Branch: refs/heads/webkitglib/2.50
Home: https://github.com/WebKit/WebKit
Commit: b7761c7408ef11a3369ac718f412b683058fea50
https://github.com/WebKit/WebKit/commit/b7761c7408ef11a3369ac718f412b683058fea50
Author: Daniel Liu <[email protected]>
Date: 2025-09-22 (Mon, 22 Sep 2025)
Changed paths:
A JSTests/wasm/stress/omg-osr-stack-slot-positioning.js
M Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp
Log Message:
-----------
Cherry-pick 297297.196@safari-7622-branch (c4c5c5e57ff5).
https://bugs.webkit.org/show_bug.cgi?id=296490
OMG stack slots should be positioned at the beginning of the OSR buffer
when IPInt OSR layout is used
https://bugs.webkit.org/show_bug.cgi?id=296490
rdar://155783944
Reviewed by Yusuke Suzuki.
IPInt uses rethrow slots in the OSR buffer, which are positioned at the
beginning of the buffer. During OSR stackmap generation, OMG should not
put in any locals or stack values until all slots are accounted for and
incremented past.
* JSTests/wasm/stress/omg-osr-stack-slot-positioning.js: Added.
(instantiate):
(async let):
* Source/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp:
(JSC::Wasm::OMGIRGenerator::addLoop):
Canonical link: https://commits.webkit.org/297297.196@safari-7622-branch
Canonical link: https://commits.webkit.org/298234.143@webkitglib/2.50
Commit: 8d0d83033889d25c97c3ca5ba9d309cc23a1561c
https://github.com/WebKit/WebKit/commit/8d0d83033889d25c97c3ca5ba9d309cc23a1561c
Author: Said Abou-Hallawa <[email protected]>
Date: 2025-09-22 (Mon, 22 Sep 2025)
Changed paths:
A
LayoutTests/svg/animations/smil-max-finite-repeatDur-indefinite-crash-expected.txt
A LayoutTests/svg/animations/smil-max-finite-repeatDur-indefinite-crash.html
M Source/WebCore/svg/animation/SVGSMILElement.cpp
Log Message:
-----------
Cherry-pick 300165@main (19a1347c71e0).
https://bugs.webkit.org/show_bug.cgi?id=299047
REGRESSION(298715@main): SVG animation with finite 'max' and indefinite
'repeatDur` causes the web page to jetsam
https://bugs.webkit.org/show_bug.cgi?id=299047
rdar://160099991
Reviewed by Nikolas Zimmermann.
When the SMIL ends because the elapsed time is greater than the
intervalEnd, we
should not use repeatingDuration to calculate 'repeat' value unless its
value is
finite. If it is value isIndefinite, we should use the duration since the
begin
of the animation.
Test: svg/animations/smil-max-finite-repeatDur-indefinite-crash.html
*
LayoutTests/svg/animations/smil-max-finite-repeatDur-indefinite-crash-expected.txt:
Added.
*
LayoutTests/svg/animations/smil-max-finite-repeatDur-indefinite-crash.html:
Added.
* Source/WebCore/svg/animation/SVGSMILElement.cpp:
(WebCore::SVGSMILElement::calculateAnimationPercentAndRepeat const):
Canonical link: https://commits.webkit.org/300165@main
Canonical link: https://commits.webkit.org/298234.144@webkitglib/2.50
Compare: https://github.com/WebKit/WebKit/compare/26b41a5e48a0...8d0d83033889
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
