X-Git-Url: https://git.saurik.com/apple/javascriptcore.git/blobdiff_plain/2656c66b5b30d5597e842a751c7f19ad6c2fe31a..2d39b0e377c0896910ee49ae70082ba665faf986:/ChangeLog?ds=sidebyside

diff --git a/ChangeLog b/ChangeLog
index 097cfa1..8abbeb7 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,50 @@
+2015-07-27  Babak Shafiei  <bshafiei@apple.com>
+
+        Roll out r182829.
+
+2015-07-08  Matthew Hanson  <matthew_hanson@apple.com>
+
+        Merge r183128. rdar://problem/21716620
+
+    2015-04-22  Mark Lam  <mark.lam@apple.com>
+
+            SparseArrayEntry's write barrier owner should be the SparseArrayValueMap.
+            https://bugs.webkit.org/show_bug.cgi?id=144067
+
+            Reviewed by Michael Saboff.
+
+            Currently, there are a few places where the JSObject that owns the
+            SparseArrayValueMap is designated as the owner of the SparseArrayEntry
+            write barrier.  This is a bug and can result in the GC collecting the
+            SparseArrayEntry even though it is being referenced by the
+            SparseArrayValueMap.  This patch fixes the bug.
+
+            * runtime/JSObject.cpp:
+            (JSC::JSObject::enterDictionaryIndexingModeWhenArrayStorageAlreadyExists):
+            (JSC::JSObject::putIndexedDescriptor):
+            * tests/stress/sparse-array-entry-update-144067.js: Added.
+            (useMemoryToTriggerGCs):
+            (foo):
+
+2015-07-08  Matthew Hanson  <matthew_hanson@apple.com>
+
+        Merge r182829. rdar://problem/21716511
+
+    2015-04-14  Chris Dumez  <cdumez@apple.com>
+
+            Regression(r180020): Web Inspector crashes on pages that have a stylesheet with an invalid MIME type
+            https://bugs.webkit.org/show_bug.cgi?id=143745
+            <rdar://problem/20243916>
+
+            Reviewed by Joseph Pecoraro.
+
+            Add assertion in ContentSearchUtilities::findMagicComment() to make
+            sure the content String is not null or we would crash in
+            JSC::Yarr::interpret() later.
+
+            * inspector/ContentSearchUtilities.cpp:
+            (Inspector::ContentSearchUtilities::findMagicComment):
+
 2015-03-06  Lucas Forschler  <lforschler@apple.com>
 
         Merge r180234