| Index: src/x64/full-codegen-x64.cc
|
| ===================================================================
|
| --- src/x64/full-codegen-x64.cc (revision 6979)
|
| +++ src/x64/full-codegen-x64.cc (working copy)
|
| @@ -2969,7 +2969,73 @@
|
| VisitForStackValue(args->at(0));
|
| VisitForStackValue(args->at(1));
|
| VisitForStackValue(args->at(2));
|
| + Label done;
|
| + Label slow_case;
|
| + Register object = rax;
|
| + Register index_1 = rbx;
|
| + Register index_2 = rcx;
|
| + Register elements = rdi;
|
| + Register temp = rdx;
|
| + __ movq(object, Operand(rsp, 2 * kPointerSize));
|
| + // Fetch the map and check if array is in fast case.
|
| + // Check that object doesn't require security checks and
|
| + // has no indexed interceptor.
|
| + __ CmpObjectType(object, FIRST_JS_OBJECT_TYPE, temp);
|
| + __ j(below, &slow_case);
|
| + __ testb(FieldOperand(temp, Map::kBitFieldOffset),
|
| + Immediate(KeyedLoadIC::kSlowCaseBitFieldMask));
|
| + __ j(not_zero, &slow_case);
|
| +
|
| + // Check the object's elements are in fast case and writable.
|
| + __ movq(elements, FieldOperand(object, JSObject::kElementsOffset));
|
| + __ CompareRoot(FieldOperand(elements, HeapObject::kMapOffset),
|
| + Heap::kFixedArrayMapRootIndex);
|
| + __ j(not_equal, &slow_case);
|
| +
|
| + // Check that both indices are smis.
|
| + __ movq(index_1, Operand(rsp, 1 * kPointerSize));
|
| + __ movq(index_2, Operand(rsp, 0 * kPointerSize));
|
| + __ JumpIfNotBothSmi(index_1, index_2, &slow_case);
|
| +
|
| + // Check that both indices are valid.
|
| + // The JSArray length field is a smi since the array is in fast case mode.
|
| + __ movq(temp, FieldOperand(object, JSArray::kLengthOffset));
|
| + __ SmiCompare(temp, index_1);
|
| + __ j(below_equal, &slow_case);
|
| + __ SmiCompare(temp, index_2);
|
| + __ j(below_equal, &slow_case);
|
| +
|
| + __ SmiToInteger32(index_1, index_1);
|
| + __ SmiToInteger32(index_2, index_2);
|
| + // Bring addresses into index1 and index2.
|
| + __ lea(index_1, FieldOperand(elements, index_1, times_pointer_size,
|
| + FixedArray::kHeaderSize));
|
| + __ lea(index_2, FieldOperand(elements, index_2, times_pointer_size,
|
| + FixedArray::kHeaderSize));
|
| +
|
| + // Swap elements. Use object and temp as scratch registers.
|
| + __ movq(object, Operand(index_1, 0));
|
| + __ movq(temp, Operand(index_2, 0));
|
| + __ movq(Operand(index_2, 0), object);
|
| + __ movq(Operand(index_1, 0), temp);
|
| +
|
| + Label new_space;
|
| + __ InNewSpace(elements, temp, equal, &new_space);
|
| +
|
| + __ movq(object, elements);
|
| + __ RecordWriteHelper(object, index_1, temp);
|
| + __ RecordWriteHelper(elements, index_2, temp);
|
| +
|
| + __ bind(&new_space);
|
| + // We are done. Drop elements from the stack, and return undefined.
|
| + __ addq(rsp, Immediate(3 * kPointerSize));
|
| + __ LoadRoot(rax, Heap::kUndefinedValueRootIndex);
|
| + __ jmp(&done);
|
| +
|
| + __ bind(&slow_case);
|
| __ CallRuntime(Runtime::kSwapElements, 3);
|
| +
|
| + __ bind(&done);
|
| context()->Plug(rax);
|
| }
|
|
|
|
|