Add %GetCallerJSFunction intrinsic

src/compiler/js-intrinsic-lowering.cc

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/compiler/js-intrinsic-lowering.h"
 
 #include <stack>
 
 #include "src/compiler/access-builder.h"
 #include "src/compiler/js-graph.h"
@@ skipping 66 matching lines @@
     case Runtime::kInlineUnlikely:
       return ReduceUnLikely(node, BranchHint::kFalse);
     case Runtime::kInlineValueOf:
       return ReduceValueOf(node);
     case Runtime::kInlineIsMinusZero:
       return ReduceIsMinusZero(node);
     case Runtime::kInlineFixedArraySet:
       return ReduceFixedArraySet(node);
     case Runtime::kInlineGetTypeFeedbackVector:
       return ReduceGetTypeFeedbackVector(node);
+    case Runtime::kInlineGetCallerJSFunction:
+      return ReduceGetCallerJSFunction(node);
     default:
       break;
   }
   return NoChange();
 }
 
 
 Reduction JSIntrinsicLowering::ReduceConstructDouble(Node* node) {
   Node* high = NodeProperties::GetValueInput(node, 0);
   Node* low = NodeProperties::GetValueInput(node, 1);
@@ skipping 351 matching lines @@
   Node* effect = NodeProperties::GetEffectInput(node);
   Node* control = NodeProperties::GetControlInput(node);
   FieldAccess access = AccessBuilder::ForJSFunctionSharedFunctionInfo();
   Node* load =
       graph()->NewNode(simplified()->LoadField(access), func, effect, control);
   access = AccessBuilder::ForSharedFunctionInfoTypeFeedbackVector();
   return Change(node, simplified()->LoadField(access), load, load, control);
 }
 
 
+Reduction JSIntrinsicLowering::ReduceGetCallerJSFunction(Node* node) {
+  Node* effect = NodeProperties::GetEffectInput(node);
+  Node* control = NodeProperties::GetControlInput(node);
+
+  if (FLAG_turbo_deoptimization) {

[Michael Starzinger, 2015/06/05 11:21:56]

This flag no longer exists, we can just perform this step unconditionally now.

[danno, 2015/06/05 11:49:59]

Done.

+    Node* const frame_state = NodeProperties::GetFrameStateInput(node, 0);
+    Node* outer_frame = frame_state->InputAt(kFrameStateOuterStateInput);
+    if (outer_frame->opcode() == IrOpcode::kFrameState) {
+      // Use the runtime implementation to throw the appropriate error if the
+      // containing function is inlined.
+      return NoChange();
+    }
+  }
+
+  // TODO(danno): If FLAG_turbo_deoptimization is false then this intrinsic
+  // always returns the JSFunction from the caller's frame, regardless of
+  // inlining depth, which isn't correct. This implementation also forces
+  // intrinsic lowering to happen after inlining, which is fine for now, but
+  // eventually the frame-querying logic probably should go later, e.g. in
+  // instruction selection, so that there is no phase-ordering dependency.

[Michael Starzinger, 2015/06/05 11:21:56]

nit: The TODO now no longer applies, correct?

[danno, 2015/06/05 11:49:59]

Sort of. The inlining ordering dependency still exists.

+  FieldAccess access = AccessBuilder::ForFrameCallerFramePtr();
+  Node* fp = graph()->NewNode(machine()->LoadFramePointer());
+  Node* next_fp =
+      graph()->NewNode(simplified()->LoadField(access), fp, effect, control);
+  return Change(node, simplified()->LoadField(AccessBuilder::ForFrameMarker()),
+                next_fp, effect, control);
+}
+
+
 Reduction JSIntrinsicLowering::Change(Node* node, const Operator* op, Node* a,
                                       Node* b) {
   node->set_op(op);
   node->ReplaceInput(0, a);
   node->ReplaceInput(1, b);
   node->TrimInputCount(2);
   RelaxControls(node);
   return Changed(node);
 }
 
@@ skipping 24 matching lines @@
 }
 
 
 MachineOperatorBuilder* JSIntrinsicLowering::machine() const {
   return jsgraph()->machine();
 }
 
 }  // namespace compiler
 }  // namespace internal
 }  // namespace v8