aboutsummaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* mkgenome: on a header mismatch name FTOP/ZFP, print the image's and the ↵Gravatar zinc 12 days1-6/+24
| | | | map's values, and point at a stale src/runtime/rt.zc or map
* lsp: borrow errors ranged on the use, with related information for where the ↵Gravatar zinc 12 days3-4/+54
| | | | owner ended and was declared; vscode client passes relatedInformation through
* analyzer: check borrow returns of forward-called functions at the unit's ↵Gravatar zinc 12 days6-9/+115
| | | | end; borrows clause for prototypes, definitions, externs and function types, checked against the body
* analyzer: use-after-end messages name the borrower, the owner and how the ↵Gravatar zinc 12 days4-18/+47
| | | | owner ended (freed, moved, .d parameter, push, global, reassignment), with fixtures
* lsp: prefer the rt import fix when a library group wraps the same nameGravatar zinc 12 days1-1/+2
|
* lsp: complete a module path one level at a time (std. lists groups, ↵Gravatar zinc 12 days1-4/+24
| | | | std.File. and std.Io. their members)
* std: add std.Io (print, println, nl, put_*, put_f, get_c, eof, read, ↵Gravatar zinc 12 days2-2/+80
| | | | getline) with test, learn example and docs
* x86-64 jit: inline new_k, recycle_leaf and own fast paths, in o3 regions and ↵Gravatar zinc 13 days3-5/+216
| | | | | | | | | | | | | | plain blocks a call to rt.new_k / rt.recycle_leaf with a constant class, or to rt.own, does its class-list pop or push (or owner store) inline and goes on after the call; an empty list, memdebug, a held range, a block outside memory, a translated word or a type/class mismatch takes the ordinary call. in a region this replaces the o3_invoke round trip. o3 frees of leaf objects now use recycle_leaf too (new_k stamps the type inside o3 since b86db60). ZYNOFASTALLOC=1 turns it off; ZYPERFMAP=1 writes a perf map of translated code. tests/programs/o3_freelist.zc: reuse, zeroing, an empty list, untyped neighbours, memdebug; jit vs ZYNOFASTALLOC vs ZYO3INTERP.
* rt: recycle, new_k and own without helper calls or || chainsGravatar zinc 13 days1-18/+58
| | | | | | | | | | perf (ZYPERFMAP) on plain trees new/free showed recycle, new_k and own taking about 70% of the time, mostly in calls to isobj, paylen, bdrop, bclass and fpush and in the truth values plain code builds for && and ||. recycle writes isobj, paylen and the class-list push out, calls scan_ptr only for 8 or more words left, and own and new_k test with nested ifs. frame_control grows to 22 words: a tag, &dbg and the entries of new_k, recycle_leaf and own for the x86-64 jit's inline fast paths (next commit).
* find_replace: cover o3 function prologues on every backendGravatar zinc 13 days1-7/+44
| | | | | | | | arm64, llvm and the region-interpreter rdrop path now watch the two prologue words the way the x86-64 jit already did, so icon.replace_function's lit+jmp patch retires a compiled callee (and clears fn_nat) instead of leaving a stale stub. three new icon regressions: repeated o3 replace, failed publication keeps the old entry, and a direct call after warming the region.
* prover: do not restore length facts after a call-loopGravatar zinc 13 days1-6/+6
| | | | | | | Restoring undirtied lafacts when the body might free was wrong: push can grow an array without dirtying its name, so a[99] after push warned against a stale length 0. Keep the old lafact_keep rule; reorder explain_prover so the constant/affine cases run before the touch() loops.
* prover: len/cross-array/fixed-new/affine proofs; keep facts past call loopsGravatar zinc 13 days1-19/+27
| | | | | | | | Rebased the prover WIP onto main. lafact_keep restores undirtied allocation facts even when the loop body might free (so a later touch() no longer drops every length fact). proven_p uses ptr_still so an outer call keeps the check. entry_fact still supplies the size for the "might free" explain reason. bounds_prover.zc and explain_prover.zc land with test.sh coverage.
* wip: prover gaps (inline len bound, cross-array, rt.new depth, fixed new, ↵Gravatar zinc 13 days4-42/+112
| | | | affine i*n+k); unbuilt and untested
* o3: use new_k (size-class free lists) like plain codeGravatar zinc 13 days1-4/+4
| | | | | | | Constant-size typed new inside o3 now calls rt.new_k instead of always taking new_t/new_raw. new_k and recycle_leaf skip the o3 argument-fatten path the way free/recycle already do. trees o3 new/free on the x86-64 jit dropped from about 4.1 ms to about 2.7 ms per iter (matches plain).
* x86-64 o3: direct o3-to-o3 calls (rcall_x64 / rfinish_x64)Gravatar zinc 13 days1-14/+182
| | | | | | | | | Port arm64's rcall/rfinish to the x86-64 region jit: call the callee's entry stub through fn_nat with a built frame, return via linkstk, and fall back to o3_invoke when the stub is missing or the frame/depth check fails. Clear fn_nat on rforget and cover the function prologue so icon.replace_function drops the region (o3_caller_replace). vm_until saves jit_depth around nested bytecode, matching arm64.
* actor: a declared actor without its own drop gets one that awaits owed ↵Gravatar zinc 13 days2-3/+16
| | | | replies and closes the endpoint; the handler reaches the struct through endpoint.state so the struct isn't shared; spawn hint skips mailbox structs
* std: File, the first user of drops: std.Host.open(path, mode) returns an ↵Gravatar zinc 13 days1-5/+33
| | | | owned std.File (or null) with write and read, and its drop closes the descriptor; Host.writefile is built on it; file_drop.zc, learn and readme
* rt: gc_drops finalizes a droppable value that reaches itself (a cycle, or a ↵Gravatar zinc 13 days1-3/+9
| | | | drop capturing its own value), one per collection, each once; before, each waited for the other forever; spec 6.15.3, drop_gc_cycle.zc, drop_gc_self_capture.zc, design doc lists what landed
* o3: an o3 function called from normal code as a receiver method (run.method) ↵Gravatar zinc 13 days1-1/+3
| | | | enters and leaves the region and fattens its result, like a direct call; spec 4.10.3, o3_receiver_method_enter.zc
* o3: break and continue out of an o3 { } block call rt.o3_leave for each ↵Gravatar zinc 13 days1-0/+12
| | | | block they leave (the loop records the o3 depth it began at), so the depth returns to 0 and pending collections and drops run; spec 4.10.3, o3_break_continue_leave.zc
* rt: memreport marks a leaked value whose drop never ran with (drop); spec ↵Gravatar zinc 13 days1-1/+3
| | | | 4.11, readme, memdebug_report_drop.zc
* destructors: hint: x: has drop and is live at spawn; the worker's copy drops ↵Gravatar zinc 13 days2-0/+14
| | | | it too, on x.spawn() of a mailbox struct for each live owned local with a drop; spec 6.15.4, lsp hint check
* destructors: nothing moves out of a value with a drop: pop on an array with ↵Gravatar zinc 13 days1-1/+8
| | | | a drop, or on an array field of a value with a drop, is error: a: can't move out of a value with drop (fields were already borrowed projections); spec 6.15.5, four conformance programs
* destructors: reassigning an m owner that still holds a value frees the old ↵Gravatar zinc 13 days3-4/+43
| | | | value first, running its drop (right side first, then the free, then the store), with hint: x: reassigning frees the old value; a new value that is part of the old one is an error; u, d and captured owners keep the leak error; the new value's size, leaf type and drop are recorded like a declaration's; spec 6.8.5, 6.15.2
* genmap: default genome reservation 0x70000 words (the genome had 197 words ↵Gravatar zinc 13 days2-10/+10
| | | | left); the map constants in rt.zc and the README table move by 0x8000; gc.zc's reclaim bound is 900 (937 with the heap higher, 952 before) and the run-only section rewrites whatever its number
* compiler: a //:lines marker starts a new file, so unbounded; and unchecked; ↵Gravatar zinc 13 days1-1/+3
| | | | of the source before it end there: a program joined to the unbounded runtime in a self-hosted run-only image is bounds-checked again (since d55b5fd its index errors went unreported); runtime_image_test expects the trap's exit status 2; spec 4.15.1, 4.x unchecked, 5.15.3
* compiler: the drop globals' comment says mailbox send, so nothing the ↵Gravatar zinc 13 days1-1/+1
| | | | compiler reads mentions actors (test.sh check)
* rt: the free paths take one F_HASDROP test, and dropfree does the drop and ↵Gravatar zinc 13 days1-4/+4
| | | | the clearing out of line
* destructors: heap(v), drop(v, f) / v.drop(f) / v.drop = f, struct drop ↵Gravatar zinc 13 days6-9/+318
| | | | methods, collector drops after the sweep (once, resurrection), freed blocks forget their drop, temporaries drop at statement end with a hint, actor send check; o3: no collection inside a region (pending until the outermost exit), no drops set or ended inside o3; spec 3.11.6, 4.10.3-4, 6.15
* defer: any single statement (if/else, loops, switch, unchecked, unbounded), ↵Gravatar zinc 13 days1-4/+8
| | | | not just an expression or a block
* fndef: b.2.13 unnamed prototype parameters in fewer ops (402197 -> 402112 ↵Gravatar zinc 13 days1-9/+8
| | | | words, same behaviour)
* zy: a runtime trap exits 2 (rt.trap: index out of range, frame overflow, out ↵Gravatar zinc 13 days1-5/+8
| | | | of heap, bad pointer, use after free); compile errors stay 1; spec 8.1.3; exitstatus.sh checks exit 2
* detach doc comments on internal bounds helpers (genome size); todo: reuse ↵Gravatar zinc 13 days1-0/+19
| | | | capture_scan in the body scanner
* explain-checks: the record writer moves to src/lib/explain.zc, embedded and ↵Gravatar zinc 13 days4-54/+76
| | | | compiled only in that mode; the genome keeps the call sites and a hook
* bounds: body scan, loop-entry hoisting, pointer proofs from requested size, ↵Gravatar zinc 13 days9-15/+397
| | | | --explain-checks v1 (non-o3 code)
* zy: nonzero exit on compile errorsGravatar zinc 13 days1-3/+5
|
* merge work/exactsize: exact-size heap boundsGravatar zinc 13 days4-25/+23
|\
| * rt: exact-size heap bounds; n, the words new asked for, lives in bits 32..62 ↵Gravatar zinc 13 days4-25/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | of p[-4] the bnd recipe and paylen read n instead of the power-of-two block: bnd: r6 = sub p 3; r6 = ld r6; r7 = xor p 0x2B7E1516; r6 = eq r6 r7; r7 = sub p 4; r7 = ld r7; r7 = shr r7 32; r7 = mul r7 q; r8 = mul i m; r8 = ltu r8 r7; r8 = xor r8 1; r0 = and r6 r8 paylen: return p[-4] >> 32 two loads instead of three; osize, bchk, release, recycle and the memdebug leak report all read n (rt.new(4) has length 4, rt.new(0) has 0). writers: new_raw and new_k set n; stack.h line 87 and tinyvm.ts (BigInt) set it on stack segments. release clears n when a block goes into quarantine (len 0, indexing traps; under memdebug bchk reports a use after free); every free-list path (fpush, mkblock, bdrop, recycle_leaf, balloc hold) rewrites the word as k << 16, and an array that grows gets a fresh block. a request over 2^31-1-HDR words stops in new_raw (oom), and the compiler only takes the new_k fast path for constant sizes that fit, so n is never truncated. bit users checked (all mask or preserve bits 32..62; none compares or copies the whole word): gc mark and sweep; release, free, recycle, recycle_leaf; share and own; isobj, quar, checkptr, obj_base; bclass and the bfree buddy merge; balloc, mkblock, fpush, funlink, heap_grow; frame_grow; stack_allocate in src/core/stack.h and src/js/tinyvm.ts; micro.c and core.c (check word only); the compiler's two p[-4] | F_INTERNAL writes (base.zc, builtins.zc). 32-bit ports: none (baremetal, wasm and micro use int64 Cell). tests: tests/programs/exactsize.zc (n-1/n for non-power-of-two sizes, new(0), packed bytes, recycle, grow, stack growth); 8-runtime: exact_size_bounds, pointer_index_n_minus_1, pointer_index_n_traps, pointer_index_n_traps_memdebug, new_zero_index_traps, new_too_big_traps, stale_index_after_free_traps, stale_index_after_free_memdebug. expectations changed: leak report shows n (tests/test.sh line 169, examples/learn/13-memdebug.out, docs/LEARN.md, 4-statements/memdebug_report_line.zc). programs adjusted to keep test.sh expectations: quarantine.zc (unbounded), bounds_heap.zc (rt.new(11)). spec 3.7.4 and 4.11 updated. fixpoint 402204 words (main 402197).
* | merge work/xref: stale known-line check for conformance and parityGravatar zinc 13 days1-5/+8
|\ \ | |/ |/|
| * conformance and parity: a known entry that passes again is stale and fails ↵Gravatar zinc 13 days1-5/+8
| | | | | | | | the run
* | merge work/jit2: compiled o3 regions on x86-64Gravatar zinc 13 days1-9/+262
|\ \
| * | x86-64 o3 regions: header comment, readme, bench note and todoGravatar zinc 13 days1-3/+4
| | |
| * | x86-64 jit: compile o3 regions (vars in their frame slots, six value ↵Gravatar zinc 13 days1-6/+258
| |/ | | | | | | registers); ZYO3INTERP=1 keeps the region interpreter
* | Merge branch 'main' into work/specGravatar zinc 13 days1-14/+26
|\|
| * merge work/xref: zc0 u*d redo and follow-upsGravatar zinc 13 days1-14/+26
| |\
| | * zc0: a store into a local embed array is an error (its elements are in the ↵Gravatar zinc 13 days1-8/+17
| | | | | | | | | | | | code); test in tests/test.sh
| | * zc0: free the saved token when the local-embed lookahead returns earlyGravatar zinc 13 days1-1/+1
| | |
| | * zc0: u*x, m*x, d*x are products when u, m or d is a visible local or global ↵Gravatar zinc 13 days1-5/+8
| | | | | | | | | | | | (spec 1.6.3); redone from zc-spec's 2f2597b
* | | len: len on a char* is an error with typecheck off too (appendix b.2.14)Gravatar zinc 13 days1-1/+2
| | |
* | | prototypes: parameters may be unnamed, int f(int, int*); (appendix b.2.13)Gravatar zinc 13 days1-2/+11
| | |