Commits on May 29, 2020

1. deps: V8: backport ea0719b8ed08 …

   Original commit message:
   
       [snapshot] Do not defer ArrayBuffers during snapshotting
   
       ArrayBuffer instances are serialized by first re-assigning a index
       to the backing store field, then serializing the object, and then
       storing the actual backing store address again (and the same for the
       ArrayBufferExtension). If serialization of the object itself is deferred,
       the real backing store address is written into the snapshot, which cannot be
       processed when deserializing, leading to a crash.
   
       This fixes this by not deferring ArrayBuffer serialization and adding a DCHECK
       for the crash that previously occurred.
   
       Change-Id: Id9bea8268061bd0770cde7bfeb6695248978f994
       Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2144123
       Commit-Queue: Jakob Gruber <jgruber@chromium.org>
       Reviewed-by: Dan Elphick <delphick@chromium.org>
       Cr-Commit-Position: refs/heads/master@{#67114}
   
   Refs: v8/v8@ea0719b

   

   joyeecheung committed May 29, 2020
   Copy the full SHA

   bc7cd3f View commit details

   Browse the repository at this point in the history

2. deps: V8: backport bb9f0c2b2fe9 …

   Original commit message:
   
       [snapshot] Improve snapshot docs and error printing
   
       - Minor improvements to the documentation for snapshotting.
       - Add newlines to printed errors where necessary.
   
       Change-Id: I822e7e850adb67eae73b51c23cf34e40ba3106f0
       Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2144954
       Reviewed-by: Toon Verwaest <verwaest@chromium.org>
       Commit-Queue: Toon Verwaest <verwaest@chromium.org>
       Cr-Commit-Position: refs/heads/master@{#67111}
   
   Refs: v8/v8@bb9f0c2

   

   joyeecheung committed May 29, 2020
   Copy the full SHA

   27e453a View commit details

   Browse the repository at this point in the history

3. deps: V8: backport 22014de00115 …

   Original commit message:
   
       Reland "[snapshot] rehash JSMap and JSSet during deserialization"
   
       This is a reland of 8374feed55a5b3010f2e9593560a2d84f9f6725f.
   
       Fixed rehashing of global proxy keys by creating its identity hash
       early, before the deserialization of the context snapshot.
   
       Original change's description:
       > [snapshot] rehash JSMap and JSSet during deserialization
       >
       > To rehash JSMap and JSSet, we simply replace the backing store
       > with a new one created with the new hash.
       >
       > Bug: v8:9187
       > Change-Id: I90c25b18b33b7bc2b6ffe1b89fe17aa5f978b517
       > Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2143983
       > Commit-Queue: Joyee Cheung <joyee@igalia.com>
       > Reviewed-by: Jakob Gruber <jgruber@chromium.org>
       > Reviewed-by: Camillo Bruni <cbruni@chromium.org>
       > Cr-Commit-Position: refs/heads/master@{#67663}
   
       Bug: v8:9187, v8:10523
       Change-Id: I7a0319b1d10ff07644de902fec43e7c2b1dd8da9
       Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2212085
       Reviewed-by: Leszek Swirski <leszeks@chromium.org>
       Reviewed-by: Camillo Bruni <cbruni@chromium.org>
       Reviewed-by: Jakob Gruber <jgruber@chromium.org>
       Commit-Queue: Joyee Cheung <joyee@igalia.com>
       Cr-Commit-Position: refs/heads/master@{#67999}
   
   Refs: v8/v8@22014de

   

   joyeecheung committed May 29, 2020
   Copy the full SHA

   10ddf6a View commit details

   Browse the repository at this point in the history