-ic-miss.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-newtarget.js.dfg-maximal-flush-validate-no-cjit
stress/fiat-value-to-int52-then-fail-to-fold.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/call-spread-apply.js.dfg-maximal-flush-validate-no-cjit
stress/spread-correct-global-object-on-exception.js.dfg-maximal-flush-validate-no-cjit
stress/inferred-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit
stress/fold-load-varargs-arity-check-fail.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-not-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit
stress/dead-fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-with-string-constructor.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit
stress/global-lexical-var-injection.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-yield-promise.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-get-and-set-recursion-stack-overflow.js.dfg-maximal-flush-validate-no-cjit
stress/global-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-call.js.dfg-maximal-flush-validate-no-cjit
stress/array-concat-spread-proxy.js.dfg-maximal-flush-validate-no-cjit
stress/domjit-getter-try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-get-prototype-of.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-get-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-tail-call-inilned-caller.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-setter-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-property-descriptor.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-getter-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-to-primitive-pass-symbol.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-string-or-string-object.js.dfg-maximal-flush-validate-no-cjit
stress/sink-function-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit
stress/Number-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/rest-parameter-allocation-elimination.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/many-foreach-calls.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/deltablue-for-of.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-xor-exception.js.dfg-maximal-flush-validate-no-cjit
stress/math-max-min-no-arguments.js.dfg-maximal-flush-validate-no-cjit
stress/activation-test-loop.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-bound.js.dfg-maximal-flush-validate-no-cjit
stress/es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit
stress/instanceof-not-cell.js.dfg-maximal-flush-validate-no-cjit
stress/tailCallForwardArguments.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-max-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/delete-to-object-exception.js.dfg-maximal-flush-validate-no-cjit
stress/generator-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-on-undecided-array-type.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-tdz-3.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-with-symbol-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/try-catch-custom-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/module-namespace-access.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-resolving.js.dfg-maximal-flush-validate-no-cjit
sunspider-1.0/controlflow-recursive.js.dfg-maximal-flush-validate-no-cjit
stress/branch-may-exit-due-to-object-or-other-use-kind.js.dfg-maximal-flush-validate-no-cjit
stress/bug-131764.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-bad-getter.js.dfg-maximal-flush-validate-no-cjit
stress/generator-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit
stress/has-own-property-name-cache-symbol-keys.js.dfg-maximal-flush-validate-no-cjit
stress/v8-earley-boyer-strict.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-reduceRight.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-getter-by-id-class.js.dfg-maximal-flush-validate-no-cjit
stress/super-property-access.js.dfg-maximal-flush-validate-no-cjit
stress/fold-to-double-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-functions-with-neutered.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-tdz-2.js.dfg-maximal-flush-validate-no-cjit
stress/fiat-value-to-int52-then-fold.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-mod-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/bound-function-lazy-name-generation.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/object-keys-map-values.js.dfg-maximal-flush-validate-no-cjit
stress/set-clone.js.dfg-maximal-flush-validate-no-cjit
stress/redundant-array-bounds-checks-unchecked-addition.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-supercall-4.js.dfg-maximal-flush-validate-no-cjit
stress/tagged-template-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/regress-174044.js.dfg-maximal-flush-validate-no-cjit
stress/redundant-array-bounds-checks-addition-skip-first.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-derived-default-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/generator-fib-ftl-and-object.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/lazy-array-species-watchpoints.js.dfg-maximal-flush-validate-no-cjit
stress/int52-ai-sub-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-tdz-1.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-add-constant-folding.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-get-by-id-getter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/strcat-emtpy.js.dfg-maximal-flush-validate-no-cjit
stress/dont-strength-reduce-valuerep-of-doublerep.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-replace-empty.js.dfg-maximal-flush-validate-no-cjit
stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit
stress/to-number-intrinsic-value-profiling.js.dfg-maximal-flush-validate-no-cjit
stress/rest-parameter-is-destructuring.js.dfg-maximal-flush-validate-no-cjit
stress/throw-from-ftl.js.dfg-maximal-flush-validate-no-cjit
stress/to-number-intrinsic-int52.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/map-has-get-cse-opportunity.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/try-catch-get-by-val-cloned-arguments.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-this-2.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-arguments-strict.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/generator-sunspider-access-nsieve.js.dfg-maximal-flush-validate-no-cjit
stress/v8-raytrace-strict.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/map-for-each.js.dfg-maximal-flush-validate-no-cjit
stress/arith-modulo-twice.js.dfg-maximal-flush-validate-no-cjit
stress/class-subclassing-function.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/get-by-val-with-string-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit
stress/class-subclassing-array.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/generator-fib.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-on-undecided-trivial.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/richards-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-concat-long-convert.js.dfg-maximal-flush-validate-no-cjit
stress/math-pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit
stress/modify-map-during-iteration.js.dfg-maximal-flush-validate-no-cjit
stress/has-own-property-name-cache-string-keys.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-by-val-direct-with-edge-numbers.js.dfg-maximal-flush-validate-no-cjit
stress/array-species-config-array-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/async-await-mozilla.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/super-get-by-val-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/sorting-benchmark.js.dfg-maximal-flush-validate-no-cjit
stress/fold-based-on-int32-proof-mul-branch.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-not-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit
stress/super-property-access-object-literal-to-this.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-setter-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/string-prototype-methods-endsWith-startsWith-includes-correctness.js.dfg-maximal-flush-validate-no-cjit
stress/async-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit
stress/equality-type-checking.js.dfg-maximal-flush-validate-no-cjit
stress/spread-optimized-properly.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-this-8.js.dfg-maximal-flush-validate-no-cjit
stress/generator-fib-ftl-and-array.js.dfg-maximal-flush-validate-no-cjit
stress/tail-call-recognize.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-class.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/set-for-of.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-accessors-by-id-class.js.dfg-maximal-flush-validate-no-cjit
stress/import-basic.js.dfg-maximal-flush-validate-no-cjit
stress/osr-enter-to-catch-with-set-local-type-check-failure.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-offset-double.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-library-inlining-exceptions-dataview.js.dfg-maximal-flush-validate-no-cjit
stress/lexical-let-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit
stress/generator-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit
stress/map-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit
stress/rest-parameter-and-default-arguments.js.dfg-maximal-flush-validate-no-cjit
stress/yield-reserved-word.js.dfg-maximal-flush-validate-no-cjit
stress/array-prototype-concat-of-long-spliced-arrays2.js.dfg-maximal-flush-validate-no-cjit
stress/compare-eq-on-null-and-undefined.js.dfg-maximal-flush-validate-no-cjit
stress/array-from-abs-and-floor.js.dfg-maximal-flush-validate-no-cjit
stress/const-semantics.js.dfg-maximal-flush-validate-no-cjit
stress/phantom-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/argument-intrinsic-not-convert-to-get-argument.js.dfg-maximal-flush-validate-no-cjit
stress/class-subclassing-misc.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-in-eval-within-block-with-let.js.dfg-maximal-flush-validate-no-cjit
stress/async-await-syntax.js.dfg-maximal-flush-validate-no-cjit
stress/throw-from-ftl-call-ic-slow-path-cells.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-add-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/int52-ai-neg-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/for-of-iterate-array-values.js.dfg-maximal-flush-validate-no-cjit
stress/domjit-getter-complex-with-incorrect-object.js.dfg-maximal-flush-validate-no-cjit
stress/fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-varargs-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/to-lower-case-intrinsic-on-empty-rope.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-loop-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-getter-throw.js.dfg-maximal-flush-validate-no-cjit
stress/try-catch-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-yield-star-interface.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-access-neutered.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-in-eval-within-with-scope.js.dfg-maximal-flush-validate-no-cjit
stress/try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit
stress/lexical-let-loop-semantics.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-array-prototype-methods.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/is-array-for-mixed-case.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-set-prototype-of.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/richards-try-catch.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-library-exception.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/infer-closure-const-then-mov.js.dfg-maximal-flush-validate-no-cjit
stress/liveness-pruning-needed-for-osr-availability-eager.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-arguments-non-strict-1.js.dfg-maximal-flush-validate-no-cjit
stress/async-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit
stress/instanceof-custom-hasinstancesymbol.js.dfg-maximal-flush-validate-no-cjit
stress/super-property-access-object-literal-to-this-2.js.dfg-maximal-flush-validate-no-cjit
stress/construct-forward-varargs-for-inlined-escaped-arguments.js.dfg-maximal-flush-validate-no-cjit
stress/function-constructor-reading-from-global-lexical-environment.js.dfg-maximal-flush-validate-no-cjit
stress/set-inherit-add.js.dfg-maximal-flush-validate-no-cjit
stress/dont-crash-in-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit
stress/infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit
stress/super-property-access-exceptions.js.dfg-maximal-flush-validate-no-cjit
stress/int52-ai-add-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit
stress/reflect-set-proxy-set.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit
stress/try-catch-setter-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-replace-generic.js.dfg-maximal-flush-validate-no-cjit
stress/int16-put-by-val-out-of-bounds-bounds-then-do-in-bounds.js.dfg-maximal-flush-validate-no-cjit
stress/array-concat-spread-object.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-concat.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-with-symbol-getter.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-new-negative-array-size.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/apply-not-apply.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-subarray.js.dfg-maximal-flush-validate-no-cjit
stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit
stress/activation-sink-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit
stress/int16-put-by-val-in-and-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-value-or-string.js.dfg-maximal-flush-validate-no-cjit
stress/array-slice-osr-exit.js.dfg-maximal-flush-validate-no-cjit
stress/is-undefined-exit-on-masquerader.js.dfg-maximal-flush-validate-no-cjit
stress/put-direct-index-broken-2.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-getter-ic-fail-to-call-operation-throw-error.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-splay.js.dfg-maximal-flush-validate-no-cjit
stress/catch-set-argument-speculation-failure.js.dfg-maximal-flush-validate-no-cjit
stress/lexical-let-tdz.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/delta-blue-try-catch.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/map-constant-key.js.dfg-maximal-flush-validate-no-cjit
stress/fold-to-primitive-in-cfa.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-call-class-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit
stress/math-unary-no-arg.js.dfg-maximal-flush-validate-no-cjit
stress/phantom-new-array-with-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-put-by-id-setter-exception.js.dfg-maximal-flush-validate-no-cjit
stress/regress-153486.js.dfg-maximal-flush-validate-no-cjit
stress/function-with-defaults-inlining.js.dfg-maximal-flush-validate-no-cjit
stress/bug-171786.js.dfg-maximal-flush-validate-no-cjit
stress/call-varargs-with-different-arguments-length-after-warmup.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/try-catch-get-by-val-direct-arguments.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit
stress/exception-dfg-operation-read-value.js.dfg-maximal-flush-validate-no-cjit
stress/instanceof-late-constant-folding.js.dfg-maximal-flush-validate-no-cjit
stress/get-from-scope-dynamic-onto-proxy.js.dfg-maximal-flush-validate-no-cjit
stress/number-is-finite.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/dont-dead-lock-put-by-val-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/op-add-exceptions.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/simple-regexp-test-folding-fail.js.dfg-maximal-flush-validate-no-cjit
stress/regress-170896-with-contiguous-shape-profile.js.dfg-maximal-flush-validate-no-cjit
stress/tricky-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-min-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/make-rope-3.js.dfg-maximal-flush-validate-no-cjit
stress/tagged-templates-raw-strings.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-every.js.dfg-maximal-flush-validate-no-cjit
stress/tricky-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/simple-regexp-test-folding.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-patchpoint-with-volatile-registers.js.dfg-maximal-flush-validate-no-cjit
stress/modify-set-during-iteration.js.dfg-maximal-flush-validate-no-cjit
stress/int52-ai-mul-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit
stress/regress-171079.js.dfg-maximal-flush-validate-no-cjit
stress/async-function-declaration-sinking-no-double-allocate.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-sub-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-varargs-exception.js.dfg-maximal-flush-validate-no-cjit
stress/rest-parameter-basics.js.dfg-maximal-flush-validate-no-cjit
stress/lexical-scoping-break-continue.js.dfg-maximal-flush-validate-no-cjit
stress/set-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit
stress/value-to-boolean.js.dfg-maximal-flush-validate-no-cjit
stress/map-clone.js.dfg-maximal-flush-validate-no-cjit
stress/dead-fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/IIFE-es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit
stress/array-prototype-concat-of-long-spliced-arrays.js.dfg-maximal-flush-validate-no-cjit
stress/fold-load-varargs-arity-check-fail-barely.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/varargs-construct.js.dfg-maximal-flush-validate-no-cjit
stress/pad-start-calls-repeat-character-with-double.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-richards.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-define-own-property.js.dfg-maximal-flush-validate-no-cjit
stress/varargs-inlined-simple-exit-aliasing.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-put-by-id-setter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/v8-regexp-search.js.dfg-maximal-flush-validate-no-cjit
stress/v8-richards-strict.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-regexp.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/for-of-array.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/is-symbol-mixed.js.dfg-maximal-flush-validate-no-cjit
stress/spread-calling.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-get-by-id-getter-exception.js.dfg-maximal-flush-validate-no-cjit
stress/try-catch-stub-routine-replaced.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/map-rehash.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-setter-by-val-class.js.dfg-maximal-flush-validate-no-cjit
stress/global-lexical-redefine-const.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-string-object.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-mul-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/to-number-throws-correct-exception.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/arrowfunction-call-in-class-constructor.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/arguments-strict-mode.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/get-by-val-with-symbol-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit
stress/for-in-prototype.js.dfg-maximal-flush-validate-no-cjit
stress/es6-for-of-loop-exception.js.dfg-maximal-flush-validate-no-cjit
stress/sloppy-mode-function-hoisting.js.dfg-maximal-flush-validate-no-cjit
stress/array-message-passing.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-instanceof.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/v8-raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-tdz-4.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-supercall-3.js.dfg-maximal-flush-validate-no-cjit
stress/sparse-array-entry-update-144067.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/concat-append-one.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-single-not-resolving.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit
stress/symbol-toprimitive.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-setter-throw.js.dfg-maximal-flush-validate-no-cjit
stress/generator-fib-ftl-and-string.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-with-unbalanced-getter-setter.js.dfg-maximal-flush-validate-no-cjit
stress/arith-add-with-constants.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-block-with-var-sinthesize.js.dfg-maximal-flush-validate-no-cjit
stress/const-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-within-eval-without-reassign-to-let.js.dfg-maximal-flush-validate-no-cjit
sunspider-1.0/string-tagcloud.js.dfg-maximal-flush-validate-no-cjit
stress/infinite-loop-that-uses-captured-variables-before-throwing.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-construct.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-set.js.dfg-maximal-flush-validate-no-cjit
stress/runtime-throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-abs-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/has-own-property-cache-basics.js.dfg-maximal-flush-validate-no-cjit
stress/IIFE-function-name-captured.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-id-throw-from-getter-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit
stress/array-slice-jettison-on-constructor-change.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit
stress/istypedarrayview-intrinsic.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/try-catch-word-count.js.dfg-maximal-flush-validate-no-cjit
stress/int52-ai-mul-and-clean-neg-zero-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit
stress/math-ceil-basics.js.dfg-maximal-flush-validate-no-cjit
stress/array-copywithin.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-json.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-neg-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/tricky-indirectly-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit
stress/infer-uninitialized-closure-var.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit
stress/load-varargs-then-inlined-call-exit-in-foo.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/switch-char-constant.js.dfg-maximal-flush-validate-no-cjit
stress/escape-object-in-diamond-then-exit.js.dfg-maximal-flush-validate-no-cjit
stress/number-is-nan.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-delete.js.dfg-maximal-flush-validate-no-cjit
stress/tricky-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit
sunspider-1.0/date-format-tofte.js.dfg-maximal-flush-validate-no-cjit
stress/regress-132147.js.dfg-maximal-flush-validate-no-cjit
stress/array-slice-intrinsic.js.dfg-maximal-flush-validate-no-cjit
stress/array-concat-with-slow-indexingtypes.js.dfg-maximal-flush-validate-no-cjit
stress/check-dom-with-signature.js.dfg-maximal-flush-validate-no-cjit
stress/spread-non-array.js.dfg-maximal-flush-validate-no-cjit
stress/arith-sub-on-double-array-with-holes.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-add.js.dfg-maximal-flush-validate-no-cjit
stress/global-is-finite.js.dfg-maximal-flush-validate-no-cjit
stress/pow-stable-results.js.dfg-maximal-flush-validate-no-cjit
stress/fold-multi-get-by-offset-to-get-by-offset-without-folding-the-structure-check-new.js.dfg-maximal-flush-validate-no-cjit
stress/check-sub-class.js.dfg-maximal-flush-validate-no-cjit
stress/generator-frame-empty.js.dfg-maximal-flush-validate-no-cjit
stress/class-subclassing-typedarray.js.dfg-maximal-flush-validate-no-cjit
stress/tier-up-in-loop-with-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit
stress/generator-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit
stress/sampling-profiler-microtasks.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-put-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-accessors-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/sink-multigetbyoffset.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-forEach.js.dfg-maximal-flush-validate-no-cjit
stress/async-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit
stress/no-abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-configure-index.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-revoke.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/is-array-for-proxy.js.dfg-maximal-flush-validate-no-cjit
stress/ai-consistency-filter-cells.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-within-eval-with-reassign-to-var.js.dfg-maximal-flush-validate-no-cjit
stress/map-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-string-or-string-object-then-object.js.dfg-maximal-flush-validate-no-cjit
stress/constant-folding-osr-exit.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-sub.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/hard-overflow-check-equal.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-async-from-sync.js.dfg-maximal-flush-validate-no-cjit
stress/compare-strict-eq-integer-to-misc.js.dfg-maximal-flush-validate-no-cjit
stress/v8-regexp-strict.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/rare-osr-exit-on-local.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-transcoding.js.dfg-maximal-flush-validate-no-cjit
stress/math-trunc-basics.js.dfg-maximal-flush-validate-no-cjit
stress/create-subclass-structure-might-throw.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-access-monomorphic-neutered.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-getter-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/infinite-loop-that-uses-captured-variables-but-they-do-not-escape.js.dfg-maximal-flush-validate-no-cjit
stress/has-own-property-name-cache-symbols-and-strings.js.dfg-maximal-flush-validate-no-cjit
stress/tricky-array-bounds-checks.js.dfg-maximal-flush-validate-no-cjit
stress/math-floor-basics.js.dfg-maximal-flush-validate-no-cjit
stress/get-local-elimination.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/typed-array-subarray.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/for-of-iterate-array-entries.js.dfg-maximal-flush-validate-no-cjit
stress/exception-dfg-throw-from-catch-block.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-value.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/is-array-for-array.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-own-keys.js.dfg-maximal-flush-validate-no-cjit
stress/operation-in-throw-error.js.dfg-maximal-flush-validate-no-cjit
stress/math-pow-stable-results.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-crypto.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-some.js.dfg-maximal-flush-validate-no-cjit
stress/for-in-modify-int-loop-var.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-small-resolving.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-single-resolving.js.dfg-maximal-flush-validate-no-cjit
stress/v8-crypto-strict.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-this-6.js.dfg-maximal-flush-validate-no-cjit
stress/promise-infinite-recursion-should-not-crash.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-getter-by-val-class.js.dfg-maximal-flush-validate-no-cjit
stress/fold-to-int52-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-concat-long.js.dfg-maximal-flush-validate-no-cjit
stress/super-get-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/reflect-construct.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-in-global-of-eval.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-prototype.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/super-getter.js.dfg-maximal-flush-validate-no-cjit
stress/exception-dfg-inlined-frame-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit
stress/dead-osr-entry-value.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-small-not-resolving.js.dfg-maximal-flush-validate-no-cjit
stress/global-lexical-variable-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/block-scoped-function-declarations.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/fake-iterators-that-throw-when-finished.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-basic.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/v8-raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/set-for-each.js.dfg-maximal-flush-validate-no-cjit
stress/async-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit
stress/array-concat-spread-proxy-exception-check.js.dfg-maximal-flush-validate-no-cjit
stress/global-is-nan.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-sub-exception.js.dfg-maximal-flush-validate-no-cjit
stress/domjit-getter-type-check.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/super-get-by-id-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit
stress/phantom-spread-forward-varargs.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/simple-regexp-test-folding-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit
stress/set-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit
stress/float32-array-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-super-in-eval.js.dfg-maximal-flush-validate-no-cjit
Comment 14 Build Bot 2017-08-30 07:59:46 PDT
Comment on attachment 319352 [details]
patch

Attachment 319352 [details] did not pass jsc-ews (mac):
Output: http://webkit-queues.webkit.org/results/4409841

New failing tests:
microbenchmarks/exit-length-on-plain-object.js.dfg-maximal-flush-validate-no-cjit
stress/promise-finally.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-reduce.js.dfg-maximal-flush-validate-no-cjit
stress/generic-arguments-correct-delete-behavior.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-getownproperty-not-configurable.js.dfg-maximal-flush-validate-no-cjit
stress/arguments-elimination-varargs-too-many-args-arg-count.js.dfg-maximal-flush-validate-no-cjit
stress/super-method-calls-check-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/inlined-error-gets-correct-codeblock-for-bytecodeoffset.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/for-of-iterate-array-keys.js.dfg-maximal-flush-validate-no-cjit
stress/spec-empty-flows-through-cell-checks.js.dfg-maximal-flush-validate-no-cjit
stress/reserved-word-with-escape.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-map.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-deltablue.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-arith-sub-exception.js.dfg-maximal-flush-validate-no-cjit
stress/math-round-basics.js.dfg-maximal-flush-validate-no-cjit
stress/fold-profiled-call-to-call.js.dfg-maximal-flush-validate-no-cjit
stress/phantom-inadequacy.js.dfg-maximal-flush-validate-no-cjit
stress/const-loop-semantics.js.dfg-maximal-flush-validate-no-cjit
stress/regress-170896-with-int32-shape-profile.js.dfg-maximal-flush-validate-no-cjit
stress/SharedArrayBuffer-opt.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit
stress/argument-count-bytecode.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-setter-by-id-class.js.dfg-maximal-flush-validate-no-cjit
sunspider-1.0/string-validate-input.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-abs-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/module-namespace-access-transitive-exports.js.dfg-maximal-flush-validate-no-cjit
stress/builtin-function-is-construct-type-none.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/super-get-by-val-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-object-or-string.js.dfg-maximal-flush-validate-no-cjit
stress/new-regex-inline.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-shr-exception.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-varargs-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-fill.js.dfg-maximal-flush-validate-no-cjit
stress/exception-dfg-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit
stress/pow-simple.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-get-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-supercall-1.js.dfg-maximal-flush-validate-no-cjit
stress/parameter-scoping.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-arguments-non-strict-2.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-object.js.dfg-maximal-flush-validate-no-cjit
stress/scoped-then-direct-arguments-get-by-val-in-baseline.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/large-map-iteration.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-exception-try-catch-in-constructor-with-inlined-throw.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-replace.js.dfg-maximal-flush-validate-no-cjit
stress/flatten-oversize-dictionary-object.js.dfg-maximal-flush-validate-no-cjit
stress/class-subclassing-string.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/map-for-of.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-double-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-has-property.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-neg-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/super-get-by-id-with-this-polymorphic.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-not-resolving.js.dfg-maximal-flush-validate-no-cjit
stress/for-in-invalidate-context-weird-assignments.js.dfg-maximal-flush-validate-no-cjit
stress/create-this-with-callee-variants.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-put-by-id-slow-exception.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/branch-fold.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-exception.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-oom-error-lazy-slow-path.js.dfg-maximal-flush-validate-no-cjit
stress/map-iteration.js.dfg-maximal-flush-validate-no-cjit
stress/instanceof.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-varargs-call-throws.js.dfg-maximal-flush-validate-no-cjit
stress/throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/instanceof-bound.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/get-by-id-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-div-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/compare-number-and-other.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/arrowfunction-call-in-class-method.js.dfg-maximal-flush-validate-no-cjit
stress/const-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-view-string-properties-neutered.js.dfg-maximal-flush-validate-no-cjit
stress/arrow-functions-as-default-parameter-values.js.dfg-maximal-flush-validate-no-cjit
stress/destructuring-rest-element.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/simple-regexp-test-folding-fail-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit
stress/new-array-with-spread-with-normal-spread-and-phantom-spread.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-block-with-var-and-remove.js.dfg-maximal-flush-validate-no-cjit
stress/throw-from-ftl-call-ic-slow-path.js.dfg-maximal-flush-validate-no-cjit
stress/call-apply-exponential-bytecode-size.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-others.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-superproperty.js.dfg-maximal-flush-validate-no-cjit
stress/allocation-sinking-puthint-control-flow.js.dfg-maximal-flush-validate-no-cjit
stress/async-arrow-functions-lexical-binding-in-class.js.dfg-maximal-flush-validate-no-cjit
stress/cse-multi-get-by-offset-remove-checks.js.dfg-maximal-flush-validate-no-cjit
stress/cloned-arguments-modification.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/locale-compare.js.dfg-maximal-flush-validate-no-cjit
stress/liveness-pruning-needed-for-osr-availability.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-library-inlining-exceptions.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-is-array.js.dfg-maximal-flush-validate-no-cjit
stress/rest-parameter-many-arguments.js.dfg-maximal-flush-validate-no-cjit
stress/array-reverse-proxy.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-earley-boyer.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-supercall-2.js.dfg-maximal-flush-validate-no-cjit
stress/map-inherit-set.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-concat-convert.js.dfg-maximal-flush-validate-no-cjit
stress/dont-unwind-past-vm-entry-frame.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-with-string-getter.js.dfg-maximal-flush-validate-no-cjit
stress/super-property-access-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/variable-named-eval-under-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-yield-star.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-map.js.dfg-maximal-flush-validate-no-cjit
stress/fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit
stress/to-property-key-correctness.js.dfg-maximal-flush-validate-no-cjit
stress/compare-eq-on-null-and-undefined-optimized-in-constant-folding.js.dfg-maximal-flush-validate-no-cjit
stress/fold-typed-array-properties.js.dfg-maximal-flush-validate-no-cjit
stress/class-derived-from-null.js.dfg-maximal-flush-validate-no-cjit
stress/generator-fib-ftl.js.dfg-maximal-flush-validate-no-cjit
stress/regress-156765.js.dfg-maximal-flush-validate-no-cjit
stress/v8-splay-strict.js.dfg-maximal-flush-validate-no-cjit
stress/pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit
stress/prop-type-struct-then-object-opt-fold.js.dfg-maximal-flush-validate-no-cjit
stress/spread-forward-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit
stress/math-clz32-basics.js.dfg-maximal-flush-validate-no-cjit
stress/rest-parameter-having-a-bad-time.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-getter-throw-interesting-value-recovery.js.dfg-maximal-flush-validate-no-cjit
stress/regress-170896-with-double-shape-profile.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-slice.js.dfg-maximal-flush-validate-no-cjit
stress/sink-object-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit
stress/constant-fold-multi-get-by-offset-to-get-by-offset-on-prototype-and-sink-allocation.js.dfg-maximal-flush-validate-no-cjit
stress/sink-arguments-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit
stress/array-symbol-species-lazy-watchpoints.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-operation-exception.js.dfg-maximal-flush-validate-no-cjit
stress/fold-to-primitive-to-identity-in-cfa.js.dfg-maximal-flush-validate-no-cjit
stress/tail-call-host-call-throw.js.dfg-maximal-flush-validate-no-cjit
stress/sampling-profiler-deep-stack.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/call-spread-call.js.dfg-maximal-flush-validate-no-cjit
stress/exception-in-to-property-key-should-be-handled-early.js.dfg-maximal-flush-validate-no-cjit
stress/poly-call-stub-in-getter-stub.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-typeof.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-with-private-symbols.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-operation-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-on-undecided-sane-chain-2.js.dfg-maximal-flush-validate-no-cjit
stress/with.js.dfg-maximal-flush-validate-no-cjit
stress/spread-forward-call-varargs-stack-overflow.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz-in-loop-no-inline-super.js.dfg-maximal-flush-validate-no-cjit
stress/make-rope-2.js.dfg-maximal-flush-validate-no-cjit
stress/activation-sink-osrexit-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit
stress/throw-from-ftl-call-ic-slow-path-undefined.js.dfg-maximal-flush-validate-no-cjit
stress/array-slice-osr-exit-2.js.dfg-maximal-flush-validate-no-cjit
stress/arith-mul-with-constants.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-try-catch-wrong-value-recovery-on-ic-miss.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-newtarget.js.dfg-maximal-flush-validate-no-cjit
stress/fiat-value-to-int52-then-fail-to-fold.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/call-spread-apply.js.dfg-maximal-flush-validate-no-cjit
stress/spread-correct-global-object-on-exception.js.dfg-maximal-flush-validate-no-cjit
stress/inferred-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit
stress/fold-load-varargs-arity-check-fail.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-not-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit
stress/dead-fiat-value-to-int52-then-exit-not-int52.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-with-string-constructor.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-raytrace.js.dfg-maximal-flush-validate-no-cjit
stress/generator-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-yield-promise.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-get-and-set-recursion-stack-overflow.js.dfg-maximal-flush-validate-no-cjit
stress/global-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-call.js.dfg-maximal-flush-validate-no-cjit
stress/array-concat-spread-proxy.js.dfg-maximal-flush-validate-no-cjit
stress/domjit-getter-try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-get-prototype-of.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-get-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-tail-call-inilned-caller.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-setter-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-property-descriptor.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-getter-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-to-primitive-pass-symbol.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-string-or-string-object.js.dfg-maximal-flush-validate-no-cjit
stress/sink-function-past-invalid-check-sneakier.js.dfg-maximal-flush-validate-no-cjit
stress/Number-isNaN-basics.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/rest-parameter-allocation-elimination.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/many-foreach-calls.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/deltablue-for-of.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-xor-exception.js.dfg-maximal-flush-validate-no-cjit
stress/math-max-min-no-arguments.js.dfg-maximal-flush-validate-no-cjit
stress/activation-test-loop.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-bound.js.dfg-maximal-flush-validate-no-cjit
stress/es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit
stress/instanceof-not-cell.js.dfg-maximal-flush-validate-no-cjit
stress/tailCallForwardArguments.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-max-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/delete-to-object-exception.js.dfg-maximal-flush-validate-no-cjit
stress/generator-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-on-undecided-array-type.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-tdz-3.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-with-symbol-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/try-catch-custom-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/module-namespace-access.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-resolving.js.dfg-maximal-flush-validate-no-cjit
sunspider-1.0/controlflow-recursive.js.dfg-maximal-flush-validate-no-cjit
stress/branch-may-exit-due-to-object-or-other-use-kind.js.dfg-maximal-flush-validate-no-cjit
stress/bug-131764.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-bad-getter.js.dfg-maximal-flush-validate-no-cjit
stress/generator-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit
stress/has-own-property-name-cache-symbol-keys.js.dfg-maximal-flush-validate-no-cjit
stress/v8-earley-boyer-strict.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-reduceRight.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-getter-by-id-class.js.dfg-maximal-flush-validate-no-cjit
stress/super-property-access.js.dfg-maximal-flush-validate-no-cjit
stress/fold-to-double-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-functions-with-neutered.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-tdz-2.js.dfg-maximal-flush-validate-no-cjit
stress/fiat-value-to-int52-then-fold.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-mod-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/bound-function-lazy-name-generation.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/object-keys-map-values.js.dfg-maximal-flush-validate-no-cjit
stress/set-clone.js.dfg-maximal-flush-validate-no-cjit
stress/redundant-array-bounds-checks-unchecked-addition.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-supercall-4.js.dfg-maximal-flush-validate-no-cjit
stress/tagged-template-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/regress-174044.js.dfg-maximal-flush-validate-no-cjit
stress/redundant-array-bounds-checks-addition-skip-first.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-derived-default-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/generator-fib-ftl-and-object.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/lazy-array-species-watchpoints.js.dfg-maximal-flush-validate-no-cjit
stress/int52-ai-sub-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-tdz-1.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-add-constant-folding.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-get-by-id-getter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/strcat-emtpy.js.dfg-maximal-flush-validate-no-cjit
stress/dont-strength-reduce-valuerep-of-doublerep.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-replace-empty.js.dfg-maximal-flush-validate-no-cjit
stress/redundant-array-bounds-checks-addition.js.dfg-maximal-flush-validate-no-cjit
stress/to-number-intrinsic-value-profiling.js.dfg-maximal-flush-validate-no-cjit
stress/rest-parameter-is-destructuring.js.dfg-maximal-flush-validate-no-cjit
stress/throw-from-ftl.js.dfg-maximal-flush-validate-no-cjit
stress/to-number-intrinsic-int52.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/map-has-get-cse-opportunity.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/try-catch-get-by-val-cloned-arguments.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-this-2.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-arguments-strict.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/generator-sunspider-access-nsieve.js.dfg-maximal-flush-validate-no-cjit
stress/v8-raytrace-strict.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/map-for-each.js.dfg-maximal-flush-validate-no-cjit
stress/arith-modulo-twice.js.dfg-maximal-flush-validate-no-cjit
stress/class-subclassing-function.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/get-by-val-with-string-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit
stress/class-subclassing-array.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/generator-fib.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-on-undecided-trivial.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/richards-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-concat-long-convert.js.dfg-maximal-flush-validate-no-cjit
stress/math-pow-nan-behaviors.js.dfg-maximal-flush-validate-no-cjit
stress/modify-map-during-iteration.js.dfg-maximal-flush-validate-no-cjit
stress/has-own-property-name-cache-string-keys.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-by-val-direct-with-edge-numbers.js.dfg-maximal-flush-validate-no-cjit
stress/array-species-config-array-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/async-await-mozilla.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/super-get-by-val-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/sorting-benchmark.js.dfg-maximal-flush-validate-no-cjit
stress/fold-based-on-int32-proof-mul-branch.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-not-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit
stress/super-property-access-object-literal-to-this.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-setter-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/string-prototype-methods-endsWith-startsWith-includes-correctness.js.dfg-maximal-flush-validate-no-cjit
stress/async-function-declaration-sinking-put.js.dfg-maximal-flush-validate-no-cjit
stress/equality-type-checking.js.dfg-maximal-flush-validate-no-cjit
stress/spread-optimized-properly.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-this-8.js.dfg-maximal-flush-validate-no-cjit
stress/generator-fib-ftl-and-array.js.dfg-maximal-flush-validate-no-cjit
stress/tail-call-recognize.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-class.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/set-for-of.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-accessors-by-id-class.js.dfg-maximal-flush-validate-no-cjit
stress/import-basic.js.dfg-maximal-flush-validate-no-cjit
stress/osr-enter-to-catch-with-set-local-type-check-failure.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-offset-double.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-library-inlining-exceptions-dataview.js.dfg-maximal-flush-validate-no-cjit
stress/lexical-let-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit
stress/map-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit
stress/rest-parameter-and-default-arguments.js.dfg-maximal-flush-validate-no-cjit
stress/yield-reserved-word.js.dfg-maximal-flush-validate-no-cjit
stress/array-prototype-concat-of-long-spliced-arrays2.js.dfg-maximal-flush-validate-no-cjit
stress/compare-eq-on-null-and-undefined.js.dfg-maximal-flush-validate-no-cjit
stress/array-from-abs-and-floor.js.dfg-maximal-flush-validate-no-cjit
stress/const-semantics.js.dfg-maximal-flush-validate-no-cjit
stress/phantom-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/argument-intrinsic-not-convert-to-get-argument.js.dfg-maximal-flush-validate-no-cjit
stress/class-subclassing-misc.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-in-eval-within-block-with-let.js.dfg-maximal-flush-validate-no-cjit
stress/async-await-syntax.js.dfg-maximal-flush-validate-no-cjit
stress/throw-from-ftl-call-ic-slow-path-cells.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-add-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/int52-ai-neg-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/for-of-iterate-array-values.js.dfg-maximal-flush-validate-no-cjit
stress/domjit-getter-complex-with-incorrect-object.js.dfg-maximal-flush-validate-no-cjit
stress/fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-varargs-bad-callee-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/to-lower-case-intrinsic-on-empty-rope.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-loop-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-getter-throw.js.dfg-maximal-flush-validate-no-cjit
stress/try-catch-getter-as-get-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-yield-star-interface.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-access-neutered.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-in-eval-within-with-scope.js.dfg-maximal-flush-validate-no-cjit
stress/try-catch-getter-as-get-by-id-register-restoration.js.dfg-maximal-flush-validate-no-cjit
stress/lexical-let-loop-semantics.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-array-prototype-methods.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/is-array-for-mixed-case.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-set-prototype-of.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/richards-try-catch.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-library-exception.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/infer-closure-const-then-mov.js.dfg-maximal-flush-validate-no-cjit
stress/liveness-pruning-needed-for-osr-availability-eager.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-arguments-non-strict-1.js.dfg-maximal-flush-validate-no-cjit
stress/async-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit
stress/instanceof-custom-hasinstancesymbol.js.dfg-maximal-flush-validate-no-cjit
stress/super-property-access-object-literal-to-this-2.js.dfg-maximal-flush-validate-no-cjit
stress/construct-forward-varargs-for-inlined-escaped-arguments.js.dfg-maximal-flush-validate-no-cjit
stress/function-constructor-reading-from-global-lexical-environment.js.dfg-maximal-flush-validate-no-cjit
stress/set-inherit-add.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-for-await-of.js.dfg-maximal-flush-validate-no-cjit
stress/dont-crash-in-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit
stress/infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit
stress/super-property-access-exceptions.js.dfg-maximal-flush-validate-no-cjit
stress/int52-ai-add-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit
stress/reflect-set-proxy-set.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/Float32Array-matrix-mult.js.dfg-maximal-flush-validate-no-cjit
stress/try-catch-setter-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-replace-generic.js.dfg-maximal-flush-validate-no-cjit
stress/int16-put-by-val-out-of-bounds-bounds-then-do-in-bounds.js.dfg-maximal-flush-validate-no-cjit
stress/array-concat-spread-object.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-concat.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-val-with-symbol-getter.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-new-negative-array-size.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/apply-not-apply.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-subarray.js.dfg-maximal-flush-validate-no-cjit
stress/v8-deltablue-strict.js.dfg-maximal-flush-validate-no-cjit
stress/activation-sink-default-value-tdz-error.js.dfg-maximal-flush-validate-no-cjit
stress/int16-put-by-val-in-and-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-value-or-string.js.dfg-maximal-flush-validate-no-cjit
stress/array-slice-osr-exit.js.dfg-maximal-flush-validate-no-cjit
stress/is-undefined-exit-on-masquerader.js.dfg-maximal-flush-validate-no-cjit
stress/put-direct-index-broken-2.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-getter-ic-fail-to-call-operation-throw-error.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-splay.js.dfg-maximal-flush-validate-no-cjit
stress/global-lexical-var-injection.js.dfg-maximal-flush-validate-no-cjit
stress/catch-set-argument-speculation-failure.js.dfg-maximal-flush-validate-no-cjit
stress/lexical-let-tdz.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/delta-blue-try-catch.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/map-constant-key.js.dfg-maximal-flush-validate-no-cjit
stress/fold-to-primitive-in-cfa.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-call-class-constructor.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz-in-eval.js.dfg-maximal-flush-validate-no-cjit
stress/math-unary-no-arg.js.dfg-maximal-flush-validate-no-cjit
stress/phantom-new-array-with-spread-osr-exit.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-put-by-id-setter-exception.js.dfg-maximal-flush-validate-no-cjit
stress/regress-153486.js.dfg-maximal-flush-validate-no-cjit
stress/function-with-defaults-inlining.js.dfg-maximal-flush-validate-no-cjit
stress/bug-171786.js.dfg-maximal-flush-validate-no-cjit
stress/call-varargs-with-different-arguments-length-after-warmup.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/try-catch-get-by-val-direct-arguments.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-resolving-no-inline.js.dfg-maximal-flush-validate-no-cjit
stress/exception-dfg-operation-read-value.js.dfg-maximal-flush-validate-no-cjit
stress/instanceof-late-constant-folding.js.dfg-maximal-flush-validate-no-cjit
stress/get-from-scope-dynamic-onto-proxy.js.dfg-maximal-flush-validate-no-cjit
stress/number-is-finite.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/dont-dead-lock-put-by-val-as-put-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/op-add-exceptions.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/simple-regexp-test-folding-fail.js.dfg-maximal-flush-validate-no-cjit
stress/regress-170896-with-contiguous-shape-profile.js.dfg-maximal-flush-validate-no-cjit
stress/tricky-infinite-loop-that-uses-captured-variables.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-min-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/make-rope-3.js.dfg-maximal-flush-validate-no-cjit
stress/tagged-templates-raw-strings.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-every.js.dfg-maximal-flush-validate-no-cjit
stress/tricky-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/simple-regexp-test-folding.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-patchpoint-with-volatile-registers.js.dfg-maximal-flush-validate-no-cjit
stress/modify-set-during-iteration.js.dfg-maximal-flush-validate-no-cjit
stress/int52-ai-mul-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit
stress/regress-171079.js.dfg-maximal-flush-validate-no-cjit
stress/async-function-declaration-sinking-no-double-allocate.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-sub-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-call-varargs-exception.js.dfg-maximal-flush-validate-no-cjit
stress/rest-parameter-basics.js.dfg-maximal-flush-validate-no-cjit
stress/lexical-scoping-break-continue.js.dfg-maximal-flush-validate-no-cjit
stress/set-clone-instance-iterator-change.js.dfg-maximal-flush-validate-no-cjit
stress/value-to-boolean.js.dfg-maximal-flush-validate-no-cjit
stress/map-clone.js.dfg-maximal-flush-validate-no-cjit
stress/dead-fiat-value-to-int52-then-exit-not-double.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/IIFE-es6-default-parameters.js.dfg-maximal-flush-validate-no-cjit
stress/array-prototype-concat-of-long-spliced-arrays.js.dfg-maximal-flush-validate-no-cjit
stress/fold-load-varargs-arity-check-fail-barely.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/varargs-construct.js.dfg-maximal-flush-validate-no-cjit
stress/pad-start-calls-repeat-character-with-double.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-richards.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-define-own-property.js.dfg-maximal-flush-validate-no-cjit
stress/varargs-inlined-simple-exit-aliasing.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-put-by-id-setter-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz-in-catch.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-tdz-in-loop.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/v8-regexp-search.js.dfg-maximal-flush-validate-no-cjit
stress/v8-richards-strict.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-regexp.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/for-of-array.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/is-symbol-mixed.js.dfg-maximal-flush-validate-no-cjit
stress/spread-calling.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-get-by-id-getter-exception.js.dfg-maximal-flush-validate-no-cjit
stress/try-catch-stub-routine-replaced.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/map-rehash.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-setter-by-val-class.js.dfg-maximal-flush-validate-no-cjit
stress/global-lexical-redefine-const.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-string-object.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-mul-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/to-number-throws-correct-exception.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/arrowfunction-call-in-class-constructor.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/arguments-strict-mode.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/get-by-val-with-symbol-chain-from-try-block.js.dfg-maximal-flush-validate-no-cjit
stress/for-in-prototype.js.dfg-maximal-flush-validate-no-cjit
stress/es6-for-of-loop-exception.js.dfg-maximal-flush-validate-no-cjit
stress/sloppy-mode-function-hoisting.js.dfg-maximal-flush-validate-no-cjit
stress/array-message-passing.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-instanceof.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/v8-raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-tdz-4.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-supercall-3.js.dfg-maximal-flush-validate-no-cjit
stress/sparse-array-entry-update-144067.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/concat-append-one.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-single-not-resolving.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-no-tdz-in-conditional.js.dfg-maximal-flush-validate-no-cjit
stress/symbol-toprimitive.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-try-catch-setter-throw.js.dfg-maximal-flush-validate-no-cjit
stress/generator-fib-ftl-and-string.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-with-unbalanced-getter-setter.js.dfg-maximal-flush-validate-no-cjit
stress/arith-add-with-constants.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-block-with-var-sinthesize.js.dfg-maximal-flush-validate-no-cjit
stress/const-not-strict-mode.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-within-eval-without-reassign-to-let.js.dfg-maximal-flush-validate-no-cjit
sunspider-1.0/string-tagcloud.js.dfg-maximal-flush-validate-no-cjit
stress/infinite-loop-that-uses-captured-variables-before-throwing.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-construct.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-set.js.dfg-maximal-flush-validate-no-cjit
stress/runtime-throw-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-abs-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/has-own-property-cache-basics.js.dfg-maximal-flush-validate-no-cjit
stress/IIFE-function-name-captured.js.dfg-maximal-flush-validate-no-cjit
stress/get-by-id-throw-from-getter-through-optimized-code.js.dfg-maximal-flush-validate-no-cjit
stress/array-slice-jettison-on-constructor-change.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-resolving-fixed.js.dfg-maximal-flush-validate-no-cjit
stress/istypedarrayview-intrinsic.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/try-catch-word-count.js.dfg-maximal-flush-validate-no-cjit
stress/int52-ai-mul-and-clean-neg-zero-then-filter-int32.js.dfg-maximal-flush-validate-no-cjit
stress/math-ceil-basics.js.dfg-maximal-flush-validate-no-cjit
stress/array-copywithin.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-json.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-neg-zero-then-get-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/tricky-indirectly-inferred-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit
stress/infer-uninitialized-closure-var.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/raytrace-with-try-catch.js.dfg-maximal-flush-validate-no-cjit
stress/load-varargs-then-inlined-call-exit-in-foo.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/switch-char-constant.js.dfg-maximal-flush-validate-no-cjit
stress/escape-object-in-diamond-then-exit.js.dfg-maximal-flush-validate-no-cjit
stress/number-is-nan.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-delete.js.dfg-maximal-flush-validate-no-cjit
stress/tricky-infinite-loop-that-uses-captured-variables-and-creates-the-activation-outside-the-loop.js.dfg-maximal-flush-validate-no-cjit
sunspider-1.0/date-format-tofte.js.dfg-maximal-flush-validate-no-cjit
stress/regress-132147.js.dfg-maximal-flush-validate-no-cjit
stress/array-slice-intrinsic.js.dfg-maximal-flush-validate-no-cjit
stress/array-concat-with-slow-indexingtypes.js.dfg-maximal-flush-validate-no-cjit
stress/check-dom-with-signature.js.dfg-maximal-flush-validate-no-cjit
stress/spread-non-array.js.dfg-maximal-flush-validate-no-cjit
stress/arith-sub-on-double-array-with-holes.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-add.js.dfg-maximal-flush-validate-no-cjit
stress/global-is-finite.js.dfg-maximal-flush-validate-no-cjit
stress/pow-stable-results.js.dfg-maximal-flush-validate-no-cjit
stress/fold-multi-get-by-offset-to-get-by-offset-without-folding-the-structure-check-new.js.dfg-maximal-flush-validate-no-cjit
stress/check-sub-class.js.dfg-maximal-flush-validate-no-cjit
stress/generator-frame-empty.js.dfg-maximal-flush-validate-no-cjit
stress/class-subclassing-typedarray.js.dfg-maximal-flush-validate-no-cjit
stress/tier-up-in-loop-with-cfg-simplification.js.dfg-maximal-flush-validate-no-cjit
stress/generator-function-expression-sinking-put.js.dfg-maximal-flush-validate-no-cjit
stress/sampling-profiler-microtasks.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-put-by-id-slow-exception-interesting-live-state.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-accessors-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/sink-multigetbyoffset.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-forEach.js.dfg-maximal-flush-validate-no-cjit
stress/async-function-expression-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit
stress/no-abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-configure-index.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-revoke.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/is-array-for-proxy.js.dfg-maximal-flush-validate-no-cjit
stress/ai-consistency-filter-cells.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-within-eval-with-reassign-to-var.js.dfg-maximal-flush-validate-no-cjit
stress/map-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-string-or-string-object-then-object.js.dfg-maximal-flush-validate-no-cjit
stress/constant-folding-osr-exit.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/int-or-other-sub.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/hard-overflow-check-equal.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-async-from-sync.js.dfg-maximal-flush-validate-no-cjit
stress/compare-strict-eq-integer-to-misc.js.dfg-maximal-flush-validate-no-cjit
stress/v8-regexp-strict.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/rare-osr-exit-on-local.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-transcoding.js.dfg-maximal-flush-validate-no-cjit
stress/math-trunc-basics.js.dfg-maximal-flush-validate-no-cjit
stress/create-subclass-structure-might-throw.js.dfg-maximal-flush-validate-no-cjit
stress/typedarray-access-monomorphic-neutered.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-getter-by-val.js.dfg-maximal-flush-validate-no-cjit
stress/infinite-loop-that-uses-captured-variables-but-they-do-not-escape.js.dfg-maximal-flush-validate-no-cjit
stress/has-own-property-name-cache-symbols-and-strings.js.dfg-maximal-flush-validate-no-cjit
stress/tricky-array-bounds-checks.js.dfg-maximal-flush-validate-no-cjit
stress/math-floor-basics.js.dfg-maximal-flush-validate-no-cjit
stress/get-local-elimination.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/typed-array-subarray.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/for-of-iterate-array-entries.js.dfg-maximal-flush-validate-no-cjit
stress/exception-dfg-throw-from-catch-block.js.dfg-maximal-flush-validate-no-cjit
stress/to-string-on-value.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/is-array-for-array.js.dfg-maximal-flush-validate-no-cjit
stress/proxy-own-keys.js.dfg-maximal-flush-validate-no-cjit
stress/operation-in-throw-error.js.dfg-maximal-flush-validate-no-cjit
stress/math-pow-stable-results.js.dfg-maximal-flush-validate-no-cjit
v8-v6/v8-crypto.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/array-prototype-some.js.dfg-maximal-flush-validate-no-cjit
stress/for-in-modify-int-loop-var.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-small-resolving.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-single-resolving.js.dfg-maximal-flush-validate-no-cjit
stress/v8-crypto-strict.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-lexical-bind-this-6.js.dfg-maximal-flush-validate-no-cjit
stress/promise-infinite-recursion-should-not-crash.js.dfg-maximal-flush-validate-no-cjit
stress/dfg-put-getter-by-val-class.js.dfg-maximal-flush-validate-no-cjit
stress/fold-to-int52-constant-then-exit.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-concat-long.js.dfg-maximal-flush-validate-no-cjit
stress/super-get-by-id.js.dfg-maximal-flush-validate-no-cjit
stress/reflect-construct.js.dfg-maximal-flush-validate-no-cjit
stress/eval-func-decl-in-global-of-eval.js.dfg-maximal-flush-validate-no-cjit
stress/arrowfunction-prototype.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/super-getter.js.dfg-maximal-flush-validate-no-cjit
stress/exception-dfg-inlined-frame-not-strict-equal.js.dfg-maximal-flush-validate-no-cjit
stress/dead-osr-entry-value.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/string-repeat-small-not-resolving.js.dfg-maximal-flush-validate-no-cjit
stress/global-lexical-variable-tdz.js.dfg-maximal-flush-validate-no-cjit
stress/block-scoped-function-declarations.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/fake-iterators-that-throw-when-finished.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/abc-skippy-loop.js.dfg-maximal-flush-validate-no-cjit
stress/async-iteration-basic.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/v8-raytrace-with-empty-try-catch.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/set-for-each.js.dfg-maximal-flush-validate-no-cjit
stress/async-function-declaration-sinking-osrexit.js.dfg-maximal-flush-validate-no-cjit
stress/array-concat-spread-proxy-exception-check.js.dfg-maximal-flush-validate-no-cjit
stress/global-is-nan.js.dfg-maximal-flush-validate-no-cjit
stress/ftl-sub-exception.js.dfg-maximal-flush-validate-no-cjit
stress/domjit-getter-type-check.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/super-get-by-id-with-this-monomorphic.js.dfg-maximal-flush-validate-no-cjit
stress/phantom-spread-forward-varargs.js.dfg-maximal-flush-validate-no-cjit
microbenchmarks/simple-regexp-test-folding-with-hoisted-regexp.js.dfg-maximal-flush-validate-no-cjit
stress/set-clone-iterator-change.js.dfg-maximal-flush-validate-no-cjit
stress/float32-array-out-of-bounds.js.dfg-maximal-flush-validate-no-cjit
stress/class-syntax-super-in-eval.js.dfg-maximal-flush-validate-no-cjit
Comment 15 Saam Barati 2017-08-30 12:48:43 PDT
Created attachment 319388 [details]
patch
Comment 16 Keith Miller 2017-08-30 18:29:49 PDT
Comment on attachment 319388 [details]
patch

View in context: https://bugs.webkit.org/attachment.cgi?id=319388&action=review

r=me with nit.

> Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:5222
> +            uint32_t errorType = currentInstruction[2].u.unsignedValue;

Nit: You could add names for throw_static_errors offsets!

> Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:10296
> +#if USE(JSVALUE64)
> +    callOperation(operationThrowDFG, valueRegs.gpr());
> +#else
> +    callOperation(operationThrowDFG, valueRegs);
> +#endif

Nit: instead of an #if can you add a callOperation(V_JITOperation_EJssUi, JSValueRegs)?
Comment 17 Saam Barati 2017-08-31 16:28:22 PDT
Comment on attachment 319388 [details]
patch

View in context: https://bugs.webkit.org/attachment.cgi?id=319388&action=review

>> Source/JavaScriptCore/dfg/DFGByteCodeParser.cpp:5222
>> +            uint32_t errorType = currentInstruction[2].u.unsignedValue;
> 
> Nit: You could add names for throw_static_errors offsets!

I'll embark on this journey in another patch

>> Source/JavaScriptCore/dfg/DFGSpeculativeJIT.cpp:10296
>> +#endif
> 
> Nit: instead of an #if can you add a callOperation(V_JITOperation_EJssUi, JSValueRegs)?

will do
Comment 18 Saam Barati 2017-08-31 16:42:39 PDT
Created attachment 319540 [details]
patch for landing
Comment 19 WebKit Commit Bot 2017-08-31 22:41:12 PDT
Comment on attachment 319540 [details]
patch for landing

Clearing flags on attachment: 319540

Committed r221472: <http://trac.webkit.org/changeset/221472>
Comment 20 WebKit Commit Bot 2017-08-31 22:41:14 PDT
All reviewed patches have been landed.  Closing bug.