| JS1.5 RC3a | : | 2001-05-11 | |
| JS1.5 RC4 | : | 2002-01-01 |
Bug 56940
"O(n^2) and O(n^3) growth too easy with JS string concatenation"
The solution: add mutable (growable or dependent, two subtypes) strings
to solve O(n^2) and O(n^3) growth rates
Bug 80981
"Need extended jump bytecode to avoid "script too large" errors, etc." We now ReportStatementTooLarge only if:
- a jump offset overflows 32 bits, signed;
- there are 2**32 or more span dependencies in a script;
- a backpatch chain link is more than (2**30 - 1) bytecodes long;
- a source note's distance from the last note, or from script main entry point, is > 0x7fffff bytes.
| ID | Sev | Pri | Plt | Owner | State | Result | Summary |
|---|---|---|---|---|---|---|---|
| 56940 | O(n**2) and O(n**3) growth too easy with JS string concat | ||||||
| 61897 | Space pigs: String.prototype.charAt and str_getProperty f... | ||||||
| 67111 | JS_GetImplementationVersion() date string needs to be upd... | ||||||
| 68045 | precompile chrome JS and load it incrementally ("fastload") | ||||||
| 70358 | call to DefineProperty w/ getter or setter recurs in Reso... | ||||||
| 72154 | Can't build JS Shell with CygWin 1.1.8 | ||||||
| 72354 | js_SetProperty needs to resolve lazy setters | ||||||
| 74883 | JSDHashTableOps.initEntry patch now crashes @ chrome reg. | ||||||
| 75688 | JS should allow reference_returning()++ etc. | ||||||
| 76054 | String() HTML methods not XHTML compliant | ||||||
| 77578 | Whole app hangs www.mrshowbiz.com (wrong eval scope for JS) | ||||||
| 77636 | Calling js from new-script hook can cause gc to reclaim n... | ||||||
| 77861 | JS_ResolveStandardClasses is js_Atomize happy | ||||||
| 78100 | Want mechanism for checking type of possibly-external JSS... | ||||||
| 78121 | buy.com site crashes | ||||||
| 78156 | m flag of regular expression does not work with $ | ||||||
| 78428 | Browse during install results in crash/freeze | ||||||
| 80619 | js_NewContext can leave us with garbage atoms | ||||||
| 80981 | Need extended jump bytecode to avoid "script too large" e... | ||||||
| 81245 | type-unsafe macro call bug in jsinterp.c, breaks ^ & | >>... | ||||||
| 81847 | jsdhash performs badly under repeated add+remove of same key | ||||||
| 82188 | source notes broken for toplevel scripts | ||||||
| 82306 | JS URI method impurity | ||||||
| 82845 | Add private data type flags for JSContext | ||||||
| 83293 | replace function stops the whole script if search is an e... | ||||||
| 83388 | gcc-2.96 -O2 jsinterp.c busts dialogs (OK with gcc-2.95, ... | ||||||
| 83532 | Mozilla crashes immediately on loading page [@ RecycleTree] | ||||||
| 85112 | YearFromTime function can be optimized | ||||||
| 87271 | Useless Expression Elimination eliminating useful expression | ||||||
| 88385 | JS shell help() cores | ||||||
| 89443 | Crash on large number of chained || operators | ||||||
| 89474 | JS_ValueToString(cx, DOUBLE_TO_JSVAL(0.123)) cores [WAS: ... | ||||||
| 90445 | Crash compiling bloated function while loading page. | ||||||
| 90546 | Can't call anonymous function created by Function.call | ||||||
| 90597 | CACHED_SET/CACHED_GET refcount bug | ||||||
| 90994 | JS 3-way deadlock between rt->SetSlotLock, JS_AWAIT_REQUE... | ||||||
| 92134 | Sun Workshop 6 Update 2 _FCS_ fails to build due "jscpucf... | ||||||
| 92810 | JSHashTable shift inconsistent after RawAdd/Remove OOM error | ||||||
| 93176 | MAX_INTERP_LEVEL should be build-settable | ||||||
| 94506 | parameter named "arguments" is not accessible in JavaScri... | ||||||
| 94567 | Avoid js_strlen() call in js_NewStringCopyZ() | ||||||
| 94580 | speedup JS_strdup() ? | ||||||
| 94631 | JSRESOLVE_ASSIGNING broken in JSNewResolveOp | ||||||
| 95517 | encodeURI[Component] memory corruption | ||||||
| 95534 | JSTRAP_CONTINUE doesn't | ||||||
| 95888 | [mac-only] 134.5Mb XUL FastLoad File and/or hang | ||||||
| 96084 | Function str_escape violates "leading js_" rule. | ||||||
| 96511 | "#if DEBUG" in jsgc.c should be "#ifdef" | ||||||
| 96562 | JS Engine version-dependent keywords not maintained prope... | ||||||
| 97444 | crasher on javascript menu [@JS_GetPrivate] | ||||||
| 97540 | "call hook" called with partially initialized cx->fp | ||||||
| 97646 | Exit code should be non-0 after compiler errors | ||||||
| 97921 | bad args for heavyweight function called with fewer actua... | ||||||
| 98306 | JS regexp code crashes in ParseAtom for script using Rege... | ||||||
| 98901 | mozilla crashes on http://www.sony.com/productregistratio... | ||||||
| 99663 | top disappears when you run a for loop on it. | ||||||
| 100199 | [], [^] are valid RegExp conditions | ||||||
| 100873 | JS Hard Codes JS_HAVE_LONG_LONG to the detriment of FreeBSD | ||||||
| 101488 | Array(m).length = new Number(n) failing (silently) | ||||||
| 102159 | date_format ignores return value of PRMJ_FormatTime | ||||||
| 102725 | gcc -O2 problems converting numbers to strings | ||||||
| 103042 | O(n**2) arena allocation in jsscan.c on long string literals | ||||||
| 103990 | {JS,PL}DHashTable needs tunable alpha (load factor) bounds | ||||||
| 104077 | JS crash: with/finally/return. | ||||||
| 104584 | js_GC doesn't mark max number of (actual, formal) parameters | ||||||
| 105476 | Add ASM version of js_CompareAndSwap for OS/2 | ||||||
| 105571 | gc marking forces heavyweight lock creation | ||||||
| 106244 | In JS strict mode, |if (a = b && c == d)| compiles as |if... | ||||||
| 106621 | Javascript menus not showing up | ||||||
| 106790 | Need JS_ClearNewbornRoots() | ||||||
| 107138 | Strange javascript behavior with literal value of "1" | ||||||
| 107265 | 2.8% of window close time in JS_ClearScope | ||||||
| 107771 | String.prototype.lastIndexOf counts on 0 termination of J... | ||||||
| 108013 | Browser crashes on going to this URL | ||||||
| 108257 | source notes broken for functions compiled via JS_Compile... | ||||||
| 108440 | JS array cycle crashes join and toString via infinite rec... | ||||||
| 108832 | Mozilla crashes at this site [@ js_strncpy] | ||||||
| 109183 | JS_GetClass when called indirectly via the GC should not ... | ||||||
| 109218 | js_SetupLocks appears excessive. | ||||||
| 109635 | crash in js_GC() when marking fp->argv | ||||||
| 110286 | Multiline comments containing "/*" should not be syntax e... | ||||||
| 110903 | new script hook not called for fastloaded scripts | ||||||
| 111365 | JS won't build on Solaris with 'GNU as' installed | ||||||
| 111557 | Mozilla crashes [JS_ArenaRealloc] | ||||||
| 115436 | Crash from function x(y,y) {return 3};var z = x(4,5) | ||||||
| 115545 | JS Date() no longer accurate after system wakes from sleep | ||||||
| 116228 | Problems with toString function performed on Function obj... |