Index: src/x64/code-stubs-x64.cc |
diff --git a/src/x64/code-stubs-x64.cc b/src/x64/code-stubs-x64.cc |
index ca78236aa2157eef69c4b9838d6272fd22ee2b4e..8672153d2460b620d565bab618dfbaf7fe621e80 100644 |
--- a/src/x64/code-stubs-x64.cc |
+++ b/src/x64/code-stubs-x64.cc |
@@ -2289,12 +2289,21 @@ void ArgumentsAccessStub::GenerateReadElement(MacroAssembler* masm) { |
} |
-void ArgumentsAccessStub::GenerateNewObject(MacroAssembler* masm) { |
+void ArgumentsAccessStub::GenerateNewObject(MacroAssembler* masm, |
+ int boilerplate_index, |
+ int arguments_object_size) { |
// rsp[0] : return address |
// rsp[8] : number of parameters |
// rsp[16] : receiver displacement |
// rsp[24] : function |
+ ASSERT(type_ != NEW_OBJECT || |
+ (boilerplate_index == Context::ARGUMENTS_BOILERPLATE_INDEX && |
+ arguments_object_size == Heap::kArgumentsObjectSize)); |
+ ASSERT(type_ != NEW_OBJECT_STRICT || |
+ (boilerplate_index == Context::ARGUMENTS_BOILERPLATE_STRICT_INDEX && |
+ arguments_object_size == Heap::kArgumentsObjectSizeStrict)); |
+ |
// The displacement is used for skipping the return address and the |
// frame pointer on the stack. It is the offset of the last |
// parameter (if any) relative to the frame pointer. |
@@ -2331,16 +2340,15 @@ void ArgumentsAccessStub::GenerateNewObject(MacroAssembler* masm) { |
__ j(zero, &add_arguments_object); |
__ leal(rcx, Operand(rcx, times_pointer_size, FixedArray::kHeaderSize)); |
__ bind(&add_arguments_object); |
- __ addl(rcx, Immediate(Heap::kArgumentsObjectSize)); |
+ __ addl(rcx, Immediate(arguments_object_size)); |
// Do the allocation of both objects in one go. |
__ AllocateInNewSpace(rcx, rax, rdx, rbx, &runtime, TAG_OBJECT); |
// Get the arguments boilerplate from the current (global) context. |
- int offset = Context::SlotOffset(Context::ARGUMENTS_BOILERPLATE_INDEX); |
__ movq(rdi, Operand(rsi, Context::SlotOffset(Context::GLOBAL_INDEX))); |
__ movq(rdi, FieldOperand(rdi, GlobalObject::kGlobalContextOffset)); |
- __ movq(rdi, Operand(rdi, offset)); |
+ __ movq(rdi, Operand(rdi, Context::SlotOffset(boilerplate_index))); |
// Copy the JS object part. |
STATIC_ASSERT(JSObject::kHeaderSize == 3 * kPointerSize); |
@@ -2351,15 +2359,18 @@ void ArgumentsAccessStub::GenerateNewObject(MacroAssembler* masm) { |
__ movq(FieldOperand(rax, 1 * kPointerSize), rdx); |
__ movq(FieldOperand(rax, 2 * kPointerSize), rbx); |
- // Setup the callee in-object property. |
- ASSERT(Heap::arguments_callee_index == 0); |
- __ movq(kScratchRegister, Operand(rsp, 3 * kPointerSize)); |
- __ movq(FieldOperand(rax, JSObject::kHeaderSize), kScratchRegister); |
+ if (type_ == NEW_OBJECT) { |
+ // Setup the callee in-object property. |
+ ASSERT(Heap::arguments_callee_index == 1); |
+ __ movq(kScratchRegister, Operand(rsp, 3 * kPointerSize)); |
+ __ movq(FieldOperand(rax, JSObject::kHeaderSize + kPointerSize), |
+ kScratchRegister); |
+ } |
// Get the length (smi tagged) and set that as an in-object property too. |
- ASSERT(Heap::arguments_length_index == 1); |
+ ASSERT(Heap::arguments_length_index == 0); |
__ movq(rcx, Operand(rsp, 1 * kPointerSize)); |
- __ movq(FieldOperand(rax, JSObject::kHeaderSize + kPointerSize), rcx); |
+ __ movq(FieldOperand(rax, JSObject::kHeaderSize), rcx); |
// If there are no actual arguments, we're done. |
Label done; |
@@ -2371,7 +2382,7 @@ void ArgumentsAccessStub::GenerateNewObject(MacroAssembler* masm) { |
// Setup the elements pointer in the allocated arguments object and |
// initialize the header in the elements fixed array. |
- __ lea(rdi, Operand(rax, Heap::kArgumentsObjectSize)); |
+ __ lea(rdi, Operand(rax, arguments_object_size)); |
__ movq(FieldOperand(rax, JSObject::kElementsOffset), rdi); |
__ LoadRoot(kScratchRegister, Heap::kFixedArrayMapRootIndex); |
__ movq(FieldOperand(rdi, FixedArray::kMapOffset), kScratchRegister); |