1438645 - Prevent XDR from reading past its buffer.,
1325345 - Add compartment asserts to JS_FireOnNewGlobalObject and other APIs.
1339411 - Rewrite and optimize object allocation paths, NatibeObject.h, NativeObject-inl.h and jsiter.cpp were not updated use JS::Result for stability, do that now.
1369337 - Forcibly create length and @@iterator properties for arguments when redefining.
1369680 - Use HasOwnProperty when resolving lazy properties to avoid triggering proxy traps in the proto-chain.
1319443 - Fix GlobalScopes XDR to encode global function bindings.
1335571 - Use template craziness to allow covering more cases with compartment asserts.
1322724: IonMonkey - Add the hit count information on the extra false branch blocks
1322932: IonMonkey - Only iterate the backedge of the inner-loop when it has already be visited
1329901 - Remove expensive isObservableOperand() loop guards.
1330667: IonMonkey - Create a new constant for every optimized arguments use.
1342016 - Fast-path for isObservableSlot().
1388045 - Branch Pruning: Check the compile info associated with the resume point.
1357680 part 1 - Track Ion-inlined scripts explicitly so we can inline functions with unknown properties.
1357680 part 2 - Remove unnecessary setNewGroupUnknown call in SetClassAndProto.
1357680 part 3 - Don't mark the new group as having unknown properties when changing an object's proto.
1365518 - Fix polymorphic inlining to work correctly for functions that had their group/proto changed.
1368570 - Fix js::FinishCompilation to handle OOM correctly.
1395919 - Don't copy the unknown-properties flag in AddPropertyTypesAfterProtoChange.
1544386 part 1 - Call ElementAccessHasExtraIndexedProperty instead of ArrayPrototypeHasIndexedProperty when inlining array natives.
1538006 - Propagate unknownProperties when changing prototype.
1538006 - Don't emit unbarriered writes to an object if its group might change.
1322724: IonMonkey - Add the hit count information on the extra false branch blocks
1322932: IonMonkey - Only iterate the backedge of the inner-loop when it has already be visited
1329901 - Remove expensive isObservableOperand() loop guards.
1330667: IonMonkey - Create a new constant for every optimized arguments use.
1342016 - Fast-path for isObservableSlot().
1388045 - Branch Pruning: Check the compile info associated with the resume point.
Bug 1335146: IonMonkey - Don't do flow-aa on blocks without entry predecessor.
1329665 - Use fallible allocator in FlowAliasAnalysis::saveStoreDependency.
1329651: IonMonkey - Ensure ballast in EliminateDeadResumePointOperands.
Sec-fix: 1355050 - Root the RegExpShared in RegExpMacroAssembler
1375436: Assertion failure: throwing, at js/src/jscntxt.cpp:1466 with Debugger and async
Fix typo while at it in CodeGenerator.cpp
Fix idle runnable DOM issues 1367905 fixes.
Sadly this still does not compile. It just get further.
nsThreadUtils.cpp is still not fully fixed and nsCOMPtr.h has some conversion errors.
1325254 P1 Make TimerThread::mTimers store RefPtr<nsTimerImpl> objects.
1325254 P2 Make TimerThread list store an entry struct and just drop nsTimerImpl ref on cancel.
1325254 P3 Sort TimerThread list as a binary heap.
1325254 P4 Dynamically allocate Entry structs stored in TimerThread::mTimers.
1325254 P5 Make nsITimer::Cancel() O(c).
Prepare for handling several sources of idleness.
Make idle callbacks aware of nsITimers.
Add pref for how far into the timer queue.
1311425 - Avoid expiration timers when scheduling idle runnables.
review comment fix to ensure low priority timers aren't taken into account when calling NS_GetTimerDeadlineHintOnCurrentThread.
1367905 - Try to run GC/CC slices, including forgetSkippable, during idle time.
1367905 - Try to run GC/CC slices, including forgetSkippable, during idle time, tweaks to keep reftest memory usage lower.
- Convert the imgCacheQueue to nsTArray from Vector
- Avoid marking the queue dirty when element operations are performed
that don't upset the sort order. This should improve performance as well.
