Index: src/ia32/ic-ia32.cc |
=================================================================== |
--- src/ia32/ic-ia32.cc (revision 3112) |
+++ src/ia32/ic-ia32.cc (working copy) |
@@ -344,7 +344,162 @@ |
void KeyedLoadIC::GenerateExternalArray(MacroAssembler* masm, |
ExternalArrayType array_type) { |
- GenerateGeneric(masm); |
+ // ----------- S t a t e ------------- |
+ // -- esp[0] : return address |
+ // -- esp[4] : key |
+ // -- esp[8] : receiver |
+ // ----------------------------------- |
+ Label slow, failed_allocation; |
+ |
+ // Load name and receiver. |
+ __ mov(eax, Operand(esp, kPointerSize)); |
+ __ mov(ecx, Operand(esp, 2 * kPointerSize)); |
+ |
+ // Check that the object isn't a smi. |
+ __ test(ecx, Immediate(kSmiTagMask)); |
+ __ j(zero, &slow, not_taken); |
+ |
+ // Check that the key is a smi. |
+ __ test(eax, Immediate(kSmiTagMask)); |
+ __ j(not_zero, &slow, not_taken); |
+ |
+ // Get the map of the receiver. |
+ __ mov(edx, FieldOperand(ecx, HeapObject::kMapOffset)); |
+ // Check that the receiver does not require access checks. We need |
+ // to check this explicitly since this generic stub does not perform |
+ // map checks. |
+ __ movzx_b(ebx, FieldOperand(edx, Map::kBitFieldOffset)); |
+ __ test(ebx, Immediate(1 << Map::kIsAccessCheckNeeded)); |
+ __ j(not_zero, &slow, not_taken); |
+ |
+ // Get the instance type from the map of the receiver. |
+ __ movzx_b(edx, FieldOperand(edx, Map::kInstanceTypeOffset)); |
+ // Check that the object is a JS object. |
+ __ cmp(edx, JS_OBJECT_TYPE); |
+ __ j(not_equal, &slow, not_taken); |
+ |
+ // Check that the elements array is the appropriate type of |
+ // ExternalArray. |
+ // eax: index (as a smi) |
+ // ecx: JSObject |
+ __ mov(ecx, FieldOperand(ecx, JSObject::kElementsOffset)); |
+ Handle<Map> map(Heap::MapForExternalArrayType(array_type)); |
+ __ cmp(FieldOperand(ecx, HeapObject::kMapOffset), |
+ Immediate(map)); |
+ __ j(not_equal, &slow, not_taken); |
+ |
+ // Check that the index is in range. |
+ __ sar(eax, kSmiTagSize); // Untag the index. |
+ __ cmp(eax, FieldOperand(ecx, ExternalArray::kLengthOffset)); |
+ // Unsigned comparison catches both negative and too-large values. |
+ __ j(above_equal, &slow); |
+ |
+ // eax: untagged index |
+ // ecx: elements array |
+ __ mov(ecx, FieldOperand(ecx, ExternalArray::kExternalPointerOffset)); |
+ // ecx: base pointer of external storage |
+ switch (array_type) { |
+ case kExternalByteArray: |
+ __ movsx_b(eax, Operand(ecx, eax, times_1, 0)); |
+ break; |
+ case kExternalUnsignedByteArray: |
+ __ mov_b(eax, Operand(ecx, eax, times_1, 0)); |
+ break; |
+ case kExternalShortArray: |
+ __ movsx_w(eax, Operand(ecx, eax, times_2, 0)); |
+ break; |
+ case kExternalUnsignedShortArray: |
+ __ mov_w(eax, Operand(ecx, eax, times_2, 0)); |
+ break; |
+ case kExternalIntArray: |
+ case kExternalUnsignedIntArray: |
+ __ mov(eax, Operand(ecx, eax, times_4, 0)); |
+ break; |
+ case kExternalFloatArray: |
+ __ fld_s(Operand(ecx, eax, times_4, 0)); |
+ break; |
+ default: |
+ UNREACHABLE(); |
+ break; |
+ } |
+ |
+ // For integer array types: |
+ // eax: value |
+ // For floating-point array type: |
+ // FP(0): value |
+ |
+ if (array_type == kExternalIntArray || |
+ array_type == kExternalUnsignedIntArray) { |
+ |
+ // For the Int and UnsignedInt array types, we need to see whether |
+ // the value can be represented in a Smi. If not, we need to convert |
+ // it to a HeapNumber. |
+ Label box_int; |
+ if (array_type == kExternalIntArray) { |
+ // See Smi::IsValid for why this works. |
+ __ mov(ebx, eax); |
+ __ add(Operand(ebx), Immediate(0x40000000)); |
+ __ cmp(ebx, 0x80000000); |
+ __ j(above_equal, &box_int); |
+ } else { |
+ ASSERT_EQ(array_type, kExternalUnsignedIntArray); |
+ // The test is different for unsigned int values. Since we need |
+ // the Smi-encoded result to be treated as unsigned, we can't |
+ // handle either of the top two bits being set in the value. |
+ __ test(eax, Immediate(0xC0000000)); |
+ __ j(not_zero, &box_int); |
+ } |
+ |
+ __ shl(eax, kSmiTagSize); |
+ __ ret(0); |
+ |
+ __ bind(&box_int); |
+ |
+ // Allocate a HeapNumber for the int and perform int-to-double |
+ // conversion. |
+ if (array_type == kExternalIntArray) { |
+ __ push(eax); |
+ __ fild_s(Operand(esp, 0)); |
+ __ pop(eax); |
+ } else { |
+ ASSERT(array_type == kExternalUnsignedIntArray); |
+ // Need to zero-extend the value. |
+ // There's no fild variant for unsigned values, so zero-extend |
+ // to a 64-bit int manually. |
+ __ push(Immediate(0)); |
+ __ push(eax); |
+ __ fild_d(Operand(esp, 0)); |
+ __ pop(eax); |
+ __ pop(eax); |
+ } |
+ // FP(0): value |
+ __ AllocateHeapNumber(eax, ebx, ecx, &failed_allocation); |
+ // Set the value. |
+ __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset)); |
+ __ ret(0); |
+ } else if (array_type == kExternalFloatArray) { |
+ // For the floating-point array type, we need to always allocate a |
+ // HeapNumber. |
+ __ AllocateHeapNumber(eax, ebx, ecx, &failed_allocation); |
+ // Set the value. |
+ __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset)); |
+ __ ret(0); |
+ } else { |
+ __ shl(eax, kSmiTagSize); |
+ __ ret(0); |
+ } |
+ |
+ // If we fail allocation of the HeapNumber, we still have a value on |
+ // top of the FPU stack. Remove it. |
+ __ bind(&failed_allocation); |
+ __ ffree(); |
+ __ fincstp(); |
+ // Fall through to slow case. |
+ |
+ // Slow case: Load name and receiver from stack and jump to runtime. |
+ __ bind(&slow); |
+ __ IncrementCounter(&Counters::keyed_load_external_array_slow, 1); |
+ Generate(masm, ExternalReference(Runtime::kKeyedGetProperty)); |
} |
@@ -487,7 +642,196 @@ |
void KeyedStoreIC::GenerateExternalArray(MacroAssembler* masm, |
ExternalArrayType array_type) { |
- GenerateGeneric(masm); |
+ // ----------- S t a t e ------------- |
+ // -- eax : value |
+ // -- esp[0] : return address |
+ // -- esp[4] : key |
+ // -- esp[8] : receiver |
+ // ----------------------------------- |
+ Label slow, check_heap_number; |
+ |
+ // Get the receiver from the stack. |
+ __ mov(edx, Operand(esp, 2 * kPointerSize)); |
+ // Check that the object isn't a smi. |
+ __ test(edx, Immediate(kSmiTagMask)); |
+ __ j(zero, &slow); |
+ // Get the map from the receiver. |
+ __ mov(ecx, FieldOperand(edx, HeapObject::kMapOffset)); |
+ // Check that the receiver does not require access checks. We need |
+ // to do this because this generic stub does not perform map checks. |
+ __ movzx_b(ebx, FieldOperand(ecx, Map::kBitFieldOffset)); |
+ __ test(ebx, Immediate(1 << Map::kIsAccessCheckNeeded)); |
+ __ j(not_zero, &slow); |
+ // Get the key from the stack. |
+ __ mov(ebx, Operand(esp, 1 * kPointerSize)); // 1 ~ return address |
+ // Check that the key is a smi. |
+ __ test(ebx, Immediate(kSmiTagMask)); |
+ __ j(not_zero, &slow); |
+ // Get the instance type from the map of the receiver. |
+ __ movzx_b(ecx, FieldOperand(ecx, Map::kInstanceTypeOffset)); |
+ // Check that the object is a JS object. |
+ __ cmp(ecx, JS_OBJECT_TYPE); |
+ __ j(not_equal, &slow); |
+ |
+ // Check that the elements array is the appropriate type of |
+ // ExternalArray. |
+ // eax: value |
+ // edx: JSObject |
+ // ebx: index (as a smi) |
+ __ mov(ecx, FieldOperand(edx, JSObject::kElementsOffset)); |
+ Handle<Map> map(Heap::MapForExternalArrayType(array_type)); |
+ __ cmp(FieldOperand(ecx, HeapObject::kMapOffset), |
+ Immediate(map)); |
+ __ j(not_equal, &slow); |
+ |
+ // Check that the index is in range. |
+ __ sar(ebx, kSmiTagSize); // Untag the index. |
+ __ cmp(ebx, FieldOperand(ecx, ExternalArray::kLengthOffset)); |
+ // Unsigned comparison catches both negative and too-large values. |
+ __ j(above_equal, &slow); |
+ |
+ // Handle both smis and HeapNumbers in the fast path. Go to the |
+ // runtime for all other kinds of values. |
+ // eax: value |
+ // ecx: elements array |
+ // ebx: untagged index |
+ __ test(eax, Immediate(kSmiTagMask)); |
+ __ j(not_equal, &check_heap_number); |
+ // smi case |
+ __ mov(edx, eax); // Save the value. |
+ __ sar(eax, kSmiTagSize); // Untag the value. |
+ __ mov(ecx, FieldOperand(ecx, ExternalArray::kExternalPointerOffset)); |
+ // ecx: base pointer of external storage |
+ switch (array_type) { |
+ case kExternalByteArray: |
+ case kExternalUnsignedByteArray: |
+ __ mov_b(Operand(ecx, ebx, times_1, 0), eax); |
+ break; |
+ case kExternalShortArray: |
+ case kExternalUnsignedShortArray: |
+ __ mov_w(Operand(ecx, ebx, times_2, 0), eax); |
+ break; |
+ case kExternalIntArray: |
+ case kExternalUnsignedIntArray: |
+ __ mov(Operand(ecx, ebx, times_4, 0), eax); |
+ break; |
+ case kExternalFloatArray: |
+ // Need to perform int-to-float conversion. |
+ __ push(eax); |
+ __ fild_s(Operand(esp, 0)); |
+ __ pop(eax); |
+ __ fstp_s(Operand(ecx, ebx, times_4, 0)); |
+ break; |
+ default: |
+ UNREACHABLE(); |
+ break; |
+ } |
+ __ mov(eax, edx); // Return the original value. |
+ __ ret(0); |
+ |
+ __ bind(&check_heap_number); |
+ __ cmp(FieldOperand(eax, HeapObject::kMapOffset), |
+ Immediate(Factory::heap_number_map())); |
+ __ j(not_equal, &slow); |
+ |
+ // The WebGL specification leaves the behavior of storing NaN and |
+ // +/-Infinity into integer arrays basically undefined. For more |
+ // reproducible behavior, convert these to zero. |
+ __ fld_d(FieldOperand(eax, HeapNumber::kValueOffset)); |
+ __ mov(edx, eax); // Save the value. |
+ __ mov(ecx, FieldOperand(ecx, ExternalArray::kExternalPointerOffset)); |
+ // ebx: untagged index |
+ // ecx: base pointer of external storage |
+ // top of FPU stack: value |
+ if (array_type == kExternalFloatArray) { |
+ __ fstp_s(Operand(ecx, ebx, times_4, 0)); |
+ __ mov(eax, edx); // Return the original value. |
+ __ ret(0); |
+ } else { |
+ // Need to perform float-to-int conversion. |
+ // Test the top of the FP stack for NaN. |
+ Label is_nan; |
+ __ fucomi(0); |
+ __ j(parity_even, &is_nan); |
+ |
+ if (array_type != kExternalUnsignedIntArray) { |
+ __ push(eax); // Make room on stack |
+ __ fistp_s(Operand(esp, 0)); |
+ __ pop(eax); |
+ } else { |
+ // fistp stores values as signed integers. |
+ // To represent the entire range, we need to store as a 64-bit |
+ // int and discard the high 32 bits. |
+ __ push(eax); // Make room on stack |
+ __ push(eax); // Make room on stack |
+ __ fistp_d(Operand(esp, 0)); |
+ __ pop(eax); |
+ __ mov(Operand(esp, 0), eax); |
+ __ pop(eax); |
+ } |
+ // eax: untagged integer value |
+ switch (array_type) { |
+ case kExternalByteArray: |
+ case kExternalUnsignedByteArray: |
+ __ mov_b(Operand(ecx, ebx, times_1, 0), eax); |
+ break; |
+ case kExternalShortArray: |
+ case kExternalUnsignedShortArray: |
+ __ mov_w(Operand(ecx, ebx, times_2, 0), eax); |
+ break; |
+ case kExternalIntArray: |
+ case kExternalUnsignedIntArray: { |
+ // We also need to explicitly check for +/-Infinity. These are |
+ // converted to MIN_INT, but we need to be careful not to |
+ // confuse with legal uses of MIN_INT. |
+ Label not_infinity; |
+ // This test would apparently detect both NaN and Infinity, |
+ // but we've already checked for NaN using the FPU hardware |
+ // above. |
+ __ mov_w(edi, FieldOperand(edx, HeapNumber::kValueOffset + 6)); |
+ __ and_(edi, 0x7FF0); |
+ __ cmp(edi, 0x7FF0); |
+ __ j(not_equal, ¬_infinity); |
+ __ mov(eax, 0); |
+ __ bind(¬_infinity); |
+ __ mov(Operand(ecx, ebx, times_4, 0), eax); |
+ break; |
+ } |
+ default: |
+ UNREACHABLE(); |
+ break; |
+ } |
+ __ mov(eax, edx); // Return the original value. |
+ __ ret(0); |
+ |
+ __ bind(&is_nan); |
+ __ ffree(); |
+ __ fincstp(); |
+ switch (array_type) { |
+ case kExternalByteArray: |
+ case kExternalUnsignedByteArray: |
+ __ mov_b(Operand(ecx, ebx, times_1, 0), 0); |
+ break; |
+ case kExternalShortArray: |
+ case kExternalUnsignedShortArray: |
+ __ mov(eax, 0); |
+ __ mov_w(Operand(ecx, ebx, times_2, 0), eax); |
+ break; |
+ case kExternalIntArray: |
+ case kExternalUnsignedIntArray: |
+ __ mov(Operand(ecx, ebx, times_4, 0), Immediate(0)); |
+ break; |
+ default: |
+ UNREACHABLE(); |
+ break; |
+ } |
+ __ mov(eax, edx); // Return the original value. |
+ __ ret(0); |
+ } |
+ |
+ // Slow case: call runtime. |
+ __ bind(&slow); |
+ Generate(masm, ExternalReference(Runtime::kSetProperty)); |
} |