Chris Tate ffc7af36c7 Read a typed array's length without an invariant header load ...

`length` and `byteLength` loaded the typed array's header with
`!invariant.load` (#2016). LLVM may move such a load down to its use,
past the release that frees the view, so `const slots = this.slots;
this.slots = next; return slots.length` returned a garbage number in
release builds. These reads are now ordinary loads that keep the
header's alias tag. Header loads that only bound or address an element
access stay invariant: their values reach only that access, which runs
while the view is alive, so typed-array loops still hoist the length
and data pointer.

Corpus typed-array-length-after-release covers a replaced field, a
deleted map entry and a rebound global.

2026-10-25 09:59:43 -05:00

..

corpus

Read a typed array's length without an invariant header load

2026-10-25 09:59:43 -05:00

coverage-fixtures

Merge main and skip package.json files without a scriptc key

2026-10-25 03:58:49 -05:00

deadstrip

…

diagnostics

Run lone array callbacks as loops with their bodies inlined (#1997)

2026-10-25 05:24:07 -05:00

ffi

…

fixtures

Merge main

2026-10-25 02:06:50 -05:00

harness

Read a typed array's length without an invariant header load

2026-10-25 09:59:43 -05:00

library-mode

Add object literal members through the store caches in untyped code

2026-10-25 08:24:12 -05:00

node-parallel

Compare termination signals and resolve the Node checkout path in the test/parallel runner

2026-10-24 16:00:06 -05:00

test262

Convert compareArray's message only when the arrays differ

2026-10-24 16:16:23 -05:00

wasm-spec

…