Bug 112836 depends on 516 bugs:

•    112836: JSC should be a quadruple-tier VM [RESOLVED FIXED; assigned to fpizlo]
  •    112838: The DFG should be able to tier-up and OSR enter into the FTL [RESOLVED FIXED; assigned to fpizlo]
    •    120326: CodeBlock compilation and installation should be simplified and rationalized [RESOLVED FIXED; assigned to fpizlo]
      •    120477: REGRESSION(r154804): Broke Windows build (assumes LLInt features not enabled on this build) (Requested by bfulgham on #webkit). [RESOLVED FIXED; assigned to commit-queue]
    •    120453: CodeBlock::prepareForExecution() is silly [RESOLVED FIXED; assigned to fpizlo]
    •    120486: CodeBlock's magic for scaling tier-up thresholds should be more reusable [RESOLVED FIXED; assigned to fpizlo]
    •    120489: Teach DFG::Worklist and its clients that it may be reused for different kinds of compilations [RESOLVED FIXED; assigned to fpizlo]
    •    120567: CodeBlock::jettison() should be implicit [RESOLVED FIXED; assigned to fpizlo]
      •    120568: DeferredRefCounted should have a thread-safe mode [RESOLVED INVALID; assigned to fpizlo]
  •    112839: fourthTier: DFG should be able to run on a separate thread [RESOLVED FIXED; assigned to fpizlo]
    •    114707: fourthTier: DFG should be able to query Structure without modifying it [RESOLVED DUPLICATE; assigned to fpizlo]
    •    114708: fourthTier: DFG should be able to query Structure without modifying it [RESOLVED FIXED; assigned to fpizlo]
    •    114762: fourthTier: all inline caches should thread-safe enough to allow a concurrent compilation thread to read them safely [RESOLVED FIXED; assigned to fpizlo]
    •    114906: fourthTier: value profiles and array profiles should be thread-safe enough to be accessible in a concurrent compilation thread [RESOLVED FIXED; assigned to fpizlo]
    •    114909: fourthTier: It should be possible to query WatchpointSets, and add Watchpoints, even if the compiler is running in another thread [RESOLVED FIXED; assigned to fpizlo]
    •    114987: fourthTier: Create an equivalent of Structure::get() that can work from a compilation thread [RESOLVED FIXED; assigned to fpizlo]
    •    115083: fourthTier: CFA should defend against results seeming inconsistent due to a watchpoint firing during compilation [RESOLVED FIXED; assigned to fpizlo]
      •    115084: fourthTier: AbstractValue methods that deal with watchpoints should have access to Graph, so that in debug mode, Graph can track the history of watchpoint states and detect races [RESOLVED FIXED; assigned to fpizlo]
    •    115297: fourthTier: ASSERT that commonly used not-thread-safe methods in the runtime are not being called during compilation [RESOLVED FIXED; assigned to fpizlo]
    •    115299: fourthTier: WatchpointSet should make racy uses easier to reason about [RESOLVED FIXED; assigned to fpizlo]
    •    115300: fourthTier: DFG tries to ref/deref StringImpls in a ton of places [RESOLVED FIXED; assigned to fpizlo]
      •    115393: fourthTier: String::utf8() should also be available as StringImpl::utf8() so that you don't have to ref() a StringImpl just to get its utf8() [RESOLVED FIXED; assigned to fpizlo]
      •    115468: fourthTier: Structure::addPropertyTransitionToExistingStructure should be thread-safe [RESOLVED FIXED; assigned to fpizlo]
      •    115525: fourthTier: Structure transition table keys don't have to ref their StringImpl's [RESOLVED FIXED; assigned to fpizlo]
    •    115301: fourthTier: SymbolTable should be thread-safe [RESOLVED FIXED; assigned to fpizlo]
    •    115445: fourthTier: Profiler should be thread-safe [RESOLVED FIXED; assigned to fpizlo]
    •    115582: fourthTier: DFG::ByteCodeParser doesn't need ExecState* [RESOLVED FIXED; assigned to fpizlo]
    •    115594: fourthTier: CodeBlock should be RefCounted [RESOLVED FIXED; assigned to fpizlo]
    •    115598: fourthTier: DFG shouldn't allocate in the GC heap [RESOLVED FIXED; assigned to fpizlo]
      •    115841: fourthTier: DFG should have its own notion of StructureChain, and it should be possible to validate it after compilation finishes [RESOLVED FIXED; assigned to fpizlo]
    •    116060: fourthTier: DFG should separate link phase into things that must be done concurrently and things that must be done synchronously, and have a way of passing data from one to the other [RESOLVED FIXED; assigned to fpizlo]
    •    116126: fourthTier: getCTIStub should be thread-safe [RESOLVED FIXED; assigned to fpizlo]
    •    116350: fourthTier: Executable and CodeBlock should be aware of DFG::Plans that complete asynchronously [RESOLVED FIXED; assigned to fpizlo]
  •    112840: Use LLVM as a backend for the fourth-tier DFG JIT (a.k.a. the FTL JIT) [RESOLVED FIXED; assigned to fpizlo]
    •    113437: fourthTier: JITCode should abstract exactly how the JIT code is structured and where it was allocated [RESOLVED FIXED; assigned to fpizlo]
    •    113452: fourthTier: Check in a known-good build of LLVM into WebKitLibraries, and have a story for updating it [RESOLVED FIXED; assigned to fpizlo]
    •    113481: fourthTier: FTL JIT should be able run some simple function [RESOLVED FIXED; assigned to fpizlo]
    •    113619: FTL should force LLVM to use our own JIT memory allocator, and we shouldn't have to keep around an LLVMExecutionEngineRef to keep code alive [RESOLVED FIXED; assigned to fpizlo]
    •    113621: FTL should force LLVM to use our calling convention [RESOLVED FIXED; assigned to fpizlo]
      •    125727: FTL should know the actual frame size of LLVM generated code [REOPENED; assigned to fpizlo]
      •    116888: JSC Should use the C Stack for JIT code [RESOLVED FIXED; assigned to msaboff]
        •    126394: Some crashes in C stack on Mountain Lion, for example on crypto-aes, due to misaligned stack [NEW; assigned to fpizlo]
        •    116889: fourthTier: The baseline jit and LLint should use common slow paths [RESOLVED FIXED; assigned to webkit-unassigned]
        •    117102: fourthTier: Arity fixup should be done while on same stack [RESOLVED FIXED; assigned to msaboff]
          •    117719: FTL: Add another temp register regT4 to JSInterfaceJIT [RESOLVED FIXED; assigned to msaboff]
        •    117719: FTL: Add another temp register regT4 to JSInterfaceJIT [RESOLVED FIXED; assigned to msaboff] (*)
        •    118482: fourthTier: Change JSStack to use macro to determine stack growth direction [RESOLVED WONTFIX; assigned to msaboff]
        •    118758: fourthTier: Change JSStack to grow from high to low addresses [RESOLVED FIXED; assigned to msaboff]
          •    121055: Change virtual register function arguments and locals from unsigned to int [RESOLVED FIXED; assigned to msaboff]
          •    121056: Add local to/from operand helpers similar to argument to/from operand [RESOLVED FIXED; assigned to msaboff]
          •    121057: There should be one "invalid" virtual register constant [RESOLVED FIXED; assigned to msaboff]
        •    121732: VirtualRegister should be a class [RESOLVED FIXED; assigned to msaboff]
          •    121966: REGRESSION(r156474): Broke the builds. (Requested by xenon on #webkit). [RESOLVED FIXED; assigned to commit-queue]
        •    121756: Get rid of JITStubs and its special use of JITStackFrame for calls [RESOLVED FIXED; assigned to msaboff]
          •    121641: Unify baseline JIT and DFG inline caching logic [RESOLVED FIXED; assigned to fpizlo]
            •    121637: Move CCallHelpers and AssemblyHelpers into jit/ and have JSInterfaceJIT use them [RESOLVED FIXED; assigned to fpizlo]
              •    121651: REGRESSION(r156120): Broke windows runtime and all tests (Requested by bfulgham on #webkit). [RESOLVED FIXED; assigned to commit-queue]
            •    121734: Never use ReturnPC for exception handling and quit using exception check indices as a lame replica of the CodeOrigin index [RESOLVED FIXED; assigned to fpizlo]
              •    121755: Interpreter::unwind() has no need for the bytecodeOffset [RESOLVED FIXED; assigned to fpizlo]
              •    121766: Get rid of CodeBlock::RareData::callReturnIndexVector and most of the evil that it introduced [RESOLVED FIXED; assigned to fpizlo]
            •    121749: Move DFG inline caching logic into jit/ [RESOLVED FIXED; assigned to fpizlo]
            •    121753: Remove the notion that a CallFrame can have a pointer to an InlineCallFrame, since that doesn't happen anymore [RESOLVED FIXED; assigned to fpizlo]
            •    122704: Baseline JIT should use the DFG's PutById IC [RESOLVED FIXED; assigned to fpizlo]
            •    122861: Baseline JIT should use the DFG GetById IC [RESOLVED FIXED; assigned to fpizlo]
            •    122876: Get rid of the UNINTERRUPTED_SEQUENCE thing [RESOLVED FIXED; assigned to fpizlo]
            •    122877: Get rid of the StructureStubInfo::patch union [RESOLVED FIXED; assigned to fpizlo]
          •    122287: Transition JITStubs functions to CCallHelper functions [RESOLVED FIXED; assigned to msaboff]
            •    122288: Eliminate unused JITStub function declarations [RESOLVED FIXED; assigned to msaboff]
            •    122289: Transition stack check JITStubs to CCallHelper functions [RESOLVED FIXED; assigned to msaboff]
            •    122306: Add callOperation to Baseline JIT [RESOLVED FIXED; assigned to msaboff]
            •    122453: Transition call and construct JITStubs to CCallHelper functions [RESOLVED FIXED; assigned to msaboff]
            •    122460: Transition op_new_* JITStubs to JIT operations [RESOLVED FIXED; assigned to mark.lam]
            •    122563: transition cti_op_* methods returning int to JIT operations. [RESOLVED FIXED; assigned to msaboff]
            •    122617: transition void cti_op_* methods to JIT operations. [RESOLVED FIXED; assigned to msaboff]
            •    122645: Transition misc cti_op_* JITStubs to JIT operations [RESOLVED FIXED; assigned to mark.lam]
            •    122757: Transition *switch* and *scope* JITStubs to JIT operations [RESOLVED FIXED; assigned to mark.lam]
            •    122758: Transition exception JITStubs to JIT operations [RESOLVED FIXED; assigned to msaboff]
              •    122931: Transition cti_op_throw and cti_vm_throw to a JIT operation [RESOLVED FIXED; assigned to msaboff]
              •    122982: Change native function call stubs to use JIT operations instead of ctiVMHandleException [RESOLVED FIXED; assigned to msaboff]
            •    122903: transition void cti_op_put_by_val* stubs to JIT operations [RESOLVED FIXED; assigned to msaboff]
            •    122925: Transition remaining op_get* JITStubs to JIT operations [RESOLVED FIXED; assigned to mark.lam]
          •    122973: Eliminate uses of JITSTACKFRAME_ARGS_INDEX as scratch area for thunks [RESOLVED FIXED; assigned to ggaren]
          •    122974: Remove saving callFrameRegister to JITStackFrame in JITCompiler::compileFunction() [RESOLVED FIXED; assigned to msaboff]
          •    122977: Change emit_op_catch to use another method to materialize VM [RESOLVED FIXED; assigned to ggaren]
          •    122978: Eliminate JITStubCall.h and all #include references [RESOLVED FIXED; assigned to webkit-unassigned]
            •    122973: Eliminate uses of JITSTACKFRAME_ARGS_INDEX as scratch area for thunks [RESOLVED FIXED; assigned to ggaren] (*)
          •    122980: Fix callOperation for operationThrow to handle Win X86_64 calling convention [RESOLVED DUPLICATE; assigned to msaboff]
        •    122231: The LLInt should not use JITStackFrame [RESOLVED FIXED; assigned to msaboff]
        •    122244: Make Baseline JIT exception handling work like the DFG JIT [RESOLVED FIXED; assigned to msaboff]
        •    123037: Remove excess reserved space in ctiTrampoline frames for X86 and X86_64 [RESOLVED FIXED; assigned to mark.lam]
        •    123182: Change local variable register allocation to start at offset -1 [RESOLVED FIXED; assigned to msaboff]
          •    123209: LLInt arity check exception processing should start unwinding from caller [RESOLVED FIXED; assigned to msaboff]
        •    123642: Eliminate HostCall bit from JSC Stack CallerFrame [RESOLVED FIXED; assigned to msaboff]
        •    123844: Change ctiTrampoline into a thunk [RESOLVED FIXED; assigned to msaboff]
        •    123956: Change CallFrameRegister to architected frame pointer register [RESOLVED FIXED; assigned to msaboff]
        •    123999: Move the setting up of callee's callFrame from pushFrame to callToJavaScript thunk [RESOLVED FIXED; assigned to msaboff]
        •    124251: Change callToJavaScript thunk into an offline assembled stub [RESOLVED FIXED; assigned to msaboff]
        •    124361: REGRESSION (r159276): rbp register overwritten in Win 64 version of callToJavascript stub [RESOLVED FIXED; assigned to msaboff]
        •    124420: REGRESSION (r158586): callToJavaScript needs to save return PC to Sentinel frame [RESOLVED FIXED; assigned to msaboff]
        •    124481: ARM64 CRASH: Improper offset in getHostCallReturnValue() to access callerFrame in CallFrame [RESOLVED FIXED; assigned to msaboff]
        •    124634: Introducing VMEntryScope to update the VM stack limit [RESOLVED FIXED; assigned to mark.lam]
        •    124735: BytecodeGenerator should align the stack according to native conventions [RESOLVED FIXED; assigned to fpizlo]
          •    124736: JSC should know what the stack alignment conventions are [RESOLVED FIXED; assigned to fpizlo]
          •    124778: REGRESSION(r159652): broke fast/dom/gc-attribute-node.html (Requested by ap on #webkit). [RESOLVED FIXED; assigned to commit-queue]
        •    124754: CodeBlock::m_numCalleeRegisters need to honor native stack alignment [RESOLVED FIXED; assigned to mark.lam]
        •    124756: Ensure that arity fixups honor stack alignment requirements [RESOLVED FIXED; assigned to mark.lam]
        •    124793: CodeBlock::m_numCalleeRegisters shouldn't also mean frame size, frame size needed for exit, or any other unrelated things [RESOLVED FIXED; assigned to fpizlo]
        •    125331: Split sizing of VarArgs frames from loading arguments for the frame [RESOLVED FIXED; assigned to msaboff]
        •    126387: Refactor LLInt C stack frame munging helpers so that 32-bit code paths can use them [RESOLVED FIXED; assigned to fpizlo]
        •    126409: CStack LLInt 32-bit should build [RESOLVED FIXED; assigned to fpizlo]
        •    126590: CStack: stanford-crypto-ccm sometimes fails with concurrent JIT in DFG [RESOLVED FIXED; assigned to fpizlo]
          •    126600: DFG fixup phase should be responsible for inserting ValueToInt32's as needed and it should use Phantom to keep the original values alive in case of OSR exit [RESOLVED FIXED; assigned to fpizlo]
        •    126781: reentrant-caching sometimes fails with LLInt disabled [RESOLVED FIXED; assigned to fpizlo]
      •    122024: Compress DFG stack layout [RESOLVED FIXED; assigned to fpizlo]
        •    122025: Deoptimize 32-bit deoptimization [RESOLVED FIXED; assigned to fpizlo]
          •    121374: Deoptimize deoptimization: make DFGOSRExitCompiler64.cpp more hackable [RESOLVED FIXED; assigned to fpizlo]
        •    122047: Get rid of SetMyScope/SetCallee; use normal variables for the scope and callee of inlined call frames of closures [RESOLVED FIXED; assigned to fpizlo]
        •    122065: Get rid of the AlreadyInJSStack recoveries since they are totally redundant with the DisplacedInJSStack recoveries [RESOLVED FIXED; assigned to fpizlo]
        •    122140: SpeculativeJIT::m_arguments/m_variables are vestiges of a time long gone [RESOLVED FIXED; assigned to fpizlo]
        •    122178: Variable event stream (for DFG OSR exit) should be explicit about where on the stack a SetLocal put a value [RESOLVED FIXED; assigned to fpizlo]
        •    122248: The DFG should use always DFG::Graph methods for determining where special registers are [RESOLVED FIXED; assigned to fpizlo]
      •    123233: We're going to have to save tagTypeNumber/tagMask/regT3/regT10 for the FTL at some point (since they're callee save) [RESOLVED DUPLICATE; assigned to fpizlo]
      •    125649: cStack: Calling into FTL-generated code should be fast [RESOLVED FIXED; assigned to fpizlo]
      •    125725: FTL should update machine virtual registers in runtime meta-data according to the captured stackmap [RESOLVED FIXED; assigned to fpizlo]
      •    125729: cStack: Crypto doesn't work at all unless LLInt is disabled [RESOLVED FIXED; assigned to msaboff]
      •    125730: cStack: Crypto crashes in GC [RESOLVED FIXED; assigned to msaboff]
      •    125811: FTL should be able to do call ICs [RESOLVED FIXED; assigned to fpizlo]
      •    126043: Arity check slow path should ensure that when we return, we restore SP back to what the caller expects [RESOLVED FIXED; assigned to fpizlo]
      •    126106: Arity check stack restoration should preserve the ArgumentCount in case there is a register restoration thunk below it [RESOLVED FIXED; assigned to fpizlo]
      •    126111: FTL OSR exit should be able to handle the arity check fail case [RESOLVED FIXED; assigned to fpizlo]
      •    126115: Register restoration thunk should restore the ArgumentCount after it restores registers [RESOLVED FIXED; assigned to fpizlo]
      •    126116: It should be possible to run the full version of V8v7/crypto with the FTL and call IC's [RESOLVED FIXED; assigned to fpizlo]
      •    126141: cStack branch doesn't run navier-stokes because closure calls aren't implemented yet [RESOLVED FIXED; assigned to fpizlo]
      •    126280: CStack branch with --ftl-jit should fail no more tests than without FTL as of r161113 [RESOLVED FIXED; assigned to fpizlo]
    •    113622: FTL should be able to handle exceptions [RESOLVED FIXED; assigned to fpizlo]
      •    117045: fourthTier: Explore converting all of JSC to use branch-after-call for exception checking [RESOLVED INVALID; assigned to fpizlo]
        •    117046: fourthTier: Have the DFG forward exit on call result being zero [RESOLVED INVALID; assigned to fpizlo]
          •    117047: fourthTier: get rid of op_call_put_result [RESOLVED FIXED; assigned to fpizlo]
            •    117048: fourthTier: LLInt shouldn't store an offset call PC during op_call-like calls [RESOLVED FIXED; assigned to fpizlo]
      •    125650: FTL should do a real stack check [RESOLVED FIXED; assigned to fpizlo]
        •    128560: Fail FTL compilation if the required stack is too big [RESOLVED FIXED; assigned to msaboff]
        •    128561: Change FTL stack check to use VM's stackLimit [RESOLVED FIXED; assigned to msaboff]
        •    128562: Adjust VM::stackLimit based on the size of the largest FTL stack produced [RESOLVED FIXED; assigned to msaboff]
      •    127018: FTL should be cool with runtime functions throwing exceptions [RESOLVED FIXED; assigned to fpizlo]
      •    127020: FTL slow path calls in inline caches should be down with exceptions [RESOLVED FIXED; assigned to fpizlo]
    •    113623: fourthTier: FTL should have OSR exit [RESOLVED FIXED; assigned to fpizlo]
      •    113819: fourthTier: FTL should have the equivalent of a ValueRecovery [RESOLVED FIXED; assigned to fpizlo]
      •    113894: fourthTier: DFG should abstract out how it does forward exits, and that code should be simplified [RESOLVED FIXED; assigned to fpizlo]
      •    113897: fourthTier: Everyone should know about the FTL [RESOLVED FIXED; assigned to fpizlo]
      •    113905: fourthTier: put DFG data into a DFG::JITCode, and put common DFG and FTL data into something accessible from both DFG::JITCode and FTL::JITCode [RESOLVED FIXED; assigned to fpizlo]
      •    114073: fourthTier: DFG should better abstract arguments [RESOLVED FIXED; assigned to fpizlo]
      •    114300: fourthTier: DFG should better abstract floating point arguments [RESOLVED FIXED; assigned to fpizlo]
      •    114306: fourthTier: DFG should provide utilities for common OSR exit tasks [RESOLVED FIXED; assigned to fpizlo]
      •    114542: fourthTier: switch to using MCJIT and disable frame pointer elimination [RESOLVED FIXED; assigned to fpizlo]
    •    113624: FTL should support double variables [RESOLVED FIXED; assigned to fpizlo]
    •    113625: FTL should support OSR entry [RESOLVED DUPLICATE; assigned to fpizlo]
    •    113634: fourthTier: Change DO_NOT_INCLUDE_LLVM_CPP_HEADERS to LLVM_DO_NOT_INCLUDE_CPP_HEADERS [RESOLVED INVALID; assigned to fpizlo]
    •    113635: fourthTier: FTL JIT should be able to compile the Marsaglia random number generator [RESOLVED FIXED; assigned to fpizlo]
    •    113646: fourthTier: FTL JIT should be able to compile the Array.prototype.findGraphNode function in Kraken/ai-astar [RESOLVED FIXED; assigned to fpizlo]
    •    113656: fourthTier: FTL JIT should supply TBAA meta-data to LLVM [RESOLVED FIXED; assigned to fpizlo]
    •    113668: fourthTier: FTL JIT should support GetByVal on Int32 arrays [RESOLVED FIXED; assigned to fpizlo]
    •    113675: fourthTier: FTL should support ArithSub [RESOLVED FIXED; assigned to fpizlo]
    •    113679: fourthTier: FTL doesn't need virtual register allocation [RESOLVED FIXED; assigned to fpizlo]
    •    113728: fourthTier: FTL should support GetGlobalVar/PutGlobalVar [RESOLVED FIXED; assigned to fpizlo]
    •    113740: fourthTier: FTL should support some more integer arithmetic ops (negate, xor, urshift) [RESOLVED FIXED; assigned to fpizlo]
    •    113757: fourthTier: FTL should support fast property stores [RESOLVED FIXED; assigned to fpizlo]
    •    113759: fourthTier: FTL should use the right abstract heap for Int32 array accesses [RESOLVED FIXED; assigned to fpizlo]
    •    113914: fourthTier: Just linking LLVM into JSC causes all plugin tests to fail [RESOLVED DUPLICATE; assigned to fpizlo]
    •    113915: Just linking LLVM into JSC causes all plugin tests to fail [RESOLVED FIXED; assigned to fpizlo]
    •    113921: fourthTier: Include LLVM headers with surrounding #pragmas instead of using my #define [RESOLVED FIXED; assigned to fpizlo]
    •    113986: FTL should support PhantomArguments [RESOLVED FIXED; assigned to fpizlo]
      •    126218: DFG PhantomArguments shouldn't rely on a dead Phi graph [RESOLVED FIXED; assigned to fpizlo]
    •    114551: fourthTier: Update LLVM-related build scripts to copy generated headers as well [RESOLVED FIXED; assigned to fpizlo]
    •    114925: fourthTier: developing LLVM in tandem with WebKit should be fun and easy [RESOLVED FIXED; assigned to fpizlo]
    •    114926: fourthTier: WebKit's build system should relink JavaScriptCore if LLVM's libraries changed but its headers didn't [RESOLVED FIXED; assigned to fpizlo]
      •    114925: fourthTier: developing LLVM in tandem with WebKit should be fun and easy [RESOLVED FIXED; assigned to fpizlo] (*)
    •    114930: fourthTier: FTL should call LLVMFinalizeAllObjects() [RESOLVED INVALID; assigned to fpizlo]
    •    114933: fourthTier: tandem WebKit and LLVM builds should ./configure LLVM if needed [RESOLVED FIXED; assigned to fpizlo]
    •    115920: fourthTier: FTL CompareEq ObjectUse should handle masquerading [RESOLVED FIXED; assigned to fpizlo]
    •    115923: fourthTier: FTL should support CompareGreater, CompareLessEq, and CompareGreaterEq [RESOLVED FIXED; assigned to fpizlo]
    •    115924: fourthTier: FTL should support LogicalNot [RESOLVED FIXED; assigned to fpizlo]
    •    115926: fourthTier: FTL should support Int32ToDouble [RESOLVED FIXED; assigned to fpizlo]
    •    115927: fourthTier: FTL should support CompareStrictEq [RESOLVED FIXED; assigned to fpizlo]
    •    115939: fourthTier: FTL should support CompareEqConstant [RESOLVED FIXED; assigned to fpizlo]
    •    115941: fourthTier: FTL should support CompareStrictEqConstant [RESOLVED FIXED; assigned to fpizlo]
    •    115942: fourthTier: FTL should support Jump and ForceOSRExit [RESOLVED FIXED; assigned to fpizlo]
    •    115998: fourthTier: FTL shouldn't use FastISel and Small code model should be turned off for now [RESOLVED FIXED; assigned to fpizlo]
    •    116189: FTL memory allocator should be able to allocate data sections in non-executable memory [RESOLVED FIXED; assigned to fpizlo]
    •    116631: fourthTier: FTL shouldn't use the LLVM global context, and should instead create its own context for each compilation [RESOLVED FIXED; assigned to fpizlo]
    •    116739: fourthTier: FTL should support LogicalNot and Branch on Int32 and Number [RESOLVED FIXED; assigned to fpizlo]
    •    116741: fourthTier: FTL boolify should support ObjectOrOtherUse [RESOLVED FIXED; assigned to fpizlo]
    •    116771: fourthTier: FTL should support ArithDiv [RESOLVED FIXED; assigned to fpizlo]
    •    116792: fourthTier: FTL should support ArithMod [RESOLVED FIXED; assigned to fpizlo]
      •    116793: fourthTier: clean up ArithDiv/ArithMod in the DFG [RESOLVED FIXED; assigned to fpizlo]
      •    116841: fourthTier: DFG ArithMod should have the !nodeUsedAsNumber optimizations that ArithDiv has [RESOLVED FIXED; assigned to fpizlo]
    •    116884: fourthTier: FTL should support ArithMin/ArithMax [RESOLVED DUPLICATE; assigned to fpizlo]
    •    116885: fourthTier: FTL should support ArithMin/ArithMax [RESOLVED FIXED; assigned to fpizlo]
    •    116890: fourthTier: FTL should support ArithAbs [RESOLVED FIXED; assigned to fpizlo]
    •    116892: fourthTier: FTL should call masqueradesAsUndefinedWatchpointIfIsStillValid() in all of the places where it currently calls masqueradesAsUndefinedWatchpointIsStillValid() [RESOLVED FIXED; assigned to fpizlo]
    •    117704: fourthTier: FTL should support Switch [RESOLVED FIXED; assigned to fpizlo]
    •    117849: fourthTier: FTL should support SwitchChar [RESOLVED FIXED; assigned to fpizlo]
    •    117852: fourthTier: FTL should clear character switch jump tables [RESOLVED FIXED; assigned to fpizlo]
    •    118075: fourthTier: FTL should support PutByVal [RESOLVED FIXED; assigned to fpizlo]
    •    118077: FTL should support hole/OOB array accesses [RESOLVED FIXED; assigned to fpizlo]
      •    118112: fourthTier: FTL should support hole/OOB PutByVal's [RESOLVED FIXED; assigned to fpizlo]
    •    118091: fourthTier: FTL should support ForwardCheckStructure/ForwardStructureTransitionWatchpoint and doing so shouldn't break V8/crypto [RESOLVED FIXED; assigned to fpizlo]
    •    118095: fourthTier: FTL should support ArrayifyToStructure [RESOLVED FIXED; assigned to fpizlo]
    •    118097: fourthTier: FTL::canCompile(Graph&) should not consider nodes that won't be compiled [RESOLVED FIXED; assigned to fpizlo]
    •    118141: fourthTier: FTL should be able to dump disassembly [RESOLVED FIXED; assigned to fpizlo]
    •    118148: fourthTier: JSC's disassembly infrastructure should be able to disassemble the code that LLVM generates [RESOLVED FIXED; assigned to fpizlo]
    •    118276: fourthTier: FTL should run AA passes before GVN [RESOLVED FIXED; assigned to fpizlo]
    •    118277: fourthTier: FTL should run LICM after AA setup [RESOLVED FIXED; assigned to fpizlo]
    •    118311: fourthTier: FTL should use the equivalent of llvm opt -O2 by default [RESOLVED FIXED; assigned to fpizlo]
    •    118313: fourthTier: since the FTL disassembly hacks cannot distinguish between code and data, the LLVM disassembler symbol table callback should be able to deal gracefully with arbitrary garbage [RESOLVED FIXED; assigned to fpizlo]
    •    118329: fourthTier: add option to disable OSR entry in loops [RESOLVED FIXED; assigned to fpizlo]
    •    118335: fourthTier: Have fewer Arrayify's [RESOLVED FIXED; assigned to fpizlo]
    •    118338: fourthTier: DFG should have an SSA form for use by FTL [RESOLVED FIXED; assigned to fpizlo]
      •    118339: fourthTier: DFG should refer to BasicBlocks by BasicBlock* and not BlockIndex [RESOLVED FIXED; assigned to fpizlo]
        •    118340: fourthTier: DFG::Node::m_opInfo2 should also be a uintptr_t [RESOLVED FIXED; assigned to fpizlo]
      •    118452: fourthTier: Graph::clearAndDerefChild() makes no sense anymore, and neither does Nop [RESOLVED FIXED; assigned to fpizlo]
      •    118486: NaturalLoops + Profiler = Crash [RESOLVED FIXED; assigned to fpizlo]
    •    118647: fourthTier: We should have a reduced FTL LLVM pipeline tool in the repository [RESOLVED FIXED; assigned to fpizlo]
    •    118749: fourthTier: DFG should do a high-level LICM before going to FTL [RESOLVED FIXED; assigned to fpizlo]
      •    118750: fourthTier: NaturalLoops should be able to quickly answer questions like "what loops own this basic block" [RESOLVED FIXED; assigned to fpizlo]
      •    118774: fourthTier: Rationalize Node::replacement [RESOLVED FIXED; assigned to fpizlo]
      •    118778: fourthTier: Add a phase to create loop pre-headers [RESOLVED FIXED; assigned to fpizlo]
      •    118835: fourthTier: Decouple the way that CFA stores its state from the way it does abstract interpretation [RESOLVED FIXED; assigned to fpizlo]
      •    118866: fourthTier: each DFG node that relies on other nodes to do their type checks should be able to tell you if those type checks happened [RESOLVED FIXED; assigned to fpizlo]
        •    118867: fourthTier: DFG shouldn't create CheckStructures for array accesses except if the ArrayMode implies an original array access [RESOLVED FIXED; assigned to fpizlo]
        •    118878: fourthTier: Structure should be able to tell you if it's valid to load at a given offset from any object with that structure [RESOLVED FIXED; assigned to fpizlo]
      •    118880: fourthTier: AbstractInterpreter should explicitly ask AbstractState to create new AbstractValues for newly born nodes [RESOLVED FIXED; assigned to fpizlo]
      •    118910: fourthTier: DFG Nodes should be able to abstractly tell you what they read and what they write [RESOLVED FIXED; assigned to fpizlo]
        •    118935: fourthTier: String GetByVal out-of-bounds handling is so wrong [RESOLVED FIXED; assigned to fpizlo]
        •    118940: fourthTier: StringObjectUse uses structures, and CSE should know that [RESOLVED FIXED; assigned to fpizlo]
      •    118946: fourthTier: It should be possible for a DFG::Node to claim to exit to one CodeOrigin, but then claim that it belongs to a different CodeOrigin for all other purposes [RESOLVED FIXED; assigned to fpizlo]
      •    118956: fourthTier: NodeExitsForward shouldn't be duplicated in NodeType [RESOLVED FIXED; assigned to fpizlo]
      •    118957: fourthTier: It should be easy to figure out which blocks nodes belong to [RESOLVED FIXED; assigned to fpizlo]
    •    118857: fourthTier: CFA should consider live-at-head for clobbering and dumping [RESOLVED FIXED; assigned to fpizlo]
    •    118947: fourthTier: We should use the no-asserts build of LLVM if that's what the user configured [RESOLVED FIXED; assigned to fpizlo]
    •    120184: Update LLVM binary drops and scripts to the latest version from SVN [RESOLVED FIXED; assigned to fpizlo]
    •    120194: build-jsc --ftl-jit should work [RESOLVED FIXED; assigned to fpizlo]
    •    120221: copy-webkitlibraries-to-product-directory should accept command-line arguments for extra work required for optional features rather than relying on environment variables [RESOLVED FIXED; assigned to fpizlo]
    •    120696: Unified test infrastructure via the jsc shell [RESOLVED FIXED; assigned to fpizlo]
      •    120697: run-fast-jsc should work with new-school fast/js tests that loop until the DFG tiers up [RESOLVED FIXED; assigned to fpizlo]
      •    120722: run-javascriptcore-tests should run-fast-jsc as well [RESOLVED FIXED; assigned to fpizlo]
      •    120723: fast/js/dfg-* tests should wait for the concurrent JIT [RESOLVED FIXED; assigned to fpizlo]
      •    120725: jsc tests should have timeouts [RESOLVED FIXED; assigned to fpizlo]
      •    120759: Make run-fast-jsc script bash, dash and Darwin's /bin/sh friendly [RESOLVED FIXED; assigned to ossy]
      •    120765: Fix run-fast-jsc script on Windows [RESOLVED INVALID; assigned to webkit-unassigned]
      •    120766: Make build.webkit.org report the number of failing run-fast-jsc tests [RESOLVED FIXED; assigned to ossy]
      •    120808: Introduce a way to run benchmarks and JSRegress as stress tests with different jsc command-line options [RESOLVED FIXED; assigned to fpizlo]
      •    120809: Port JSC stress test infrastructure to non-Mac platforms [RESOLVED FIXED; assigned to webkit-unassigned]
        •    120808: Introduce a way to run benchmarks and JSRegress as stress tests with different jsc command-line options [RESOLVED FIXED; assigned to fpizlo] (*)
        •    121021: Enable JSC stress tests for the rest of non-Windows platforms [RESOLVED FIXED; assigned to zan]
        •    124549: run-jsc-stress-tests should be able to package its tests and move them places [RESOLVED FIXED; assigned to mhahnenberg]
          •    124627: REGRESSION(r159538): it broke run-jsc-stress-tests (Requested by mhahnenberg on #webkit). [RESOLVED FIXED; assigned to commit-queue]
          •    124847: REGRESSION(r159752): Broke linux test bots. (Requested by mhahnenberg on #webkit). [RESOLVED FIXED; assigned to commit-queue]
        •    124801: [Win] Port run-jsc-stress-tests [RESOLVED FIXED; assigned to bfulgham]
        •    124846: Disable JSC stress tests on all but Apple-Mac platforms [RESOLVED INVALID; assigned to mhahnenberg]
        •    125111: [Win] run-jsc-stress-tests has a great number of failures (2026/7606) on Windows [RESOLVED FIXED; assigned to webkit-unassigned]
        •    128307: [Win] Enable JSC stress tests by default [RESOLVED FIXED; assigned to ossy]
      •    120918: It should be possible to run-javascriptcore-tests with only a subset of the test suites [RESOLVED FIXED; assigned to fpizlo]
      •    120974: Only run FTL tests if we have the FTL [RESOLVED FIXED; assigned to fpizlo]
      •    120994: run-jsc-stress-tests should be smart enough to call JSRegress "regress/script-tests" rather than "script-tests" [RESOLVED FIXED; assigned to fpizlo]
      •    120996: run-jsc-stress-tests should run tests in parallel if possible [RESOLVED FIXED; assigned to fpizlo]
        •    120994: run-jsc-stress-tests should be smart enough to call JSRegress "regress/script-tests" rather than "script-tests" [RESOLVED FIXED; assigned to fpizlo] (*)
      •    121011: run-jsc-stress-tests should be more paranoid about calling make [RESOLVED FIXED; assigned to fpizlo]
      •    121043: Stress tests should test the jsc profiler (-p) [RESOLVED FIXED; assigned to fpizlo]
      •    121578: Get rid of the jsc-test-list by moving all not-jsc-capable tests into js/dom [RESOLVED FIXED; assigned to fpizlo]
      •    122376: Have run-javascriptcore-tests run JS LayoutTests using run-jsc-stress-tests so that it runs in parallel [RESOLVED FIXED; assigned to fpizlo]
      •    122385: Allow skipping of run-jsc-stress-tests that are configured using yaml files [RESOLVED FIXED; assigned to fpizlo]
      •    122397: run-jsc-stress-tests should be less verbose [RESOLVED FIXED; assigned to fpizlo]
    •    120890: Concurrent FTL causes !hasOptimizedReplacement() asserts in cti_optimize [RESOLVED FIXED; assigned to fpizlo]
    •    120900: FTL ArithNeg Int32Use doesn't check negative zero [RESOLVED FIXED; assigned to fpizlo]
    •    120905: FTL ArithMod Int32Use doesn't check for negative zero correctly [RESOLVED FIXED; assigned to fpizlo]
    •    120916: FTL should support Call/Construct in the worst way possible [RESOLVED FIXED; assigned to fpizlo]
    •    120921: jsc shell should destroy VM as a workaround for LLVM's exit-time destructors [RESOLVED FIXED; assigned to fpizlo]
    •    120965: FTL should support typed array GetByVal and related ops [RESOLVED FIXED; assigned to fpizlo]
    •    120972: FTL should support typed array PutByVal [RESOLVED FIXED; assigned to fpizlo]
    •    120987: FTL should support basic closure operations [RESOLVED FIXED; assigned to fpizlo]
    •    122193: FTL should use the new version of LLVM MCJIT memory manager APIs that take a SectionName [RESOLVED FIXED; assigned to fpizlo]
    •    122318: FTL should use LLVM intrinsics for OSR exit, watchpoints, inline caches, and stack layout [RESOLVED FIXED; assigned to fpizlo]
      •    113647: FTL should implement InvalidationPoint in terms of llvm.stackmap [RESOLVED FIXED; assigned to fpizlo]
        •    123423: OSRExit::m_watchpointIndex should be in OSRExitCompilationInfo [RESOLVED FIXED; assigned to fpizlo]
        •    123472: Add InvalidationPoints to the DFG and use them for all watchpoints [RESOLVED FIXED; assigned to fpizlo]
      •    116189: FTL memory allocator should be able to allocate data sections in non-executable memory [RESOLVED FIXED; assigned to fpizlo] (*)
      •    122487: FTL should use llvm.webkit.stackmap for OSR exit [RESOLVED FIXED; assigned to fpizlo]
        •    122518: OSR exit using llvm.webkit.stackmap should pass more tests [RESOLVED FIXED; assigned to fpizlo]
        •    122538: FTL should be able to do simple OSR exits using llvm.webkit.stackmap [RESOLVED FIXED; assigned to fpizlo]
        •    122666: Fix handling of indirect stackmap locations in FTL OSR exit [RESOLVED FIXED; assigned to fpizlo]
        •    122688: FTL OSR exit should perform zero extension on values smaller than 64-bit [RESOLVED FIXED; assigned to fpizlo]
      •    122739: FTL should use llvm.webkit.patchpoint for inline caches [RESOLVED FIXED; assigned to fpizlo]
        •    122740: FTL should have an inefficient but correct implementation of GetById [RESOLVED FIXED; assigned to fpizlo]
        •    122939: Baseline JIT and DFG IC code generation should be unified and rationalized [RESOLVED FIXED; assigned to fpizlo]
          •    122940: A CodeBlock's StructureStubInfos shouldn't be in a Vector that we search using code origins and machine code PCs [RESOLVED FIXED; assigned to fpizlo]
            •    122941: Introduce WTF::Bag and start using it for InlineCallFrameSet [RESOLVED FIXED; assigned to fpizlo]
        •    123071: Restructure LinkBuffer to allow for alternate allocation strategies [RESOLVED FIXED; assigned to fpizlo]
        •    123076: StructureStubInfo's usedRegisters set should be able to track all registers, not just the ones that our JIT's view as temporaries [RESOLVED FIXED; assigned to fpizlo]
          •    123077: Rename RegisterSet to TempRegisterSet [RESOLVED FIXED; assigned to fpizlo]
          •    123079: Simplify TempRegisterSet - it no longer needs to be convertible to a POD since it's no longer going to be a member of a union [RESOLVED FIXED; assigned to fpizlo]
        •    123085: JIT IC code generators should allow any register to serve as the callFrameRegister [RESOLVED INVALID; assigned to fpizlo]
        •    123164: FTL should be able to do some simple inline caches using LLVM patchpoints [RESOLVED FIXED; assigned to fpizlo]
      •    123219: Put all uses of LLVM intrinsics behind a single Option [RESOLVED FIXED; assigned to fpizlo]
    •    122566: FTL: Soft-link LLVM as a workaround for LLVM's static initializers and exit-time destructors [RESOLVED FIXED; assigned to fpizlo]
    •    122905: libllvmForJSC shouldn't call exit(1) on report_fatal_error() [RESOLVED FIXED; assigned to fpizlo]
    •    123062: FTL::Location should treat the offset as an addend in the case of a Register location [RESOLVED FIXED; assigned to fpizlo]
    •    123232: When running with the FTL, the other execution engine shouldn't assume that tagTypeNumber/tagMask registers are special [RESOLVED INVALID; assigned to fpizlo]
    •    123302: Get rid of InlineStart so that I don't have to implement it in FTL [RESOLVED FIXED; assigned to fpizlo]
    •    123535: LLVM asserts in internal-js-tests.yaml/Octane/stress-tests/mandreel.js [RESOLVED FIXED; assigned to fpizlo]
    •    123591: FTL::Location::restoreInto() doesn't handle stack-related registers correctly if you're using it after pushing a new stack frame [RESOLVED FIXED; assigned to fpizlo]
    •    123605: FTL Int32ToDouble should handle the forward type check case where you need a recovery [RESOLVED FIXED; assigned to fpizlo]
    •    123637: "Unsupported speculation use kind: FinalObject" in FTL::LowerDFGToLLVM::compilePhantom() running v8-v6/v8-crypto.js.default-ftl [RESOLVED DUPLICATE; assigned to fpizlo]
    •    123638: FTL should use a simple optimization pipeline by default [RESOLVED FIXED; assigned to fpizlo]
    •    123681: Disable LLVM's pretty stack traces, which involve intercepting fatal signals [RESOLVED FIXED; assigned to fpizlo]
    •    123682: LLVM assertion failures should funnel into WTF's crash handling [RESOLVED FIXED; assigned to fpizlo]
    •    123783: FTL should support String character access operations [RESOLVED FIXED; assigned to fpizlo]
      •    123779: DFG CheckArray(String) should just be a Phantom(String:) [RESOLVED FIXED; assigned to fpizlo]
    •    123784: FTL should support PutById [RESOLVED FIXED; assigned to fpizlo]
    •    123817: Remove FTL::LowerDFGToLLVM::compileJSConstant() [RESOLVED FIXED; assigned to fpizlo]
    •    123824: Remove old unused code for hypothetical LLVM intrinsics [RESOLVED FIXED; assigned to fpizlo]
    •    123849: FTL should support NewObject [RESOLVED FIXED; assigned to fpizlo]
    •    123854: FTL should support StringCharCodeAt [RESOLVED FIXED; assigned to fpizlo]
    •    123855: FTL should support StringCharAt [RESOLVED FIXED; assigned to fpizlo]
    •    123862: FTL should support CheckFunction [RESOLVED FIXED; assigned to fpizlo]
    •    123865: IC code should handle the call frame register not being the callFrameRegister [RESOLVED FIXED; assigned to fpizlo]
    •    124010: FTL should support NewArray [RESOLVED FIXED; assigned to fpizlo]
    •    124067: FTL should support NewArrayBuffer [RESOLVED FIXED; assigned to fpizlo]
    •    124086: FTL should support AllocatePropertyStorage [RESOLVED FIXED; assigned to fpizlo]
    •    124092: FTL should support Phantom(FinalObject:) [RESOLVED FIXED; assigned to fpizlo]
    •    124093: Get rid of the FTL tail call APIs since they are unused [RESOLVED FIXED; assigned to fpizlo]
    •    124094: Switch FTL GetById/PutById IC's over to using AnyRegCC [RESOLVED FIXED; assigned to fpizlo]
    •    124100: Remove dead FTL C ABI support [RESOLVED FIXED; assigned to fpizlo]
    •    124138: regress/script-tests/make-indexed-storage.js.ftl-eager-no-cjit: Exception: Error: bad result: NaN [RESOLVED FIXED; assigned to fpizlo]
      •    124137: DFG Int52 boxing code may clobber the source without telling anyone [RESOLVED FIXED; assigned to fpizlo]
      •    124169: Remove ConstantFoldingPhase's weirdo compile-time optimization [RESOLVED FIXED; assigned to fpizlo]
      •    124171: Get rid of the lastResultRegister optimization in the baseline JIT [RESOLVED FIXED; assigned to fpizlo]
      •    124181: FTL should have an explicit notion of bytecode liveness [RESOLVED FIXED; assigned to fpizlo]
        •    118546: CodeBlocks should be able to determine bytecode liveness [RESOLVED FIXED; assigned to mhahnenberg]
        •    124225: Liveness analysis should take less memory in CodeBlock when it is unused [RESOLVED FIXED; assigned to fpizlo]
    •    124479: Allow the FTL debug dumps to include the new size field [RESOLVED FIXED; assigned to fpizlo]
    •    124733: It should be possible for a LinkBuffer to outlive the MacroAssembler and still be useful [RESOLVED FIXED; assigned to fpizlo]
    •    124960: FTL IC should nop-fill to make up the difference between the actual IC size and the requested patchpoint size [RESOLVED FIXED; assigned to fpizlo]
    •    125275: FTL should use cvttsd2si directly for double-to-int32 conversions [RESOLVED FIXED; assigned to fpizlo]
    •    125283: FTL should support all of ValueToInt32 [RESOLVED FIXED; assigned to fpizlo]
      •    125275: FTL should use cvttsd2si directly for double-to-int32 conversions [RESOLVED FIXED; assigned to fpizlo] (*)
    •    125360: FTL shouldn't have a doubleToUInt32 path [RESOLVED FIXED; assigned to fpizlo]
    •    125368: FTL should support generic ByVal accesses [RESOLVED FIXED; assigned to fpizlo]
    •    125370: FTL should support all of Branch/LogicalNot [RESOLVED FIXED; assigned to fpizlo]
    •    125426: FTL should support UntypedUse versions of Compare nodes [RESOLVED FIXED; assigned to fpizlo]
    •    125430: CSE should work in SSA [RESOLVED FIXED; assigned to fpizlo]
    •    125433: Hoist and combine array bounds checks [RESOLVED FIXED; assigned to fpizlo]
      •    125253: Reveal array bounds checks in DFG IR [RESOLVED FIXED; assigned to fpizlo]
        •    125252: Fold typedArray.length if typedArray is constant [RESOLVED FIXED; assigned to fpizlo]
          •    125205: Fold constant typed arrays [RESOLVED FIXED; assigned to fpizlo]
            •    124630: Infer constant closure variables [RESOLVED FIXED; assigned to fpizlo]
              •    124464: Infer constant global variables [RESOLVED FIXED; assigned to fpizlo]
                •    124465: Simplify WatchpointSet state tracking [RESOLVED FIXED; assigned to fpizlo]
                •    124539: put_to_scope[5] should not point to the structure if it's a variable access, but it should point to the WatchpointSet [RESOLVED FIXED; assigned to fpizlo]
                •    124609: Rename WatchpointSet::notifyWrite() should be renamed to WatchpointSet::fireAll() [RESOLVED FIXED; assigned to fpizlo]
              •    124760: Restructure global variable constant inference so that it could work for any kind of symbol table variable [RESOLVED FIXED; assigned to fpizlo]
                •    124761: Combine SymbolTable and SharedSymbolTable [RESOLVED FIXED; assigned to fpizlo]
              •    124812: Infer one-time scopes [RESOLVED FIXED; assigned to fpizlo]
                •    124824: Create a new SymbolTable every time code is loaded so that the watchpoints don't get reused [RESOLVED FIXED; assigned to fpizlo]
              •    124883: Stores to local captured variables should be intercepted [RESOLVED FIXED; assigned to fpizlo]
              •    125052: Instead of watchpointing activation allocation, we should watchpoint entry into functions that have captured variables [RESOLVED FIXED; assigned to fpizlo]
      •    125480: Impose and enforce some basic rules of sanity for where Phi functions are allowed to occur and where their (optional) corresponding MovHints can be [RESOLVED FIXED; assigned to fpizlo]
      •    125519: Make the different flavors of integer arithmetic more explicit, and don't rely on (possibly stale) results of the backwards propagator to decide integer arithmetic semantics [RESOLVED FIXED; assigned to fpizlo]
        •    125523: Rationalize DFG DCE [RESOLVED FIXED; assigned to fpizlo]
          •    125531: Get rid of DFG forward exiting [RESOLVED FIXED; assigned to fpizlo]
            •    125543: Get rid of forward exit in GetByVal on Uint32Array [RESOLVED FIXED; assigned to fpizlo]
            •    125552: Get rid of forward exit on DoubleAsInt32 [RESOLVED FIXED; assigned to fpizlo]
            •    125553: Get rid of forward exit on UInt32ToNumber by adding an op_unsigned bytecode instruction [RESOLVED FIXED; assigned to fpizlo]
            •    126218: DFG PhantomArguments shouldn't rely on a dead Phi graph [RESOLVED FIXED; assigned to fpizlo] (*)
      •    128635: Inserting a node with a codeOrigin "like" another node should copy both the codeOrigin and codeOriginForExitTarget [RESOLVED FIXED; assigned to fpizlo]
      •    128910: The new tricky-array-bounds-checks.js fails if DFG JIT is disabled [RESOLVED FIXED; assigned to webkit-unassigned]
    •    125747: FTL should *really* know when things are flushed [RESOLVED FIXED; assigned to fpizlo]
    •    125755: FTL: a + b overflow check shouldn't keep both a and b alive on the exit path if they wouldn't have otherwise both been live [RESOLVED DUPLICATE; assigned to fpizlo]
    •    126543: FTL should ascribe range meta-data when loading array.length [RESOLVED FIXED; assigned to fpizlo]
    •    126545: FTL should not use the inputs of an add or sub as the live-at-exit values in an overflow check, if the values aren't live after [RESOLVED FIXED; assigned to fpizlo]
    •    126587: FTL OSR entry should only check input variable types after it has set up OSR exit availability of those OSR entry values [RESOLVED FIXED; assigned to fpizlo]
    •    126620: Disable AVX in the FTL [RESOLVED FIXED; assigned to fpizlo]
    •    126652: Make it possible to disable the disabling of AVX [RESOLVED FIXED; assigned to fpizlo]
    •    126679: FTL should be able to be parallel [RESOLVED FIXED; assigned to fpizlo]
    •    126722: DFG and FTL should have separate compilation worklists [RESOLVED FIXED; assigned to fpizlo]
    •    126797: internal-js-tests.yaml/Octane/mandreel.js.default-ftl fails about 1/30 times with "TypeError: undefined is not an object" [RESOLVED FIXED; assigned to fpizlo]
    •    126798: It should be easier to diagnose FTL performance issues due to register preservation thunks [RESOLVED FIXED; assigned to fpizlo]
    •    126799: FTL should enough things to compile inlined closure calls (like CheckExecutable and GetScope) [RESOLVED FIXED; assigned to fpizlo]
    •    126804: FTL should work with the bytecode profiler [RESOLVED FIXED; assigned to fpizlo]
    •    126822: FTL tier-up should behave the same with CountExecution's as it does without [RESOLVED FIXED; assigned to fpizlo]
    •    126961: FTL PutByVal should have a complete story for OOB [RESOLVED FIXED; assigned to fpizlo]
    •    127144: JSC layout tests should run with the FTL [RESOLVED FIXED; assigned to fpizlo]
    •    127163: FTL watchpoint tests that use dfgIncrement() and friends fail because numberOfDFGCompiles() returns zero with --testTheFTL=true and right after the first FTL OSR exit but just before recompilation is triggered [RESOLVED FIXED; assigned to fpizlo]
    •    127215: FTL mishandles (-2147483648 % 0) | 0 [RESOLVED FIXED; assigned to fpizlo]
    •    127244: FTL fails V8/crypto if LLVM JumpThreading is enabled [RESOLVED WORKSFORME; assigned to fpizlo]
    •    127325: FTL should do polyvariant inlining [RESOLVED FIXED; assigned to fpizlo]
      •    127326: IC status classes should directly query exit site information [RESOLVED FIXED; assigned to fpizlo]
      •    127335: FTL should do polyvariant Call/Construct inlining [RESOLVED FIXED; assigned to fpizlo]
        •    127538: DFG should allow inlining of op_call_varargs calls [RESOLVED FIXED; assigned to fpizlo]
      •    127636: Use an approximate and self-contained notion of CodeOrigin stacks for the ContextMap, so that we can incorporate the DFG profiling of functions we inlined into the ContextMap [RESOLVED INVALID; assigned to fpizlo]
      •    127639: FTL should do polyvariant GetById inlining [RESOLVED FIXED; assigned to fpizlo]
        •    127646: StubInfoMap should use CodeOriginApproximateHash [RESOLVED FIXED; assigned to fpizlo]
      •    127692: FTL should do polyvariant PutById inlining [RESOLVED FIXED; assigned to fpizlo]
    •    127383: FTL should support AllocationProfileWatchpoint [RESOLVED FIXED; assigned to fpizlo]
    •    127384: FTL should support CheckArgumentsNotCreated [RESOLVED FIXED; assigned to fpizlo]
    •    127459: FTL should support GetCallee [RESOLVED FIXED; assigned to fpizlo]
    •    127460: FTL should support ToString [RESOLVED FIXED; assigned to fpizlo]
    •    127462: FTL should support MakeRope [RESOLVED FIXED; assigned to fpizlo]
    •    127463: 3x splay regression in FTL with experimental coverage that is entirely due to Bartlett weirdness [RESOLVED FIXED; assigned to fpizlo]
    •    127645: <1/100 crash on int $3 in sunspider-1.0/3d-raytrace.js.ftl-eager [RESOLVED WORKSFORME; assigned to fpizlo]
    •    127698: FTL should support NewArrayWithSize [RESOLVED FIXED; assigned to fpizlo]
    •    127709: FTL ArithMod case needs to be factored for hackability and correctness rather than just minimizing the amount of code [RESOLVED FIXED; assigned to fpizlo]
    •    127746: FTL should have 100% coverage on V8v7/deltablue [RESOLVED FIXED; assigned to fpizlo]
      •    127748: FTL should support ArrayPush [RESOLVED FIXED; assigned to fpizlo]
        •    127754: DFG ArrayPush implementation does strange things to the result register on the slow path [RESOLVED FIXED; assigned to fpizlo]
      •    127749: FTL should support ArrayPop [RESOLVED FIXED; assigned to fpizlo]
        •    127813: DFG ArrayPop double array mishandles the NaN hole installation [RESOLVED FIXED; assigned to fpizlo]
      •    127750: FTL should support GetById(Untyped:) [RESOLVED FIXED; assigned to fpizlo]
      •    127751: FTL should support ToThis [RESOLVED FIXED; assigned to fpizlo]
      •    127752: FTL should support CompareEq(ObjectOrOther:, Object:) [RESOLVED FIXED; assigned to fpizlo]
    •    127789: FTL should really support NotCellUse [RESOLVED FIXED; assigned to fpizlo]
    •    127790: FTL should really, *really* support NotCellUse [RESOLVED FIXED; assigned to fpizlo]
    •    127791: Arity fixup clobbers callee-saves, causing FTL->FTL arity fixed-up calls to corrupt state [RESOLVED FIXED; assigned to fpizlo]
    •    127848: LICM should gracefully handle unprofiled code [RESOLVED FIXED; assigned to fpizlo]
    •    127933: Update FTL StackMaps parser to stackSize change [RESOLVED FIXED; assigned to fpizlo]
    •    128010: Allow more flexibility for copy-webkitlibraries-to-product-directory [RESOLVED FIXED; assigned to fpizlo]
    •    128015: Having a custom LLVM checkout should always override all other ways of getting LLVM [RESOLVED FIXED; assigned to fpizlo]
    •    128030: DFG->FTL tier-up shouldn't assume that LoopHints stay at the tops of loops [RESOLVED FIXED; assigned to fpizlo]
    •    128039: Improve convergence on Octane2/gbemu [RESOLVED FIXED; assigned to fpizlo]
      •    128047: JSC profiler should show reasons for jettison [RESOLVED FIXED; assigned to fpizlo]
      •    128057: JSC profiler's stub info profiling support should work again [RESOLVED FIXED; assigned to fpizlo]
      •    128158: Lift the FTL tier-up threshold from 25000 to 100000 [RESOLVED FIXED; assigned to fpizlo]
      •    128162: DFG PutByVal on typed arrays should detect OutOfBounds sooner [RESOLVED FIXED; assigned to fpizlo]
      •    128229: Don't speculate on ToThis if we already know that arg0 has a questionable record with structure checks [RESOLVED FIXED; assigned to fpizlo]
      •    128234: Make FTL OSR entry something we only try after we've already compiled the function with the FTL and it still got stuck in a loop after that without ever returning like a sensible function oughta have [RESOLVED FIXED; assigned to fpizlo]
      •    128291: GC blocks on FTL and then badness [RESOLVED FIXED; assigned to fpizlo]
        •    128297: GC should safepoint the DFG worklist in a smarter way rather than just waiting for everything to complete [RESOLVED FIXED; assigned to fpizlo]
        •    128443: Don't throw away code if there is code on the worklists [RESOLVED FIXED; assigned to fpizlo]
        •    128505: Never include *Inlines.h files in interface headers, and never include *Inlines.h when you could include Operations.h instead [RESOLVED FIXED; assigned to fpizlo]
          •    128900: Fix the CLoop build after r163760 [RESOLVED FIXED; assigned to webkit-unassigned]
    •    128045: Saying "jitType() == JITCode::DFGJIT" is almost never correct [RESOLVED FIXED; assigned to mark.lam]
    •    128217: export-llvm-build should work with git checkouts [RESOLVED FIXED; assigned to fpizlo]
    •    128269: JSC on Mac should pull LLVM from prefix=/usr/local/LLVMForJavaScriptCore and not /usr/local [RESOLVED FIXED; assigned to fpizlo]
    •    128278: <1/100 probability FTL failure: v8-v6/v8-deltablue.js.ftl-eager: Exception: TypeError: undefined is not an object (evaluating 'c.isInput') [RESOLVED FIXED; assigned to fpizlo]
    •    128330: More FTL build scaffolding [RESOLVED FIXED; assigned to fpizlo]
    •    128521: Actually register those DFG::Safepoints [RESOLVED FIXED; assigned to fpizlo]
      •    128291: GC blocks on FTL and then badness [RESOLVED FIXED; assigned to fpizlo] (*)
    •    128571: Make it possible to run tests with --llvmSimpleOpt=false [RESOLVED FIXED; assigned to fpizlo]
    •    128638: Use LLVM's dead store elimination [RESOLVED FIXED; assigned to fpizlo]
    •    128648: Fix assertions and incorrect codegen for CompareEq(ObjectOrOther:, Object:) [RESOLVED FIXED; assigned to fpizlo]
    •    128756: FTL should be OK with __compact_unwind in a data section [RESOLVED FIXED; assigned to fpizlo]
    •    128795: FTL should inline polymorphic heap accesses [RESOLVED FIXED; assigned to fpizlo]
      •    128796: Kill some of the last vestiges of the C++ interpreter's PICs [RESOLVED FIXED; assigned to fpizlo]
      •    128864: Vector with inline capacity should work with non-PODs [RESOLVED FIXED; assigned to fpizlo]
      •    128899: CLoop buildfix after r164207 [RESOLVED FIXED; assigned to webkit-unassigned]
    •    128850: GetMyArgumentByVal in FTL [RESOLVED FIXED; assigned to fpizlo]
    •    128890: FTL OSR exit shouldn't make X86-specific assumptions [RESOLVED FIXED; assigned to fpizlo]
    •    128892: FTL should support ToPrimitive and the DFG should fold it correctly [RESOLVED FIXED; assigned to fpizlo]
    •    128918: RegisterSet::calleeSaveRegisters() should know about ARM64 [RESOLVED FIXED; assigned to fpizlo]
    •    128921: Fix RegisterSet::calleeSaveRegisters() by making it correct on ARM64 [RESOLVED FIXED; assigned to fpizlo]
    •    128922: lr is a special register on ARM64 [RESOLVED FIXED; assigned to fpizlo]
    •    128923: Register preservation wrapper should know about the possibility of callee-saved FPRs [RESOLVED FIXED; assigned to fpizlo]
    •    128948: More ARM FTL glue [RESOLVED FIXED; assigned to fpizlo]
    •    128984: FTL unwind parsing should handle ARM64 [RESOLVED FIXED; assigned to fpizlo]
    •    129010: FTL should build on ARM64 [RESOLVED FIXED; assigned to fpizlo]
    •    129018: The shell scripts in the Xcode build system should tell you when they failed [RESOLVED FIXED; assigned to fpizlo]
    •    129020: Don't call LLVMInitializeNativeTarget() because it can be all messed up if you cross-compile LLVM [RESOLVED FIXED; assigned to fpizlo]
    •    129023: Correctly install libllvmForJSC.dylib in production builds [RESOLVED FIXED; assigned to fpizlo]
    •    129054: FTL should be able to convey branch weights to LLVM [RESOLVED FIXED; assigned to fpizlo]
    •    129055: DFG's own loop analysis should be used for predicting block frequencies instead of relying on LLVM's loop analysis [RESOLVED DUPLICATE; assigned to fpizlo]
      •    129054: FTL should be able to convey branch weights to LLVM [RESOLVED FIXED; assigned to fpizlo] (*)
      •    129083: DFG should have a way of carrying and preserving conditional branch weights [RESOLVED FIXED; assigned to fpizlo]
        •    129100: REGRESSION(r164417): It broke almost all JSC tests on 32 bit platforms [RESOLVED DUPLICATE; assigned to webkit-unassigned]
    •    129066: FTL should allow LLVM to allocate data sections with alignment > 8 [RESOLVED FIXED; assigned to fpizlo]
    •    129085: FTL should not emit stack overflow checks in leaf functions [RESOLVED FIXED; assigned to fpizlo]
    •    129125: FTL may not see a compact_unwind section if there weren't any stackmaps [RESOLVED FIXED; assigned to fpizlo]
    •    129129: DFG should do its own static estimates of execution frequency before it starts creating OSR entrypoints [RESOLVED FIXED; assigned to fpizlo]
    •    129159: Revive SABI (aka shouldAlwaysBeInlined) [RESOLVED FIXED; assigned to fpizlo]
    •    129210: FTL should do polymorphic PutById inlining [RESOLVED FIXED; assigned to fpizlo]
    •    129212: Refine DFG+FTL inlining and compilation limits [RESOLVED FIXED; assigned to fpizlo]
    •    129334: Inline caching in the FTL on ARM64 should "work" [RESOLVED FIXED; assigned to fpizlo]
    •    129495: FTL should be able to use LLVM math intrinsics on all platforms [RESOLVED DUPLICATE; assigned to fpizlo]
    •    129503: FTL should be able to call sin/cos directly on platforms where the intrinsic is busted [RESOLVED FIXED; assigned to fpizlo]
    •    129563: DFG and FTL should specialize for and support CompareStrictEq over Misc (i.e. boolean, undefined, or null) [RESOLVED FIXED; assigned to fpizlo]
      •    129729: REGRESSION(r165085): Broke imported/w3c/html-templates/template-element/template-content.html (Requested by ap on #webkit). [RESOLVED FIXED; assigned to commit-queue]
    •    129747: FTL loadStructure always generates invalid IR [RESOLVED FIXED; assigned to fpizlo]
    •    129755: More FTL ARM fixes [RESOLVED FIXED; assigned to fpizlo]
    •    129756: FTL should allocate data in data memory even on non-x86 hardware [RESOLVED DUPLICATE; assigned to fpizlo]
    •    129785: Use the LLVM disassembler on ARM64 if we are enabling the FTL [RESOLVED FIXED; assigned to fpizlo]
    •    129806: Clarify how we deal with "special" registers [RESOLVED FIXED; assigned to fpizlo]
      •    129822: REGRESSION(r165196): broke arm64 on hardware (Requested by bfulgham on #webkit). [RESOLVED FIXED; assigned to commit-queue]
    •    129810: FTL arity fixup should work on ARM64 [RESOLVED FIXED; assigned to fpizlo]
      •    129813: REGRESSION(r165205): broke the CLOOP build (Requested by smfr on #webkit). [RESOLVED FIXED; assigned to mark.lam]
    •    129998: GPRInfo::toIndex should return InvalidIndex for non-temp registers on ARM64 [RESOLVED FIXED; assigned to fpizlo]
    •    130001: DFG and FTL should know that comparing anything to Misc is cheap and easy [RESOLVED FIXED; assigned to fpizlo]
    •    130041: Repatch should save and restore all used registers - not just temp ones - when making a call [RESOLVED FIXED; assigned to fpizlo]
    •    130116: It should be possible to build WebKit with FTL on iOS [RESOLVED FIXED; assigned to fpizlo]
    •    130154: Enable system library calls in FTL for ARM64 [RESOLVED FIXED; assigned to webkit-unassigned]
    •    130156: Allocate the data section on the heap again for FTL on ARM64 [RESOLVED FIXED; assigned to webkit-unassigned]
    •    130202: FTL should support IsBlah [RESOLVED FIXED; assigned to fpizlo]
    •    130265: Sometimes we need to be explicit about the SDK when running ranlib on Darwin [RESOLVED FIXED; assigned to fpizlo]
    •    130281: Final FTL iOS build magic [RESOLVED FIXED; assigned to fpizlo]
    •    130285: FTL should support CheckHasInstance/InstanceOf [RESOLVED FIXED; assigned to fpizlo]
    •    130296: FTL ArrayifyToStructure shouldn't fail every time that it actually arrayifies [RESOLVED FIXED; assigned to fpizlo]
    •    130300: Add CompareStrictEq(StringIdent:, NotStringVar:) and CompareStrictEq(String:, Untyped:) [RESOLVED FIXED; assigned to fpizlo]
      •    130449: REGRESSION(r165842): It broke many jsc stress test on 32 bit x86 platforms [RESOLVED DUPLICATE; assigned to webkit-unassigned]
    •    130440: Get rid of Flush in SSA [RESOLVED FIXED; assigned to fpizlo]
    •    130535: Implement stackmap header version check and support new stackmap formats [RESOLVED FIXED; assigned to fpizlo]
    •    130546: FTL ValueToInt32 mishandles the constant case, and by the way, there is a constant case that the FTL sees [RESOLVED FIXED; assigned to fpizlo]
    •    130562: FTL should correctly compile GetByVal on Uint32Array that claims to return non-int32 values [RESOLVED FIXED; assigned to fpizlo]
    •    130791: FTL should use stackmap register liveness [RESOLVED FIXED; assigned to fpizlo]
      •    130792: Reasoning about DWARF register numbers should be moved out of FTL::Location [RESOLVED FIXED; assigned to fpizlo]
      •    130801: Parse stackmaps liveOuts [RESOLVED FIXED; assigned to fpizlo]
      •    130821: Enable LLVM stackmap liveOuts computation [RESOLVED FIXED; assigned to fpizlo]
      •    130924: Land the stackmap register liveness glue with the uses of the liveness disabled [RESOLVED FIXED; assigned to fpizlo]
      •    130948: More validation for FTL inline caches [RESOLVED FIXED; assigned to fpizlo]
    •    130867: Switch the LLVMForJSC target to using the LLVM in /usr/local rather than /usr/local/LLVMForJavaScriptCore on iOS [RESOLVED FIXED; assigned to fpizlo]
    •    131385: Fail silently if the LLVM dylib isn't found [RESOLVED FIXED; assigned to fpizlo]
  •    115464: fourthTier: Structure::getConcurrently() may be called from for uncacheable dictionaries, and this is safe [RESOLVED FIXED; assigned to fpizlo]
  •    115465: fourthTier: REGRESSION: fast/js/primitive-property-access-edge-cases.html is crashing [RESOLVED DUPLICATE; assigned to fpizlo]
  •    115466: fourthTier: REGRESSION: ietestcenter/Javascript/15.4.4.14-2-13.htm and ietestcenter/Javascript/15.4.4.15-2-13.html are crashing [RESOLVED DUPLICATE; assigned to fpizlo]
  •    116556: fourthTier: display-profiler-output should make it even easier to diff the compilation story between two different runs [RESOLVED FIXED; assigned to fpizlo]
  •    116557: fourthTier: add heuristics to reduce the likelihood of a trivially inlineable function being independently compiled by the concurrent JIT [RESOLVED FIXED; assigned to fpizlo]
    •    116696: fourthTier: rationalize DFG::CapabilityLevel and DFGCapabilities.[h|cpp] [RESOLVED FIXED; assigned to fpizlo]
  •    116561: fourthTier: should use ConcurrentJITLock[er] directly and not through typedef [RESOLVED FIXED; assigned to fpizlo]
  •    116630: fourthTier: It should be possible to use more than one compiler thread [RESOLVED FIXED; assigned to fpizlo]
  •    116633: fourthTier: Race between LLInt->Baseline tier-up and DFG reading Baseline profiling data [RESOLVED FIXED; assigned to fpizlo]
  •    116748: fourthTier: cti_optimize shouldn't allow GCs to get in the way of it seeing the state of its CodeBlock [RESOLVED FIXED; assigned to fpizlo]

Bug 112836 does not block any bugs.