Add %GetCallerJSFunction intrinsic

src/compiler/js-intrinsic-lowering.cc

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/compiler/js-intrinsic-lowering.h"
 
 #include <stack>
 
 #include "src/compiler/access-builder.h"
 #include "src/compiler/js-graph.h"
@@ skipping 66 matching lines @@
     case Runtime::kInlineUnlikely:
       return ReduceUnLikely(node, BranchHint::kFalse);
     case Runtime::kInlineValueOf:
       return ReduceValueOf(node);
     case Runtime::kInlineIsMinusZero:
       return ReduceIsMinusZero(node);
     case Runtime::kInlineFixedArraySet:
       return ReduceFixedArraySet(node);
     case Runtime::kInlineGetTypeFeedbackVector:
       return ReduceGetTypeFeedbackVector(node);
+    case Runtime::kInlineGetCallerJSFunction:
+      return ReduceGetCallerJSFunction(node);
     default:
       break;
   }
   return NoChange();
 }
 
 
 Reduction JSIntrinsicLowering::ReduceConstructDouble(Node* node) {
   Node* high = NodeProperties::GetValueInput(node, 0);
   Node* low = NodeProperties::GetValueInput(node, 1);
@@ skipping 351 matching lines @@
   Node* effect = NodeProperties::GetEffectInput(node);
   Node* control = NodeProperties::GetControlInput(node);
   FieldAccess access = AccessBuilder::ForJSFunctionSharedFunctionInfo();
   Node* load =
       graph()->NewNode(simplified()->LoadField(access), func, effect, control);
   access = AccessBuilder::ForSharedFunctionInfoTypeFeedbackVector();
   return Change(node, simplified()->LoadField(access), load, load, control);
 }
 
 
+Reduction JSIntrinsicLowering::ReduceGetCallerJSFunction(Node* node) {
+  Node* effect = NodeProperties::GetEffectInput(node);
+  Node* control = NodeProperties::GetControlInput(node);
+
+  if (FLAG_turbo_deoptimization) {
+    Node* const frame_state = NodeProperties::GetFrameStateInput(node, 0);
+    Node* outer_frame = frame_state->InputAt(kFrameStateOuterStateInput);
+    if (outer_frame->opcode() == IrOpcode::kFrameState) {
+      FrameStateCallInfo state_info =
+          OpParameter<FrameStateCallInfo>(outer_frame);
+      switch (state_info.type()) {
+        case ARGUMENTS_ADAPTOR:
+          outer_frame = outer_frame->InputAt(kFrameStateOuterStateInput);
+          DCHECK(outer_frame->opcode() == IrOpcode::kFrameState);
+          DCHECK(OpParameter<FrameStateCallInfo>(frame_state).type() ==
+                 JS_FRAME);
+          break;
+        case JS_FRAME:
+          break;
+      }
+      // The intrinsic is inlined, return the function from the outer frame.
+      Node* outer_function = outer_frame->InputAt(kFrameStateFunctionInput);
+      AdvancedReducer::ReplaceWithValue(node, outer_function, effect, control);
+      return Changed(outer_function);
+    }
+  }
+
+  // TODO(danno): If FLAG_turbo_deoptimization is false then this intrinsic
+  // always returns the JSFunction from the caller's frame, regardless of
+  // inlining depth, which isn't correct. This implementation also forces
+  // intrinsic lowering to happen after inlining, which is fine for now, but
+  // eventually the frame-querying logic probably should go later, e.g. in
+  // instruction selection, so that there is no phase-ordering dependency.
+  FieldAccess access = AccessBuilder::ForFrameCallerFramePtr();
+  Node* fp = graph()->NewNode(machine()->LoadFramePointer());
+  Node* next_fp =
+      graph()->NewNode(simplified()->LoadField(access), fp, effect, control);
+  Node* candidate = graph()->NewNode(
+      simplified()->LoadField(AccessBuilder::ForFrameContext()), next_fp,
+      effect, control);
+
+  // If JSFunction from the outermost frame is a SMI, then the frame is
+  // either an arguments adapter or construct frame and needs to be skipped.
+  Node* check = graph()->NewNode(simplified()->ObjectIsSmi(), candidate);
+  Node* branch = graph()->NewNode(common()->Branch(), check, control);
+
+  Node* if_true = graph()->NewNode(common()->IfTrue(), branch);
+
+  Node* if_false = graph()->NewNode(common()->IfFalse(), branch);
+
+  Node* next_next_fp = graph()->NewNode(
+      simplified()->LoadField(AccessBuilder::ForFrameCallerFramePtr()), next_fp,
+      next_fp, control);
+
+  MachineType const type = static_cast<MachineType>(kMachPtr);
+  control = graph()->NewNode(common()->Merge(2), if_true, if_false);
+  next_fp =
+      graph()->NewNode(common()->Phi(type, 2), next_next_fp, next_fp, control);
+  return Change(node, simplified()->LoadField(AccessBuilder::ForFrameMarker()),
+                next_fp, effect, control);
+}
+
+
 Reduction JSIntrinsicLowering::Change(Node* node, const Operator* op, Node* a,
                                       Node* b) {
   node->set_op(op);
   node->ReplaceInput(0, a);
   node->ReplaceInput(1, b);
   node->TrimInputCount(2);
   RelaxControls(node);
   return Changed(node);
 }
 
@@ skipping 24 matching lines @@
 }
 
 
 MachineOperatorBuilder* JSIntrinsicLowering::machine() const {
   return jsgraph()->machine();
 }
 
 }  // namespace compiler
 }  // namespace internal
 }  // namespace v8