JS1.5 RC4a : 2002-03-21
MSVC users on Windows: compile the JS Engine with linker flag /OPT:NOICF !!!
Here's why
HIGHLIGHTS
Bug 62164
Major footprint/perf win: share property state using a tree whose root represents empty scopes, and whose non-root nodes represent scopes with properties added in order from the root to that node; to use double hashing to map these tree-paths for per-scope property lookup; and avoid locking where possible through immutability and mostly-benign & rare race tolerance
Bugs Fixed between RC4 and RC4a:
| ID | Sev | Pri | Plt | Owner | State | Result | Summary |
|---|---|---|---|---|---|---|---|
| 117307 | Crash in error handler on invalid JavaScript | ||||||
| 118849 | calling javascript `Function' with bad args crashes browser | ||||||
| 119909 | small number of back references in regular expression (regex | ||||||
| 120571 | JS crash: try/catch/continue. | ||||||
| 123371 | '\n' after a JS function call name before its argument list' | ||||||
| 127136 | Exception backtrace code dies recursive death on js_ValueToS | ||||||
| 127243 | watch crashes browser on scrollTop watchpoint | ||||||
| 127557 | getParentMenuButtonRecursive is not defined in linkToolbarIt | ||||||
| 128057 | JS_GetPropertyDescArray does not check the return value of J | ||||||
| 128219 | Crash if error-exception thrown and standard classes not ini | ||||||
| 128258 | Recent Trunk builds crashing at [@ RemovePropertyTreeChild] | ||||||
| 130137 | js_AddNativeProperty&js_ChangeNativePropertyAttrs fail to lo | ||||||
| 130697 | Crash when repeatedly sorting a large array | ||||||
| 67111 | JS_GetImplementationVersion() date string needs to be update | ||||||
| 72964 | Pattern matching failing on non-Latin1 characters | ||||||
| 87231 | Regular expression "(A)?(A.*)" picks 'A' twice | ||||||
| 99120 | sort() should work better on already- or mostly-sorted input | ||||||
| 103351 | 'abc'.replace(undefined, 'Z') should be 'abc', not 'Zabc' | ||||||
| 104375 | string.replace() placeholder '$1' not working | ||||||
| 105972 | /^.*?$/ will not match anything | ||||||
| 115627 | Performance inefficiency in js_strtod | ||||||
| 117276 | gcc-debug problems converting numbers to strings | ||||||
| 120197 | Certain syntax errors are being reported twice | ||||||
| 119743 | Autocomplete doesn't work in gcc 2.96 -O2 builds | ||||||
| 120083 | JavaScript toInt32 conversion doesn't match ECMAScript defin | ||||||
| 120831 | js_strncpy should inline-expand to memcpy | ||||||
| 120990 | Conversion of integer to string is slow | ||||||
| 121658 | too much recursion doesn't unwind | ||||||
| 121744 | JS should error on |for(i in undefined)|, |for(i in null)| | ||||||
| 123002 | Error.length should be 3 not 1 | ||||||
| 124339 | regexp.lastIndex: should be uint32 or integer-valued double? | ||||||
| 126159 | Integer not always converted to integer correctly | ||||||
| 129519 | JS_GetPropertyDesc gives up too easily | ||||||
| 130711 | Memory leak in JS_dtoa | ||||||
| 130970 | JS_Assert() during JS component registration (nsProgressDial | ||||||
| 130991 | Out-of-Memory in jsshell causes assertion failure in jsobj.c | ||||||
| 131815 | OOM during second allocation in JS_Init causes crash | ||||||
| 131817 | OOM in AllocSrcNote causes crash in js_NewSrcNote | ||||||
| 131904 | OOM in CreateScopeTable crashes js_SearchScope | ||||||
| 132088 | OOM in JS_ArenaAllocate generates assertion in js_GetDepende | ||||||
| 128861 | pldhash: for the table at address 0x0x8aee608, the given ent | ||||||
| 110406 | patch to reduce number of strlen calls in JS Engine | ||||||
| 123177 | RFE: Add function stack trace for Error() objects | ||||||
| 123930 | rt->scopeSharingDone/LockScope deadlock | ||||||
| 62164 | JS scopes are malloc-happy; need JS_DOUBLE_HASHING | ||||||
| 114712 | JSGC stuck when trying to mark RegExp.prototype | ||||||
| 118266 | JS Date type mixed with document.cookie considered harmful | ||||||
| 118732 | Disable access to Call() object from javascript | ||||||
| 129545 | Missing JSFunction API in jsapi.h | ||||||
| 129972 | strict warnings without the strict option, and other 1.0 JS | ||||||
| 130451 | [ECMA] Array.prototype.sort should not (re-)define .length | ||||||
| 131510 | Crash when |arguments| defined as a variable inside function | ||||||
| 76717 | regexp literals wrongly shared among threads executing preco | ||||||
| 120451 | Crashes when waking from sleep after running Mozilla | ||||||
| 128556 | Problems building the JS shell on Mac OS X. | ||||||
| 61314 | Makefile rules for "jsmath.o" and "jsmathtemp.o" cause stale | ||||||
| 45673 | JS_Assert does not print anything on Windows |
57 bugs found