| OLD | NEW |
| (Empty) |
| 1 // Copyright 2013 the V8 project authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "src/hydrogen.h" | |
| 6 | |
| 7 #include <sstream> | |
| 8 | |
| 9 #include "src/allocation-site-scopes.h" | |
| 10 #include "src/ast-numbering.h" | |
| 11 #include "src/code-factory.h" | |
| 12 #include "src/full-codegen/full-codegen.h" | |
| 13 #include "src/hydrogen-bce.h" | |
| 14 #include "src/hydrogen-bch.h" | |
| 15 #include "src/hydrogen-canonicalize.h" | |
| 16 #include "src/hydrogen-check-elimination.h" | |
| 17 #include "src/hydrogen-dce.h" | |
| 18 #include "src/hydrogen-dehoist.h" | |
| 19 #include "src/hydrogen-environment-liveness.h" | |
| 20 #include "src/hydrogen-escape-analysis.h" | |
| 21 #include "src/hydrogen-gvn.h" | |
| 22 #include "src/hydrogen-infer-representation.h" | |
| 23 #include "src/hydrogen-infer-types.h" | |
| 24 #include "src/hydrogen-load-elimination.h" | |
| 25 #include "src/hydrogen-mark-deoptimize.h" | |
| 26 #include "src/hydrogen-mark-unreachable.h" | |
| 27 #include "src/hydrogen-osr.h" | |
| 28 #include "src/hydrogen-range-analysis.h" | |
| 29 #include "src/hydrogen-redundant-phi.h" | |
| 30 #include "src/hydrogen-removable-simulates.h" | |
| 31 #include "src/hydrogen-representation-changes.h" | |
| 32 #include "src/hydrogen-sce.h" | |
| 33 #include "src/hydrogen-store-elimination.h" | |
| 34 #include "src/hydrogen-uint32-analysis.h" | |
| 35 #include "src/ic/call-optimization.h" | |
| 36 #include "src/ic/ic.h" | |
| 37 // GetRootConstructor | |
| 38 #include "src/ic/ic-inl.h" | |
| 39 #include "src/isolate-inl.h" | |
| 40 #include "src/lithium-allocator.h" | |
| 41 #include "src/parser.h" | |
| 42 #include "src/runtime/runtime.h" | |
| 43 #include "src/scopeinfo.h" | |
| 44 #include "src/typing.h" | |
| 45 | |
| 46 #if V8_TARGET_ARCH_IA32 | |
| 47 #include "src/ia32/lithium-codegen-ia32.h" // NOLINT | |
| 48 #elif V8_TARGET_ARCH_X64 | |
| 49 #include "src/x64/lithium-codegen-x64.h" // NOLINT | |
| 50 #elif V8_TARGET_ARCH_ARM64 | |
| 51 #include "src/arm64/lithium-codegen-arm64.h" // NOLINT | |
| 52 #elif V8_TARGET_ARCH_ARM | |
| 53 #include "src/arm/lithium-codegen-arm.h" // NOLINT | |
| 54 #elif V8_TARGET_ARCH_PPC | |
| 55 #include "src/ppc/lithium-codegen-ppc.h" // NOLINT | |
| 56 #elif V8_TARGET_ARCH_MIPS | |
| 57 #include "src/mips/lithium-codegen-mips.h" // NOLINT | |
| 58 #elif V8_TARGET_ARCH_MIPS64 | |
| 59 #include "src/mips64/lithium-codegen-mips64.h" // NOLINT | |
| 60 #elif V8_TARGET_ARCH_X87 | |
| 61 #include "src/x87/lithium-codegen-x87.h" // NOLINT | |
| 62 #else | |
| 63 #error Unsupported target architecture. | |
| 64 #endif | |
| 65 | |
| 66 namespace v8 { | |
| 67 namespace internal { | |
| 68 | |
| 69 HBasicBlock::HBasicBlock(HGraph* graph) | |
| 70 : block_id_(graph->GetNextBlockID()), | |
| 71 graph_(graph), | |
| 72 phis_(4, graph->zone()), | |
| 73 first_(NULL), | |
| 74 last_(NULL), | |
| 75 end_(NULL), | |
| 76 loop_information_(NULL), | |
| 77 predecessors_(2, graph->zone()), | |
| 78 dominator_(NULL), | |
| 79 dominated_blocks_(4, graph->zone()), | |
| 80 last_environment_(NULL), | |
| 81 argument_count_(-1), | |
| 82 first_instruction_index_(-1), | |
| 83 last_instruction_index_(-1), | |
| 84 deleted_phis_(4, graph->zone()), | |
| 85 parent_loop_header_(NULL), | |
| 86 inlined_entry_block_(NULL), | |
| 87 is_inline_return_target_(false), | |
| 88 is_reachable_(true), | |
| 89 dominates_loop_successors_(false), | |
| 90 is_osr_entry_(false), | |
| 91 is_ordered_(false) { } | |
| 92 | |
| 93 | |
| 94 Isolate* HBasicBlock::isolate() const { | |
| 95 return graph_->isolate(); | |
| 96 } | |
| 97 | |
| 98 | |
| 99 void HBasicBlock::MarkUnreachable() { | |
| 100 is_reachable_ = false; | |
| 101 } | |
| 102 | |
| 103 | |
| 104 void HBasicBlock::AttachLoopInformation() { | |
| 105 DCHECK(!IsLoopHeader()); | |
| 106 loop_information_ = new(zone()) HLoopInformation(this, zone()); | |
| 107 } | |
| 108 | |
| 109 | |
| 110 void HBasicBlock::DetachLoopInformation() { | |
| 111 DCHECK(IsLoopHeader()); | |
| 112 loop_information_ = NULL; | |
| 113 } | |
| 114 | |
| 115 | |
| 116 void HBasicBlock::AddPhi(HPhi* phi) { | |
| 117 DCHECK(!IsStartBlock()); | |
| 118 phis_.Add(phi, zone()); | |
| 119 phi->SetBlock(this); | |
| 120 } | |
| 121 | |
| 122 | |
| 123 void HBasicBlock::RemovePhi(HPhi* phi) { | |
| 124 DCHECK(phi->block() == this); | |
| 125 DCHECK(phis_.Contains(phi)); | |
| 126 phi->Kill(); | |
| 127 phis_.RemoveElement(phi); | |
| 128 phi->SetBlock(NULL); | |
| 129 } | |
| 130 | |
| 131 | |
| 132 void HBasicBlock::AddInstruction(HInstruction* instr, SourcePosition position) { | |
| 133 DCHECK(!IsStartBlock() || !IsFinished()); | |
| 134 DCHECK(!instr->IsLinked()); | |
| 135 DCHECK(!IsFinished()); | |
| 136 | |
| 137 if (!position.IsUnknown()) { | |
| 138 instr->set_position(position); | |
| 139 } | |
| 140 if (first_ == NULL) { | |
| 141 DCHECK(last_environment() != NULL); | |
| 142 DCHECK(!last_environment()->ast_id().IsNone()); | |
| 143 HBlockEntry* entry = new(zone()) HBlockEntry(); | |
| 144 entry->InitializeAsFirst(this); | |
| 145 if (!position.IsUnknown()) { | |
| 146 entry->set_position(position); | |
| 147 } else { | |
| 148 DCHECK(!FLAG_hydrogen_track_positions || | |
| 149 !graph()->info()->IsOptimizing() || instr->IsAbnormalExit()); | |
| 150 } | |
| 151 first_ = last_ = entry; | |
| 152 } | |
| 153 instr->InsertAfter(last_); | |
| 154 } | |
| 155 | |
| 156 | |
| 157 HPhi* HBasicBlock::AddNewPhi(int merged_index) { | |
| 158 if (graph()->IsInsideNoSideEffectsScope()) { | |
| 159 merged_index = HPhi::kInvalidMergedIndex; | |
| 160 } | |
| 161 HPhi* phi = new(zone()) HPhi(merged_index, zone()); | |
| 162 AddPhi(phi); | |
| 163 return phi; | |
| 164 } | |
| 165 | |
| 166 | |
| 167 HSimulate* HBasicBlock::CreateSimulate(BailoutId ast_id, | |
| 168 RemovableSimulate removable) { | |
| 169 DCHECK(HasEnvironment()); | |
| 170 HEnvironment* environment = last_environment(); | |
| 171 DCHECK(ast_id.IsNone() || | |
| 172 ast_id == BailoutId::StubEntry() || | |
| 173 environment->closure()->shared()->VerifyBailoutId(ast_id)); | |
| 174 | |
| 175 int push_count = environment->push_count(); | |
| 176 int pop_count = environment->pop_count(); | |
| 177 | |
| 178 HSimulate* instr = | |
| 179 new(zone()) HSimulate(ast_id, pop_count, zone(), removable); | |
| 180 #ifdef DEBUG | |
| 181 instr->set_closure(environment->closure()); | |
| 182 #endif | |
| 183 // Order of pushed values: newest (top of stack) first. This allows | |
| 184 // HSimulate::MergeWith() to easily append additional pushed values | |
| 185 // that are older (from further down the stack). | |
| 186 for (int i = 0; i < push_count; ++i) { | |
| 187 instr->AddPushedValue(environment->ExpressionStackAt(i)); | |
| 188 } | |
| 189 for (GrowableBitVector::Iterator it(environment->assigned_variables(), | |
| 190 zone()); | |
| 191 !it.Done(); | |
| 192 it.Advance()) { | |
| 193 int index = it.Current(); | |
| 194 instr->AddAssignedValue(index, environment->Lookup(index)); | |
| 195 } | |
| 196 environment->ClearHistory(); | |
| 197 return instr; | |
| 198 } | |
| 199 | |
| 200 | |
| 201 void HBasicBlock::Finish(HControlInstruction* end, SourcePosition position) { | |
| 202 DCHECK(!IsFinished()); | |
| 203 AddInstruction(end, position); | |
| 204 end_ = end; | |
| 205 for (HSuccessorIterator it(end); !it.Done(); it.Advance()) { | |
| 206 it.Current()->RegisterPredecessor(this); | |
| 207 } | |
| 208 } | |
| 209 | |
| 210 | |
| 211 void HBasicBlock::Goto(HBasicBlock* block, SourcePosition position, | |
| 212 FunctionState* state, bool add_simulate) { | |
| 213 bool drop_extra = state != NULL && | |
| 214 state->inlining_kind() == NORMAL_RETURN; | |
| 215 | |
| 216 if (block->IsInlineReturnTarget()) { | |
| 217 HEnvironment* env = last_environment(); | |
| 218 int argument_count = env->arguments_environment()->parameter_count(); | |
| 219 AddInstruction(new(zone()) | |
| 220 HLeaveInlined(state->entry(), argument_count), | |
| 221 position); | |
| 222 UpdateEnvironment(last_environment()->DiscardInlined(drop_extra)); | |
| 223 } | |
| 224 | |
| 225 if (add_simulate) AddNewSimulate(BailoutId::None(), position); | |
| 226 HGoto* instr = new(zone()) HGoto(block); | |
| 227 Finish(instr, position); | |
| 228 } | |
| 229 | |
| 230 | |
| 231 void HBasicBlock::AddLeaveInlined(HValue* return_value, FunctionState* state, | |
| 232 SourcePosition position) { | |
| 233 HBasicBlock* target = state->function_return(); | |
| 234 bool drop_extra = state->inlining_kind() == NORMAL_RETURN; | |
| 235 | |
| 236 DCHECK(target->IsInlineReturnTarget()); | |
| 237 DCHECK(return_value != NULL); | |
| 238 HEnvironment* env = last_environment(); | |
| 239 int argument_count = env->arguments_environment()->parameter_count(); | |
| 240 AddInstruction(new(zone()) HLeaveInlined(state->entry(), argument_count), | |
| 241 position); | |
| 242 UpdateEnvironment(last_environment()->DiscardInlined(drop_extra)); | |
| 243 last_environment()->Push(return_value); | |
| 244 AddNewSimulate(BailoutId::None(), position); | |
| 245 HGoto* instr = new(zone()) HGoto(target); | |
| 246 Finish(instr, position); | |
| 247 } | |
| 248 | |
| 249 | |
| 250 void HBasicBlock::SetInitialEnvironment(HEnvironment* env) { | |
| 251 DCHECK(!HasEnvironment()); | |
| 252 DCHECK(first() == NULL); | |
| 253 UpdateEnvironment(env); | |
| 254 } | |
| 255 | |
| 256 | |
| 257 void HBasicBlock::UpdateEnvironment(HEnvironment* env) { | |
| 258 last_environment_ = env; | |
| 259 graph()->update_maximum_environment_size(env->first_expression_index()); | |
| 260 } | |
| 261 | |
| 262 | |
| 263 void HBasicBlock::SetJoinId(BailoutId ast_id) { | |
| 264 int length = predecessors_.length(); | |
| 265 DCHECK(length > 0); | |
| 266 for (int i = 0; i < length; i++) { | |
| 267 HBasicBlock* predecessor = predecessors_[i]; | |
| 268 DCHECK(predecessor->end()->IsGoto()); | |
| 269 HSimulate* simulate = HSimulate::cast(predecessor->end()->previous()); | |
| 270 DCHECK(i != 0 || | |
| 271 (predecessor->last_environment()->closure().is_null() || | |
| 272 predecessor->last_environment()->closure()->shared() | |
| 273 ->VerifyBailoutId(ast_id))); | |
| 274 simulate->set_ast_id(ast_id); | |
| 275 predecessor->last_environment()->set_ast_id(ast_id); | |
| 276 } | |
| 277 } | |
| 278 | |
| 279 | |
| 280 bool HBasicBlock::Dominates(HBasicBlock* other) const { | |
| 281 HBasicBlock* current = other->dominator(); | |
| 282 while (current != NULL) { | |
| 283 if (current == this) return true; | |
| 284 current = current->dominator(); | |
| 285 } | |
| 286 return false; | |
| 287 } | |
| 288 | |
| 289 | |
| 290 bool HBasicBlock::EqualToOrDominates(HBasicBlock* other) const { | |
| 291 if (this == other) return true; | |
| 292 return Dominates(other); | |
| 293 } | |
| 294 | |
| 295 | |
| 296 int HBasicBlock::LoopNestingDepth() const { | |
| 297 const HBasicBlock* current = this; | |
| 298 int result = (current->IsLoopHeader()) ? 1 : 0; | |
| 299 while (current->parent_loop_header() != NULL) { | |
| 300 current = current->parent_loop_header(); | |
| 301 result++; | |
| 302 } | |
| 303 return result; | |
| 304 } | |
| 305 | |
| 306 | |
| 307 void HBasicBlock::PostProcessLoopHeader(IterationStatement* stmt) { | |
| 308 DCHECK(IsLoopHeader()); | |
| 309 | |
| 310 SetJoinId(stmt->EntryId()); | |
| 311 if (predecessors()->length() == 1) { | |
| 312 // This is a degenerated loop. | |
| 313 DetachLoopInformation(); | |
| 314 return; | |
| 315 } | |
| 316 | |
| 317 // Only the first entry into the loop is from outside the loop. All other | |
| 318 // entries must be back edges. | |
| 319 for (int i = 1; i < predecessors()->length(); ++i) { | |
| 320 loop_information()->RegisterBackEdge(predecessors()->at(i)); | |
| 321 } | |
| 322 } | |
| 323 | |
| 324 | |
| 325 void HBasicBlock::MarkSuccEdgeUnreachable(int succ) { | |
| 326 DCHECK(IsFinished()); | |
| 327 HBasicBlock* succ_block = end()->SuccessorAt(succ); | |
| 328 | |
| 329 DCHECK(succ_block->predecessors()->length() == 1); | |
| 330 succ_block->MarkUnreachable(); | |
| 331 } | |
| 332 | |
| 333 | |
| 334 void HBasicBlock::RegisterPredecessor(HBasicBlock* pred) { | |
| 335 if (HasPredecessor()) { | |
| 336 // Only loop header blocks can have a predecessor added after | |
| 337 // instructions have been added to the block (they have phis for all | |
| 338 // values in the environment, these phis may be eliminated later). | |
| 339 DCHECK(IsLoopHeader() || first_ == NULL); | |
| 340 HEnvironment* incoming_env = pred->last_environment(); | |
| 341 if (IsLoopHeader()) { | |
| 342 DCHECK_EQ(phis()->length(), incoming_env->length()); | |
| 343 for (int i = 0; i < phis_.length(); ++i) { | |
| 344 phis_[i]->AddInput(incoming_env->values()->at(i)); | |
| 345 } | |
| 346 } else { | |
| 347 last_environment()->AddIncomingEdge(this, pred->last_environment()); | |
| 348 } | |
| 349 } else if (!HasEnvironment() && !IsFinished()) { | |
| 350 DCHECK(!IsLoopHeader()); | |
| 351 SetInitialEnvironment(pred->last_environment()->Copy()); | |
| 352 } | |
| 353 | |
| 354 predecessors_.Add(pred, zone()); | |
| 355 } | |
| 356 | |
| 357 | |
| 358 void HBasicBlock::AddDominatedBlock(HBasicBlock* block) { | |
| 359 DCHECK(!dominated_blocks_.Contains(block)); | |
| 360 // Keep the list of dominated blocks sorted such that if there is two | |
| 361 // succeeding block in this list, the predecessor is before the successor. | |
| 362 int index = 0; | |
| 363 while (index < dominated_blocks_.length() && | |
| 364 dominated_blocks_[index]->block_id() < block->block_id()) { | |
| 365 ++index; | |
| 366 } | |
| 367 dominated_blocks_.InsertAt(index, block, zone()); | |
| 368 } | |
| 369 | |
| 370 | |
| 371 void HBasicBlock::AssignCommonDominator(HBasicBlock* other) { | |
| 372 if (dominator_ == NULL) { | |
| 373 dominator_ = other; | |
| 374 other->AddDominatedBlock(this); | |
| 375 } else if (other->dominator() != NULL) { | |
| 376 HBasicBlock* first = dominator_; | |
| 377 HBasicBlock* second = other; | |
| 378 | |
| 379 while (first != second) { | |
| 380 if (first->block_id() > second->block_id()) { | |
| 381 first = first->dominator(); | |
| 382 } else { | |
| 383 second = second->dominator(); | |
| 384 } | |
| 385 DCHECK(first != NULL && second != NULL); | |
| 386 } | |
| 387 | |
| 388 if (dominator_ != first) { | |
| 389 DCHECK(dominator_->dominated_blocks_.Contains(this)); | |
| 390 dominator_->dominated_blocks_.RemoveElement(this); | |
| 391 dominator_ = first; | |
| 392 first->AddDominatedBlock(this); | |
| 393 } | |
| 394 } | |
| 395 } | |
| 396 | |
| 397 | |
| 398 void HBasicBlock::AssignLoopSuccessorDominators() { | |
| 399 // Mark blocks that dominate all subsequent reachable blocks inside their | |
| 400 // loop. Exploit the fact that blocks are sorted in reverse post order. When | |
| 401 // the loop is visited in increasing block id order, if the number of | |
| 402 // non-loop-exiting successor edges at the dominator_candidate block doesn't | |
| 403 // exceed the number of previously encountered predecessor edges, there is no | |
| 404 // path from the loop header to any block with higher id that doesn't go | |
| 405 // through the dominator_candidate block. In this case, the | |
| 406 // dominator_candidate block is guaranteed to dominate all blocks reachable | |
| 407 // from it with higher ids. | |
| 408 HBasicBlock* last = loop_information()->GetLastBackEdge(); | |
| 409 int outstanding_successors = 1; // one edge from the pre-header | |
| 410 // Header always dominates everything. | |
| 411 MarkAsLoopSuccessorDominator(); | |
| 412 for (int j = block_id(); j <= last->block_id(); ++j) { | |
| 413 HBasicBlock* dominator_candidate = graph_->blocks()->at(j); | |
| 414 for (HPredecessorIterator it(dominator_candidate); !it.Done(); | |
| 415 it.Advance()) { | |
| 416 HBasicBlock* predecessor = it.Current(); | |
| 417 // Don't count back edges. | |
| 418 if (predecessor->block_id() < dominator_candidate->block_id()) { | |
| 419 outstanding_successors--; | |
| 420 } | |
| 421 } | |
| 422 | |
| 423 // If more successors than predecessors have been seen in the loop up to | |
| 424 // now, it's not possible to guarantee that the current block dominates | |
| 425 // all of the blocks with higher IDs. In this case, assume conservatively | |
| 426 // that those paths through loop that don't go through the current block | |
| 427 // contain all of the loop's dependencies. Also be careful to record | |
| 428 // dominator information about the current loop that's being processed, | |
| 429 // and not nested loops, which will be processed when | |
| 430 // AssignLoopSuccessorDominators gets called on their header. | |
| 431 DCHECK(outstanding_successors >= 0); | |
| 432 HBasicBlock* parent_loop_header = dominator_candidate->parent_loop_header(); | |
| 433 if (outstanding_successors == 0 && | |
| 434 (parent_loop_header == this && !dominator_candidate->IsLoopHeader())) { | |
| 435 dominator_candidate->MarkAsLoopSuccessorDominator(); | |
| 436 } | |
| 437 HControlInstruction* end = dominator_candidate->end(); | |
| 438 for (HSuccessorIterator it(end); !it.Done(); it.Advance()) { | |
| 439 HBasicBlock* successor = it.Current(); | |
| 440 // Only count successors that remain inside the loop and don't loop back | |
| 441 // to a loop header. | |
| 442 if (successor->block_id() > dominator_candidate->block_id() && | |
| 443 successor->block_id() <= last->block_id()) { | |
| 444 // Backwards edges must land on loop headers. | |
| 445 DCHECK(successor->block_id() > dominator_candidate->block_id() || | |
| 446 successor->IsLoopHeader()); | |
| 447 outstanding_successors++; | |
| 448 } | |
| 449 } | |
| 450 } | |
| 451 } | |
| 452 | |
| 453 | |
| 454 int HBasicBlock::PredecessorIndexOf(HBasicBlock* predecessor) const { | |
| 455 for (int i = 0; i < predecessors_.length(); ++i) { | |
| 456 if (predecessors_[i] == predecessor) return i; | |
| 457 } | |
| 458 UNREACHABLE(); | |
| 459 return -1; | |
| 460 } | |
| 461 | |
| 462 | |
| 463 #ifdef DEBUG | |
| 464 void HBasicBlock::Verify() { | |
| 465 // Check that every block is finished. | |
| 466 DCHECK(IsFinished()); | |
| 467 DCHECK(block_id() >= 0); | |
| 468 | |
| 469 // Check that the incoming edges are in edge split form. | |
| 470 if (predecessors_.length() > 1) { | |
| 471 for (int i = 0; i < predecessors_.length(); ++i) { | |
| 472 DCHECK(predecessors_[i]->end()->SecondSuccessor() == NULL); | |
| 473 } | |
| 474 } | |
| 475 } | |
| 476 #endif | |
| 477 | |
| 478 | |
| 479 void HLoopInformation::RegisterBackEdge(HBasicBlock* block) { | |
| 480 this->back_edges_.Add(block, block->zone()); | |
| 481 AddBlock(block); | |
| 482 } | |
| 483 | |
| 484 | |
| 485 HBasicBlock* HLoopInformation::GetLastBackEdge() const { | |
| 486 int max_id = -1; | |
| 487 HBasicBlock* result = NULL; | |
| 488 for (int i = 0; i < back_edges_.length(); ++i) { | |
| 489 HBasicBlock* cur = back_edges_[i]; | |
| 490 if (cur->block_id() > max_id) { | |
| 491 max_id = cur->block_id(); | |
| 492 result = cur; | |
| 493 } | |
| 494 } | |
| 495 return result; | |
| 496 } | |
| 497 | |
| 498 | |
| 499 void HLoopInformation::AddBlock(HBasicBlock* block) { | |
| 500 if (block == loop_header()) return; | |
| 501 if (block->parent_loop_header() == loop_header()) return; | |
| 502 if (block->parent_loop_header() != NULL) { | |
| 503 AddBlock(block->parent_loop_header()); | |
| 504 } else { | |
| 505 block->set_parent_loop_header(loop_header()); | |
| 506 blocks_.Add(block, block->zone()); | |
| 507 for (int i = 0; i < block->predecessors()->length(); ++i) { | |
| 508 AddBlock(block->predecessors()->at(i)); | |
| 509 } | |
| 510 } | |
| 511 } | |
| 512 | |
| 513 | |
| 514 #ifdef DEBUG | |
| 515 | |
| 516 // Checks reachability of the blocks in this graph and stores a bit in | |
| 517 // the BitVector "reachable()" for every block that can be reached | |
| 518 // from the start block of the graph. If "dont_visit" is non-null, the given | |
| 519 // block is treated as if it would not be part of the graph. "visited_count()" | |
| 520 // returns the number of reachable blocks. | |
| 521 class ReachabilityAnalyzer BASE_EMBEDDED { | |
| 522 public: | |
| 523 ReachabilityAnalyzer(HBasicBlock* entry_block, | |
| 524 int block_count, | |
| 525 HBasicBlock* dont_visit) | |
| 526 : visited_count_(0), | |
| 527 stack_(16, entry_block->zone()), | |
| 528 reachable_(block_count, entry_block->zone()), | |
| 529 dont_visit_(dont_visit) { | |
| 530 PushBlock(entry_block); | |
| 531 Analyze(); | |
| 532 } | |
| 533 | |
| 534 int visited_count() const { return visited_count_; } | |
| 535 const BitVector* reachable() const { return &reachable_; } | |
| 536 | |
| 537 private: | |
| 538 void PushBlock(HBasicBlock* block) { | |
| 539 if (block != NULL && block != dont_visit_ && | |
| 540 !reachable_.Contains(block->block_id())) { | |
| 541 reachable_.Add(block->block_id()); | |
| 542 stack_.Add(block, block->zone()); | |
| 543 visited_count_++; | |
| 544 } | |
| 545 } | |
| 546 | |
| 547 void Analyze() { | |
| 548 while (!stack_.is_empty()) { | |
| 549 HControlInstruction* end = stack_.RemoveLast()->end(); | |
| 550 for (HSuccessorIterator it(end); !it.Done(); it.Advance()) { | |
| 551 PushBlock(it.Current()); | |
| 552 } | |
| 553 } | |
| 554 } | |
| 555 | |
| 556 int visited_count_; | |
| 557 ZoneList<HBasicBlock*> stack_; | |
| 558 BitVector reachable_; | |
| 559 HBasicBlock* dont_visit_; | |
| 560 }; | |
| 561 | |
| 562 | |
| 563 void HGraph::Verify(bool do_full_verify) const { | |
| 564 Heap::RelocationLock relocation_lock(isolate()->heap()); | |
| 565 AllowHandleDereference allow_deref; | |
| 566 AllowDeferredHandleDereference allow_deferred_deref; | |
| 567 for (int i = 0; i < blocks_.length(); i++) { | |
| 568 HBasicBlock* block = blocks_.at(i); | |
| 569 | |
| 570 block->Verify(); | |
| 571 | |
| 572 // Check that every block contains at least one node and that only the last | |
| 573 // node is a control instruction. | |
| 574 HInstruction* current = block->first(); | |
| 575 DCHECK(current != NULL && current->IsBlockEntry()); | |
| 576 while (current != NULL) { | |
| 577 DCHECK((current->next() == NULL) == current->IsControlInstruction()); | |
| 578 DCHECK(current->block() == block); | |
| 579 current->Verify(); | |
| 580 current = current->next(); | |
| 581 } | |
| 582 | |
| 583 // Check that successors are correctly set. | |
| 584 HBasicBlock* first = block->end()->FirstSuccessor(); | |
| 585 HBasicBlock* second = block->end()->SecondSuccessor(); | |
| 586 DCHECK(second == NULL || first != NULL); | |
| 587 | |
| 588 // Check that the predecessor array is correct. | |
| 589 if (first != NULL) { | |
| 590 DCHECK(first->predecessors()->Contains(block)); | |
| 591 if (second != NULL) { | |
| 592 DCHECK(second->predecessors()->Contains(block)); | |
| 593 } | |
| 594 } | |
| 595 | |
| 596 // Check that phis have correct arguments. | |
| 597 for (int j = 0; j < block->phis()->length(); j++) { | |
| 598 HPhi* phi = block->phis()->at(j); | |
| 599 phi->Verify(); | |
| 600 } | |
| 601 | |
| 602 // Check that all join blocks have predecessors that end with an | |
| 603 // unconditional goto and agree on their environment node id. | |
| 604 if (block->predecessors()->length() >= 2) { | |
| 605 BailoutId id = | |
| 606 block->predecessors()->first()->last_environment()->ast_id(); | |
| 607 for (int k = 0; k < block->predecessors()->length(); k++) { | |
| 608 HBasicBlock* predecessor = block->predecessors()->at(k); | |
| 609 DCHECK(predecessor->end()->IsGoto() || | |
| 610 predecessor->end()->IsDeoptimize()); | |
| 611 DCHECK(predecessor->last_environment()->ast_id() == id); | |
| 612 } | |
| 613 } | |
| 614 } | |
| 615 | |
| 616 // Check special property of first block to have no predecessors. | |
| 617 DCHECK(blocks_.at(0)->predecessors()->is_empty()); | |
| 618 | |
| 619 if (do_full_verify) { | |
| 620 // Check that the graph is fully connected. | |
| 621 ReachabilityAnalyzer analyzer(entry_block_, blocks_.length(), NULL); | |
| 622 DCHECK(analyzer.visited_count() == blocks_.length()); | |
| 623 | |
| 624 // Check that entry block dominator is NULL. | |
| 625 DCHECK(entry_block_->dominator() == NULL); | |
| 626 | |
| 627 // Check dominators. | |
| 628 for (int i = 0; i < blocks_.length(); ++i) { | |
| 629 HBasicBlock* block = blocks_.at(i); | |
| 630 if (block->dominator() == NULL) { | |
| 631 // Only start block may have no dominator assigned to. | |
| 632 DCHECK(i == 0); | |
| 633 } else { | |
| 634 // Assert that block is unreachable if dominator must not be visited. | |
| 635 ReachabilityAnalyzer dominator_analyzer(entry_block_, | |
| 636 blocks_.length(), | |
| 637 block->dominator()); | |
| 638 DCHECK(!dominator_analyzer.reachable()->Contains(block->block_id())); | |
| 639 } | |
| 640 } | |
| 641 } | |
| 642 } | |
| 643 | |
| 644 #endif | |
| 645 | |
| 646 | |
| 647 HConstant* HGraph::GetConstant(SetOncePointer<HConstant>* pointer, | |
| 648 int32_t value) { | |
| 649 if (!pointer->is_set()) { | |
| 650 // Can't pass GetInvalidContext() to HConstant::New, because that will | |
| 651 // recursively call GetConstant | |
| 652 HConstant* constant = HConstant::New(isolate(), zone(), NULL, value); | |
| 653 constant->InsertAfter(entry_block()->first()); | |
| 654 pointer->set(constant); | |
| 655 return constant; | |
| 656 } | |
| 657 return ReinsertConstantIfNecessary(pointer->get()); | |
| 658 } | |
| 659 | |
| 660 | |
| 661 HConstant* HGraph::ReinsertConstantIfNecessary(HConstant* constant) { | |
| 662 if (!constant->IsLinked()) { | |
| 663 // The constant was removed from the graph. Reinsert. | |
| 664 constant->ClearFlag(HValue::kIsDead); | |
| 665 constant->InsertAfter(entry_block()->first()); | |
| 666 } | |
| 667 return constant; | |
| 668 } | |
| 669 | |
| 670 | |
| 671 HConstant* HGraph::GetConstant0() { | |
| 672 return GetConstant(&constant_0_, 0); | |
| 673 } | |
| 674 | |
| 675 | |
| 676 HConstant* HGraph::GetConstant1() { | |
| 677 return GetConstant(&constant_1_, 1); | |
| 678 } | |
| 679 | |
| 680 | |
| 681 HConstant* HGraph::GetConstantMinus1() { | |
| 682 return GetConstant(&constant_minus1_, -1); | |
| 683 } | |
| 684 | |
| 685 | |
| 686 HConstant* HGraph::GetConstantBool(bool value) { | |
| 687 return value ? GetConstantTrue() : GetConstantFalse(); | |
| 688 } | |
| 689 | |
| 690 | |
| 691 #define DEFINE_GET_CONSTANT(Name, name, type, htype, boolean_value) \ | |
| 692 HConstant* HGraph::GetConstant##Name() { \ | |
| 693 if (!constant_##name##_.is_set()) { \ | |
| 694 HConstant* constant = new(zone()) HConstant( \ | |
| 695 Unique<Object>::CreateImmovable(isolate()->factory()->name##_value()), \ | |
| 696 Unique<Map>::CreateImmovable(isolate()->factory()->type##_map()), \ | |
| 697 false, \ | |
| 698 Representation::Tagged(), \ | |
| 699 htype, \ | |
| 700 true, \ | |
| 701 boolean_value, \ | |
| 702 false, \ | |
| 703 ODDBALL_TYPE); \ | |
| 704 constant->InsertAfter(entry_block()->first()); \ | |
| 705 constant_##name##_.set(constant); \ | |
| 706 } \ | |
| 707 return ReinsertConstantIfNecessary(constant_##name##_.get()); \ | |
| 708 } | |
| 709 | |
| 710 | |
| 711 DEFINE_GET_CONSTANT(Undefined, undefined, undefined, HType::Undefined(), false) | |
| 712 DEFINE_GET_CONSTANT(True, true, boolean, HType::Boolean(), true) | |
| 713 DEFINE_GET_CONSTANT(False, false, boolean, HType::Boolean(), false) | |
| 714 DEFINE_GET_CONSTANT(Hole, the_hole, the_hole, HType::None(), false) | |
| 715 DEFINE_GET_CONSTANT(Null, null, null, HType::Null(), false) | |
| 716 | |
| 717 | |
| 718 #undef DEFINE_GET_CONSTANT | |
| 719 | |
| 720 #define DEFINE_IS_CONSTANT(Name, name) \ | |
| 721 bool HGraph::IsConstant##Name(HConstant* constant) { \ | |
| 722 return constant_##name##_.is_set() && constant == constant_##name##_.get(); \ | |
| 723 } | |
| 724 DEFINE_IS_CONSTANT(Undefined, undefined) | |
| 725 DEFINE_IS_CONSTANT(0, 0) | |
| 726 DEFINE_IS_CONSTANT(1, 1) | |
| 727 DEFINE_IS_CONSTANT(Minus1, minus1) | |
| 728 DEFINE_IS_CONSTANT(True, true) | |
| 729 DEFINE_IS_CONSTANT(False, false) | |
| 730 DEFINE_IS_CONSTANT(Hole, the_hole) | |
| 731 DEFINE_IS_CONSTANT(Null, null) | |
| 732 | |
| 733 #undef DEFINE_IS_CONSTANT | |
| 734 | |
| 735 | |
| 736 HConstant* HGraph::GetInvalidContext() { | |
| 737 return GetConstant(&constant_invalid_context_, 0xFFFFC0C7); | |
| 738 } | |
| 739 | |
| 740 | |
| 741 bool HGraph::IsStandardConstant(HConstant* constant) { | |
| 742 if (IsConstantUndefined(constant)) return true; | |
| 743 if (IsConstant0(constant)) return true; | |
| 744 if (IsConstant1(constant)) return true; | |
| 745 if (IsConstantMinus1(constant)) return true; | |
| 746 if (IsConstantTrue(constant)) return true; | |
| 747 if (IsConstantFalse(constant)) return true; | |
| 748 if (IsConstantHole(constant)) return true; | |
| 749 if (IsConstantNull(constant)) return true; | |
| 750 return false; | |
| 751 } | |
| 752 | |
| 753 | |
| 754 HGraphBuilder::IfBuilder::IfBuilder() : builder_(NULL), needs_compare_(true) {} | |
| 755 | |
| 756 | |
| 757 HGraphBuilder::IfBuilder::IfBuilder(HGraphBuilder* builder) | |
| 758 : needs_compare_(true) { | |
| 759 Initialize(builder); | |
| 760 } | |
| 761 | |
| 762 | |
| 763 HGraphBuilder::IfBuilder::IfBuilder(HGraphBuilder* builder, | |
| 764 HIfContinuation* continuation) | |
| 765 : needs_compare_(false), first_true_block_(NULL), first_false_block_(NULL) { | |
| 766 InitializeDontCreateBlocks(builder); | |
| 767 continuation->Continue(&first_true_block_, &first_false_block_); | |
| 768 } | |
| 769 | |
| 770 | |
| 771 void HGraphBuilder::IfBuilder::InitializeDontCreateBlocks( | |
| 772 HGraphBuilder* builder) { | |
| 773 builder_ = builder; | |
| 774 finished_ = false; | |
| 775 did_then_ = false; | |
| 776 did_else_ = false; | |
| 777 did_else_if_ = false; | |
| 778 did_and_ = false; | |
| 779 did_or_ = false; | |
| 780 captured_ = false; | |
| 781 pending_merge_block_ = false; | |
| 782 split_edge_merge_block_ = NULL; | |
| 783 merge_at_join_blocks_ = NULL; | |
| 784 normal_merge_at_join_block_count_ = 0; | |
| 785 deopt_merge_at_join_block_count_ = 0; | |
| 786 } | |
| 787 | |
| 788 | |
| 789 void HGraphBuilder::IfBuilder::Initialize(HGraphBuilder* builder) { | |
| 790 InitializeDontCreateBlocks(builder); | |
| 791 HEnvironment* env = builder->environment(); | |
| 792 first_true_block_ = builder->CreateBasicBlock(env->Copy()); | |
| 793 first_false_block_ = builder->CreateBasicBlock(env->Copy()); | |
| 794 } | |
| 795 | |
| 796 | |
| 797 HControlInstruction* HGraphBuilder::IfBuilder::AddCompare( | |
| 798 HControlInstruction* compare) { | |
| 799 DCHECK(did_then_ == did_else_); | |
| 800 if (did_else_) { | |
| 801 // Handle if-then-elseif | |
| 802 did_else_if_ = true; | |
| 803 did_else_ = false; | |
| 804 did_then_ = false; | |
| 805 did_and_ = false; | |
| 806 did_or_ = false; | |
| 807 pending_merge_block_ = false; | |
| 808 split_edge_merge_block_ = NULL; | |
| 809 HEnvironment* env = builder()->environment(); | |
| 810 first_true_block_ = builder()->CreateBasicBlock(env->Copy()); | |
| 811 first_false_block_ = builder()->CreateBasicBlock(env->Copy()); | |
| 812 } | |
| 813 if (split_edge_merge_block_ != NULL) { | |
| 814 HEnvironment* env = first_false_block_->last_environment(); | |
| 815 HBasicBlock* split_edge = builder()->CreateBasicBlock(env->Copy()); | |
| 816 if (did_or_) { | |
| 817 compare->SetSuccessorAt(0, split_edge); | |
| 818 compare->SetSuccessorAt(1, first_false_block_); | |
| 819 } else { | |
| 820 compare->SetSuccessorAt(0, first_true_block_); | |
| 821 compare->SetSuccessorAt(1, split_edge); | |
| 822 } | |
| 823 builder()->GotoNoSimulate(split_edge, split_edge_merge_block_); | |
| 824 } else { | |
| 825 compare->SetSuccessorAt(0, first_true_block_); | |
| 826 compare->SetSuccessorAt(1, first_false_block_); | |
| 827 } | |
| 828 builder()->FinishCurrentBlock(compare); | |
| 829 needs_compare_ = false; | |
| 830 return compare; | |
| 831 } | |
| 832 | |
| 833 | |
| 834 void HGraphBuilder::IfBuilder::Or() { | |
| 835 DCHECK(!needs_compare_); | |
| 836 DCHECK(!did_and_); | |
| 837 did_or_ = true; | |
| 838 HEnvironment* env = first_false_block_->last_environment(); | |
| 839 if (split_edge_merge_block_ == NULL) { | |
| 840 split_edge_merge_block_ = builder()->CreateBasicBlock(env->Copy()); | |
| 841 builder()->GotoNoSimulate(first_true_block_, split_edge_merge_block_); | |
| 842 first_true_block_ = split_edge_merge_block_; | |
| 843 } | |
| 844 builder()->set_current_block(first_false_block_); | |
| 845 first_false_block_ = builder()->CreateBasicBlock(env->Copy()); | |
| 846 } | |
| 847 | |
| 848 | |
| 849 void HGraphBuilder::IfBuilder::And() { | |
| 850 DCHECK(!needs_compare_); | |
| 851 DCHECK(!did_or_); | |
| 852 did_and_ = true; | |
| 853 HEnvironment* env = first_false_block_->last_environment(); | |
| 854 if (split_edge_merge_block_ == NULL) { | |
| 855 split_edge_merge_block_ = builder()->CreateBasicBlock(env->Copy()); | |
| 856 builder()->GotoNoSimulate(first_false_block_, split_edge_merge_block_); | |
| 857 first_false_block_ = split_edge_merge_block_; | |
| 858 } | |
| 859 builder()->set_current_block(first_true_block_); | |
| 860 first_true_block_ = builder()->CreateBasicBlock(env->Copy()); | |
| 861 } | |
| 862 | |
| 863 | |
| 864 void HGraphBuilder::IfBuilder::CaptureContinuation( | |
| 865 HIfContinuation* continuation) { | |
| 866 DCHECK(!did_else_if_); | |
| 867 DCHECK(!finished_); | |
| 868 DCHECK(!captured_); | |
| 869 | |
| 870 HBasicBlock* true_block = NULL; | |
| 871 HBasicBlock* false_block = NULL; | |
| 872 Finish(&true_block, &false_block); | |
| 873 DCHECK(true_block != NULL); | |
| 874 DCHECK(false_block != NULL); | |
| 875 continuation->Capture(true_block, false_block); | |
| 876 captured_ = true; | |
| 877 builder()->set_current_block(NULL); | |
| 878 End(); | |
| 879 } | |
| 880 | |
| 881 | |
| 882 void HGraphBuilder::IfBuilder::JoinContinuation(HIfContinuation* continuation) { | |
| 883 DCHECK(!did_else_if_); | |
| 884 DCHECK(!finished_); | |
| 885 DCHECK(!captured_); | |
| 886 HBasicBlock* true_block = NULL; | |
| 887 HBasicBlock* false_block = NULL; | |
| 888 Finish(&true_block, &false_block); | |
| 889 merge_at_join_blocks_ = NULL; | |
| 890 if (true_block != NULL && !true_block->IsFinished()) { | |
| 891 DCHECK(continuation->IsTrueReachable()); | |
| 892 builder()->GotoNoSimulate(true_block, continuation->true_branch()); | |
| 893 } | |
| 894 if (false_block != NULL && !false_block->IsFinished()) { | |
| 895 DCHECK(continuation->IsFalseReachable()); | |
| 896 builder()->GotoNoSimulate(false_block, continuation->false_branch()); | |
| 897 } | |
| 898 captured_ = true; | |
| 899 End(); | |
| 900 } | |
| 901 | |
| 902 | |
| 903 void HGraphBuilder::IfBuilder::Then() { | |
| 904 DCHECK(!captured_); | |
| 905 DCHECK(!finished_); | |
| 906 did_then_ = true; | |
| 907 if (needs_compare_) { | |
| 908 // Handle if's without any expressions, they jump directly to the "else" | |
| 909 // branch. However, we must pretend that the "then" branch is reachable, | |
| 910 // so that the graph builder visits it and sees any live range extending | |
| 911 // constructs within it. | |
| 912 HConstant* constant_false = builder()->graph()->GetConstantFalse(); | |
| 913 ToBooleanStub::Types boolean_type = ToBooleanStub::Types(); | |
| 914 boolean_type.Add(ToBooleanStub::BOOLEAN); | |
| 915 HBranch* branch = builder()->New<HBranch>( | |
| 916 constant_false, boolean_type, first_true_block_, first_false_block_); | |
| 917 builder()->FinishCurrentBlock(branch); | |
| 918 } | |
| 919 builder()->set_current_block(first_true_block_); | |
| 920 pending_merge_block_ = true; | |
| 921 } | |
| 922 | |
| 923 | |
| 924 void HGraphBuilder::IfBuilder::Else() { | |
| 925 DCHECK(did_then_); | |
| 926 DCHECK(!captured_); | |
| 927 DCHECK(!finished_); | |
| 928 AddMergeAtJoinBlock(false); | |
| 929 builder()->set_current_block(first_false_block_); | |
| 930 pending_merge_block_ = true; | |
| 931 did_else_ = true; | |
| 932 } | |
| 933 | |
| 934 | |
| 935 void HGraphBuilder::IfBuilder::Deopt(Deoptimizer::DeoptReason reason) { | |
| 936 DCHECK(did_then_); | |
| 937 builder()->Add<HDeoptimize>(reason, Deoptimizer::EAGER); | |
| 938 AddMergeAtJoinBlock(true); | |
| 939 } | |
| 940 | |
| 941 | |
| 942 void HGraphBuilder::IfBuilder::Return(HValue* value) { | |
| 943 HValue* parameter_count = builder()->graph()->GetConstantMinus1(); | |
| 944 builder()->FinishExitCurrentBlock( | |
| 945 builder()->New<HReturn>(value, parameter_count)); | |
| 946 AddMergeAtJoinBlock(false); | |
| 947 } | |
| 948 | |
| 949 | |
| 950 void HGraphBuilder::IfBuilder::AddMergeAtJoinBlock(bool deopt) { | |
| 951 if (!pending_merge_block_) return; | |
| 952 HBasicBlock* block = builder()->current_block(); | |
| 953 DCHECK(block == NULL || !block->IsFinished()); | |
| 954 MergeAtJoinBlock* record = new (builder()->zone()) | |
| 955 MergeAtJoinBlock(block, deopt, merge_at_join_blocks_); | |
| 956 merge_at_join_blocks_ = record; | |
| 957 if (block != NULL) { | |
| 958 DCHECK(block->end() == NULL); | |
| 959 if (deopt) { | |
| 960 normal_merge_at_join_block_count_++; | |
| 961 } else { | |
| 962 deopt_merge_at_join_block_count_++; | |
| 963 } | |
| 964 } | |
| 965 builder()->set_current_block(NULL); | |
| 966 pending_merge_block_ = false; | |
| 967 } | |
| 968 | |
| 969 | |
| 970 void HGraphBuilder::IfBuilder::Finish() { | |
| 971 DCHECK(!finished_); | |
| 972 if (!did_then_) { | |
| 973 Then(); | |
| 974 } | |
| 975 AddMergeAtJoinBlock(false); | |
| 976 if (!did_else_) { | |
| 977 Else(); | |
| 978 AddMergeAtJoinBlock(false); | |
| 979 } | |
| 980 finished_ = true; | |
| 981 } | |
| 982 | |
| 983 | |
| 984 void HGraphBuilder::IfBuilder::Finish(HBasicBlock** then_continuation, | |
| 985 HBasicBlock** else_continuation) { | |
| 986 Finish(); | |
| 987 | |
| 988 MergeAtJoinBlock* else_record = merge_at_join_blocks_; | |
| 989 if (else_continuation != NULL) { | |
| 990 *else_continuation = else_record->block_; | |
| 991 } | |
| 992 MergeAtJoinBlock* then_record = else_record->next_; | |
| 993 if (then_continuation != NULL) { | |
| 994 *then_continuation = then_record->block_; | |
| 995 } | |
| 996 DCHECK(then_record->next_ == NULL); | |
| 997 } | |
| 998 | |
| 999 | |
| 1000 void HGraphBuilder::IfBuilder::EndUnreachable() { | |
| 1001 if (captured_) return; | |
| 1002 Finish(); | |
| 1003 builder()->set_current_block(nullptr); | |
| 1004 } | |
| 1005 | |
| 1006 | |
| 1007 void HGraphBuilder::IfBuilder::End() { | |
| 1008 if (captured_) return; | |
| 1009 Finish(); | |
| 1010 | |
| 1011 int total_merged_blocks = normal_merge_at_join_block_count_ + | |
| 1012 deopt_merge_at_join_block_count_; | |
| 1013 DCHECK(total_merged_blocks >= 1); | |
| 1014 HBasicBlock* merge_block = | |
| 1015 total_merged_blocks == 1 ? NULL : builder()->graph()->CreateBasicBlock(); | |
| 1016 | |
| 1017 // Merge non-deopt blocks first to ensure environment has right size for | |
| 1018 // padding. | |
| 1019 MergeAtJoinBlock* current = merge_at_join_blocks_; | |
| 1020 while (current != NULL) { | |
| 1021 if (!current->deopt_ && current->block_ != NULL) { | |
| 1022 // If there is only one block that makes it through to the end of the | |
| 1023 // if, then just set it as the current block and continue rather then | |
| 1024 // creating an unnecessary merge block. | |
| 1025 if (total_merged_blocks == 1) { | |
| 1026 builder()->set_current_block(current->block_); | |
| 1027 return; | |
| 1028 } | |
| 1029 builder()->GotoNoSimulate(current->block_, merge_block); | |
| 1030 } | |
| 1031 current = current->next_; | |
| 1032 } | |
| 1033 | |
| 1034 // Merge deopt blocks, padding when necessary. | |
| 1035 current = merge_at_join_blocks_; | |
| 1036 while (current != NULL) { | |
| 1037 if (current->deopt_ && current->block_ != NULL) { | |
| 1038 current->block_->FinishExit( | |
| 1039 HAbnormalExit::New(builder()->isolate(), builder()->zone(), NULL), | |
| 1040 SourcePosition::Unknown()); | |
| 1041 } | |
| 1042 current = current->next_; | |
| 1043 } | |
| 1044 builder()->set_current_block(merge_block); | |
| 1045 } | |
| 1046 | |
| 1047 | |
| 1048 HGraphBuilder::LoopBuilder::LoopBuilder(HGraphBuilder* builder) { | |
| 1049 Initialize(builder, NULL, kWhileTrue, NULL); | |
| 1050 } | |
| 1051 | |
| 1052 | |
| 1053 HGraphBuilder::LoopBuilder::LoopBuilder(HGraphBuilder* builder, HValue* context, | |
| 1054 LoopBuilder::Direction direction) { | |
| 1055 Initialize(builder, context, direction, builder->graph()->GetConstant1()); | |
| 1056 } | |
| 1057 | |
| 1058 | |
| 1059 HGraphBuilder::LoopBuilder::LoopBuilder(HGraphBuilder* builder, HValue* context, | |
| 1060 LoopBuilder::Direction direction, | |
| 1061 HValue* increment_amount) { | |
| 1062 Initialize(builder, context, direction, increment_amount); | |
| 1063 increment_amount_ = increment_amount; | |
| 1064 } | |
| 1065 | |
| 1066 | |
| 1067 void HGraphBuilder::LoopBuilder::Initialize(HGraphBuilder* builder, | |
| 1068 HValue* context, | |
| 1069 Direction direction, | |
| 1070 HValue* increment_amount) { | |
| 1071 builder_ = builder; | |
| 1072 context_ = context; | |
| 1073 direction_ = direction; | |
| 1074 increment_amount_ = increment_amount; | |
| 1075 | |
| 1076 finished_ = false; | |
| 1077 header_block_ = builder->CreateLoopHeaderBlock(); | |
| 1078 body_block_ = NULL; | |
| 1079 exit_block_ = NULL; | |
| 1080 exit_trampoline_block_ = NULL; | |
| 1081 } | |
| 1082 | |
| 1083 | |
| 1084 HValue* HGraphBuilder::LoopBuilder::BeginBody( | |
| 1085 HValue* initial, | |
| 1086 HValue* terminating, | |
| 1087 Token::Value token) { | |
| 1088 DCHECK(direction_ != kWhileTrue); | |
| 1089 HEnvironment* env = builder_->environment(); | |
| 1090 phi_ = header_block_->AddNewPhi(env->values()->length()); | |
| 1091 phi_->AddInput(initial); | |
| 1092 env->Push(initial); | |
| 1093 builder_->GotoNoSimulate(header_block_); | |
| 1094 | |
| 1095 HEnvironment* body_env = env->Copy(); | |
| 1096 HEnvironment* exit_env = env->Copy(); | |
| 1097 // Remove the phi from the expression stack | |
| 1098 body_env->Pop(); | |
| 1099 exit_env->Pop(); | |
| 1100 body_block_ = builder_->CreateBasicBlock(body_env); | |
| 1101 exit_block_ = builder_->CreateBasicBlock(exit_env); | |
| 1102 | |
| 1103 builder_->set_current_block(header_block_); | |
| 1104 env->Pop(); | |
| 1105 builder_->FinishCurrentBlock(builder_->New<HCompareNumericAndBranch>( | |
| 1106 phi_, terminating, token, body_block_, exit_block_)); | |
| 1107 | |
| 1108 builder_->set_current_block(body_block_); | |
| 1109 if (direction_ == kPreIncrement || direction_ == kPreDecrement) { | |
| 1110 Isolate* isolate = builder_->isolate(); | |
| 1111 HValue* one = builder_->graph()->GetConstant1(); | |
| 1112 if (direction_ == kPreIncrement) { | |
| 1113 increment_ = HAdd::New(isolate, zone(), context_, phi_, one); | |
| 1114 } else { | |
| 1115 increment_ = HSub::New(isolate, zone(), context_, phi_, one); | |
| 1116 } | |
| 1117 increment_->ClearFlag(HValue::kCanOverflow); | |
| 1118 builder_->AddInstruction(increment_); | |
| 1119 return increment_; | |
| 1120 } else { | |
| 1121 return phi_; | |
| 1122 } | |
| 1123 } | |
| 1124 | |
| 1125 | |
| 1126 void HGraphBuilder::LoopBuilder::BeginBody(int drop_count) { | |
| 1127 DCHECK(direction_ == kWhileTrue); | |
| 1128 HEnvironment* env = builder_->environment(); | |
| 1129 builder_->GotoNoSimulate(header_block_); | |
| 1130 builder_->set_current_block(header_block_); | |
| 1131 env->Drop(drop_count); | |
| 1132 } | |
| 1133 | |
| 1134 | |
| 1135 void HGraphBuilder::LoopBuilder::Break() { | |
| 1136 if (exit_trampoline_block_ == NULL) { | |
| 1137 // Its the first time we saw a break. | |
| 1138 if (direction_ == kWhileTrue) { | |
| 1139 HEnvironment* env = builder_->environment()->Copy(); | |
| 1140 exit_trampoline_block_ = builder_->CreateBasicBlock(env); | |
| 1141 } else { | |
| 1142 HEnvironment* env = exit_block_->last_environment()->Copy(); | |
| 1143 exit_trampoline_block_ = builder_->CreateBasicBlock(env); | |
| 1144 builder_->GotoNoSimulate(exit_block_, exit_trampoline_block_); | |
| 1145 } | |
| 1146 } | |
| 1147 | |
| 1148 builder_->GotoNoSimulate(exit_trampoline_block_); | |
| 1149 builder_->set_current_block(NULL); | |
| 1150 } | |
| 1151 | |
| 1152 | |
| 1153 void HGraphBuilder::LoopBuilder::EndBody() { | |
| 1154 DCHECK(!finished_); | |
| 1155 | |
| 1156 if (direction_ == kPostIncrement || direction_ == kPostDecrement) { | |
| 1157 Isolate* isolate = builder_->isolate(); | |
| 1158 if (direction_ == kPostIncrement) { | |
| 1159 increment_ = | |
| 1160 HAdd::New(isolate, zone(), context_, phi_, increment_amount_); | |
| 1161 } else { | |
| 1162 increment_ = | |
| 1163 HSub::New(isolate, zone(), context_, phi_, increment_amount_); | |
| 1164 } | |
| 1165 increment_->ClearFlag(HValue::kCanOverflow); | |
| 1166 builder_->AddInstruction(increment_); | |
| 1167 } | |
| 1168 | |
| 1169 if (direction_ != kWhileTrue) { | |
| 1170 // Push the new increment value on the expression stack to merge into | |
| 1171 // the phi. | |
| 1172 builder_->environment()->Push(increment_); | |
| 1173 } | |
| 1174 HBasicBlock* last_block = builder_->current_block(); | |
| 1175 builder_->GotoNoSimulate(last_block, header_block_); | |
| 1176 header_block_->loop_information()->RegisterBackEdge(last_block); | |
| 1177 | |
| 1178 if (exit_trampoline_block_ != NULL) { | |
| 1179 builder_->set_current_block(exit_trampoline_block_); | |
| 1180 } else { | |
| 1181 builder_->set_current_block(exit_block_); | |
| 1182 } | |
| 1183 finished_ = true; | |
| 1184 } | |
| 1185 | |
| 1186 | |
| 1187 HGraph* HGraphBuilder::CreateGraph() { | |
| 1188 graph_ = new(zone()) HGraph(info_); | |
| 1189 if (FLAG_hydrogen_stats) isolate()->GetHStatistics()->Initialize(info_); | |
| 1190 CompilationPhase phase("H_Block building", info_); | |
| 1191 set_current_block(graph()->entry_block()); | |
| 1192 if (!BuildGraph()) return NULL; | |
| 1193 graph()->FinalizeUniqueness(); | |
| 1194 return graph_; | |
| 1195 } | |
| 1196 | |
| 1197 | |
| 1198 HInstruction* HGraphBuilder::AddInstruction(HInstruction* instr) { | |
| 1199 DCHECK(current_block() != NULL); | |
| 1200 DCHECK(!FLAG_hydrogen_track_positions || | |
| 1201 !position_.IsUnknown() || | |
| 1202 !info_->IsOptimizing()); | |
| 1203 current_block()->AddInstruction(instr, source_position()); | |
| 1204 if (graph()->IsInsideNoSideEffectsScope()) { | |
| 1205 instr->SetFlag(HValue::kHasNoObservableSideEffects); | |
| 1206 } | |
| 1207 return instr; | |
| 1208 } | |
| 1209 | |
| 1210 | |
| 1211 void HGraphBuilder::FinishCurrentBlock(HControlInstruction* last) { | |
| 1212 DCHECK(!FLAG_hydrogen_track_positions || | |
| 1213 !info_->IsOptimizing() || | |
| 1214 !position_.IsUnknown()); | |
| 1215 current_block()->Finish(last, source_position()); | |
| 1216 if (last->IsReturn() || last->IsAbnormalExit()) { | |
| 1217 set_current_block(NULL); | |
| 1218 } | |
| 1219 } | |
| 1220 | |
| 1221 | |
| 1222 void HGraphBuilder::FinishExitCurrentBlock(HControlInstruction* instruction) { | |
| 1223 DCHECK(!FLAG_hydrogen_track_positions || !info_->IsOptimizing() || | |
| 1224 !position_.IsUnknown()); | |
| 1225 current_block()->FinishExit(instruction, source_position()); | |
| 1226 if (instruction->IsReturn() || instruction->IsAbnormalExit()) { | |
| 1227 set_current_block(NULL); | |
| 1228 } | |
| 1229 } | |
| 1230 | |
| 1231 | |
| 1232 void HGraphBuilder::AddIncrementCounter(StatsCounter* counter) { | |
| 1233 if (FLAG_native_code_counters && counter->Enabled()) { | |
| 1234 HValue* reference = Add<HConstant>(ExternalReference(counter)); | |
| 1235 HValue* old_value = | |
| 1236 Add<HLoadNamedField>(reference, nullptr, HObjectAccess::ForCounter()); | |
| 1237 HValue* new_value = AddUncasted<HAdd>(old_value, graph()->GetConstant1()); | |
| 1238 new_value->ClearFlag(HValue::kCanOverflow); // Ignore counter overflow | |
| 1239 Add<HStoreNamedField>(reference, HObjectAccess::ForCounter(), | |
| 1240 new_value, STORE_TO_INITIALIZED_ENTRY); | |
| 1241 } | |
| 1242 } | |
| 1243 | |
| 1244 | |
| 1245 void HGraphBuilder::AddSimulate(BailoutId id, | |
| 1246 RemovableSimulate removable) { | |
| 1247 DCHECK(current_block() != NULL); | |
| 1248 DCHECK(!graph()->IsInsideNoSideEffectsScope()); | |
| 1249 current_block()->AddNewSimulate(id, source_position(), removable); | |
| 1250 } | |
| 1251 | |
| 1252 | |
| 1253 HBasicBlock* HGraphBuilder::CreateBasicBlock(HEnvironment* env) { | |
| 1254 HBasicBlock* b = graph()->CreateBasicBlock(); | |
| 1255 b->SetInitialEnvironment(env); | |
| 1256 return b; | |
| 1257 } | |
| 1258 | |
| 1259 | |
| 1260 HBasicBlock* HGraphBuilder::CreateLoopHeaderBlock() { | |
| 1261 HBasicBlock* header = graph()->CreateBasicBlock(); | |
| 1262 HEnvironment* entry_env = environment()->CopyAsLoopHeader(header); | |
| 1263 header->SetInitialEnvironment(entry_env); | |
| 1264 header->AttachLoopInformation(); | |
| 1265 return header; | |
| 1266 } | |
| 1267 | |
| 1268 | |
| 1269 HValue* HGraphBuilder::BuildGetElementsKind(HValue* object) { | |
| 1270 HValue* map = Add<HLoadNamedField>(object, nullptr, HObjectAccess::ForMap()); | |
| 1271 | |
| 1272 HValue* bit_field2 = | |
| 1273 Add<HLoadNamedField>(map, nullptr, HObjectAccess::ForMapBitField2()); | |
| 1274 return BuildDecodeField<Map::ElementsKindBits>(bit_field2); | |
| 1275 } | |
| 1276 | |
| 1277 | |
| 1278 HValue* HGraphBuilder::BuildCheckHeapObject(HValue* obj) { | |
| 1279 if (obj->type().IsHeapObject()) return obj; | |
| 1280 return Add<HCheckHeapObject>(obj); | |
| 1281 } | |
| 1282 | |
| 1283 | |
| 1284 void HGraphBuilder::FinishExitWithHardDeoptimization( | |
| 1285 Deoptimizer::DeoptReason reason) { | |
| 1286 Add<HDeoptimize>(reason, Deoptimizer::EAGER); | |
| 1287 FinishExitCurrentBlock(New<HAbnormalExit>()); | |
| 1288 } | |
| 1289 | |
| 1290 | |
| 1291 HValue* HGraphBuilder::BuildCheckString(HValue* string) { | |
| 1292 if (!string->type().IsString()) { | |
| 1293 DCHECK(!string->IsConstant() || | |
| 1294 !HConstant::cast(string)->HasStringValue()); | |
| 1295 BuildCheckHeapObject(string); | |
| 1296 return Add<HCheckInstanceType>(string, HCheckInstanceType::IS_STRING); | |
| 1297 } | |
| 1298 return string; | |
| 1299 } | |
| 1300 | |
| 1301 | |
| 1302 HValue* HGraphBuilder::BuildWrapReceiver(HValue* object, HValue* function) { | |
| 1303 if (object->type().IsJSObject()) return object; | |
| 1304 if (function->IsConstant() && | |
| 1305 HConstant::cast(function)->handle(isolate())->IsJSFunction()) { | |
| 1306 Handle<JSFunction> f = Handle<JSFunction>::cast( | |
| 1307 HConstant::cast(function)->handle(isolate())); | |
| 1308 SharedFunctionInfo* shared = f->shared(); | |
| 1309 if (is_strict(shared->language_mode()) || shared->native()) return object; | |
| 1310 } | |
| 1311 return Add<HWrapReceiver>(object, function); | |
| 1312 } | |
| 1313 | |
| 1314 | |
| 1315 HValue* HGraphBuilder::BuildCheckAndGrowElementsCapacity( | |
| 1316 HValue* object, HValue* elements, ElementsKind kind, HValue* length, | |
| 1317 HValue* capacity, HValue* key) { | |
| 1318 HValue* max_gap = Add<HConstant>(static_cast<int32_t>(JSObject::kMaxGap)); | |
| 1319 HValue* max_capacity = AddUncasted<HAdd>(capacity, max_gap); | |
| 1320 Add<HBoundsCheck>(key, max_capacity); | |
| 1321 | |
| 1322 HValue* new_capacity = BuildNewElementsCapacity(key); | |
| 1323 HValue* new_elements = BuildGrowElementsCapacity(object, elements, kind, kind, | |
| 1324 length, new_capacity); | |
| 1325 return new_elements; | |
| 1326 } | |
| 1327 | |
| 1328 | |
| 1329 HValue* HGraphBuilder::BuildCheckForCapacityGrow( | |
| 1330 HValue* object, | |
| 1331 HValue* elements, | |
| 1332 ElementsKind kind, | |
| 1333 HValue* length, | |
| 1334 HValue* key, | |
| 1335 bool is_js_array, | |
| 1336 PropertyAccessType access_type) { | |
| 1337 IfBuilder length_checker(this); | |
| 1338 | |
| 1339 Token::Value token = IsHoleyElementsKind(kind) ? Token::GTE : Token::EQ; | |
| 1340 length_checker.If<HCompareNumericAndBranch>(key, length, token); | |
| 1341 | |
| 1342 length_checker.Then(); | |
| 1343 | |
| 1344 HValue* current_capacity = AddLoadFixedArrayLength(elements); | |
| 1345 | |
| 1346 if (top_info()->IsStub()) { | |
| 1347 IfBuilder capacity_checker(this); | |
| 1348 capacity_checker.If<HCompareNumericAndBranch>(key, current_capacity, | |
| 1349 Token::GTE); | |
| 1350 capacity_checker.Then(); | |
| 1351 HValue* new_elements = BuildCheckAndGrowElementsCapacity( | |
| 1352 object, elements, kind, length, current_capacity, key); | |
| 1353 environment()->Push(new_elements); | |
| 1354 capacity_checker.Else(); | |
| 1355 environment()->Push(elements); | |
| 1356 capacity_checker.End(); | |
| 1357 } else { | |
| 1358 HValue* result = Add<HMaybeGrowElements>( | |
| 1359 object, elements, key, current_capacity, is_js_array, kind); | |
| 1360 environment()->Push(result); | |
| 1361 } | |
| 1362 | |
| 1363 if (is_js_array) { | |
| 1364 HValue* new_length = AddUncasted<HAdd>(key, graph_->GetConstant1()); | |
| 1365 new_length->ClearFlag(HValue::kCanOverflow); | |
| 1366 | |
| 1367 Add<HStoreNamedField>(object, HObjectAccess::ForArrayLength(kind), | |
| 1368 new_length); | |
| 1369 } | |
| 1370 | |
| 1371 if (access_type == STORE && kind == FAST_SMI_ELEMENTS) { | |
| 1372 HValue* checked_elements = environment()->Top(); | |
| 1373 | |
| 1374 // Write zero to ensure that the new element is initialized with some smi. | |
| 1375 Add<HStoreKeyed>(checked_elements, key, graph()->GetConstant0(), kind); | |
| 1376 } | |
| 1377 | |
| 1378 length_checker.Else(); | |
| 1379 Add<HBoundsCheck>(key, length); | |
| 1380 | |
| 1381 environment()->Push(elements); | |
| 1382 length_checker.End(); | |
| 1383 | |
| 1384 return environment()->Pop(); | |
| 1385 } | |
| 1386 | |
| 1387 | |
| 1388 HValue* HGraphBuilder::BuildCopyElementsOnWrite(HValue* object, | |
| 1389 HValue* elements, | |
| 1390 ElementsKind kind, | |
| 1391 HValue* length) { | |
| 1392 Factory* factory = isolate()->factory(); | |
| 1393 | |
| 1394 IfBuilder cow_checker(this); | |
| 1395 | |
| 1396 cow_checker.If<HCompareMap>(elements, factory->fixed_cow_array_map()); | |
| 1397 cow_checker.Then(); | |
| 1398 | |
| 1399 HValue* capacity = AddLoadFixedArrayLength(elements); | |
| 1400 | |
| 1401 HValue* new_elements = BuildGrowElementsCapacity(object, elements, kind, | |
| 1402 kind, length, capacity); | |
| 1403 | |
| 1404 environment()->Push(new_elements); | |
| 1405 | |
| 1406 cow_checker.Else(); | |
| 1407 | |
| 1408 environment()->Push(elements); | |
| 1409 | |
| 1410 cow_checker.End(); | |
| 1411 | |
| 1412 return environment()->Pop(); | |
| 1413 } | |
| 1414 | |
| 1415 | |
| 1416 void HGraphBuilder::BuildTransitionElementsKind(HValue* object, | |
| 1417 HValue* map, | |
| 1418 ElementsKind from_kind, | |
| 1419 ElementsKind to_kind, | |
| 1420 bool is_jsarray) { | |
| 1421 DCHECK(!IsFastHoleyElementsKind(from_kind) || | |
| 1422 IsFastHoleyElementsKind(to_kind)); | |
| 1423 | |
| 1424 if (AllocationSite::GetMode(from_kind, to_kind) == TRACK_ALLOCATION_SITE) { | |
| 1425 Add<HTrapAllocationMemento>(object); | |
| 1426 } | |
| 1427 | |
| 1428 if (!IsSimpleMapChangeTransition(from_kind, to_kind)) { | |
| 1429 HInstruction* elements = AddLoadElements(object); | |
| 1430 | |
| 1431 HInstruction* empty_fixed_array = Add<HConstant>( | |
| 1432 isolate()->factory()->empty_fixed_array()); | |
| 1433 | |
| 1434 IfBuilder if_builder(this); | |
| 1435 | |
| 1436 if_builder.IfNot<HCompareObjectEqAndBranch>(elements, empty_fixed_array); | |
| 1437 | |
| 1438 if_builder.Then(); | |
| 1439 | |
| 1440 HInstruction* elements_length = AddLoadFixedArrayLength(elements); | |
| 1441 | |
| 1442 HInstruction* array_length = | |
| 1443 is_jsarray | |
| 1444 ? Add<HLoadNamedField>(object, nullptr, | |
| 1445 HObjectAccess::ForArrayLength(from_kind)) | |
| 1446 : elements_length; | |
| 1447 | |
| 1448 BuildGrowElementsCapacity(object, elements, from_kind, to_kind, | |
| 1449 array_length, elements_length); | |
| 1450 | |
| 1451 if_builder.End(); | |
| 1452 } | |
| 1453 | |
| 1454 Add<HStoreNamedField>(object, HObjectAccess::ForMap(), map); | |
| 1455 } | |
| 1456 | |
| 1457 | |
| 1458 void HGraphBuilder::BuildJSObjectCheck(HValue* receiver, | |
| 1459 int bit_field_mask) { | |
| 1460 // Check that the object isn't a smi. | |
| 1461 Add<HCheckHeapObject>(receiver); | |
| 1462 | |
| 1463 // Get the map of the receiver. | |
| 1464 HValue* map = | |
| 1465 Add<HLoadNamedField>(receiver, nullptr, HObjectAccess::ForMap()); | |
| 1466 | |
| 1467 // Check the instance type and if an access check is needed, this can be | |
| 1468 // done with a single load, since both bytes are adjacent in the map. | |
| 1469 HObjectAccess access(HObjectAccess::ForMapInstanceTypeAndBitField()); | |
| 1470 HValue* instance_type_and_bit_field = | |
| 1471 Add<HLoadNamedField>(map, nullptr, access); | |
| 1472 | |
| 1473 HValue* mask = Add<HConstant>(0x00FF | (bit_field_mask << 8)); | |
| 1474 HValue* and_result = AddUncasted<HBitwise>(Token::BIT_AND, | |
| 1475 instance_type_and_bit_field, | |
| 1476 mask); | |
| 1477 HValue* sub_result = AddUncasted<HSub>(and_result, | |
| 1478 Add<HConstant>(JS_OBJECT_TYPE)); | |
| 1479 Add<HBoundsCheck>(sub_result, | |
| 1480 Add<HConstant>(LAST_JS_OBJECT_TYPE + 1 - JS_OBJECT_TYPE)); | |
| 1481 } | |
| 1482 | |
| 1483 | |
| 1484 void HGraphBuilder::BuildKeyedIndexCheck(HValue* key, | |
| 1485 HIfContinuation* join_continuation) { | |
| 1486 // The sometimes unintuitively backward ordering of the ifs below is | |
| 1487 // convoluted, but necessary. All of the paths must guarantee that the | |
| 1488 // if-true of the continuation returns a smi element index and the if-false of | |
| 1489 // the continuation returns either a symbol or a unique string key. All other | |
| 1490 // object types cause a deopt to fall back to the runtime. | |
| 1491 | |
| 1492 IfBuilder key_smi_if(this); | |
| 1493 key_smi_if.If<HIsSmiAndBranch>(key); | |
| 1494 key_smi_if.Then(); | |
| 1495 { | |
| 1496 Push(key); // Nothing to do, just continue to true of continuation. | |
| 1497 } | |
| 1498 key_smi_if.Else(); | |
| 1499 { | |
| 1500 HValue* map = Add<HLoadNamedField>(key, nullptr, HObjectAccess::ForMap()); | |
| 1501 HValue* instance_type = | |
| 1502 Add<HLoadNamedField>(map, nullptr, HObjectAccess::ForMapInstanceType()); | |
| 1503 | |
| 1504 // Non-unique string, check for a string with a hash code that is actually | |
| 1505 // an index. | |
| 1506 STATIC_ASSERT(LAST_UNIQUE_NAME_TYPE == FIRST_NONSTRING_TYPE); | |
| 1507 IfBuilder not_string_or_name_if(this); | |
| 1508 not_string_or_name_if.If<HCompareNumericAndBranch>( | |
| 1509 instance_type, | |
| 1510 Add<HConstant>(LAST_UNIQUE_NAME_TYPE), | |
| 1511 Token::GT); | |
| 1512 | |
| 1513 not_string_or_name_if.Then(); | |
| 1514 { | |
| 1515 // Non-smi, non-Name, non-String: Try to convert to smi in case of | |
| 1516 // HeapNumber. | |
| 1517 // TODO(danno): This could call some variant of ToString | |
| 1518 Push(AddUncasted<HForceRepresentation>(key, Representation::Smi())); | |
| 1519 } | |
| 1520 not_string_or_name_if.Else(); | |
| 1521 { | |
| 1522 // String or Name: check explicitly for Name, they can short-circuit | |
| 1523 // directly to unique non-index key path. | |
| 1524 IfBuilder not_symbol_if(this); | |
| 1525 not_symbol_if.If<HCompareNumericAndBranch>( | |
| 1526 instance_type, | |
| 1527 Add<HConstant>(SYMBOL_TYPE), | |
| 1528 Token::NE); | |
| 1529 | |
| 1530 not_symbol_if.Then(); | |
| 1531 { | |
| 1532 // String: check whether the String is a String of an index. If it is, | |
| 1533 // extract the index value from the hash. | |
| 1534 HValue* hash = Add<HLoadNamedField>(key, nullptr, | |
| 1535 HObjectAccess::ForNameHashField()); | |
| 1536 HValue* not_index_mask = Add<HConstant>(static_cast<int>( | |
| 1537 String::kContainsCachedArrayIndexMask)); | |
| 1538 | |
| 1539 HValue* not_index_test = AddUncasted<HBitwise>( | |
| 1540 Token::BIT_AND, hash, not_index_mask); | |
| 1541 | |
| 1542 IfBuilder string_index_if(this); | |
| 1543 string_index_if.If<HCompareNumericAndBranch>(not_index_test, | |
| 1544 graph()->GetConstant0(), | |
| 1545 Token::EQ); | |
| 1546 string_index_if.Then(); | |
| 1547 { | |
| 1548 // String with index in hash: extract string and merge to index path. | |
| 1549 Push(BuildDecodeField<String::ArrayIndexValueBits>(hash)); | |
| 1550 } | |
| 1551 string_index_if.Else(); | |
| 1552 { | |
| 1553 // Key is a non-index String, check for uniqueness/internalization. | |
| 1554 // If it's not internalized yet, internalize it now. | |
| 1555 HValue* not_internalized_bit = AddUncasted<HBitwise>( | |
| 1556 Token::BIT_AND, | |
| 1557 instance_type, | |
| 1558 Add<HConstant>(static_cast<int>(kIsNotInternalizedMask))); | |
| 1559 | |
| 1560 IfBuilder internalized(this); | |
| 1561 internalized.If<HCompareNumericAndBranch>(not_internalized_bit, | |
| 1562 graph()->GetConstant0(), | |
| 1563 Token::EQ); | |
| 1564 internalized.Then(); | |
| 1565 Push(key); | |
| 1566 | |
| 1567 internalized.Else(); | |
| 1568 Add<HPushArguments>(key); | |
| 1569 HValue* intern_key = Add<HCallRuntime>( | |
| 1570 Runtime::FunctionForId(Runtime::kInternalizeString), 1); | |
| 1571 Push(intern_key); | |
| 1572 | |
| 1573 internalized.End(); | |
| 1574 // Key guaranteed to be a unique string | |
| 1575 } | |
| 1576 string_index_if.JoinContinuation(join_continuation); | |
| 1577 } | |
| 1578 not_symbol_if.Else(); | |
| 1579 { | |
| 1580 Push(key); // Key is symbol | |
| 1581 } | |
| 1582 not_symbol_if.JoinContinuation(join_continuation); | |
| 1583 } | |
| 1584 not_string_or_name_if.JoinContinuation(join_continuation); | |
| 1585 } | |
| 1586 key_smi_if.JoinContinuation(join_continuation); | |
| 1587 } | |
| 1588 | |
| 1589 | |
| 1590 void HGraphBuilder::BuildNonGlobalObjectCheck(HValue* receiver) { | |
| 1591 // Get the the instance type of the receiver, and make sure that it is | |
| 1592 // not one of the global object types. | |
| 1593 HValue* map = | |
| 1594 Add<HLoadNamedField>(receiver, nullptr, HObjectAccess::ForMap()); | |
| 1595 HValue* instance_type = | |
| 1596 Add<HLoadNamedField>(map, nullptr, HObjectAccess::ForMapInstanceType()); | |
| 1597 STATIC_ASSERT(JS_BUILTINS_OBJECT_TYPE == JS_GLOBAL_OBJECT_TYPE + 1); | |
| 1598 HValue* min_global_type = Add<HConstant>(JS_GLOBAL_OBJECT_TYPE); | |
| 1599 HValue* max_global_type = Add<HConstant>(JS_BUILTINS_OBJECT_TYPE); | |
| 1600 | |
| 1601 IfBuilder if_global_object(this); | |
| 1602 if_global_object.If<HCompareNumericAndBranch>(instance_type, | |
| 1603 max_global_type, | |
| 1604 Token::LTE); | |
| 1605 if_global_object.And(); | |
| 1606 if_global_object.If<HCompareNumericAndBranch>(instance_type, | |
| 1607 min_global_type, | |
| 1608 Token::GTE); | |
| 1609 if_global_object.ThenDeopt(Deoptimizer::kReceiverWasAGlobalObject); | |
| 1610 if_global_object.End(); | |
| 1611 } | |
| 1612 | |
| 1613 | |
| 1614 void HGraphBuilder::BuildTestForDictionaryProperties( | |
| 1615 HValue* object, | |
| 1616 HIfContinuation* continuation) { | |
| 1617 HValue* properties = Add<HLoadNamedField>( | |
| 1618 object, nullptr, HObjectAccess::ForPropertiesPointer()); | |
| 1619 HValue* properties_map = | |
| 1620 Add<HLoadNamedField>(properties, nullptr, HObjectAccess::ForMap()); | |
| 1621 HValue* hash_map = Add<HLoadRoot>(Heap::kHashTableMapRootIndex); | |
| 1622 IfBuilder builder(this); | |
| 1623 builder.If<HCompareObjectEqAndBranch>(properties_map, hash_map); | |
| 1624 builder.CaptureContinuation(continuation); | |
| 1625 } | |
| 1626 | |
| 1627 | |
| 1628 HValue* HGraphBuilder::BuildKeyedLookupCacheHash(HValue* object, | |
| 1629 HValue* key) { | |
| 1630 // Load the map of the receiver, compute the keyed lookup cache hash | |
| 1631 // based on 32 bits of the map pointer and the string hash. | |
| 1632 HValue* object_map = | |
| 1633 Add<HLoadNamedField>(object, nullptr, HObjectAccess::ForMapAsInteger32()); | |
| 1634 HValue* shifted_map = AddUncasted<HShr>( | |
| 1635 object_map, Add<HConstant>(KeyedLookupCache::kMapHashShift)); | |
| 1636 HValue* string_hash = | |
| 1637 Add<HLoadNamedField>(key, nullptr, HObjectAccess::ForStringHashField()); | |
| 1638 HValue* shifted_hash = AddUncasted<HShr>( | |
| 1639 string_hash, Add<HConstant>(String::kHashShift)); | |
| 1640 HValue* xor_result = AddUncasted<HBitwise>(Token::BIT_XOR, shifted_map, | |
| 1641 shifted_hash); | |
| 1642 int mask = (KeyedLookupCache::kCapacityMask & KeyedLookupCache::kHashMask); | |
| 1643 return AddUncasted<HBitwise>(Token::BIT_AND, xor_result, | |
| 1644 Add<HConstant>(mask)); | |
| 1645 } | |
| 1646 | |
| 1647 | |
| 1648 HValue* HGraphBuilder::BuildElementIndexHash(HValue* index) { | |
| 1649 int32_t seed_value = static_cast<uint32_t>(isolate()->heap()->HashSeed()); | |
| 1650 HValue* seed = Add<HConstant>(seed_value); | |
| 1651 HValue* hash = AddUncasted<HBitwise>(Token::BIT_XOR, index, seed); | |
| 1652 | |
| 1653 // hash = ~hash + (hash << 15); | |
| 1654 HValue* shifted_hash = AddUncasted<HShl>(hash, Add<HConstant>(15)); | |
| 1655 HValue* not_hash = AddUncasted<HBitwise>(Token::BIT_XOR, hash, | |
| 1656 graph()->GetConstantMinus1()); | |
| 1657 hash = AddUncasted<HAdd>(shifted_hash, not_hash); | |
| 1658 | |
| 1659 // hash = hash ^ (hash >> 12); | |
| 1660 shifted_hash = AddUncasted<HShr>(hash, Add<HConstant>(12)); | |
| 1661 hash = AddUncasted<HBitwise>(Token::BIT_XOR, hash, shifted_hash); | |
| 1662 | |
| 1663 // hash = hash + (hash << 2); | |
| 1664 shifted_hash = AddUncasted<HShl>(hash, Add<HConstant>(2)); | |
| 1665 hash = AddUncasted<HAdd>(hash, shifted_hash); | |
| 1666 | |
| 1667 // hash = hash ^ (hash >> 4); | |
| 1668 shifted_hash = AddUncasted<HShr>(hash, Add<HConstant>(4)); | |
| 1669 hash = AddUncasted<HBitwise>(Token::BIT_XOR, hash, shifted_hash); | |
| 1670 | |
| 1671 // hash = hash * 2057; | |
| 1672 hash = AddUncasted<HMul>(hash, Add<HConstant>(2057)); | |
| 1673 hash->ClearFlag(HValue::kCanOverflow); | |
| 1674 | |
| 1675 // hash = hash ^ (hash >> 16); | |
| 1676 shifted_hash = AddUncasted<HShr>(hash, Add<HConstant>(16)); | |
| 1677 return AddUncasted<HBitwise>(Token::BIT_XOR, hash, shifted_hash); | |
| 1678 } | |
| 1679 | |
| 1680 | |
| 1681 HValue* HGraphBuilder::BuildUncheckedDictionaryElementLoad( | |
| 1682 HValue* receiver, HValue* elements, HValue* key, HValue* hash, | |
| 1683 LanguageMode language_mode) { | |
| 1684 HValue* capacity = | |
| 1685 Add<HLoadKeyed>(elements, Add<HConstant>(NameDictionary::kCapacityIndex), | |
| 1686 nullptr, FAST_ELEMENTS); | |
| 1687 | |
| 1688 HValue* mask = AddUncasted<HSub>(capacity, graph()->GetConstant1()); | |
| 1689 mask->ChangeRepresentation(Representation::Integer32()); | |
| 1690 mask->ClearFlag(HValue::kCanOverflow); | |
| 1691 | |
| 1692 HValue* entry = hash; | |
| 1693 HValue* count = graph()->GetConstant1(); | |
| 1694 Push(entry); | |
| 1695 Push(count); | |
| 1696 | |
| 1697 HIfContinuation return_or_loop_continuation(graph()->CreateBasicBlock(), | |
| 1698 graph()->CreateBasicBlock()); | |
| 1699 HIfContinuation found_key_match_continuation(graph()->CreateBasicBlock(), | |
| 1700 graph()->CreateBasicBlock()); | |
| 1701 LoopBuilder probe_loop(this); | |
| 1702 probe_loop.BeginBody(2); // Drop entry, count from last environment to | |
| 1703 // appease live range building without simulates. | |
| 1704 | |
| 1705 count = Pop(); | |
| 1706 entry = Pop(); | |
| 1707 entry = AddUncasted<HBitwise>(Token::BIT_AND, entry, mask); | |
| 1708 int entry_size = SeededNumberDictionary::kEntrySize; | |
| 1709 HValue* base_index = AddUncasted<HMul>(entry, Add<HConstant>(entry_size)); | |
| 1710 base_index->ClearFlag(HValue::kCanOverflow); | |
| 1711 int start_offset = SeededNumberDictionary::kElementsStartIndex; | |
| 1712 HValue* key_index = | |
| 1713 AddUncasted<HAdd>(base_index, Add<HConstant>(start_offset)); | |
| 1714 key_index->ClearFlag(HValue::kCanOverflow); | |
| 1715 | |
| 1716 HValue* candidate_key = | |
| 1717 Add<HLoadKeyed>(elements, key_index, nullptr, FAST_ELEMENTS); | |
| 1718 IfBuilder if_undefined(this); | |
| 1719 if_undefined.If<HCompareObjectEqAndBranch>(candidate_key, | |
| 1720 graph()->GetConstantUndefined()); | |
| 1721 if_undefined.Then(); | |
| 1722 { | |
| 1723 // element == undefined means "not found". Call the runtime. | |
| 1724 // TODO(jkummerow): walk the prototype chain instead. | |
| 1725 Add<HPushArguments>(receiver, key); | |
| 1726 Push(Add<HCallRuntime>( | |
| 1727 Runtime::FunctionForId(is_strong(language_mode) | |
| 1728 ? Runtime::kKeyedGetPropertyStrong | |
| 1729 : Runtime::kKeyedGetProperty), | |
| 1730 2)); | |
| 1731 } | |
| 1732 if_undefined.Else(); | |
| 1733 { | |
| 1734 IfBuilder if_match(this); | |
| 1735 if_match.If<HCompareObjectEqAndBranch>(candidate_key, key); | |
| 1736 if_match.Then(); | |
| 1737 if_match.Else(); | |
| 1738 | |
| 1739 // Update non-internalized string in the dictionary with internalized key? | |
| 1740 IfBuilder if_update_with_internalized(this); | |
| 1741 HValue* smi_check = | |
| 1742 if_update_with_internalized.IfNot<HIsSmiAndBranch>(candidate_key); | |
| 1743 if_update_with_internalized.And(); | |
| 1744 HValue* map = AddLoadMap(candidate_key, smi_check); | |
| 1745 HValue* instance_type = | |
| 1746 Add<HLoadNamedField>(map, nullptr, HObjectAccess::ForMapInstanceType()); | |
| 1747 HValue* not_internalized_bit = AddUncasted<HBitwise>( | |
| 1748 Token::BIT_AND, instance_type, | |
| 1749 Add<HConstant>(static_cast<int>(kIsNotInternalizedMask))); | |
| 1750 if_update_with_internalized.If<HCompareNumericAndBranch>( | |
| 1751 not_internalized_bit, graph()->GetConstant0(), Token::NE); | |
| 1752 if_update_with_internalized.And(); | |
| 1753 if_update_with_internalized.IfNot<HCompareObjectEqAndBranch>( | |
| 1754 candidate_key, graph()->GetConstantHole()); | |
| 1755 if_update_with_internalized.AndIf<HStringCompareAndBranch>(candidate_key, | |
| 1756 key, Token::EQ); | |
| 1757 if_update_with_internalized.Then(); | |
| 1758 // Replace a key that is a non-internalized string by the equivalent | |
| 1759 // internalized string for faster further lookups. | |
| 1760 Add<HStoreKeyed>(elements, key_index, key, FAST_ELEMENTS); | |
| 1761 if_update_with_internalized.Else(); | |
| 1762 | |
| 1763 if_update_with_internalized.JoinContinuation(&found_key_match_continuation); | |
| 1764 if_match.JoinContinuation(&found_key_match_continuation); | |
| 1765 | |
| 1766 IfBuilder found_key_match(this, &found_key_match_continuation); | |
| 1767 found_key_match.Then(); | |
| 1768 // Key at current probe matches. Relevant bits in the |details| field must | |
| 1769 // be zero, otherwise the dictionary element requires special handling. | |
| 1770 HValue* details_index = | |
| 1771 AddUncasted<HAdd>(base_index, Add<HConstant>(start_offset + 2)); | |
| 1772 details_index->ClearFlag(HValue::kCanOverflow); | |
| 1773 HValue* details = | |
| 1774 Add<HLoadKeyed>(elements, details_index, nullptr, FAST_ELEMENTS); | |
| 1775 int details_mask = PropertyDetails::TypeField::kMask; | |
| 1776 details = AddUncasted<HBitwise>(Token::BIT_AND, details, | |
| 1777 Add<HConstant>(details_mask)); | |
| 1778 IfBuilder details_compare(this); | |
| 1779 details_compare.If<HCompareNumericAndBranch>( | |
| 1780 details, graph()->GetConstant0(), Token::EQ); | |
| 1781 details_compare.Then(); | |
| 1782 HValue* result_index = | |
| 1783 AddUncasted<HAdd>(base_index, Add<HConstant>(start_offset + 1)); | |
| 1784 result_index->ClearFlag(HValue::kCanOverflow); | |
| 1785 Push(Add<HLoadKeyed>(elements, result_index, nullptr, FAST_ELEMENTS)); | |
| 1786 details_compare.Else(); | |
| 1787 Add<HPushArguments>(receiver, key); | |
| 1788 Push(Add<HCallRuntime>( | |
| 1789 Runtime::FunctionForId(is_strong(language_mode) | |
| 1790 ? Runtime::kKeyedGetPropertyStrong | |
| 1791 : Runtime::kKeyedGetProperty), | |
| 1792 2)); | |
| 1793 details_compare.End(); | |
| 1794 | |
| 1795 found_key_match.Else(); | |
| 1796 found_key_match.JoinContinuation(&return_or_loop_continuation); | |
| 1797 } | |
| 1798 if_undefined.JoinContinuation(&return_or_loop_continuation); | |
| 1799 | |
| 1800 IfBuilder return_or_loop(this, &return_or_loop_continuation); | |
| 1801 return_or_loop.Then(); | |
| 1802 probe_loop.Break(); | |
| 1803 | |
| 1804 return_or_loop.Else(); | |
| 1805 entry = AddUncasted<HAdd>(entry, count); | |
| 1806 entry->ClearFlag(HValue::kCanOverflow); | |
| 1807 count = AddUncasted<HAdd>(count, graph()->GetConstant1()); | |
| 1808 count->ClearFlag(HValue::kCanOverflow); | |
| 1809 Push(entry); | |
| 1810 Push(count); | |
| 1811 | |
| 1812 probe_loop.EndBody(); | |
| 1813 | |
| 1814 return_or_loop.End(); | |
| 1815 | |
| 1816 return Pop(); | |
| 1817 } | |
| 1818 | |
| 1819 | |
| 1820 HValue* HGraphBuilder::BuildCreateIterResultObject(HValue* value, | |
| 1821 HValue* done) { | |
| 1822 NoObservableSideEffectsScope scope(this); | |
| 1823 | |
| 1824 // Allocate the JSIteratorResult object. | |
| 1825 HValue* result = | |
| 1826 Add<HAllocate>(Add<HConstant>(JSIteratorResult::kSize), HType::JSObject(), | |
| 1827 NOT_TENURED, JS_ITERATOR_RESULT_TYPE); | |
| 1828 | |
| 1829 // Initialize the JSIteratorResult object. | |
| 1830 HValue* native_context = BuildGetNativeContext(); | |
| 1831 HValue* map = Add<HLoadNamedField>( | |
| 1832 native_context, nullptr, | |
| 1833 HObjectAccess::ForContextSlot(Context::ITERATOR_RESULT_MAP_INDEX)); | |
| 1834 Add<HStoreNamedField>(result, HObjectAccess::ForMap(), map); | |
| 1835 HValue* empty_fixed_array = Add<HLoadRoot>(Heap::kEmptyFixedArrayRootIndex); | |
| 1836 Add<HStoreNamedField>(result, HObjectAccess::ForPropertiesPointer(), | |
| 1837 empty_fixed_array); | |
| 1838 Add<HStoreNamedField>(result, HObjectAccess::ForElementsPointer(), | |
| 1839 empty_fixed_array); | |
| 1840 Add<HStoreNamedField>(result, HObjectAccess::ForObservableJSObjectOffset( | |
| 1841 JSIteratorResult::kValueOffset), | |
| 1842 value); | |
| 1843 Add<HStoreNamedField>(result, HObjectAccess::ForObservableJSObjectOffset( | |
| 1844 JSIteratorResult::kDoneOffset), | |
| 1845 done); | |
| 1846 STATIC_ASSERT(JSIteratorResult::kSize == 5 * kPointerSize); | |
| 1847 return result; | |
| 1848 } | |
| 1849 | |
| 1850 | |
| 1851 HValue* HGraphBuilder::BuildRegExpConstructResult(HValue* length, | |
| 1852 HValue* index, | |
| 1853 HValue* input) { | |
| 1854 NoObservableSideEffectsScope scope(this); | |
| 1855 HConstant* max_length = Add<HConstant>(JSArray::kInitialMaxFastElementArray); | |
| 1856 Add<HBoundsCheck>(length, max_length); | |
| 1857 | |
| 1858 // Generate size calculation code here in order to make it dominate | |
| 1859 // the JSRegExpResult allocation. | |
| 1860 ElementsKind elements_kind = FAST_ELEMENTS; | |
| 1861 HValue* size = BuildCalculateElementsSize(elements_kind, length); | |
| 1862 | |
| 1863 // Allocate the JSRegExpResult and the FixedArray in one step. | |
| 1864 HValue* result = Add<HAllocate>( | |
| 1865 Add<HConstant>(JSRegExpResult::kSize), HType::JSArray(), | |
| 1866 NOT_TENURED, JS_ARRAY_TYPE); | |
| 1867 | |
| 1868 // Initialize the JSRegExpResult header. | |
| 1869 HValue* global_object = Add<HLoadNamedField>( | |
| 1870 context(), nullptr, | |
| 1871 HObjectAccess::ForContextSlot(Context::GLOBAL_OBJECT_INDEX)); | |
| 1872 HValue* native_context = Add<HLoadNamedField>( | |
| 1873 global_object, nullptr, HObjectAccess::ForGlobalObjectNativeContext()); | |
| 1874 Add<HStoreNamedField>( | |
| 1875 result, HObjectAccess::ForMap(), | |
| 1876 Add<HLoadNamedField>( | |
| 1877 native_context, nullptr, | |
| 1878 HObjectAccess::ForContextSlot(Context::REGEXP_RESULT_MAP_INDEX))); | |
| 1879 HConstant* empty_fixed_array = | |
| 1880 Add<HConstant>(isolate()->factory()->empty_fixed_array()); | |
| 1881 Add<HStoreNamedField>( | |
| 1882 result, HObjectAccess::ForJSArrayOffset(JSArray::kPropertiesOffset), | |
| 1883 empty_fixed_array); | |
| 1884 Add<HStoreNamedField>( | |
| 1885 result, HObjectAccess::ForJSArrayOffset(JSArray::kElementsOffset), | |
| 1886 empty_fixed_array); | |
| 1887 Add<HStoreNamedField>( | |
| 1888 result, HObjectAccess::ForJSArrayOffset(JSArray::kLengthOffset), length); | |
| 1889 | |
| 1890 // Initialize the additional fields. | |
| 1891 Add<HStoreNamedField>( | |
| 1892 result, HObjectAccess::ForJSArrayOffset(JSRegExpResult::kIndexOffset), | |
| 1893 index); | |
| 1894 Add<HStoreNamedField>( | |
| 1895 result, HObjectAccess::ForJSArrayOffset(JSRegExpResult::kInputOffset), | |
| 1896 input); | |
| 1897 | |
| 1898 // Allocate and initialize the elements header. | |
| 1899 HAllocate* elements = BuildAllocateElements(elements_kind, size); | |
| 1900 BuildInitializeElementsHeader(elements, elements_kind, length); | |
| 1901 | |
| 1902 if (!elements->has_size_upper_bound()) { | |
| 1903 HConstant* size_in_bytes_upper_bound = EstablishElementsAllocationSize( | |
| 1904 elements_kind, max_length->Integer32Value()); | |
| 1905 elements->set_size_upper_bound(size_in_bytes_upper_bound); | |
| 1906 } | |
| 1907 | |
| 1908 Add<HStoreNamedField>( | |
| 1909 result, HObjectAccess::ForJSArrayOffset(JSArray::kElementsOffset), | |
| 1910 elements); | |
| 1911 | |
| 1912 // Initialize the elements contents with undefined. | |
| 1913 BuildFillElementsWithValue( | |
| 1914 elements, elements_kind, graph()->GetConstant0(), length, | |
| 1915 graph()->GetConstantUndefined()); | |
| 1916 | |
| 1917 return result; | |
| 1918 } | |
| 1919 | |
| 1920 | |
| 1921 HValue* HGraphBuilder::BuildNumberToString(HValue* object, Type* type) { | |
| 1922 NoObservableSideEffectsScope scope(this); | |
| 1923 | |
| 1924 // Convert constant numbers at compile time. | |
| 1925 if (object->IsConstant() && HConstant::cast(object)->HasNumberValue()) { | |
| 1926 Handle<Object> number = HConstant::cast(object)->handle(isolate()); | |
| 1927 Handle<String> result = isolate()->factory()->NumberToString(number); | |
| 1928 return Add<HConstant>(result); | |
| 1929 } | |
| 1930 | |
| 1931 // Create a joinable continuation. | |
| 1932 HIfContinuation found(graph()->CreateBasicBlock(), | |
| 1933 graph()->CreateBasicBlock()); | |
| 1934 | |
| 1935 // Load the number string cache. | |
| 1936 HValue* number_string_cache = | |
| 1937 Add<HLoadRoot>(Heap::kNumberStringCacheRootIndex); | |
| 1938 | |
| 1939 // Make the hash mask from the length of the number string cache. It | |
| 1940 // contains two elements (number and string) for each cache entry. | |
| 1941 HValue* mask = AddLoadFixedArrayLength(number_string_cache); | |
| 1942 mask->set_type(HType::Smi()); | |
| 1943 mask = AddUncasted<HSar>(mask, graph()->GetConstant1()); | |
| 1944 mask = AddUncasted<HSub>(mask, graph()->GetConstant1()); | |
| 1945 | |
| 1946 // Check whether object is a smi. | |
| 1947 IfBuilder if_objectissmi(this); | |
| 1948 if_objectissmi.If<HIsSmiAndBranch>(object); | |
| 1949 if_objectissmi.Then(); | |
| 1950 { | |
| 1951 // Compute hash for smi similar to smi_get_hash(). | |
| 1952 HValue* hash = AddUncasted<HBitwise>(Token::BIT_AND, object, mask); | |
| 1953 | |
| 1954 // Load the key. | |
| 1955 HValue* key_index = AddUncasted<HShl>(hash, graph()->GetConstant1()); | |
| 1956 HValue* key = Add<HLoadKeyed>(number_string_cache, key_index, nullptr, | |
| 1957 FAST_ELEMENTS, ALLOW_RETURN_HOLE); | |
| 1958 | |
| 1959 // Check if object == key. | |
| 1960 IfBuilder if_objectiskey(this); | |
| 1961 if_objectiskey.If<HCompareObjectEqAndBranch>(object, key); | |
| 1962 if_objectiskey.Then(); | |
| 1963 { | |
| 1964 // Make the key_index available. | |
| 1965 Push(key_index); | |
| 1966 } | |
| 1967 if_objectiskey.JoinContinuation(&found); | |
| 1968 } | |
| 1969 if_objectissmi.Else(); | |
| 1970 { | |
| 1971 if (type->Is(Type::SignedSmall())) { | |
| 1972 if_objectissmi.Deopt(Deoptimizer::kExpectedSmi); | |
| 1973 } else { | |
| 1974 // Check if the object is a heap number. | |
| 1975 IfBuilder if_objectisnumber(this); | |
| 1976 HValue* objectisnumber = if_objectisnumber.If<HCompareMap>( | |
| 1977 object, isolate()->factory()->heap_number_map()); | |
| 1978 if_objectisnumber.Then(); | |
| 1979 { | |
| 1980 // Compute hash for heap number similar to double_get_hash(). | |
| 1981 HValue* low = Add<HLoadNamedField>( | |
| 1982 object, objectisnumber, | |
| 1983 HObjectAccess::ForHeapNumberValueLowestBits()); | |
| 1984 HValue* high = Add<HLoadNamedField>( | |
| 1985 object, objectisnumber, | |
| 1986 HObjectAccess::ForHeapNumberValueHighestBits()); | |
| 1987 HValue* hash = AddUncasted<HBitwise>(Token::BIT_XOR, low, high); | |
| 1988 hash = AddUncasted<HBitwise>(Token::BIT_AND, hash, mask); | |
| 1989 | |
| 1990 // Load the key. | |
| 1991 HValue* key_index = AddUncasted<HShl>(hash, graph()->GetConstant1()); | |
| 1992 HValue* key = Add<HLoadKeyed>(number_string_cache, key_index, nullptr, | |
| 1993 FAST_ELEMENTS, ALLOW_RETURN_HOLE); | |
| 1994 | |
| 1995 // Check if the key is a heap number and compare it with the object. | |
| 1996 IfBuilder if_keyisnotsmi(this); | |
| 1997 HValue* keyisnotsmi = if_keyisnotsmi.IfNot<HIsSmiAndBranch>(key); | |
| 1998 if_keyisnotsmi.Then(); | |
| 1999 { | |
| 2000 IfBuilder if_keyisheapnumber(this); | |
| 2001 if_keyisheapnumber.If<HCompareMap>( | |
| 2002 key, isolate()->factory()->heap_number_map()); | |
| 2003 if_keyisheapnumber.Then(); | |
| 2004 { | |
| 2005 // Check if values of key and object match. | |
| 2006 IfBuilder if_keyeqobject(this); | |
| 2007 if_keyeqobject.If<HCompareNumericAndBranch>( | |
| 2008 Add<HLoadNamedField>(key, keyisnotsmi, | |
| 2009 HObjectAccess::ForHeapNumberValue()), | |
| 2010 Add<HLoadNamedField>(object, objectisnumber, | |
| 2011 HObjectAccess::ForHeapNumberValue()), | |
| 2012 Token::EQ); | |
| 2013 if_keyeqobject.Then(); | |
| 2014 { | |
| 2015 // Make the key_index available. | |
| 2016 Push(key_index); | |
| 2017 } | |
| 2018 if_keyeqobject.JoinContinuation(&found); | |
| 2019 } | |
| 2020 if_keyisheapnumber.JoinContinuation(&found); | |
| 2021 } | |
| 2022 if_keyisnotsmi.JoinContinuation(&found); | |
| 2023 } | |
| 2024 if_objectisnumber.Else(); | |
| 2025 { | |
| 2026 if (type->Is(Type::Number())) { | |
| 2027 if_objectisnumber.Deopt(Deoptimizer::kExpectedHeapNumber); | |
| 2028 } | |
| 2029 } | |
| 2030 if_objectisnumber.JoinContinuation(&found); | |
| 2031 } | |
| 2032 } | |
| 2033 if_objectissmi.JoinContinuation(&found); | |
| 2034 | |
| 2035 // Check for cache hit. | |
| 2036 IfBuilder if_found(this, &found); | |
| 2037 if_found.Then(); | |
| 2038 { | |
| 2039 // Count number to string operation in native code. | |
| 2040 AddIncrementCounter(isolate()->counters()->number_to_string_native()); | |
| 2041 | |
| 2042 // Load the value in case of cache hit. | |
| 2043 HValue* key_index = Pop(); | |
| 2044 HValue* value_index = AddUncasted<HAdd>(key_index, graph()->GetConstant1()); | |
| 2045 Push(Add<HLoadKeyed>(number_string_cache, value_index, nullptr, | |
| 2046 FAST_ELEMENTS, ALLOW_RETURN_HOLE)); | |
| 2047 } | |
| 2048 if_found.Else(); | |
| 2049 { | |
| 2050 // Cache miss, fallback to runtime. | |
| 2051 Add<HPushArguments>(object); | |
| 2052 Push(Add<HCallRuntime>( | |
| 2053 Runtime::FunctionForId(Runtime::kNumberToStringSkipCache), | |
| 2054 1)); | |
| 2055 } | |
| 2056 if_found.End(); | |
| 2057 | |
| 2058 return Pop(); | |
| 2059 } | |
| 2060 | |
| 2061 | |
| 2062 HValue* HGraphBuilder::BuildToObject(HValue* receiver) { | |
| 2063 NoObservableSideEffectsScope scope(this); | |
| 2064 | |
| 2065 // Create a joinable continuation. | |
| 2066 HIfContinuation wrap(graph()->CreateBasicBlock(), | |
| 2067 graph()->CreateBasicBlock()); | |
| 2068 | |
| 2069 // Determine the proper global constructor function required to wrap | |
| 2070 // {receiver} into a JSValue, unless {receiver} is already a {JSReceiver}, in | |
| 2071 // which case we just return it. Deopts to Runtime::kToObject if {receiver} | |
| 2072 // is undefined or null. | |
| 2073 IfBuilder receiver_is_smi(this); | |
| 2074 receiver_is_smi.If<HIsSmiAndBranch>(receiver); | |
| 2075 receiver_is_smi.Then(); | |
| 2076 { | |
| 2077 // Use global Number function. | |
| 2078 Push(Add<HConstant>(Context::NUMBER_FUNCTION_INDEX)); | |
| 2079 } | |
| 2080 receiver_is_smi.Else(); | |
| 2081 { | |
| 2082 // Determine {receiver} map and instance type. | |
| 2083 HValue* receiver_map = | |
| 2084 Add<HLoadNamedField>(receiver, nullptr, HObjectAccess::ForMap()); | |
| 2085 HValue* receiver_instance_type = Add<HLoadNamedField>( | |
| 2086 receiver_map, nullptr, HObjectAccess::ForMapInstanceType()); | |
| 2087 | |
| 2088 // First check whether {receiver} is already a spec object (fast case). | |
| 2089 IfBuilder receiver_is_not_spec_object(this); | |
| 2090 receiver_is_not_spec_object.If<HCompareNumericAndBranch>( | |
| 2091 receiver_instance_type, Add<HConstant>(FIRST_SPEC_OBJECT_TYPE), | |
| 2092 Token::LT); | |
| 2093 receiver_is_not_spec_object.Then(); | |
| 2094 { | |
| 2095 // Load the constructor function index from the {receiver} map. | |
| 2096 HValue* constructor_function_index = Add<HLoadNamedField>( | |
| 2097 receiver_map, nullptr, | |
| 2098 HObjectAccess::ForMapInObjectPropertiesOrConstructorFunctionIndex()); | |
| 2099 | |
| 2100 // Check if {receiver} has a constructor (null and undefined have no | |
| 2101 // constructors, so we deoptimize to the runtime to throw an exception). | |
| 2102 IfBuilder constructor_function_index_is_invalid(this); | |
| 2103 constructor_function_index_is_invalid.If<HCompareNumericAndBranch>( | |
| 2104 constructor_function_index, | |
| 2105 Add<HConstant>(Map::kNoConstructorFunctionIndex), Token::EQ); | |
| 2106 constructor_function_index_is_invalid.ThenDeopt( | |
| 2107 Deoptimizer::kUndefinedOrNullInToObject); | |
| 2108 constructor_function_index_is_invalid.End(); | |
| 2109 | |
| 2110 // Use the global constructor function. | |
| 2111 Push(constructor_function_index); | |
| 2112 } | |
| 2113 receiver_is_not_spec_object.JoinContinuation(&wrap); | |
| 2114 } | |
| 2115 receiver_is_smi.JoinContinuation(&wrap); | |
| 2116 | |
| 2117 // Wrap the receiver if necessary. | |
| 2118 IfBuilder if_wrap(this, &wrap); | |
| 2119 if_wrap.Then(); | |
| 2120 { | |
| 2121 // Grab the constructor function index. | |
| 2122 HValue* constructor_index = Pop(); | |
| 2123 | |
| 2124 // Load native context. | |
| 2125 HValue* native_context = BuildGetNativeContext(); | |
| 2126 | |
| 2127 // Determine the initial map for the global constructor. | |
| 2128 HValue* constructor = Add<HLoadKeyed>(native_context, constructor_index, | |
| 2129 nullptr, FAST_ELEMENTS); | |
| 2130 HValue* constructor_initial_map = Add<HLoadNamedField>( | |
| 2131 constructor, nullptr, HObjectAccess::ForPrototypeOrInitialMap()); | |
| 2132 // Allocate and initialize a JSValue wrapper. | |
| 2133 HValue* value = | |
| 2134 BuildAllocate(Add<HConstant>(JSValue::kSize), HType::JSObject(), | |
| 2135 JS_VALUE_TYPE, HAllocationMode()); | |
| 2136 Add<HStoreNamedField>(value, HObjectAccess::ForMap(), | |
| 2137 constructor_initial_map); | |
| 2138 HValue* empty_fixed_array = Add<HLoadRoot>(Heap::kEmptyFixedArrayRootIndex); | |
| 2139 Add<HStoreNamedField>(value, HObjectAccess::ForPropertiesPointer(), | |
| 2140 empty_fixed_array); | |
| 2141 Add<HStoreNamedField>(value, HObjectAccess::ForElementsPointer(), | |
| 2142 empty_fixed_array); | |
| 2143 Add<HStoreNamedField>(value, HObjectAccess::ForObservableJSObjectOffset( | |
| 2144 JSValue::kValueOffset), | |
| 2145 receiver); | |
| 2146 Push(value); | |
| 2147 } | |
| 2148 if_wrap.Else(); | |
| 2149 { Push(receiver); } | |
| 2150 if_wrap.End(); | |
| 2151 return Pop(); | |
| 2152 } | |
| 2153 | |
| 2154 | |
| 2155 HAllocate* HGraphBuilder::BuildAllocate( | |
| 2156 HValue* object_size, | |
| 2157 HType type, | |
| 2158 InstanceType instance_type, | |
| 2159 HAllocationMode allocation_mode) { | |
| 2160 // Compute the effective allocation size. | |
| 2161 HValue* size = object_size; | |
| 2162 if (allocation_mode.CreateAllocationMementos()) { | |
| 2163 size = AddUncasted<HAdd>(size, Add<HConstant>(AllocationMemento::kSize)); | |
| 2164 size->ClearFlag(HValue::kCanOverflow); | |
| 2165 } | |
| 2166 | |
| 2167 // Perform the actual allocation. | |
| 2168 HAllocate* object = Add<HAllocate>( | |
| 2169 size, type, allocation_mode.GetPretenureMode(), | |
| 2170 instance_type, allocation_mode.feedback_site()); | |
| 2171 | |
| 2172 // Setup the allocation memento. | |
| 2173 if (allocation_mode.CreateAllocationMementos()) { | |
| 2174 BuildCreateAllocationMemento( | |
| 2175 object, object_size, allocation_mode.current_site()); | |
| 2176 } | |
| 2177 | |
| 2178 return object; | |
| 2179 } | |
| 2180 | |
| 2181 | |
| 2182 HValue* HGraphBuilder::BuildAddStringLengths(HValue* left_length, | |
| 2183 HValue* right_length) { | |
| 2184 // Compute the combined string length and check against max string length. | |
| 2185 HValue* length = AddUncasted<HAdd>(left_length, right_length); | |
| 2186 // Check that length <= kMaxLength <=> length < MaxLength + 1. | |
| 2187 HValue* max_length = Add<HConstant>(String::kMaxLength + 1); | |
| 2188 Add<HBoundsCheck>(length, max_length); | |
| 2189 return length; | |
| 2190 } | |
| 2191 | |
| 2192 | |
| 2193 HValue* HGraphBuilder::BuildCreateConsString( | |
| 2194 HValue* length, | |
| 2195 HValue* left, | |
| 2196 HValue* right, | |
| 2197 HAllocationMode allocation_mode) { | |
| 2198 // Determine the string instance types. | |
| 2199 HInstruction* left_instance_type = AddLoadStringInstanceType(left); | |
| 2200 HInstruction* right_instance_type = AddLoadStringInstanceType(right); | |
| 2201 | |
| 2202 // Allocate the cons string object. HAllocate does not care whether we | |
| 2203 // pass CONS_STRING_TYPE or CONS_ONE_BYTE_STRING_TYPE here, so we just use | |
| 2204 // CONS_STRING_TYPE here. Below we decide whether the cons string is | |
| 2205 // one-byte or two-byte and set the appropriate map. | |
| 2206 DCHECK(HAllocate::CompatibleInstanceTypes(CONS_STRING_TYPE, | |
| 2207 CONS_ONE_BYTE_STRING_TYPE)); | |
| 2208 HAllocate* result = BuildAllocate(Add<HConstant>(ConsString::kSize), | |
| 2209 HType::String(), CONS_STRING_TYPE, | |
| 2210 allocation_mode); | |
| 2211 | |
| 2212 // Compute intersection and difference of instance types. | |
| 2213 HValue* anded_instance_types = AddUncasted<HBitwise>( | |
| 2214 Token::BIT_AND, left_instance_type, right_instance_type); | |
| 2215 HValue* xored_instance_types = AddUncasted<HBitwise>( | |
| 2216 Token::BIT_XOR, left_instance_type, right_instance_type); | |
| 2217 | |
| 2218 // We create a one-byte cons string if | |
| 2219 // 1. both strings are one-byte, or | |
| 2220 // 2. at least one of the strings is two-byte, but happens to contain only | |
| 2221 // one-byte characters. | |
| 2222 // To do this, we check | |
| 2223 // 1. if both strings are one-byte, or if the one-byte data hint is set in | |
| 2224 // both strings, or | |
| 2225 // 2. if one of the strings has the one-byte data hint set and the other | |
| 2226 // string is one-byte. | |
| 2227 IfBuilder if_onebyte(this); | |
| 2228 STATIC_ASSERT(kOneByteStringTag != 0); | |
| 2229 STATIC_ASSERT(kOneByteDataHintMask != 0); | |
| 2230 if_onebyte.If<HCompareNumericAndBranch>( | |
| 2231 AddUncasted<HBitwise>( | |
| 2232 Token::BIT_AND, anded_instance_types, | |
| 2233 Add<HConstant>(static_cast<int32_t>( | |
| 2234 kStringEncodingMask | kOneByteDataHintMask))), | |
| 2235 graph()->GetConstant0(), Token::NE); | |
| 2236 if_onebyte.Or(); | |
| 2237 STATIC_ASSERT(kOneByteStringTag != 0 && | |
| 2238 kOneByteDataHintTag != 0 && | |
| 2239 kOneByteDataHintTag != kOneByteStringTag); | |
| 2240 if_onebyte.If<HCompareNumericAndBranch>( | |
| 2241 AddUncasted<HBitwise>( | |
| 2242 Token::BIT_AND, xored_instance_types, | |
| 2243 Add<HConstant>(static_cast<int32_t>( | |
| 2244 kOneByteStringTag | kOneByteDataHintTag))), | |
| 2245 Add<HConstant>(static_cast<int32_t>( | |
| 2246 kOneByteStringTag | kOneByteDataHintTag)), Token::EQ); | |
| 2247 if_onebyte.Then(); | |
| 2248 { | |
| 2249 // We can safely skip the write barrier for storing the map here. | |
| 2250 Add<HStoreNamedField>( | |
| 2251 result, HObjectAccess::ForMap(), | |
| 2252 Add<HConstant>(isolate()->factory()->cons_one_byte_string_map())); | |
| 2253 } | |
| 2254 if_onebyte.Else(); | |
| 2255 { | |
| 2256 // We can safely skip the write barrier for storing the map here. | |
| 2257 Add<HStoreNamedField>( | |
| 2258 result, HObjectAccess::ForMap(), | |
| 2259 Add<HConstant>(isolate()->factory()->cons_string_map())); | |
| 2260 } | |
| 2261 if_onebyte.End(); | |
| 2262 | |
| 2263 // Initialize the cons string fields. | |
| 2264 Add<HStoreNamedField>(result, HObjectAccess::ForStringHashField(), | |
| 2265 Add<HConstant>(String::kEmptyHashField)); | |
| 2266 Add<HStoreNamedField>(result, HObjectAccess::ForStringLength(), length); | |
| 2267 Add<HStoreNamedField>(result, HObjectAccess::ForConsStringFirst(), left); | |
| 2268 Add<HStoreNamedField>(result, HObjectAccess::ForConsStringSecond(), right); | |
| 2269 | |
| 2270 // Count the native string addition. | |
| 2271 AddIncrementCounter(isolate()->counters()->string_add_native()); | |
| 2272 | |
| 2273 return result; | |
| 2274 } | |
| 2275 | |
| 2276 | |
| 2277 void HGraphBuilder::BuildCopySeqStringChars(HValue* src, | |
| 2278 HValue* src_offset, | |
| 2279 String::Encoding src_encoding, | |
| 2280 HValue* dst, | |
| 2281 HValue* dst_offset, | |
| 2282 String::Encoding dst_encoding, | |
| 2283 HValue* length) { | |
| 2284 DCHECK(dst_encoding != String::ONE_BYTE_ENCODING || | |
| 2285 src_encoding == String::ONE_BYTE_ENCODING); | |
| 2286 LoopBuilder loop(this, context(), LoopBuilder::kPostIncrement); | |
| 2287 HValue* index = loop.BeginBody(graph()->GetConstant0(), length, Token::LT); | |
| 2288 { | |
| 2289 HValue* src_index = AddUncasted<HAdd>(src_offset, index); | |
| 2290 HValue* value = | |
| 2291 AddUncasted<HSeqStringGetChar>(src_encoding, src, src_index); | |
| 2292 HValue* dst_index = AddUncasted<HAdd>(dst_offset, index); | |
| 2293 Add<HSeqStringSetChar>(dst_encoding, dst, dst_index, value); | |
| 2294 } | |
| 2295 loop.EndBody(); | |
| 2296 } | |
| 2297 | |
| 2298 | |
| 2299 HValue* HGraphBuilder::BuildObjectSizeAlignment( | |
| 2300 HValue* unaligned_size, int header_size) { | |
| 2301 DCHECK((header_size & kObjectAlignmentMask) == 0); | |
| 2302 HValue* size = AddUncasted<HAdd>( | |
| 2303 unaligned_size, Add<HConstant>(static_cast<int32_t>( | |
| 2304 header_size + kObjectAlignmentMask))); | |
| 2305 size->ClearFlag(HValue::kCanOverflow); | |
| 2306 return AddUncasted<HBitwise>( | |
| 2307 Token::BIT_AND, size, Add<HConstant>(static_cast<int32_t>( | |
| 2308 ~kObjectAlignmentMask))); | |
| 2309 } | |
| 2310 | |
| 2311 | |
| 2312 HValue* HGraphBuilder::BuildUncheckedStringAdd( | |
| 2313 HValue* left, | |
| 2314 HValue* right, | |
| 2315 HAllocationMode allocation_mode) { | |
| 2316 // Determine the string lengths. | |
| 2317 HValue* left_length = AddLoadStringLength(left); | |
| 2318 HValue* right_length = AddLoadStringLength(right); | |
| 2319 | |
| 2320 // Compute the combined string length. | |
| 2321 HValue* length = BuildAddStringLengths(left_length, right_length); | |
| 2322 | |
| 2323 // Do some manual constant folding here. | |
| 2324 if (left_length->IsConstant()) { | |
| 2325 HConstant* c_left_length = HConstant::cast(left_length); | |
| 2326 DCHECK_NE(0, c_left_length->Integer32Value()); | |
| 2327 if (c_left_length->Integer32Value() + 1 >= ConsString::kMinLength) { | |
| 2328 // The right string contains at least one character. | |
| 2329 return BuildCreateConsString(length, left, right, allocation_mode); | |
| 2330 } | |
| 2331 } else if (right_length->IsConstant()) { | |
| 2332 HConstant* c_right_length = HConstant::cast(right_length); | |
| 2333 DCHECK_NE(0, c_right_length->Integer32Value()); | |
| 2334 if (c_right_length->Integer32Value() + 1 >= ConsString::kMinLength) { | |
| 2335 // The left string contains at least one character. | |
| 2336 return BuildCreateConsString(length, left, right, allocation_mode); | |
| 2337 } | |
| 2338 } | |
| 2339 | |
| 2340 // Check if we should create a cons string. | |
| 2341 IfBuilder if_createcons(this); | |
| 2342 if_createcons.If<HCompareNumericAndBranch>( | |
| 2343 length, Add<HConstant>(ConsString::kMinLength), Token::GTE); | |
| 2344 if_createcons.Then(); | |
| 2345 { | |
| 2346 // Create a cons string. | |
| 2347 Push(BuildCreateConsString(length, left, right, allocation_mode)); | |
| 2348 } | |
| 2349 if_createcons.Else(); | |
| 2350 { | |
| 2351 // Determine the string instance types. | |
| 2352 HValue* left_instance_type = AddLoadStringInstanceType(left); | |
| 2353 HValue* right_instance_type = AddLoadStringInstanceType(right); | |
| 2354 | |
| 2355 // Compute union and difference of instance types. | |
| 2356 HValue* ored_instance_types = AddUncasted<HBitwise>( | |
| 2357 Token::BIT_OR, left_instance_type, right_instance_type); | |
| 2358 HValue* xored_instance_types = AddUncasted<HBitwise>( | |
| 2359 Token::BIT_XOR, left_instance_type, right_instance_type); | |
| 2360 | |
| 2361 // Check if both strings have the same encoding and both are | |
| 2362 // sequential. | |
| 2363 IfBuilder if_sameencodingandsequential(this); | |
| 2364 if_sameencodingandsequential.If<HCompareNumericAndBranch>( | |
| 2365 AddUncasted<HBitwise>( | |
| 2366 Token::BIT_AND, xored_instance_types, | |
| 2367 Add<HConstant>(static_cast<int32_t>(kStringEncodingMask))), | |
| 2368 graph()->GetConstant0(), Token::EQ); | |
| 2369 if_sameencodingandsequential.And(); | |
| 2370 STATIC_ASSERT(kSeqStringTag == 0); | |
| 2371 if_sameencodingandsequential.If<HCompareNumericAndBranch>( | |
| 2372 AddUncasted<HBitwise>( | |
| 2373 Token::BIT_AND, ored_instance_types, | |
| 2374 Add<HConstant>(static_cast<int32_t>(kStringRepresentationMask))), | |
| 2375 graph()->GetConstant0(), Token::EQ); | |
| 2376 if_sameencodingandsequential.Then(); | |
| 2377 { | |
| 2378 HConstant* string_map = | |
| 2379 Add<HConstant>(isolate()->factory()->string_map()); | |
| 2380 HConstant* one_byte_string_map = | |
| 2381 Add<HConstant>(isolate()->factory()->one_byte_string_map()); | |
| 2382 | |
| 2383 // Determine map and size depending on whether result is one-byte string. | |
| 2384 IfBuilder if_onebyte(this); | |
| 2385 STATIC_ASSERT(kOneByteStringTag != 0); | |
| 2386 if_onebyte.If<HCompareNumericAndBranch>( | |
| 2387 AddUncasted<HBitwise>( | |
| 2388 Token::BIT_AND, ored_instance_types, | |
| 2389 Add<HConstant>(static_cast<int32_t>(kStringEncodingMask))), | |
| 2390 graph()->GetConstant0(), Token::NE); | |
| 2391 if_onebyte.Then(); | |
| 2392 { | |
| 2393 // Allocate sequential one-byte string object. | |
| 2394 Push(length); | |
| 2395 Push(one_byte_string_map); | |
| 2396 } | |
| 2397 if_onebyte.Else(); | |
| 2398 { | |
| 2399 // Allocate sequential two-byte string object. | |
| 2400 HValue* size = AddUncasted<HShl>(length, graph()->GetConstant1()); | |
| 2401 size->ClearFlag(HValue::kCanOverflow); | |
| 2402 size->SetFlag(HValue::kUint32); | |
| 2403 Push(size); | |
| 2404 Push(string_map); | |
| 2405 } | |
| 2406 if_onebyte.End(); | |
| 2407 HValue* map = Pop(); | |
| 2408 | |
| 2409 // Calculate the number of bytes needed for the characters in the | |
| 2410 // string while observing object alignment. | |
| 2411 STATIC_ASSERT((SeqString::kHeaderSize & kObjectAlignmentMask) == 0); | |
| 2412 HValue* size = BuildObjectSizeAlignment(Pop(), SeqString::kHeaderSize); | |
| 2413 | |
| 2414 IfBuilder if_size(this); | |
| 2415 if_size.If<HCompareNumericAndBranch>( | |
| 2416 size, Add<HConstant>(Page::kMaxRegularHeapObjectSize), Token::LT); | |
| 2417 if_size.Then(); | |
| 2418 { | |
| 2419 // Allocate the string object. HAllocate does not care whether we pass | |
| 2420 // STRING_TYPE or ONE_BYTE_STRING_TYPE here, so we just use STRING_TYPE. | |
| 2421 HAllocate* result = | |
| 2422 BuildAllocate(size, HType::String(), STRING_TYPE, allocation_mode); | |
| 2423 Add<HStoreNamedField>(result, HObjectAccess::ForMap(), map); | |
| 2424 | |
| 2425 // Initialize the string fields. | |
| 2426 Add<HStoreNamedField>(result, HObjectAccess::ForStringHashField(), | |
| 2427 Add<HConstant>(String::kEmptyHashField)); | |
| 2428 Add<HStoreNamedField>(result, HObjectAccess::ForStringLength(), length); | |
| 2429 | |
| 2430 // Copy characters to the result string. | |
| 2431 IfBuilder if_twobyte(this); | |
| 2432 if_twobyte.If<HCompareObjectEqAndBranch>(map, string_map); | |
| 2433 if_twobyte.Then(); | |
| 2434 { | |
| 2435 // Copy characters from the left string. | |
| 2436 BuildCopySeqStringChars( | |
| 2437 left, graph()->GetConstant0(), String::TWO_BYTE_ENCODING, result, | |
| 2438 graph()->GetConstant0(), String::TWO_BYTE_ENCODING, left_length); | |
| 2439 | |
| 2440 // Copy characters from the right string. | |
| 2441 BuildCopySeqStringChars( | |
| 2442 right, graph()->GetConstant0(), String::TWO_BYTE_ENCODING, result, | |
| 2443 left_length, String::TWO_BYTE_ENCODING, right_length); | |
| 2444 } | |
| 2445 if_twobyte.Else(); | |
| 2446 { | |
| 2447 // Copy characters from the left string. | |
| 2448 BuildCopySeqStringChars( | |
| 2449 left, graph()->GetConstant0(), String::ONE_BYTE_ENCODING, result, | |
| 2450 graph()->GetConstant0(), String::ONE_BYTE_ENCODING, left_length); | |
| 2451 | |
| 2452 // Copy characters from the right string. | |
| 2453 BuildCopySeqStringChars( | |
| 2454 right, graph()->GetConstant0(), String::ONE_BYTE_ENCODING, result, | |
| 2455 left_length, String::ONE_BYTE_ENCODING, right_length); | |
| 2456 } | |
| 2457 if_twobyte.End(); | |
| 2458 | |
| 2459 // Count the native string addition. | |
| 2460 AddIncrementCounter(isolate()->counters()->string_add_native()); | |
| 2461 | |
| 2462 // Return the sequential string. | |
| 2463 Push(result); | |
| 2464 } | |
| 2465 if_size.Else(); | |
| 2466 { | |
| 2467 // Fallback to the runtime to add the two strings. The string has to be | |
| 2468 // allocated in LO space. | |
| 2469 Add<HPushArguments>(left, right); | |
| 2470 Push(Add<HCallRuntime>(Runtime::FunctionForId(Runtime::kStringAdd), 2)); | |
| 2471 } | |
| 2472 if_size.End(); | |
| 2473 } | |
| 2474 if_sameencodingandsequential.Else(); | |
| 2475 { | |
| 2476 // Fallback to the runtime to add the two strings. | |
| 2477 Add<HPushArguments>(left, right); | |
| 2478 Push(Add<HCallRuntime>(Runtime::FunctionForId(Runtime::kStringAdd), 2)); | |
| 2479 } | |
| 2480 if_sameencodingandsequential.End(); | |
| 2481 } | |
| 2482 if_createcons.End(); | |
| 2483 | |
| 2484 return Pop(); | |
| 2485 } | |
| 2486 | |
| 2487 | |
| 2488 HValue* HGraphBuilder::BuildStringAdd( | |
| 2489 HValue* left, | |
| 2490 HValue* right, | |
| 2491 HAllocationMode allocation_mode) { | |
| 2492 NoObservableSideEffectsScope no_effects(this); | |
| 2493 | |
| 2494 // Determine string lengths. | |
| 2495 HValue* left_length = AddLoadStringLength(left); | |
| 2496 HValue* right_length = AddLoadStringLength(right); | |
| 2497 | |
| 2498 // Check if left string is empty. | |
| 2499 IfBuilder if_leftempty(this); | |
| 2500 if_leftempty.If<HCompareNumericAndBranch>( | |
| 2501 left_length, graph()->GetConstant0(), Token::EQ); | |
| 2502 if_leftempty.Then(); | |
| 2503 { | |
| 2504 // Count the native string addition. | |
| 2505 AddIncrementCounter(isolate()->counters()->string_add_native()); | |
| 2506 | |
| 2507 // Just return the right string. | |
| 2508 Push(right); | |
| 2509 } | |
| 2510 if_leftempty.Else(); | |
| 2511 { | |
| 2512 // Check if right string is empty. | |
| 2513 IfBuilder if_rightempty(this); | |
| 2514 if_rightempty.If<HCompareNumericAndBranch>( | |
| 2515 right_length, graph()->GetConstant0(), Token::EQ); | |
| 2516 if_rightempty.Then(); | |
| 2517 { | |
| 2518 // Count the native string addition. | |
| 2519 AddIncrementCounter(isolate()->counters()->string_add_native()); | |
| 2520 | |
| 2521 // Just return the left string. | |
| 2522 Push(left); | |
| 2523 } | |
| 2524 if_rightempty.Else(); | |
| 2525 { | |
| 2526 // Add the two non-empty strings. | |
| 2527 Push(BuildUncheckedStringAdd(left, right, allocation_mode)); | |
| 2528 } | |
| 2529 if_rightempty.End(); | |
| 2530 } | |
| 2531 if_leftempty.End(); | |
| 2532 | |
| 2533 return Pop(); | |
| 2534 } | |
| 2535 | |
| 2536 | |
| 2537 HInstruction* HGraphBuilder::BuildUncheckedMonomorphicElementAccess( | |
| 2538 HValue* checked_object, | |
| 2539 HValue* key, | |
| 2540 HValue* val, | |
| 2541 bool is_js_array, | |
| 2542 ElementsKind elements_kind, | |
| 2543 PropertyAccessType access_type, | |
| 2544 LoadKeyedHoleMode load_mode, | |
| 2545 KeyedAccessStoreMode store_mode) { | |
| 2546 DCHECK(top_info()->IsStub() || checked_object->IsCompareMap() || | |
| 2547 checked_object->IsCheckMaps()); | |
| 2548 DCHECK(!IsFixedTypedArrayElementsKind(elements_kind) || !is_js_array); | |
| 2549 // No GVNFlag is necessary for ElementsKind if there is an explicit dependency | |
| 2550 // on a HElementsTransition instruction. The flag can also be removed if the | |
| 2551 // map to check has FAST_HOLEY_ELEMENTS, since there can be no further | |
| 2552 // ElementsKind transitions. Finally, the dependency can be removed for stores | |
| 2553 // for FAST_ELEMENTS, since a transition to HOLEY elements won't change the | |
| 2554 // generated store code. | |
| 2555 if ((elements_kind == FAST_HOLEY_ELEMENTS) || | |
| 2556 (elements_kind == FAST_ELEMENTS && access_type == STORE)) { | |
| 2557 checked_object->ClearDependsOnFlag(kElementsKind); | |
| 2558 } | |
| 2559 | |
| 2560 bool fast_smi_only_elements = IsFastSmiElementsKind(elements_kind); | |
| 2561 bool fast_elements = IsFastObjectElementsKind(elements_kind); | |
| 2562 HValue* elements = AddLoadElements(checked_object); | |
| 2563 if (access_type == STORE && (fast_elements || fast_smi_only_elements) && | |
| 2564 store_mode != STORE_NO_TRANSITION_HANDLE_COW) { | |
| 2565 HCheckMaps* check_cow_map = Add<HCheckMaps>( | |
| 2566 elements, isolate()->factory()->fixed_array_map()); | |
| 2567 check_cow_map->ClearDependsOnFlag(kElementsKind); | |
| 2568 } | |
| 2569 HInstruction* length = NULL; | |
| 2570 if (is_js_array) { | |
| 2571 length = Add<HLoadNamedField>( | |
| 2572 checked_object->ActualValue(), checked_object, | |
| 2573 HObjectAccess::ForArrayLength(elements_kind)); | |
| 2574 } else { | |
| 2575 length = AddLoadFixedArrayLength(elements); | |
| 2576 } | |
| 2577 length->set_type(HType::Smi()); | |
| 2578 HValue* checked_key = NULL; | |
| 2579 if (IsFixedTypedArrayElementsKind(elements_kind)) { | |
| 2580 checked_object = Add<HCheckArrayBufferNotNeutered>(checked_object); | |
| 2581 | |
| 2582 HValue* external_pointer = Add<HLoadNamedField>( | |
| 2583 elements, nullptr, | |
| 2584 HObjectAccess::ForFixedTypedArrayBaseExternalPointer()); | |
| 2585 HValue* base_pointer = Add<HLoadNamedField>( | |
| 2586 elements, nullptr, HObjectAccess::ForFixedTypedArrayBaseBasePointer()); | |
| 2587 HValue* backing_store = AddUncasted<HAdd>( | |
| 2588 external_pointer, base_pointer, Strength::WEAK, AddOfExternalAndTagged); | |
| 2589 | |
| 2590 if (store_mode == STORE_NO_TRANSITION_IGNORE_OUT_OF_BOUNDS) { | |
| 2591 NoObservableSideEffectsScope no_effects(this); | |
| 2592 IfBuilder length_checker(this); | |
| 2593 length_checker.If<HCompareNumericAndBranch>(key, length, Token::LT); | |
| 2594 length_checker.Then(); | |
| 2595 IfBuilder negative_checker(this); | |
| 2596 HValue* bounds_check = negative_checker.If<HCompareNumericAndBranch>( | |
| 2597 key, graph()->GetConstant0(), Token::GTE); | |
| 2598 negative_checker.Then(); | |
| 2599 HInstruction* result = AddElementAccess( | |
| 2600 backing_store, key, val, bounds_check, elements_kind, access_type); | |
| 2601 negative_checker.ElseDeopt(Deoptimizer::kNegativeKeyEncountered); | |
| 2602 negative_checker.End(); | |
| 2603 length_checker.End(); | |
| 2604 return result; | |
| 2605 } else { | |
| 2606 DCHECK(store_mode == STANDARD_STORE); | |
| 2607 checked_key = Add<HBoundsCheck>(key, length); | |
| 2608 return AddElementAccess( | |
| 2609 backing_store, checked_key, val, | |
| 2610 checked_object, elements_kind, access_type); | |
| 2611 } | |
| 2612 } | |
| 2613 DCHECK(fast_smi_only_elements || | |
| 2614 fast_elements || | |
| 2615 IsFastDoubleElementsKind(elements_kind)); | |
| 2616 | |
| 2617 // In case val is stored into a fast smi array, assure that the value is a smi | |
| 2618 // before manipulating the backing store. Otherwise the actual store may | |
| 2619 // deopt, leaving the backing store in an invalid state. | |
| 2620 if (access_type == STORE && IsFastSmiElementsKind(elements_kind) && | |
| 2621 !val->type().IsSmi()) { | |
| 2622 val = AddUncasted<HForceRepresentation>(val, Representation::Smi()); | |
| 2623 } | |
| 2624 | |
| 2625 if (IsGrowStoreMode(store_mode)) { | |
| 2626 NoObservableSideEffectsScope no_effects(this); | |
| 2627 Representation representation = HStoreKeyed::RequiredValueRepresentation( | |
| 2628 elements_kind, STORE_TO_INITIALIZED_ENTRY); | |
| 2629 val = AddUncasted<HForceRepresentation>(val, representation); | |
| 2630 elements = BuildCheckForCapacityGrow(checked_object, elements, | |
| 2631 elements_kind, length, key, | |
| 2632 is_js_array, access_type); | |
| 2633 checked_key = key; | |
| 2634 } else { | |
| 2635 checked_key = Add<HBoundsCheck>(key, length); | |
| 2636 | |
| 2637 if (access_type == STORE && (fast_elements || fast_smi_only_elements)) { | |
| 2638 if (store_mode == STORE_NO_TRANSITION_HANDLE_COW) { | |
| 2639 NoObservableSideEffectsScope no_effects(this); | |
| 2640 elements = BuildCopyElementsOnWrite(checked_object, elements, | |
| 2641 elements_kind, length); | |
| 2642 } else { | |
| 2643 HCheckMaps* check_cow_map = Add<HCheckMaps>( | |
| 2644 elements, isolate()->factory()->fixed_array_map()); | |
| 2645 check_cow_map->ClearDependsOnFlag(kElementsKind); | |
| 2646 } | |
| 2647 } | |
| 2648 } | |
| 2649 return AddElementAccess(elements, checked_key, val, checked_object, | |
| 2650 elements_kind, access_type, load_mode); | |
| 2651 } | |
| 2652 | |
| 2653 | |
| 2654 HValue* HGraphBuilder::BuildAllocateArrayFromLength( | |
| 2655 JSArrayBuilder* array_builder, | |
| 2656 HValue* length_argument) { | |
| 2657 if (length_argument->IsConstant() && | |
| 2658 HConstant::cast(length_argument)->HasSmiValue()) { | |
| 2659 int array_length = HConstant::cast(length_argument)->Integer32Value(); | |
| 2660 if (array_length == 0) { | |
| 2661 return array_builder->AllocateEmptyArray(); | |
| 2662 } else { | |
| 2663 return array_builder->AllocateArray(length_argument, | |
| 2664 array_length, | |
| 2665 length_argument); | |
| 2666 } | |
| 2667 } | |
| 2668 | |
| 2669 HValue* constant_zero = graph()->GetConstant0(); | |
| 2670 HConstant* max_alloc_length = | |
| 2671 Add<HConstant>(JSArray::kInitialMaxFastElementArray); | |
| 2672 HInstruction* checked_length = Add<HBoundsCheck>(length_argument, | |
| 2673 max_alloc_length); | |
| 2674 IfBuilder if_builder(this); | |
| 2675 if_builder.If<HCompareNumericAndBranch>(checked_length, constant_zero, | |
| 2676 Token::EQ); | |
| 2677 if_builder.Then(); | |
| 2678 const int initial_capacity = JSArray::kPreallocatedArrayElements; | |
| 2679 HConstant* initial_capacity_node = Add<HConstant>(initial_capacity); | |
| 2680 Push(initial_capacity_node); // capacity | |
| 2681 Push(constant_zero); // length | |
| 2682 if_builder.Else(); | |
| 2683 if (!(top_info()->IsStub()) && | |
| 2684 IsFastPackedElementsKind(array_builder->kind())) { | |
| 2685 // We'll come back later with better (holey) feedback. | |
| 2686 if_builder.Deopt( | |
| 2687 Deoptimizer::kHoleyArrayDespitePackedElements_kindFeedback); | |
| 2688 } else { | |
| 2689 Push(checked_length); // capacity | |
| 2690 Push(checked_length); // length | |
| 2691 } | |
| 2692 if_builder.End(); | |
| 2693 | |
| 2694 // Figure out total size | |
| 2695 HValue* length = Pop(); | |
| 2696 HValue* capacity = Pop(); | |
| 2697 return array_builder->AllocateArray(capacity, max_alloc_length, length); | |
| 2698 } | |
| 2699 | |
| 2700 | |
| 2701 HValue* HGraphBuilder::BuildCalculateElementsSize(ElementsKind kind, | |
| 2702 HValue* capacity) { | |
| 2703 int elements_size = IsFastDoubleElementsKind(kind) | |
| 2704 ? kDoubleSize | |
| 2705 : kPointerSize; | |
| 2706 | |
| 2707 HConstant* elements_size_value = Add<HConstant>(elements_size); | |
| 2708 HInstruction* mul = | |
| 2709 HMul::NewImul(isolate(), zone(), context(), capacity->ActualValue(), | |
| 2710 elements_size_value); | |
| 2711 AddInstruction(mul); | |
| 2712 mul->ClearFlag(HValue::kCanOverflow); | |
| 2713 | |
| 2714 STATIC_ASSERT(FixedDoubleArray::kHeaderSize == FixedArray::kHeaderSize); | |
| 2715 | |
| 2716 HConstant* header_size = Add<HConstant>(FixedArray::kHeaderSize); | |
| 2717 HValue* total_size = AddUncasted<HAdd>(mul, header_size); | |
| 2718 total_size->ClearFlag(HValue::kCanOverflow); | |
| 2719 return total_size; | |
| 2720 } | |
| 2721 | |
| 2722 | |
| 2723 HAllocate* HGraphBuilder::AllocateJSArrayObject(AllocationSiteMode mode) { | |
| 2724 int base_size = JSArray::kSize; | |
| 2725 if (mode == TRACK_ALLOCATION_SITE) { | |
| 2726 base_size += AllocationMemento::kSize; | |
| 2727 } | |
| 2728 HConstant* size_in_bytes = Add<HConstant>(base_size); | |
| 2729 return Add<HAllocate>( | |
| 2730 size_in_bytes, HType::JSArray(), NOT_TENURED, JS_OBJECT_TYPE); | |
| 2731 } | |
| 2732 | |
| 2733 | |
| 2734 HConstant* HGraphBuilder::EstablishElementsAllocationSize( | |
| 2735 ElementsKind kind, | |
| 2736 int capacity) { | |
| 2737 int base_size = IsFastDoubleElementsKind(kind) | |
| 2738 ? FixedDoubleArray::SizeFor(capacity) | |
| 2739 : FixedArray::SizeFor(capacity); | |
| 2740 | |
| 2741 return Add<HConstant>(base_size); | |
| 2742 } | |
| 2743 | |
| 2744 | |
| 2745 HAllocate* HGraphBuilder::BuildAllocateElements(ElementsKind kind, | |
| 2746 HValue* size_in_bytes) { | |
| 2747 InstanceType instance_type = IsFastDoubleElementsKind(kind) | |
| 2748 ? FIXED_DOUBLE_ARRAY_TYPE | |
| 2749 : FIXED_ARRAY_TYPE; | |
| 2750 | |
| 2751 return Add<HAllocate>(size_in_bytes, HType::HeapObject(), NOT_TENURED, | |
| 2752 instance_type); | |
| 2753 } | |
| 2754 | |
| 2755 | |
| 2756 void HGraphBuilder::BuildInitializeElementsHeader(HValue* elements, | |
| 2757 ElementsKind kind, | |
| 2758 HValue* capacity) { | |
| 2759 Factory* factory = isolate()->factory(); | |
| 2760 Handle<Map> map = IsFastDoubleElementsKind(kind) | |
| 2761 ? factory->fixed_double_array_map() | |
| 2762 : factory->fixed_array_map(); | |
| 2763 | |
| 2764 Add<HStoreNamedField>(elements, HObjectAccess::ForMap(), Add<HConstant>(map)); | |
| 2765 Add<HStoreNamedField>(elements, HObjectAccess::ForFixedArrayLength(), | |
| 2766 capacity); | |
| 2767 } | |
| 2768 | |
| 2769 | |
| 2770 HValue* HGraphBuilder::BuildAllocateAndInitializeArray(ElementsKind kind, | |
| 2771 HValue* capacity) { | |
| 2772 // The HForceRepresentation is to prevent possible deopt on int-smi | |
| 2773 // conversion after allocation but before the new object fields are set. | |
| 2774 capacity = AddUncasted<HForceRepresentation>(capacity, Representation::Smi()); | |
| 2775 HValue* size_in_bytes = BuildCalculateElementsSize(kind, capacity); | |
| 2776 HValue* new_array = BuildAllocateElements(kind, size_in_bytes); | |
| 2777 BuildInitializeElementsHeader(new_array, kind, capacity); | |
| 2778 return new_array; | |
| 2779 } | |
| 2780 | |
| 2781 | |
| 2782 void HGraphBuilder::BuildJSArrayHeader(HValue* array, | |
| 2783 HValue* array_map, | |
| 2784 HValue* elements, | |
| 2785 AllocationSiteMode mode, | |
| 2786 ElementsKind elements_kind, | |
| 2787 HValue* allocation_site_payload, | |
| 2788 HValue* length_field) { | |
| 2789 Add<HStoreNamedField>(array, HObjectAccess::ForMap(), array_map); | |
| 2790 | |
| 2791 HConstant* empty_fixed_array = | |
| 2792 Add<HConstant>(isolate()->factory()->empty_fixed_array()); | |
| 2793 | |
| 2794 Add<HStoreNamedField>( | |
| 2795 array, HObjectAccess::ForPropertiesPointer(), empty_fixed_array); | |
| 2796 | |
| 2797 Add<HStoreNamedField>( | |
| 2798 array, HObjectAccess::ForElementsPointer(), | |
| 2799 elements != NULL ? elements : empty_fixed_array); | |
| 2800 | |
| 2801 Add<HStoreNamedField>( | |
| 2802 array, HObjectAccess::ForArrayLength(elements_kind), length_field); | |
| 2803 | |
| 2804 if (mode == TRACK_ALLOCATION_SITE) { | |
| 2805 BuildCreateAllocationMemento( | |
| 2806 array, Add<HConstant>(JSArray::kSize), allocation_site_payload); | |
| 2807 } | |
| 2808 } | |
| 2809 | |
| 2810 | |
| 2811 HInstruction* HGraphBuilder::AddElementAccess( | |
| 2812 HValue* elements, | |
| 2813 HValue* checked_key, | |
| 2814 HValue* val, | |
| 2815 HValue* dependency, | |
| 2816 ElementsKind elements_kind, | |
| 2817 PropertyAccessType access_type, | |
| 2818 LoadKeyedHoleMode load_mode) { | |
| 2819 if (access_type == STORE) { | |
| 2820 DCHECK(val != NULL); | |
| 2821 if (elements_kind == UINT8_CLAMPED_ELEMENTS) { | |
| 2822 val = Add<HClampToUint8>(val); | |
| 2823 } | |
| 2824 return Add<HStoreKeyed>(elements, checked_key, val, elements_kind, | |
| 2825 STORE_TO_INITIALIZED_ENTRY); | |
| 2826 } | |
| 2827 | |
| 2828 DCHECK(access_type == LOAD); | |
| 2829 DCHECK(val == NULL); | |
| 2830 HLoadKeyed* load = Add<HLoadKeyed>( | |
| 2831 elements, checked_key, dependency, elements_kind, load_mode); | |
| 2832 if (elements_kind == UINT32_ELEMENTS) { | |
| 2833 graph()->RecordUint32Instruction(load); | |
| 2834 } | |
| 2835 return load; | |
| 2836 } | |
| 2837 | |
| 2838 | |
| 2839 HLoadNamedField* HGraphBuilder::AddLoadMap(HValue* object, | |
| 2840 HValue* dependency) { | |
| 2841 return Add<HLoadNamedField>(object, dependency, HObjectAccess::ForMap()); | |
| 2842 } | |
| 2843 | |
| 2844 | |
| 2845 HLoadNamedField* HGraphBuilder::AddLoadElements(HValue* object, | |
| 2846 HValue* dependency) { | |
| 2847 return Add<HLoadNamedField>( | |
| 2848 object, dependency, HObjectAccess::ForElementsPointer()); | |
| 2849 } | |
| 2850 | |
| 2851 | |
| 2852 HLoadNamedField* HGraphBuilder::AddLoadFixedArrayLength( | |
| 2853 HValue* array, | |
| 2854 HValue* dependency) { | |
| 2855 return Add<HLoadNamedField>( | |
| 2856 array, dependency, HObjectAccess::ForFixedArrayLength()); | |
| 2857 } | |
| 2858 | |
| 2859 | |
| 2860 HLoadNamedField* HGraphBuilder::AddLoadArrayLength(HValue* array, | |
| 2861 ElementsKind kind, | |
| 2862 HValue* dependency) { | |
| 2863 return Add<HLoadNamedField>( | |
| 2864 array, dependency, HObjectAccess::ForArrayLength(kind)); | |
| 2865 } | |
| 2866 | |
| 2867 | |
| 2868 HValue* HGraphBuilder::BuildNewElementsCapacity(HValue* old_capacity) { | |
| 2869 HValue* half_old_capacity = AddUncasted<HShr>(old_capacity, | |
| 2870 graph_->GetConstant1()); | |
| 2871 | |
| 2872 HValue* new_capacity = AddUncasted<HAdd>(half_old_capacity, old_capacity); | |
| 2873 new_capacity->ClearFlag(HValue::kCanOverflow); | |
| 2874 | |
| 2875 HValue* min_growth = Add<HConstant>(16); | |
| 2876 | |
| 2877 new_capacity = AddUncasted<HAdd>(new_capacity, min_growth); | |
| 2878 new_capacity->ClearFlag(HValue::kCanOverflow); | |
| 2879 | |
| 2880 return new_capacity; | |
| 2881 } | |
| 2882 | |
| 2883 | |
| 2884 HValue* HGraphBuilder::BuildGrowElementsCapacity(HValue* object, | |
| 2885 HValue* elements, | |
| 2886 ElementsKind kind, | |
| 2887 ElementsKind new_kind, | |
| 2888 HValue* length, | |
| 2889 HValue* new_capacity) { | |
| 2890 Add<HBoundsCheck>(new_capacity, Add<HConstant>( | |
| 2891 (Page::kMaxRegularHeapObjectSize - FixedArray::kHeaderSize) >> | |
| 2892 ElementsKindToShiftSize(new_kind))); | |
| 2893 | |
| 2894 HValue* new_elements = | |
| 2895 BuildAllocateAndInitializeArray(new_kind, new_capacity); | |
| 2896 | |
| 2897 BuildCopyElements(elements, kind, new_elements, | |
| 2898 new_kind, length, new_capacity); | |
| 2899 | |
| 2900 Add<HStoreNamedField>(object, HObjectAccess::ForElementsPointer(), | |
| 2901 new_elements); | |
| 2902 | |
| 2903 return new_elements; | |
| 2904 } | |
| 2905 | |
| 2906 | |
| 2907 void HGraphBuilder::BuildFillElementsWithValue(HValue* elements, | |
| 2908 ElementsKind elements_kind, | |
| 2909 HValue* from, | |
| 2910 HValue* to, | |
| 2911 HValue* value) { | |
| 2912 if (to == NULL) { | |
| 2913 to = AddLoadFixedArrayLength(elements); | |
| 2914 } | |
| 2915 | |
| 2916 // Special loop unfolding case | |
| 2917 STATIC_ASSERT(JSArray::kPreallocatedArrayElements <= | |
| 2918 kElementLoopUnrollThreshold); | |
| 2919 int initial_capacity = -1; | |
| 2920 if (from->IsInteger32Constant() && to->IsInteger32Constant()) { | |
| 2921 int constant_from = from->GetInteger32Constant(); | |
| 2922 int constant_to = to->GetInteger32Constant(); | |
| 2923 | |
| 2924 if (constant_from == 0 && constant_to <= kElementLoopUnrollThreshold) { | |
| 2925 initial_capacity = constant_to; | |
| 2926 } | |
| 2927 } | |
| 2928 | |
| 2929 if (initial_capacity >= 0) { | |
| 2930 for (int i = 0; i < initial_capacity; i++) { | |
| 2931 HInstruction* key = Add<HConstant>(i); | |
| 2932 Add<HStoreKeyed>(elements, key, value, elements_kind); | |
| 2933 } | |
| 2934 } else { | |
| 2935 // Carefully loop backwards so that the "from" remains live through the loop | |
| 2936 // rather than the to. This often corresponds to keeping length live rather | |
| 2937 // then capacity, which helps register allocation, since length is used more | |
| 2938 // other than capacity after filling with holes. | |
| 2939 LoopBuilder builder(this, context(), LoopBuilder::kPostDecrement); | |
| 2940 | |
| 2941 HValue* key = builder.BeginBody(to, from, Token::GT); | |
| 2942 | |
| 2943 HValue* adjusted_key = AddUncasted<HSub>(key, graph()->GetConstant1()); | |
| 2944 adjusted_key->ClearFlag(HValue::kCanOverflow); | |
| 2945 | |
| 2946 Add<HStoreKeyed>(elements, adjusted_key, value, elements_kind); | |
| 2947 | |
| 2948 builder.EndBody(); | |
| 2949 } | |
| 2950 } | |
| 2951 | |
| 2952 | |
| 2953 void HGraphBuilder::BuildFillElementsWithHole(HValue* elements, | |
| 2954 ElementsKind elements_kind, | |
| 2955 HValue* from, | |
| 2956 HValue* to) { | |
| 2957 // Fast elements kinds need to be initialized in case statements below cause a | |
| 2958 // garbage collection. | |
| 2959 | |
| 2960 HValue* hole = IsFastSmiOrObjectElementsKind(elements_kind) | |
| 2961 ? graph()->GetConstantHole() | |
| 2962 : Add<HConstant>(HConstant::kHoleNaN); | |
| 2963 | |
| 2964 // Since we're about to store a hole value, the store instruction below must | |
| 2965 // assume an elements kind that supports heap object values. | |
| 2966 if (IsFastSmiOrObjectElementsKind(elements_kind)) { | |
| 2967 elements_kind = FAST_HOLEY_ELEMENTS; | |
| 2968 } | |
| 2969 | |
| 2970 BuildFillElementsWithValue(elements, elements_kind, from, to, hole); | |
| 2971 } | |
| 2972 | |
| 2973 | |
| 2974 void HGraphBuilder::BuildCopyProperties(HValue* from_properties, | |
| 2975 HValue* to_properties, HValue* length, | |
| 2976 HValue* capacity) { | |
| 2977 ElementsKind kind = FAST_ELEMENTS; | |
| 2978 | |
| 2979 BuildFillElementsWithValue(to_properties, kind, length, capacity, | |
| 2980 graph()->GetConstantUndefined()); | |
| 2981 | |
| 2982 LoopBuilder builder(this, context(), LoopBuilder::kPostDecrement); | |
| 2983 | |
| 2984 HValue* key = builder.BeginBody(length, graph()->GetConstant0(), Token::GT); | |
| 2985 | |
| 2986 key = AddUncasted<HSub>(key, graph()->GetConstant1()); | |
| 2987 key->ClearFlag(HValue::kCanOverflow); | |
| 2988 | |
| 2989 HValue* element = Add<HLoadKeyed>(from_properties, key, nullptr, kind); | |
| 2990 | |
| 2991 Add<HStoreKeyed>(to_properties, key, element, kind); | |
| 2992 | |
| 2993 builder.EndBody(); | |
| 2994 } | |
| 2995 | |
| 2996 | |
| 2997 void HGraphBuilder::BuildCopyElements(HValue* from_elements, | |
| 2998 ElementsKind from_elements_kind, | |
| 2999 HValue* to_elements, | |
| 3000 ElementsKind to_elements_kind, | |
| 3001 HValue* length, | |
| 3002 HValue* capacity) { | |
| 3003 int constant_capacity = -1; | |
| 3004 if (capacity != NULL && | |
| 3005 capacity->IsConstant() && | |
| 3006 HConstant::cast(capacity)->HasInteger32Value()) { | |
| 3007 int constant_candidate = HConstant::cast(capacity)->Integer32Value(); | |
| 3008 if (constant_candidate <= kElementLoopUnrollThreshold) { | |
| 3009 constant_capacity = constant_candidate; | |
| 3010 } | |
| 3011 } | |
| 3012 | |
| 3013 bool pre_fill_with_holes = | |
| 3014 IsFastDoubleElementsKind(from_elements_kind) && | |
| 3015 IsFastObjectElementsKind(to_elements_kind); | |
| 3016 if (pre_fill_with_holes) { | |
| 3017 // If the copy might trigger a GC, make sure that the FixedArray is | |
| 3018 // pre-initialized with holes to make sure that it's always in a | |
| 3019 // consistent state. | |
| 3020 BuildFillElementsWithHole(to_elements, to_elements_kind, | |
| 3021 graph()->GetConstant0(), NULL); | |
| 3022 } | |
| 3023 | |
| 3024 if (constant_capacity != -1) { | |
| 3025 // Unroll the loop for small elements kinds. | |
| 3026 for (int i = 0; i < constant_capacity; i++) { | |
| 3027 HValue* key_constant = Add<HConstant>(i); | |
| 3028 HInstruction* value = Add<HLoadKeyed>(from_elements, key_constant, | |
| 3029 nullptr, from_elements_kind); | |
| 3030 Add<HStoreKeyed>(to_elements, key_constant, value, to_elements_kind); | |
| 3031 } | |
| 3032 } else { | |
| 3033 if (!pre_fill_with_holes && | |
| 3034 (capacity == NULL || !length->Equals(capacity))) { | |
| 3035 BuildFillElementsWithHole(to_elements, to_elements_kind, | |
| 3036 length, NULL); | |
| 3037 } | |
| 3038 | |
| 3039 LoopBuilder builder(this, context(), LoopBuilder::kPostDecrement); | |
| 3040 | |
| 3041 HValue* key = builder.BeginBody(length, graph()->GetConstant0(), | |
| 3042 Token::GT); | |
| 3043 | |
| 3044 key = AddUncasted<HSub>(key, graph()->GetConstant1()); | |
| 3045 key->ClearFlag(HValue::kCanOverflow); | |
| 3046 | |
| 3047 HValue* element = Add<HLoadKeyed>(from_elements, key, nullptr, | |
| 3048 from_elements_kind, ALLOW_RETURN_HOLE); | |
| 3049 | |
| 3050 ElementsKind kind = (IsHoleyElementsKind(from_elements_kind) && | |
| 3051 IsFastSmiElementsKind(to_elements_kind)) | |
| 3052 ? FAST_HOLEY_ELEMENTS : to_elements_kind; | |
| 3053 | |
| 3054 if (IsHoleyElementsKind(from_elements_kind) && | |
| 3055 from_elements_kind != to_elements_kind) { | |
| 3056 IfBuilder if_hole(this); | |
| 3057 if_hole.If<HCompareHoleAndBranch>(element); | |
| 3058 if_hole.Then(); | |
| 3059 HConstant* hole_constant = IsFastDoubleElementsKind(to_elements_kind) | |
| 3060 ? Add<HConstant>(HConstant::kHoleNaN) | |
| 3061 : graph()->GetConstantHole(); | |
| 3062 Add<HStoreKeyed>(to_elements, key, hole_constant, kind); | |
| 3063 if_hole.Else(); | |
| 3064 HStoreKeyed* store = Add<HStoreKeyed>(to_elements, key, element, kind); | |
| 3065 store->SetFlag(HValue::kAllowUndefinedAsNaN); | |
| 3066 if_hole.End(); | |
| 3067 } else { | |
| 3068 HStoreKeyed* store = Add<HStoreKeyed>(to_elements, key, element, kind); | |
| 3069 store->SetFlag(HValue::kAllowUndefinedAsNaN); | |
| 3070 } | |
| 3071 | |
| 3072 builder.EndBody(); | |
| 3073 } | |
| 3074 | |
| 3075 Counters* counters = isolate()->counters(); | |
| 3076 AddIncrementCounter(counters->inlined_copied_elements()); | |
| 3077 } | |
| 3078 | |
| 3079 | |
| 3080 HValue* HGraphBuilder::BuildCloneShallowArrayCow(HValue* boilerplate, | |
| 3081 HValue* allocation_site, | |
| 3082 AllocationSiteMode mode, | |
| 3083 ElementsKind kind) { | |
| 3084 HAllocate* array = AllocateJSArrayObject(mode); | |
| 3085 | |
| 3086 HValue* map = AddLoadMap(boilerplate); | |
| 3087 HValue* elements = AddLoadElements(boilerplate); | |
| 3088 HValue* length = AddLoadArrayLength(boilerplate, kind); | |
| 3089 | |
| 3090 BuildJSArrayHeader(array, | |
| 3091 map, | |
| 3092 elements, | |
| 3093 mode, | |
| 3094 FAST_ELEMENTS, | |
| 3095 allocation_site, | |
| 3096 length); | |
| 3097 return array; | |
| 3098 } | |
| 3099 | |
| 3100 | |
| 3101 HValue* HGraphBuilder::BuildCloneShallowArrayEmpty(HValue* boilerplate, | |
| 3102 HValue* allocation_site, | |
| 3103 AllocationSiteMode mode) { | |
| 3104 HAllocate* array = AllocateJSArrayObject(mode); | |
| 3105 | |
| 3106 HValue* map = AddLoadMap(boilerplate); | |
| 3107 | |
| 3108 BuildJSArrayHeader(array, | |
| 3109 map, | |
| 3110 NULL, // set elements to empty fixed array | |
| 3111 mode, | |
| 3112 FAST_ELEMENTS, | |
| 3113 allocation_site, | |
| 3114 graph()->GetConstant0()); | |
| 3115 return array; | |
| 3116 } | |
| 3117 | |
| 3118 | |
| 3119 HValue* HGraphBuilder::BuildCloneShallowArrayNonEmpty(HValue* boilerplate, | |
| 3120 HValue* allocation_site, | |
| 3121 AllocationSiteMode mode, | |
| 3122 ElementsKind kind) { | |
| 3123 HValue* boilerplate_elements = AddLoadElements(boilerplate); | |
| 3124 HValue* capacity = AddLoadFixedArrayLength(boilerplate_elements); | |
| 3125 | |
| 3126 // Generate size calculation code here in order to make it dominate | |
| 3127 // the JSArray allocation. | |
| 3128 HValue* elements_size = BuildCalculateElementsSize(kind, capacity); | |
| 3129 | |
| 3130 // Create empty JSArray object for now, store elimination should remove | |
| 3131 // redundant initialization of elements and length fields and at the same | |
| 3132 // time the object will be fully prepared for GC if it happens during | |
| 3133 // elements allocation. | |
| 3134 HValue* result = BuildCloneShallowArrayEmpty( | |
| 3135 boilerplate, allocation_site, mode); | |
| 3136 | |
| 3137 HAllocate* elements = BuildAllocateElements(kind, elements_size); | |
| 3138 | |
| 3139 // This function implicitly relies on the fact that the | |
| 3140 // FastCloneShallowArrayStub is called only for literals shorter than | |
| 3141 // JSArray::kInitialMaxFastElementArray. | |
| 3142 // Can't add HBoundsCheck here because otherwise the stub will eager a frame. | |
| 3143 HConstant* size_upper_bound = EstablishElementsAllocationSize( | |
| 3144 kind, JSArray::kInitialMaxFastElementArray); | |
| 3145 elements->set_size_upper_bound(size_upper_bound); | |
| 3146 | |
| 3147 Add<HStoreNamedField>(result, HObjectAccess::ForElementsPointer(), elements); | |
| 3148 | |
| 3149 // The allocation for the cloned array above causes register pressure on | |
| 3150 // machines with low register counts. Force a reload of the boilerplate | |
| 3151 // elements here to free up a register for the allocation to avoid unnecessary | |
| 3152 // spillage. | |
| 3153 boilerplate_elements = AddLoadElements(boilerplate); | |
| 3154 boilerplate_elements->SetFlag(HValue::kCantBeReplaced); | |
| 3155 | |
| 3156 // Copy the elements array header. | |
| 3157 for (int i = 0; i < FixedArrayBase::kHeaderSize; i += kPointerSize) { | |
| 3158 HObjectAccess access = HObjectAccess::ForFixedArrayHeader(i); | |
| 3159 Add<HStoreNamedField>( | |
| 3160 elements, access, | |
| 3161 Add<HLoadNamedField>(boilerplate_elements, nullptr, access)); | |
| 3162 } | |
| 3163 | |
| 3164 // And the result of the length | |
| 3165 HValue* length = AddLoadArrayLength(boilerplate, kind); | |
| 3166 Add<HStoreNamedField>(result, HObjectAccess::ForArrayLength(kind), length); | |
| 3167 | |
| 3168 BuildCopyElements(boilerplate_elements, kind, elements, | |
| 3169 kind, length, NULL); | |
| 3170 return result; | |
| 3171 } | |
| 3172 | |
| 3173 | |
| 3174 void HGraphBuilder::BuildCompareNil(HValue* value, Type* type, | |
| 3175 HIfContinuation* continuation, | |
| 3176 MapEmbedding map_embedding) { | |
| 3177 IfBuilder if_nil(this); | |
| 3178 bool some_case_handled = false; | |
| 3179 bool some_case_missing = false; | |
| 3180 | |
| 3181 if (type->Maybe(Type::Null())) { | |
| 3182 if (some_case_handled) if_nil.Or(); | |
| 3183 if_nil.If<HCompareObjectEqAndBranch>(value, graph()->GetConstantNull()); | |
| 3184 some_case_handled = true; | |
| 3185 } else { | |
| 3186 some_case_missing = true; | |
| 3187 } | |
| 3188 | |
| 3189 if (type->Maybe(Type::Undefined())) { | |
| 3190 if (some_case_handled) if_nil.Or(); | |
| 3191 if_nil.If<HCompareObjectEqAndBranch>(value, | |
| 3192 graph()->GetConstantUndefined()); | |
| 3193 some_case_handled = true; | |
| 3194 } else { | |
| 3195 some_case_missing = true; | |
| 3196 } | |
| 3197 | |
| 3198 if (type->Maybe(Type::Undetectable())) { | |
| 3199 if (some_case_handled) if_nil.Or(); | |
| 3200 if_nil.If<HIsUndetectableAndBranch>(value); | |
| 3201 some_case_handled = true; | |
| 3202 } else { | |
| 3203 some_case_missing = true; | |
| 3204 } | |
| 3205 | |
| 3206 if (some_case_missing) { | |
| 3207 if_nil.Then(); | |
| 3208 if_nil.Else(); | |
| 3209 if (type->NumClasses() == 1) { | |
| 3210 BuildCheckHeapObject(value); | |
| 3211 // For ICs, the map checked below is a sentinel map that gets replaced by | |
| 3212 // the monomorphic map when the code is used as a template to generate a | |
| 3213 // new IC. For optimized functions, there is no sentinel map, the map | |
| 3214 // emitted below is the actual monomorphic map. | |
| 3215 if (map_embedding == kEmbedMapsViaWeakCells) { | |
| 3216 HValue* cell = | |
| 3217 Add<HConstant>(Map::WeakCellForMap(type->Classes().Current())); | |
| 3218 HValue* expected_map = Add<HLoadNamedField>( | |
| 3219 cell, nullptr, HObjectAccess::ForWeakCellValue()); | |
| 3220 HValue* map = | |
| 3221 Add<HLoadNamedField>(value, nullptr, HObjectAccess::ForMap()); | |
| 3222 IfBuilder map_check(this); | |
| 3223 map_check.IfNot<HCompareObjectEqAndBranch>(expected_map, map); | |
| 3224 map_check.ThenDeopt(Deoptimizer::kUnknownMap); | |
| 3225 map_check.End(); | |
| 3226 } else { | |
| 3227 DCHECK(map_embedding == kEmbedMapsDirectly); | |
| 3228 Add<HCheckMaps>(value, type->Classes().Current()); | |
| 3229 } | |
| 3230 } else { | |
| 3231 if_nil.Deopt(Deoptimizer::kTooManyUndetectableTypes); | |
| 3232 } | |
| 3233 } | |
| 3234 | |
| 3235 if_nil.CaptureContinuation(continuation); | |
| 3236 } | |
| 3237 | |
| 3238 | |
| 3239 void HGraphBuilder::BuildCreateAllocationMemento( | |
| 3240 HValue* previous_object, | |
| 3241 HValue* previous_object_size, | |
| 3242 HValue* allocation_site) { | |
| 3243 DCHECK(allocation_site != NULL); | |
| 3244 HInnerAllocatedObject* allocation_memento = Add<HInnerAllocatedObject>( | |
| 3245 previous_object, previous_object_size, HType::HeapObject()); | |
| 3246 AddStoreMapConstant( | |
| 3247 allocation_memento, isolate()->factory()->allocation_memento_map()); | |
| 3248 Add<HStoreNamedField>( | |
| 3249 allocation_memento, | |
| 3250 HObjectAccess::ForAllocationMementoSite(), | |
| 3251 allocation_site); | |
| 3252 if (FLAG_allocation_site_pretenuring) { | |
| 3253 HValue* memento_create_count = | |
| 3254 Add<HLoadNamedField>(allocation_site, nullptr, | |
| 3255 HObjectAccess::ForAllocationSiteOffset( | |
| 3256 AllocationSite::kPretenureCreateCountOffset)); | |
| 3257 memento_create_count = AddUncasted<HAdd>( | |
| 3258 memento_create_count, graph()->GetConstant1()); | |
| 3259 // This smi value is reset to zero after every gc, overflow isn't a problem | |
| 3260 // since the counter is bounded by the new space size. | |
| 3261 memento_create_count->ClearFlag(HValue::kCanOverflow); | |
| 3262 Add<HStoreNamedField>( | |
| 3263 allocation_site, HObjectAccess::ForAllocationSiteOffset( | |
| 3264 AllocationSite::kPretenureCreateCountOffset), memento_create_count); | |
| 3265 } | |
| 3266 } | |
| 3267 | |
| 3268 | |
| 3269 HInstruction* HGraphBuilder::BuildGetNativeContext() { | |
| 3270 // Get the global object, then the native context | |
| 3271 HValue* global_object = Add<HLoadNamedField>( | |
| 3272 context(), nullptr, | |
| 3273 HObjectAccess::ForContextSlot(Context::GLOBAL_OBJECT_INDEX)); | |
| 3274 return Add<HLoadNamedField>(global_object, nullptr, | |
| 3275 HObjectAccess::ForObservableJSObjectOffset( | |
| 3276 GlobalObject::kNativeContextOffset)); | |
| 3277 } | |
| 3278 | |
| 3279 | |
| 3280 HInstruction* HGraphBuilder::BuildGetNativeContext(HValue* closure) { | |
| 3281 // Get the global object, then the native context | |
| 3282 HInstruction* context = Add<HLoadNamedField>( | |
| 3283 closure, nullptr, HObjectAccess::ForFunctionContextPointer()); | |
| 3284 HInstruction* global_object = Add<HLoadNamedField>( | |
| 3285 context, nullptr, | |
| 3286 HObjectAccess::ForContextSlot(Context::GLOBAL_OBJECT_INDEX)); | |
| 3287 HObjectAccess access = HObjectAccess::ForObservableJSObjectOffset( | |
| 3288 GlobalObject::kNativeContextOffset); | |
| 3289 return Add<HLoadNamedField>(global_object, nullptr, access); | |
| 3290 } | |
| 3291 | |
| 3292 | |
| 3293 HInstruction* HGraphBuilder::BuildGetScriptContext(int context_index) { | |
| 3294 HValue* native_context = BuildGetNativeContext(); | |
| 3295 HValue* script_context_table = Add<HLoadNamedField>( | |
| 3296 native_context, nullptr, | |
| 3297 HObjectAccess::ForContextSlot(Context::SCRIPT_CONTEXT_TABLE_INDEX)); | |
| 3298 return Add<HLoadNamedField>(script_context_table, nullptr, | |
| 3299 HObjectAccess::ForScriptContext(context_index)); | |
| 3300 } | |
| 3301 | |
| 3302 | |
| 3303 HValue* HGraphBuilder::BuildGetParentContext(HValue* depth, int depth_value) { | |
| 3304 HValue* script_context = context(); | |
| 3305 if (depth != NULL) { | |
| 3306 HValue* zero = graph()->GetConstant0(); | |
| 3307 | |
| 3308 Push(script_context); | |
| 3309 Push(depth); | |
| 3310 | |
| 3311 LoopBuilder loop(this); | |
| 3312 loop.BeginBody(2); // Drop script_context and depth from last environment | |
| 3313 // to appease live range building without simulates. | |
| 3314 depth = Pop(); | |
| 3315 script_context = Pop(); | |
| 3316 | |
| 3317 script_context = Add<HLoadNamedField>( | |
| 3318 script_context, nullptr, | |
| 3319 HObjectAccess::ForContextSlot(Context::PREVIOUS_INDEX)); | |
| 3320 depth = AddUncasted<HSub>(depth, graph()->GetConstant1()); | |
| 3321 depth->ClearFlag(HValue::kCanOverflow); | |
| 3322 | |
| 3323 IfBuilder if_break(this); | |
| 3324 if_break.If<HCompareNumericAndBranch, HValue*>(depth, zero, Token::EQ); | |
| 3325 if_break.Then(); | |
| 3326 { | |
| 3327 Push(script_context); // The result. | |
| 3328 loop.Break(); | |
| 3329 } | |
| 3330 if_break.Else(); | |
| 3331 { | |
| 3332 Push(script_context); | |
| 3333 Push(depth); | |
| 3334 } | |
| 3335 loop.EndBody(); | |
| 3336 if_break.End(); | |
| 3337 | |
| 3338 script_context = Pop(); | |
| 3339 } else if (depth_value > 0) { | |
| 3340 // Unroll the above loop. | |
| 3341 for (int i = 0; i < depth_value; i++) { | |
| 3342 script_context = Add<HLoadNamedField>( | |
| 3343 script_context, nullptr, | |
| 3344 HObjectAccess::ForContextSlot(Context::PREVIOUS_INDEX)); | |
| 3345 } | |
| 3346 } | |
| 3347 return script_context; | |
| 3348 } | |
| 3349 | |
| 3350 | |
| 3351 HInstruction* HGraphBuilder::BuildGetArrayFunction() { | |
| 3352 HInstruction* native_context = BuildGetNativeContext(); | |
| 3353 HInstruction* index = | |
| 3354 Add<HConstant>(static_cast<int32_t>(Context::ARRAY_FUNCTION_INDEX)); | |
| 3355 return Add<HLoadKeyed>(native_context, index, nullptr, FAST_ELEMENTS); | |
| 3356 } | |
| 3357 | |
| 3358 | |
| 3359 HValue* HGraphBuilder::BuildArrayBufferViewFieldAccessor(HValue* object, | |
| 3360 HValue* checked_object, | |
| 3361 FieldIndex index) { | |
| 3362 NoObservableSideEffectsScope scope(this); | |
| 3363 HObjectAccess access = HObjectAccess::ForObservableJSObjectOffset( | |
| 3364 index.offset(), Representation::Tagged()); | |
| 3365 HInstruction* buffer = Add<HLoadNamedField>( | |
| 3366 object, checked_object, HObjectAccess::ForJSArrayBufferViewBuffer()); | |
| 3367 HInstruction* field = Add<HLoadNamedField>(object, checked_object, access); | |
| 3368 | |
| 3369 HInstruction* flags = Add<HLoadNamedField>( | |
| 3370 buffer, nullptr, HObjectAccess::ForJSArrayBufferBitField()); | |
| 3371 HValue* was_neutered_mask = | |
| 3372 Add<HConstant>(1 << JSArrayBuffer::WasNeutered::kShift); | |
| 3373 HValue* was_neutered_test = | |
| 3374 AddUncasted<HBitwise>(Token::BIT_AND, flags, was_neutered_mask); | |
| 3375 | |
| 3376 IfBuilder if_was_neutered(this); | |
| 3377 if_was_neutered.If<HCompareNumericAndBranch>( | |
| 3378 was_neutered_test, graph()->GetConstant0(), Token::NE); | |
| 3379 if_was_neutered.Then(); | |
| 3380 Push(graph()->GetConstant0()); | |
| 3381 if_was_neutered.Else(); | |
| 3382 Push(field); | |
| 3383 if_was_neutered.End(); | |
| 3384 | |
| 3385 return Pop(); | |
| 3386 } | |
| 3387 | |
| 3388 | |
| 3389 HGraphBuilder::JSArrayBuilder::JSArrayBuilder(HGraphBuilder* builder, | |
| 3390 ElementsKind kind, | |
| 3391 HValue* allocation_site_payload, | |
| 3392 HValue* constructor_function, | |
| 3393 AllocationSiteOverrideMode override_mode) : | |
| 3394 builder_(builder), | |
| 3395 kind_(kind), | |
| 3396 allocation_site_payload_(allocation_site_payload), | |
| 3397 constructor_function_(constructor_function) { | |
| 3398 DCHECK(!allocation_site_payload->IsConstant() || | |
| 3399 HConstant::cast(allocation_site_payload)->handle( | |
| 3400 builder_->isolate())->IsAllocationSite()); | |
| 3401 mode_ = override_mode == DISABLE_ALLOCATION_SITES | |
| 3402 ? DONT_TRACK_ALLOCATION_SITE | |
| 3403 : AllocationSite::GetMode(kind); | |
| 3404 } | |
| 3405 | |
| 3406 | |
| 3407 HGraphBuilder::JSArrayBuilder::JSArrayBuilder(HGraphBuilder* builder, | |
| 3408 ElementsKind kind, | |
| 3409 HValue* constructor_function) : | |
| 3410 builder_(builder), | |
| 3411 kind_(kind), | |
| 3412 mode_(DONT_TRACK_ALLOCATION_SITE), | |
| 3413 allocation_site_payload_(NULL), | |
| 3414 constructor_function_(constructor_function) { | |
| 3415 } | |
| 3416 | |
| 3417 | |
| 3418 HValue* HGraphBuilder::JSArrayBuilder::EmitMapCode() { | |
| 3419 if (!builder()->top_info()->IsStub()) { | |
| 3420 // A constant map is fine. | |
| 3421 Handle<Map> map(builder()->isolate()->get_initial_js_array_map(kind_), | |
| 3422 builder()->isolate()); | |
| 3423 return builder()->Add<HConstant>(map); | |
| 3424 } | |
| 3425 | |
| 3426 if (constructor_function_ != NULL && kind_ == GetInitialFastElementsKind()) { | |
| 3427 // No need for a context lookup if the kind_ matches the initial | |
| 3428 // map, because we can just load the map in that case. | |
| 3429 HObjectAccess access = HObjectAccess::ForPrototypeOrInitialMap(); | |
| 3430 return builder()->Add<HLoadNamedField>(constructor_function_, nullptr, | |
| 3431 access); | |
| 3432 } | |
| 3433 | |
| 3434 // TODO(mvstanton): we should always have a constructor function if we | |
| 3435 // are creating a stub. | |
| 3436 HInstruction* native_context = constructor_function_ != NULL | |
| 3437 ? builder()->BuildGetNativeContext(constructor_function_) | |
| 3438 : builder()->BuildGetNativeContext(); | |
| 3439 | |
| 3440 HInstruction* index = builder()->Add<HConstant>( | |
| 3441 static_cast<int32_t>(Context::JS_ARRAY_MAPS_INDEX)); | |
| 3442 | |
| 3443 HInstruction* map_array = | |
| 3444 builder()->Add<HLoadKeyed>(native_context, index, nullptr, FAST_ELEMENTS); | |
| 3445 | |
| 3446 HInstruction* kind_index = builder()->Add<HConstant>(kind_); | |
| 3447 | |
| 3448 return builder()->Add<HLoadKeyed>(map_array, kind_index, nullptr, | |
| 3449 FAST_ELEMENTS); | |
| 3450 } | |
| 3451 | |
| 3452 | |
| 3453 HValue* HGraphBuilder::JSArrayBuilder::EmitInternalMapCode() { | |
| 3454 // Find the map near the constructor function | |
| 3455 HObjectAccess access = HObjectAccess::ForPrototypeOrInitialMap(); | |
| 3456 return builder()->Add<HLoadNamedField>(constructor_function_, nullptr, | |
| 3457 access); | |
| 3458 } | |
| 3459 | |
| 3460 | |
| 3461 HAllocate* HGraphBuilder::JSArrayBuilder::AllocateEmptyArray() { | |
| 3462 HConstant* capacity = builder()->Add<HConstant>(initial_capacity()); | |
| 3463 return AllocateArray(capacity, | |
| 3464 capacity, | |
| 3465 builder()->graph()->GetConstant0()); | |
| 3466 } | |
| 3467 | |
| 3468 | |
| 3469 HAllocate* HGraphBuilder::JSArrayBuilder::AllocateArray( | |
| 3470 HValue* capacity, | |
| 3471 HConstant* capacity_upper_bound, | |
| 3472 HValue* length_field, | |
| 3473 FillMode fill_mode) { | |
| 3474 return AllocateArray(capacity, | |
| 3475 capacity_upper_bound->GetInteger32Constant(), | |
| 3476 length_field, | |
| 3477 fill_mode); | |
| 3478 } | |
| 3479 | |
| 3480 | |
| 3481 HAllocate* HGraphBuilder::JSArrayBuilder::AllocateArray( | |
| 3482 HValue* capacity, | |
| 3483 int capacity_upper_bound, | |
| 3484 HValue* length_field, | |
| 3485 FillMode fill_mode) { | |
| 3486 HConstant* elememts_size_upper_bound = capacity->IsInteger32Constant() | |
| 3487 ? HConstant::cast(capacity) | |
| 3488 : builder()->EstablishElementsAllocationSize(kind_, capacity_upper_bound); | |
| 3489 | |
| 3490 HAllocate* array = AllocateArray(capacity, length_field, fill_mode); | |
| 3491 if (!elements_location_->has_size_upper_bound()) { | |
| 3492 elements_location_->set_size_upper_bound(elememts_size_upper_bound); | |
| 3493 } | |
| 3494 return array; | |
| 3495 } | |
| 3496 | |
| 3497 | |
| 3498 HAllocate* HGraphBuilder::JSArrayBuilder::AllocateArray( | |
| 3499 HValue* capacity, | |
| 3500 HValue* length_field, | |
| 3501 FillMode fill_mode) { | |
| 3502 // These HForceRepresentations are because we store these as fields in the | |
| 3503 // objects we construct, and an int32-to-smi HChange could deopt. Accept | |
| 3504 // the deopt possibility now, before allocation occurs. | |
| 3505 capacity = | |
| 3506 builder()->AddUncasted<HForceRepresentation>(capacity, | |
| 3507 Representation::Smi()); | |
| 3508 length_field = | |
| 3509 builder()->AddUncasted<HForceRepresentation>(length_field, | |
| 3510 Representation::Smi()); | |
| 3511 | |
| 3512 // Generate size calculation code here in order to make it dominate | |
| 3513 // the JSArray allocation. | |
| 3514 HValue* elements_size = | |
| 3515 builder()->BuildCalculateElementsSize(kind_, capacity); | |
| 3516 | |
| 3517 // Bail out for large objects. | |
| 3518 HValue* max_regular_heap_object_size = | |
| 3519 builder()->Add<HConstant>(Page::kMaxRegularHeapObjectSize); | |
| 3520 builder()->Add<HBoundsCheck>(elements_size, max_regular_heap_object_size); | |
| 3521 | |
| 3522 // Allocate (dealing with failure appropriately) | |
| 3523 HAllocate* array_object = builder()->AllocateJSArrayObject(mode_); | |
| 3524 | |
| 3525 // Fill in the fields: map, properties, length | |
| 3526 HValue* map; | |
| 3527 if (allocation_site_payload_ == NULL) { | |
| 3528 map = EmitInternalMapCode(); | |
| 3529 } else { | |
| 3530 map = EmitMapCode(); | |
| 3531 } | |
| 3532 | |
| 3533 builder()->BuildJSArrayHeader(array_object, | |
| 3534 map, | |
| 3535 NULL, // set elements to empty fixed array | |
| 3536 mode_, | |
| 3537 kind_, | |
| 3538 allocation_site_payload_, | |
| 3539 length_field); | |
| 3540 | |
| 3541 // Allocate and initialize the elements | |
| 3542 elements_location_ = builder()->BuildAllocateElements(kind_, elements_size); | |
| 3543 | |
| 3544 builder()->BuildInitializeElementsHeader(elements_location_, kind_, capacity); | |
| 3545 | |
| 3546 // Set the elements | |
| 3547 builder()->Add<HStoreNamedField>( | |
| 3548 array_object, HObjectAccess::ForElementsPointer(), elements_location_); | |
| 3549 | |
| 3550 if (fill_mode == FILL_WITH_HOLE) { | |
| 3551 builder()->BuildFillElementsWithHole(elements_location_, kind_, | |
| 3552 graph()->GetConstant0(), capacity); | |
| 3553 } | |
| 3554 | |
| 3555 return array_object; | |
| 3556 } | |
| 3557 | |
| 3558 | |
| 3559 HValue* HGraphBuilder::AddLoadJSBuiltin(int context_index) { | |
| 3560 HValue* global_object = Add<HLoadNamedField>( | |
| 3561 context(), nullptr, | |
| 3562 HObjectAccess::ForContextSlot(Context::GLOBAL_OBJECT_INDEX)); | |
| 3563 HObjectAccess access = HObjectAccess::ForObservableJSObjectOffset( | |
| 3564 GlobalObject::kNativeContextOffset); | |
| 3565 HValue* native_context = Add<HLoadNamedField>(global_object, nullptr, access); | |
| 3566 HObjectAccess function_access = HObjectAccess::ForContextSlot(context_index); | |
| 3567 return Add<HLoadNamedField>(native_context, nullptr, function_access); | |
| 3568 } | |
| 3569 | |
| 3570 | |
| 3571 HOptimizedGraphBuilder::HOptimizedGraphBuilder(CompilationInfo* info) | |
| 3572 : HGraphBuilder(info), | |
| 3573 function_state_(NULL), | |
| 3574 initial_function_state_(this, info, NORMAL_RETURN, 0), | |
| 3575 ast_context_(NULL), | |
| 3576 break_scope_(NULL), | |
| 3577 inlined_count_(0), | |
| 3578 globals_(10, info->zone()), | |
| 3579 osr_(new(info->zone()) HOsrBuilder(this)) { | |
| 3580 // This is not initialized in the initializer list because the | |
| 3581 // constructor for the initial state relies on function_state_ == NULL | |
| 3582 // to know it's the initial state. | |
| 3583 function_state_ = &initial_function_state_; | |
| 3584 InitializeAstVisitor(info->isolate()); | |
| 3585 if (top_info()->is_tracking_positions()) { | |
| 3586 SetSourcePosition(info->shared_info()->start_position()); | |
| 3587 } | |
| 3588 } | |
| 3589 | |
| 3590 | |
| 3591 HBasicBlock* HOptimizedGraphBuilder::CreateJoin(HBasicBlock* first, | |
| 3592 HBasicBlock* second, | |
| 3593 BailoutId join_id) { | |
| 3594 if (first == NULL) { | |
| 3595 return second; | |
| 3596 } else if (second == NULL) { | |
| 3597 return first; | |
| 3598 } else { | |
| 3599 HBasicBlock* join_block = graph()->CreateBasicBlock(); | |
| 3600 Goto(first, join_block); | |
| 3601 Goto(second, join_block); | |
| 3602 join_block->SetJoinId(join_id); | |
| 3603 return join_block; | |
| 3604 } | |
| 3605 } | |
| 3606 | |
| 3607 | |
| 3608 HBasicBlock* HOptimizedGraphBuilder::JoinContinue(IterationStatement* statement, | |
| 3609 HBasicBlock* exit_block, | |
| 3610 HBasicBlock* continue_block) { | |
| 3611 if (continue_block != NULL) { | |
| 3612 if (exit_block != NULL) Goto(exit_block, continue_block); | |
| 3613 continue_block->SetJoinId(statement->ContinueId()); | |
| 3614 return continue_block; | |
| 3615 } | |
| 3616 return exit_block; | |
| 3617 } | |
| 3618 | |
| 3619 | |
| 3620 HBasicBlock* HOptimizedGraphBuilder::CreateLoop(IterationStatement* statement, | |
| 3621 HBasicBlock* loop_entry, | |
| 3622 HBasicBlock* body_exit, | |
| 3623 HBasicBlock* loop_successor, | |
| 3624 HBasicBlock* break_block) { | |
| 3625 if (body_exit != NULL) Goto(body_exit, loop_entry); | |
| 3626 loop_entry->PostProcessLoopHeader(statement); | |
| 3627 if (break_block != NULL) { | |
| 3628 if (loop_successor != NULL) Goto(loop_successor, break_block); | |
| 3629 break_block->SetJoinId(statement->ExitId()); | |
| 3630 return break_block; | |
| 3631 } | |
| 3632 return loop_successor; | |
| 3633 } | |
| 3634 | |
| 3635 | |
| 3636 // Build a new loop header block and set it as the current block. | |
| 3637 HBasicBlock* HOptimizedGraphBuilder::BuildLoopEntry() { | |
| 3638 HBasicBlock* loop_entry = CreateLoopHeaderBlock(); | |
| 3639 Goto(loop_entry); | |
| 3640 set_current_block(loop_entry); | |
| 3641 return loop_entry; | |
| 3642 } | |
| 3643 | |
| 3644 | |
| 3645 HBasicBlock* HOptimizedGraphBuilder::BuildLoopEntry( | |
| 3646 IterationStatement* statement) { | |
| 3647 HBasicBlock* loop_entry = osr()->HasOsrEntryAt(statement) | |
| 3648 ? osr()->BuildOsrLoopEntry(statement) | |
| 3649 : BuildLoopEntry(); | |
| 3650 return loop_entry; | |
| 3651 } | |
| 3652 | |
| 3653 | |
| 3654 void HBasicBlock::FinishExit(HControlInstruction* instruction, | |
| 3655 SourcePosition position) { | |
| 3656 Finish(instruction, position); | |
| 3657 ClearEnvironment(); | |
| 3658 } | |
| 3659 | |
| 3660 | |
| 3661 std::ostream& operator<<(std::ostream& os, const HBasicBlock& b) { | |
| 3662 return os << "B" << b.block_id(); | |
| 3663 } | |
| 3664 | |
| 3665 | |
| 3666 HGraph::HGraph(CompilationInfo* info) | |
| 3667 : isolate_(info->isolate()), | |
| 3668 next_block_id_(0), | |
| 3669 entry_block_(NULL), | |
| 3670 blocks_(8, info->zone()), | |
| 3671 values_(16, info->zone()), | |
| 3672 phi_list_(NULL), | |
| 3673 uint32_instructions_(NULL), | |
| 3674 osr_(NULL), | |
| 3675 info_(info), | |
| 3676 zone_(info->zone()), | |
| 3677 is_recursive_(false), | |
| 3678 use_optimistic_licm_(false), | |
| 3679 depends_on_empty_array_proto_elements_(false), | |
| 3680 type_change_checksum_(0), | |
| 3681 maximum_environment_size_(0), | |
| 3682 no_side_effects_scope_count_(0), | |
| 3683 disallow_adding_new_values_(false) { | |
| 3684 if (info->IsStub()) { | |
| 3685 CallInterfaceDescriptor descriptor = | |
| 3686 info->code_stub()->GetCallInterfaceDescriptor(); | |
| 3687 start_environment_ = | |
| 3688 new (zone_) HEnvironment(zone_, descriptor.GetRegisterParameterCount()); | |
| 3689 } else { | |
| 3690 if (info->is_tracking_positions()) { | |
| 3691 info->TraceInlinedFunction(info->shared_info(), SourcePosition::Unknown(), | |
| 3692 InlinedFunctionInfo::kNoParentId); | |
| 3693 } | |
| 3694 start_environment_ = | |
| 3695 new(zone_) HEnvironment(NULL, info->scope(), info->closure(), zone_); | |
| 3696 } | |
| 3697 start_environment_->set_ast_id(BailoutId::FunctionContext()); | |
| 3698 entry_block_ = CreateBasicBlock(); | |
| 3699 entry_block_->SetInitialEnvironment(start_environment_); | |
| 3700 } | |
| 3701 | |
| 3702 | |
| 3703 HBasicBlock* HGraph::CreateBasicBlock() { | |
| 3704 HBasicBlock* result = new(zone()) HBasicBlock(this); | |
| 3705 blocks_.Add(result, zone()); | |
| 3706 return result; | |
| 3707 } | |
| 3708 | |
| 3709 | |
| 3710 void HGraph::FinalizeUniqueness() { | |
| 3711 DisallowHeapAllocation no_gc; | |
| 3712 for (int i = 0; i < blocks()->length(); ++i) { | |
| 3713 for (HInstructionIterator it(blocks()->at(i)); !it.Done(); it.Advance()) { | |
| 3714 it.Current()->FinalizeUniqueness(); | |
| 3715 } | |
| 3716 } | |
| 3717 } | |
| 3718 | |
| 3719 | |
| 3720 int HGraph::SourcePositionToScriptPosition(SourcePosition pos) { | |
| 3721 return (FLAG_hydrogen_track_positions && !pos.IsUnknown()) | |
| 3722 ? info()->start_position_for(pos.inlining_id()) + pos.position() | |
| 3723 : pos.raw(); | |
| 3724 } | |
| 3725 | |
| 3726 | |
| 3727 // Block ordering was implemented with two mutually recursive methods, | |
| 3728 // HGraph::Postorder and HGraph::PostorderLoopBlocks. | |
| 3729 // The recursion could lead to stack overflow so the algorithm has been | |
| 3730 // implemented iteratively. | |
| 3731 // At a high level the algorithm looks like this: | |
| 3732 // | |
| 3733 // Postorder(block, loop_header) : { | |
| 3734 // if (block has already been visited or is of another loop) return; | |
| 3735 // mark block as visited; | |
| 3736 // if (block is a loop header) { | |
| 3737 // VisitLoopMembers(block, loop_header); | |
| 3738 // VisitSuccessorsOfLoopHeader(block); | |
| 3739 // } else { | |
| 3740 // VisitSuccessors(block) | |
| 3741 // } | |
| 3742 // put block in result list; | |
| 3743 // } | |
| 3744 // | |
| 3745 // VisitLoopMembers(block, outer_loop_header) { | |
| 3746 // foreach (block b in block loop members) { | |
| 3747 // VisitSuccessorsOfLoopMember(b, outer_loop_header); | |
| 3748 // if (b is loop header) VisitLoopMembers(b); | |
| 3749 // } | |
| 3750 // } | |
| 3751 // | |
| 3752 // VisitSuccessorsOfLoopMember(block, outer_loop_header) { | |
| 3753 // foreach (block b in block successors) Postorder(b, outer_loop_header) | |
| 3754 // } | |
| 3755 // | |
| 3756 // VisitSuccessorsOfLoopHeader(block) { | |
| 3757 // foreach (block b in block successors) Postorder(b, block) | |
| 3758 // } | |
| 3759 // | |
| 3760 // VisitSuccessors(block, loop_header) { | |
| 3761 // foreach (block b in block successors) Postorder(b, loop_header) | |
| 3762 // } | |
| 3763 // | |
| 3764 // The ordering is started calling Postorder(entry, NULL). | |
| 3765 // | |
| 3766 // Each instance of PostorderProcessor represents the "stack frame" of the | |
| 3767 // recursion, and particularly keeps the state of the loop (iteration) of the | |
| 3768 // "Visit..." function it represents. | |
| 3769 // To recycle memory we keep all the frames in a double linked list but | |
| 3770 // this means that we cannot use constructors to initialize the frames. | |
| 3771 // | |
| 3772 class PostorderProcessor : public ZoneObject { | |
| 3773 public: | |
| 3774 // Back link (towards the stack bottom). | |
| 3775 PostorderProcessor* parent() {return father_; } | |
| 3776 // Forward link (towards the stack top). | |
| 3777 PostorderProcessor* child() {return child_; } | |
| 3778 HBasicBlock* block() { return block_; } | |
| 3779 HLoopInformation* loop() { return loop_; } | |
| 3780 HBasicBlock* loop_header() { return loop_header_; } | |
| 3781 | |
| 3782 static PostorderProcessor* CreateEntryProcessor(Zone* zone, | |
| 3783 HBasicBlock* block) { | |
| 3784 PostorderProcessor* result = new(zone) PostorderProcessor(NULL); | |
| 3785 return result->SetupSuccessors(zone, block, NULL); | |
| 3786 } | |
| 3787 | |
| 3788 PostorderProcessor* PerformStep(Zone* zone, | |
| 3789 ZoneList<HBasicBlock*>* order) { | |
| 3790 PostorderProcessor* next = | |
| 3791 PerformNonBacktrackingStep(zone, order); | |
| 3792 if (next != NULL) { | |
| 3793 return next; | |
| 3794 } else { | |
| 3795 return Backtrack(zone, order); | |
| 3796 } | |
| 3797 } | |
| 3798 | |
| 3799 private: | |
| 3800 explicit PostorderProcessor(PostorderProcessor* father) | |
| 3801 : father_(father), child_(NULL), successor_iterator(NULL) { } | |
| 3802 | |
| 3803 // Each enum value states the cycle whose state is kept by this instance. | |
| 3804 enum LoopKind { | |
| 3805 NONE, | |
| 3806 SUCCESSORS, | |
| 3807 SUCCESSORS_OF_LOOP_HEADER, | |
| 3808 LOOP_MEMBERS, | |
| 3809 SUCCESSORS_OF_LOOP_MEMBER | |
| 3810 }; | |
| 3811 | |
| 3812 // Each "Setup..." method is like a constructor for a cycle state. | |
| 3813 PostorderProcessor* SetupSuccessors(Zone* zone, | |
| 3814 HBasicBlock* block, | |
| 3815 HBasicBlock* loop_header) { | |
| 3816 if (block == NULL || block->IsOrdered() || | |
| 3817 block->parent_loop_header() != loop_header) { | |
| 3818 kind_ = NONE; | |
| 3819 block_ = NULL; | |
| 3820 loop_ = NULL; | |
| 3821 loop_header_ = NULL; | |
| 3822 return this; | |
| 3823 } else { | |
| 3824 block_ = block; | |
| 3825 loop_ = NULL; | |
| 3826 block->MarkAsOrdered(); | |
| 3827 | |
| 3828 if (block->IsLoopHeader()) { | |
| 3829 kind_ = SUCCESSORS_OF_LOOP_HEADER; | |
| 3830 loop_header_ = block; | |
| 3831 InitializeSuccessors(); | |
| 3832 PostorderProcessor* result = Push(zone); | |
| 3833 return result->SetupLoopMembers(zone, block, block->loop_information(), | |
| 3834 loop_header); | |
| 3835 } else { | |
| 3836 DCHECK(block->IsFinished()); | |
| 3837 kind_ = SUCCESSORS; | |
| 3838 loop_header_ = loop_header; | |
| 3839 InitializeSuccessors(); | |
| 3840 return this; | |
| 3841 } | |
| 3842 } | |
| 3843 } | |
| 3844 | |
| 3845 PostorderProcessor* SetupLoopMembers(Zone* zone, | |
| 3846 HBasicBlock* block, | |
| 3847 HLoopInformation* loop, | |
| 3848 HBasicBlock* loop_header) { | |
| 3849 kind_ = LOOP_MEMBERS; | |
| 3850 block_ = block; | |
| 3851 loop_ = loop; | |
| 3852 loop_header_ = loop_header; | |
| 3853 InitializeLoopMembers(); | |
| 3854 return this; | |
| 3855 } | |
| 3856 | |
| 3857 PostorderProcessor* SetupSuccessorsOfLoopMember( | |
| 3858 HBasicBlock* block, | |
| 3859 HLoopInformation* loop, | |
| 3860 HBasicBlock* loop_header) { | |
| 3861 kind_ = SUCCESSORS_OF_LOOP_MEMBER; | |
| 3862 block_ = block; | |
| 3863 loop_ = loop; | |
| 3864 loop_header_ = loop_header; | |
| 3865 InitializeSuccessors(); | |
| 3866 return this; | |
| 3867 } | |
| 3868 | |
| 3869 // This method "allocates" a new stack frame. | |
| 3870 PostorderProcessor* Push(Zone* zone) { | |
| 3871 if (child_ == NULL) { | |
| 3872 child_ = new(zone) PostorderProcessor(this); | |
| 3873 } | |
| 3874 return child_; | |
| 3875 } | |
| 3876 | |
| 3877 void ClosePostorder(ZoneList<HBasicBlock*>* order, Zone* zone) { | |
| 3878 DCHECK(block_->end()->FirstSuccessor() == NULL || | |
| 3879 order->Contains(block_->end()->FirstSuccessor()) || | |
| 3880 block_->end()->FirstSuccessor()->IsLoopHeader()); | |
| 3881 DCHECK(block_->end()->SecondSuccessor() == NULL || | |
| 3882 order->Contains(block_->end()->SecondSuccessor()) || | |
| 3883 block_->end()->SecondSuccessor()->IsLoopHeader()); | |
| 3884 order->Add(block_, zone); | |
| 3885 } | |
| 3886 | |
| 3887 // This method is the basic block to walk up the stack. | |
| 3888 PostorderProcessor* Pop(Zone* zone, | |
| 3889 ZoneList<HBasicBlock*>* order) { | |
| 3890 switch (kind_) { | |
| 3891 case SUCCESSORS: | |
| 3892 case SUCCESSORS_OF_LOOP_HEADER: | |
| 3893 ClosePostorder(order, zone); | |
| 3894 return father_; | |
| 3895 case LOOP_MEMBERS: | |
| 3896 return father_; | |
| 3897 case SUCCESSORS_OF_LOOP_MEMBER: | |
| 3898 if (block()->IsLoopHeader() && block() != loop_->loop_header()) { | |
| 3899 // In this case we need to perform a LOOP_MEMBERS cycle so we | |
| 3900 // initialize it and return this instead of father. | |
| 3901 return SetupLoopMembers(zone, block(), | |
| 3902 block()->loop_information(), loop_header_); | |
| 3903 } else { | |
| 3904 return father_; | |
| 3905 } | |
| 3906 case NONE: | |
| 3907 return father_; | |
| 3908 } | |
| 3909 UNREACHABLE(); | |
| 3910 return NULL; | |
| 3911 } | |
| 3912 | |
| 3913 // Walks up the stack. | |
| 3914 PostorderProcessor* Backtrack(Zone* zone, | |
| 3915 ZoneList<HBasicBlock*>* order) { | |
| 3916 PostorderProcessor* parent = Pop(zone, order); | |
| 3917 while (parent != NULL) { | |
| 3918 PostorderProcessor* next = | |
| 3919 parent->PerformNonBacktrackingStep(zone, order); | |
| 3920 if (next != NULL) { | |
| 3921 return next; | |
| 3922 } else { | |
| 3923 parent = parent->Pop(zone, order); | |
| 3924 } | |
| 3925 } | |
| 3926 return NULL; | |
| 3927 } | |
| 3928 | |
| 3929 PostorderProcessor* PerformNonBacktrackingStep( | |
| 3930 Zone* zone, | |
| 3931 ZoneList<HBasicBlock*>* order) { | |
| 3932 HBasicBlock* next_block; | |
| 3933 switch (kind_) { | |
| 3934 case SUCCESSORS: | |
| 3935 next_block = AdvanceSuccessors(); | |
| 3936 if (next_block != NULL) { | |
| 3937 PostorderProcessor* result = Push(zone); | |
| 3938 return result->SetupSuccessors(zone, next_block, loop_header_); | |
| 3939 } | |
| 3940 break; | |
| 3941 case SUCCESSORS_OF_LOOP_HEADER: | |
| 3942 next_block = AdvanceSuccessors(); | |
| 3943 if (next_block != NULL) { | |
| 3944 PostorderProcessor* result = Push(zone); | |
| 3945 return result->SetupSuccessors(zone, next_block, block()); | |
| 3946 } | |
| 3947 break; | |
| 3948 case LOOP_MEMBERS: | |
| 3949 next_block = AdvanceLoopMembers(); | |
| 3950 if (next_block != NULL) { | |
| 3951 PostorderProcessor* result = Push(zone); | |
| 3952 return result->SetupSuccessorsOfLoopMember(next_block, | |
| 3953 loop_, loop_header_); | |
| 3954 } | |
| 3955 break; | |
| 3956 case SUCCESSORS_OF_LOOP_MEMBER: | |
| 3957 next_block = AdvanceSuccessors(); | |
| 3958 if (next_block != NULL) { | |
| 3959 PostorderProcessor* result = Push(zone); | |
| 3960 return result->SetupSuccessors(zone, next_block, loop_header_); | |
| 3961 } | |
| 3962 break; | |
| 3963 case NONE: | |
| 3964 return NULL; | |
| 3965 } | |
| 3966 return NULL; | |
| 3967 } | |
| 3968 | |
| 3969 // The following two methods implement a "foreach b in successors" cycle. | |
| 3970 void InitializeSuccessors() { | |
| 3971 loop_index = 0; | |
| 3972 loop_length = 0; | |
| 3973 successor_iterator = HSuccessorIterator(block_->end()); | |
| 3974 } | |
| 3975 | |
| 3976 HBasicBlock* AdvanceSuccessors() { | |
| 3977 if (!successor_iterator.Done()) { | |
| 3978 HBasicBlock* result = successor_iterator.Current(); | |
| 3979 successor_iterator.Advance(); | |
| 3980 return result; | |
| 3981 } | |
| 3982 return NULL; | |
| 3983 } | |
| 3984 | |
| 3985 // The following two methods implement a "foreach b in loop members" cycle. | |
| 3986 void InitializeLoopMembers() { | |
| 3987 loop_index = 0; | |
| 3988 loop_length = loop_->blocks()->length(); | |
| 3989 } | |
| 3990 | |
| 3991 HBasicBlock* AdvanceLoopMembers() { | |
| 3992 if (loop_index < loop_length) { | |
| 3993 HBasicBlock* result = loop_->blocks()->at(loop_index); | |
| 3994 loop_index++; | |
| 3995 return result; | |
| 3996 } else { | |
| 3997 return NULL; | |
| 3998 } | |
| 3999 } | |
| 4000 | |
| 4001 LoopKind kind_; | |
| 4002 PostorderProcessor* father_; | |
| 4003 PostorderProcessor* child_; | |
| 4004 HLoopInformation* loop_; | |
| 4005 HBasicBlock* block_; | |
| 4006 HBasicBlock* loop_header_; | |
| 4007 int loop_index; | |
| 4008 int loop_length; | |
| 4009 HSuccessorIterator successor_iterator; | |
| 4010 }; | |
| 4011 | |
| 4012 | |
| 4013 void HGraph::OrderBlocks() { | |
| 4014 CompilationPhase phase("H_Block ordering", info()); | |
| 4015 | |
| 4016 #ifdef DEBUG | |
| 4017 // Initially the blocks must not be ordered. | |
| 4018 for (int i = 0; i < blocks_.length(); ++i) { | |
| 4019 DCHECK(!blocks_[i]->IsOrdered()); | |
| 4020 } | |
| 4021 #endif | |
| 4022 | |
| 4023 PostorderProcessor* postorder = | |
| 4024 PostorderProcessor::CreateEntryProcessor(zone(), blocks_[0]); | |
| 4025 blocks_.Rewind(0); | |
| 4026 while (postorder) { | |
| 4027 postorder = postorder->PerformStep(zone(), &blocks_); | |
| 4028 } | |
| 4029 | |
| 4030 #ifdef DEBUG | |
| 4031 // Now all blocks must be marked as ordered. | |
| 4032 for (int i = 0; i < blocks_.length(); ++i) { | |
| 4033 DCHECK(blocks_[i]->IsOrdered()); | |
| 4034 } | |
| 4035 #endif | |
| 4036 | |
| 4037 // Reverse block list and assign block IDs. | |
| 4038 for (int i = 0, j = blocks_.length(); --j >= i; ++i) { | |
| 4039 HBasicBlock* bi = blocks_[i]; | |
| 4040 HBasicBlock* bj = blocks_[j]; | |
| 4041 bi->set_block_id(j); | |
| 4042 bj->set_block_id(i); | |
| 4043 blocks_[i] = bj; | |
| 4044 blocks_[j] = bi; | |
| 4045 } | |
| 4046 } | |
| 4047 | |
| 4048 | |
| 4049 void HGraph::AssignDominators() { | |
| 4050 HPhase phase("H_Assign dominators", this); | |
| 4051 for (int i = 0; i < blocks_.length(); ++i) { | |
| 4052 HBasicBlock* block = blocks_[i]; | |
| 4053 if (block->IsLoopHeader()) { | |
| 4054 // Only the first predecessor of a loop header is from outside the loop. | |
| 4055 // All others are back edges, and thus cannot dominate the loop header. | |
| 4056 block->AssignCommonDominator(block->predecessors()->first()); | |
| 4057 block->AssignLoopSuccessorDominators(); | |
| 4058 } else { | |
| 4059 for (int j = blocks_[i]->predecessors()->length() - 1; j >= 0; --j) { | |
| 4060 blocks_[i]->AssignCommonDominator(blocks_[i]->predecessors()->at(j)); | |
| 4061 } | |
| 4062 } | |
| 4063 } | |
| 4064 } | |
| 4065 | |
| 4066 | |
| 4067 bool HGraph::CheckArgumentsPhiUses() { | |
| 4068 int block_count = blocks_.length(); | |
| 4069 for (int i = 0; i < block_count; ++i) { | |
| 4070 for (int j = 0; j < blocks_[i]->phis()->length(); ++j) { | |
| 4071 HPhi* phi = blocks_[i]->phis()->at(j); | |
| 4072 // We don't support phi uses of arguments for now. | |
| 4073 if (phi->CheckFlag(HValue::kIsArguments)) return false; | |
| 4074 } | |
| 4075 } | |
| 4076 return true; | |
| 4077 } | |
| 4078 | |
| 4079 | |
| 4080 bool HGraph::CheckConstPhiUses() { | |
| 4081 int block_count = blocks_.length(); | |
| 4082 for (int i = 0; i < block_count; ++i) { | |
| 4083 for (int j = 0; j < blocks_[i]->phis()->length(); ++j) { | |
| 4084 HPhi* phi = blocks_[i]->phis()->at(j); | |
| 4085 // Check for the hole value (from an uninitialized const). | |
| 4086 for (int k = 0; k < phi->OperandCount(); k++) { | |
| 4087 if (phi->OperandAt(k) == GetConstantHole()) return false; | |
| 4088 } | |
| 4089 } | |
| 4090 } | |
| 4091 return true; | |
| 4092 } | |
| 4093 | |
| 4094 | |
| 4095 void HGraph::CollectPhis() { | |
| 4096 int block_count = blocks_.length(); | |
| 4097 phi_list_ = new(zone()) ZoneList<HPhi*>(block_count, zone()); | |
| 4098 for (int i = 0; i < block_count; ++i) { | |
| 4099 for (int j = 0; j < blocks_[i]->phis()->length(); ++j) { | |
| 4100 HPhi* phi = blocks_[i]->phis()->at(j); | |
| 4101 phi_list_->Add(phi, zone()); | |
| 4102 } | |
| 4103 } | |
| 4104 } | |
| 4105 | |
| 4106 | |
| 4107 // Implementation of utility class to encapsulate the translation state for | |
| 4108 // a (possibly inlined) function. | |
| 4109 FunctionState::FunctionState(HOptimizedGraphBuilder* owner, | |
| 4110 CompilationInfo* info, InliningKind inlining_kind, | |
| 4111 int inlining_id) | |
| 4112 : owner_(owner), | |
| 4113 compilation_info_(info), | |
| 4114 call_context_(NULL), | |
| 4115 inlining_kind_(inlining_kind), | |
| 4116 function_return_(NULL), | |
| 4117 test_context_(NULL), | |
| 4118 entry_(NULL), | |
| 4119 arguments_object_(NULL), | |
| 4120 arguments_elements_(NULL), | |
| 4121 inlining_id_(inlining_id), | |
| 4122 outer_source_position_(SourcePosition::Unknown()), | |
| 4123 outer_(owner->function_state()) { | |
| 4124 if (outer_ != NULL) { | |
| 4125 // State for an inline function. | |
| 4126 if (owner->ast_context()->IsTest()) { | |
| 4127 HBasicBlock* if_true = owner->graph()->CreateBasicBlock(); | |
| 4128 HBasicBlock* if_false = owner->graph()->CreateBasicBlock(); | |
| 4129 if_true->MarkAsInlineReturnTarget(owner->current_block()); | |
| 4130 if_false->MarkAsInlineReturnTarget(owner->current_block()); | |
| 4131 TestContext* outer_test_context = TestContext::cast(owner->ast_context()); | |
| 4132 Expression* cond = outer_test_context->condition(); | |
| 4133 // The AstContext constructor pushed on the context stack. This newed | |
| 4134 // instance is the reason that AstContext can't be BASE_EMBEDDED. | |
| 4135 test_context_ = new TestContext(owner, cond, if_true, if_false); | |
| 4136 } else { | |
| 4137 function_return_ = owner->graph()->CreateBasicBlock(); | |
| 4138 function_return()->MarkAsInlineReturnTarget(owner->current_block()); | |
| 4139 } | |
| 4140 // Set this after possibly allocating a new TestContext above. | |
| 4141 call_context_ = owner->ast_context(); | |
| 4142 } | |
| 4143 | |
| 4144 // Push on the state stack. | |
| 4145 owner->set_function_state(this); | |
| 4146 | |
| 4147 if (compilation_info_->is_tracking_positions()) { | |
| 4148 outer_source_position_ = owner->source_position(); | |
| 4149 owner->EnterInlinedSource( | |
| 4150 info->shared_info()->start_position(), | |
| 4151 inlining_id); | |
| 4152 owner->SetSourcePosition(info->shared_info()->start_position()); | |
| 4153 } | |
| 4154 } | |
| 4155 | |
| 4156 | |
| 4157 FunctionState::~FunctionState() { | |
| 4158 delete test_context_; | |
| 4159 owner_->set_function_state(outer_); | |
| 4160 | |
| 4161 if (compilation_info_->is_tracking_positions()) { | |
| 4162 owner_->set_source_position(outer_source_position_); | |
| 4163 owner_->EnterInlinedSource( | |
| 4164 outer_->compilation_info()->shared_info()->start_position(), | |
| 4165 outer_->inlining_id()); | |
| 4166 } | |
| 4167 } | |
| 4168 | |
| 4169 | |
| 4170 // Implementation of utility classes to represent an expression's context in | |
| 4171 // the AST. | |
| 4172 AstContext::AstContext(HOptimizedGraphBuilder* owner, Expression::Context kind) | |
| 4173 : owner_(owner), | |
| 4174 kind_(kind), | |
| 4175 outer_(owner->ast_context()), | |
| 4176 typeof_mode_(NOT_INSIDE_TYPEOF) { | |
| 4177 owner->set_ast_context(this); // Push. | |
| 4178 #ifdef DEBUG | |
| 4179 DCHECK(owner->environment()->frame_type() == JS_FUNCTION); | |
| 4180 original_length_ = owner->environment()->length(); | |
| 4181 #endif | |
| 4182 } | |
| 4183 | |
| 4184 | |
| 4185 AstContext::~AstContext() { | |
| 4186 owner_->set_ast_context(outer_); // Pop. | |
| 4187 } | |
| 4188 | |
| 4189 | |
| 4190 EffectContext::~EffectContext() { | |
| 4191 DCHECK(owner()->HasStackOverflow() || | |
| 4192 owner()->current_block() == NULL || | |
| 4193 (owner()->environment()->length() == original_length_ && | |
| 4194 owner()->environment()->frame_type() == JS_FUNCTION)); | |
| 4195 } | |
| 4196 | |
| 4197 | |
| 4198 ValueContext::~ValueContext() { | |
| 4199 DCHECK(owner()->HasStackOverflow() || | |
| 4200 owner()->current_block() == NULL || | |
| 4201 (owner()->environment()->length() == original_length_ + 1 && | |
| 4202 owner()->environment()->frame_type() == JS_FUNCTION)); | |
| 4203 } | |
| 4204 | |
| 4205 | |
| 4206 void EffectContext::ReturnValue(HValue* value) { | |
| 4207 // The value is simply ignored. | |
| 4208 } | |
| 4209 | |
| 4210 | |
| 4211 void ValueContext::ReturnValue(HValue* value) { | |
| 4212 // The value is tracked in the bailout environment, and communicated | |
| 4213 // through the environment as the result of the expression. | |
| 4214 if (value->CheckFlag(HValue::kIsArguments)) { | |
| 4215 if (flag_ == ARGUMENTS_FAKED) { | |
| 4216 value = owner()->graph()->GetConstantUndefined(); | |
| 4217 } else if (!arguments_allowed()) { | |
| 4218 owner()->Bailout(kBadValueContextForArgumentsValue); | |
| 4219 } | |
| 4220 } | |
| 4221 owner()->Push(value); | |
| 4222 } | |
| 4223 | |
| 4224 | |
| 4225 void TestContext::ReturnValue(HValue* value) { | |
| 4226 BuildBranch(value); | |
| 4227 } | |
| 4228 | |
| 4229 | |
| 4230 void EffectContext::ReturnInstruction(HInstruction* instr, BailoutId ast_id) { | |
| 4231 DCHECK(!instr->IsControlInstruction()); | |
| 4232 owner()->AddInstruction(instr); | |
| 4233 if (instr->HasObservableSideEffects()) { | |
| 4234 owner()->Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 4235 } | |
| 4236 } | |
| 4237 | |
| 4238 | |
| 4239 void EffectContext::ReturnControl(HControlInstruction* instr, | |
| 4240 BailoutId ast_id) { | |
| 4241 DCHECK(!instr->HasObservableSideEffects()); | |
| 4242 HBasicBlock* empty_true = owner()->graph()->CreateBasicBlock(); | |
| 4243 HBasicBlock* empty_false = owner()->graph()->CreateBasicBlock(); | |
| 4244 instr->SetSuccessorAt(0, empty_true); | |
| 4245 instr->SetSuccessorAt(1, empty_false); | |
| 4246 owner()->FinishCurrentBlock(instr); | |
| 4247 HBasicBlock* join = owner()->CreateJoin(empty_true, empty_false, ast_id); | |
| 4248 owner()->set_current_block(join); | |
| 4249 } | |
| 4250 | |
| 4251 | |
| 4252 void EffectContext::ReturnContinuation(HIfContinuation* continuation, | |
| 4253 BailoutId ast_id) { | |
| 4254 HBasicBlock* true_branch = NULL; | |
| 4255 HBasicBlock* false_branch = NULL; | |
| 4256 continuation->Continue(&true_branch, &false_branch); | |
| 4257 if (!continuation->IsTrueReachable()) { | |
| 4258 owner()->set_current_block(false_branch); | |
| 4259 } else if (!continuation->IsFalseReachable()) { | |
| 4260 owner()->set_current_block(true_branch); | |
| 4261 } else { | |
| 4262 HBasicBlock* join = owner()->CreateJoin(true_branch, false_branch, ast_id); | |
| 4263 owner()->set_current_block(join); | |
| 4264 } | |
| 4265 } | |
| 4266 | |
| 4267 | |
| 4268 void ValueContext::ReturnInstruction(HInstruction* instr, BailoutId ast_id) { | |
| 4269 DCHECK(!instr->IsControlInstruction()); | |
| 4270 if (!arguments_allowed() && instr->CheckFlag(HValue::kIsArguments)) { | |
| 4271 return owner()->Bailout(kBadValueContextForArgumentsObjectValue); | |
| 4272 } | |
| 4273 owner()->AddInstruction(instr); | |
| 4274 owner()->Push(instr); | |
| 4275 if (instr->HasObservableSideEffects()) { | |
| 4276 owner()->Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 4277 } | |
| 4278 } | |
| 4279 | |
| 4280 | |
| 4281 void ValueContext::ReturnControl(HControlInstruction* instr, BailoutId ast_id) { | |
| 4282 DCHECK(!instr->HasObservableSideEffects()); | |
| 4283 if (!arguments_allowed() && instr->CheckFlag(HValue::kIsArguments)) { | |
| 4284 return owner()->Bailout(kBadValueContextForArgumentsObjectValue); | |
| 4285 } | |
| 4286 HBasicBlock* materialize_false = owner()->graph()->CreateBasicBlock(); | |
| 4287 HBasicBlock* materialize_true = owner()->graph()->CreateBasicBlock(); | |
| 4288 instr->SetSuccessorAt(0, materialize_true); | |
| 4289 instr->SetSuccessorAt(1, materialize_false); | |
| 4290 owner()->FinishCurrentBlock(instr); | |
| 4291 owner()->set_current_block(materialize_true); | |
| 4292 owner()->Push(owner()->graph()->GetConstantTrue()); | |
| 4293 owner()->set_current_block(materialize_false); | |
| 4294 owner()->Push(owner()->graph()->GetConstantFalse()); | |
| 4295 HBasicBlock* join = | |
| 4296 owner()->CreateJoin(materialize_true, materialize_false, ast_id); | |
| 4297 owner()->set_current_block(join); | |
| 4298 } | |
| 4299 | |
| 4300 | |
| 4301 void ValueContext::ReturnContinuation(HIfContinuation* continuation, | |
| 4302 BailoutId ast_id) { | |
| 4303 HBasicBlock* materialize_true = NULL; | |
| 4304 HBasicBlock* materialize_false = NULL; | |
| 4305 continuation->Continue(&materialize_true, &materialize_false); | |
| 4306 if (continuation->IsTrueReachable()) { | |
| 4307 owner()->set_current_block(materialize_true); | |
| 4308 owner()->Push(owner()->graph()->GetConstantTrue()); | |
| 4309 owner()->set_current_block(materialize_true); | |
| 4310 } | |
| 4311 if (continuation->IsFalseReachable()) { | |
| 4312 owner()->set_current_block(materialize_false); | |
| 4313 owner()->Push(owner()->graph()->GetConstantFalse()); | |
| 4314 owner()->set_current_block(materialize_false); | |
| 4315 } | |
| 4316 if (continuation->TrueAndFalseReachable()) { | |
| 4317 HBasicBlock* join = | |
| 4318 owner()->CreateJoin(materialize_true, materialize_false, ast_id); | |
| 4319 owner()->set_current_block(join); | |
| 4320 } | |
| 4321 } | |
| 4322 | |
| 4323 | |
| 4324 void TestContext::ReturnInstruction(HInstruction* instr, BailoutId ast_id) { | |
| 4325 DCHECK(!instr->IsControlInstruction()); | |
| 4326 HOptimizedGraphBuilder* builder = owner(); | |
| 4327 builder->AddInstruction(instr); | |
| 4328 // We expect a simulate after every expression with side effects, though | |
| 4329 // this one isn't actually needed (and wouldn't work if it were targeted). | |
| 4330 if (instr->HasObservableSideEffects()) { | |
| 4331 builder->Push(instr); | |
| 4332 builder->Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 4333 builder->Pop(); | |
| 4334 } | |
| 4335 BuildBranch(instr); | |
| 4336 } | |
| 4337 | |
| 4338 | |
| 4339 void TestContext::ReturnControl(HControlInstruction* instr, BailoutId ast_id) { | |
| 4340 DCHECK(!instr->HasObservableSideEffects()); | |
| 4341 HBasicBlock* empty_true = owner()->graph()->CreateBasicBlock(); | |
| 4342 HBasicBlock* empty_false = owner()->graph()->CreateBasicBlock(); | |
| 4343 instr->SetSuccessorAt(0, empty_true); | |
| 4344 instr->SetSuccessorAt(1, empty_false); | |
| 4345 owner()->FinishCurrentBlock(instr); | |
| 4346 owner()->Goto(empty_true, if_true(), owner()->function_state()); | |
| 4347 owner()->Goto(empty_false, if_false(), owner()->function_state()); | |
| 4348 owner()->set_current_block(NULL); | |
| 4349 } | |
| 4350 | |
| 4351 | |
| 4352 void TestContext::ReturnContinuation(HIfContinuation* continuation, | |
| 4353 BailoutId ast_id) { | |
| 4354 HBasicBlock* true_branch = NULL; | |
| 4355 HBasicBlock* false_branch = NULL; | |
| 4356 continuation->Continue(&true_branch, &false_branch); | |
| 4357 if (continuation->IsTrueReachable()) { | |
| 4358 owner()->Goto(true_branch, if_true(), owner()->function_state()); | |
| 4359 } | |
| 4360 if (continuation->IsFalseReachable()) { | |
| 4361 owner()->Goto(false_branch, if_false(), owner()->function_state()); | |
| 4362 } | |
| 4363 owner()->set_current_block(NULL); | |
| 4364 } | |
| 4365 | |
| 4366 | |
| 4367 void TestContext::BuildBranch(HValue* value) { | |
| 4368 // We expect the graph to be in edge-split form: there is no edge that | |
| 4369 // connects a branch node to a join node. We conservatively ensure that | |
| 4370 // property by always adding an empty block on the outgoing edges of this | |
| 4371 // branch. | |
| 4372 HOptimizedGraphBuilder* builder = owner(); | |
| 4373 if (value != NULL && value->CheckFlag(HValue::kIsArguments)) { | |
| 4374 builder->Bailout(kArgumentsObjectValueInATestContext); | |
| 4375 } | |
| 4376 ToBooleanStub::Types expected(condition()->to_boolean_types()); | |
| 4377 ReturnControl(owner()->New<HBranch>(value, expected), BailoutId::None()); | |
| 4378 } | |
| 4379 | |
| 4380 | |
| 4381 // HOptimizedGraphBuilder infrastructure for bailing out and checking bailouts. | |
| 4382 #define CHECK_BAILOUT(call) \ | |
| 4383 do { \ | |
| 4384 call; \ | |
| 4385 if (HasStackOverflow()) return; \ | |
| 4386 } while (false) | |
| 4387 | |
| 4388 | |
| 4389 #define CHECK_ALIVE(call) \ | |
| 4390 do { \ | |
| 4391 call; \ | |
| 4392 if (HasStackOverflow() || current_block() == NULL) return; \ | |
| 4393 } while (false) | |
| 4394 | |
| 4395 | |
| 4396 #define CHECK_ALIVE_OR_RETURN(call, value) \ | |
| 4397 do { \ | |
| 4398 call; \ | |
| 4399 if (HasStackOverflow() || current_block() == NULL) return value; \ | |
| 4400 } while (false) | |
| 4401 | |
| 4402 | |
| 4403 void HOptimizedGraphBuilder::Bailout(BailoutReason reason) { | |
| 4404 current_info()->AbortOptimization(reason); | |
| 4405 SetStackOverflow(); | |
| 4406 } | |
| 4407 | |
| 4408 | |
| 4409 void HOptimizedGraphBuilder::VisitForEffect(Expression* expr) { | |
| 4410 EffectContext for_effect(this); | |
| 4411 Visit(expr); | |
| 4412 } | |
| 4413 | |
| 4414 | |
| 4415 void HOptimizedGraphBuilder::VisitForValue(Expression* expr, | |
| 4416 ArgumentsAllowedFlag flag) { | |
| 4417 ValueContext for_value(this, flag); | |
| 4418 Visit(expr); | |
| 4419 } | |
| 4420 | |
| 4421 | |
| 4422 void HOptimizedGraphBuilder::VisitForTypeOf(Expression* expr) { | |
| 4423 ValueContext for_value(this, ARGUMENTS_NOT_ALLOWED); | |
| 4424 for_value.set_typeof_mode(INSIDE_TYPEOF); | |
| 4425 Visit(expr); | |
| 4426 } | |
| 4427 | |
| 4428 | |
| 4429 void HOptimizedGraphBuilder::VisitForControl(Expression* expr, | |
| 4430 HBasicBlock* true_block, | |
| 4431 HBasicBlock* false_block) { | |
| 4432 TestContext for_test(this, expr, true_block, false_block); | |
| 4433 Visit(expr); | |
| 4434 } | |
| 4435 | |
| 4436 | |
| 4437 void HOptimizedGraphBuilder::VisitExpressions( | |
| 4438 ZoneList<Expression*>* exprs) { | |
| 4439 for (int i = 0; i < exprs->length(); ++i) { | |
| 4440 CHECK_ALIVE(VisitForValue(exprs->at(i))); | |
| 4441 } | |
| 4442 } | |
| 4443 | |
| 4444 | |
| 4445 void HOptimizedGraphBuilder::VisitExpressions(ZoneList<Expression*>* exprs, | |
| 4446 ArgumentsAllowedFlag flag) { | |
| 4447 for (int i = 0; i < exprs->length(); ++i) { | |
| 4448 CHECK_ALIVE(VisitForValue(exprs->at(i), flag)); | |
| 4449 } | |
| 4450 } | |
| 4451 | |
| 4452 | |
| 4453 bool HOptimizedGraphBuilder::BuildGraph() { | |
| 4454 if (IsSubclassConstructor(current_info()->literal()->kind())) { | |
| 4455 Bailout(kSuperReference); | |
| 4456 return false; | |
| 4457 } | |
| 4458 | |
| 4459 Scope* scope = current_info()->scope(); | |
| 4460 SetUpScope(scope); | |
| 4461 | |
| 4462 // Add an edge to the body entry. This is warty: the graph's start | |
| 4463 // environment will be used by the Lithium translation as the initial | |
| 4464 // environment on graph entry, but it has now been mutated by the | |
| 4465 // Hydrogen translation of the instructions in the start block. This | |
| 4466 // environment uses values which have not been defined yet. These | |
| 4467 // Hydrogen instructions will then be replayed by the Lithium | |
| 4468 // translation, so they cannot have an environment effect. The edge to | |
| 4469 // the body's entry block (along with some special logic for the start | |
| 4470 // block in HInstruction::InsertAfter) seals the start block from | |
| 4471 // getting unwanted instructions inserted. | |
| 4472 // | |
| 4473 // TODO(kmillikin): Fix this. Stop mutating the initial environment. | |
| 4474 // Make the Hydrogen instructions in the initial block into Hydrogen | |
| 4475 // values (but not instructions), present in the initial environment and | |
| 4476 // not replayed by the Lithium translation. | |
| 4477 HEnvironment* initial_env = environment()->CopyWithoutHistory(); | |
| 4478 HBasicBlock* body_entry = CreateBasicBlock(initial_env); | |
| 4479 Goto(body_entry); | |
| 4480 body_entry->SetJoinId(BailoutId::FunctionEntry()); | |
| 4481 set_current_block(body_entry); | |
| 4482 | |
| 4483 VisitDeclarations(scope->declarations()); | |
| 4484 Add<HSimulate>(BailoutId::Declarations()); | |
| 4485 | |
| 4486 Add<HStackCheck>(HStackCheck::kFunctionEntry); | |
| 4487 | |
| 4488 VisitStatements(current_info()->literal()->body()); | |
| 4489 if (HasStackOverflow()) return false; | |
| 4490 | |
| 4491 if (current_block() != NULL) { | |
| 4492 Add<HReturn>(graph()->GetConstantUndefined()); | |
| 4493 set_current_block(NULL); | |
| 4494 } | |
| 4495 | |
| 4496 // If the checksum of the number of type info changes is the same as the | |
| 4497 // last time this function was compiled, then this recompile is likely not | |
| 4498 // due to missing/inadequate type feedback, but rather too aggressive | |
| 4499 // optimization. Disable optimistic LICM in that case. | |
| 4500 Handle<Code> unoptimized_code(current_info()->shared_info()->code()); | |
| 4501 DCHECK(unoptimized_code->kind() == Code::FUNCTION); | |
| 4502 Handle<TypeFeedbackInfo> type_info( | |
| 4503 TypeFeedbackInfo::cast(unoptimized_code->type_feedback_info())); | |
| 4504 int checksum = type_info->own_type_change_checksum(); | |
| 4505 int composite_checksum = graph()->update_type_change_checksum(checksum); | |
| 4506 graph()->set_use_optimistic_licm( | |
| 4507 !type_info->matches_inlined_type_change_checksum(composite_checksum)); | |
| 4508 type_info->set_inlined_type_change_checksum(composite_checksum); | |
| 4509 | |
| 4510 // Perform any necessary OSR-specific cleanups or changes to the graph. | |
| 4511 osr()->FinishGraph(); | |
| 4512 | |
| 4513 return true; | |
| 4514 } | |
| 4515 | |
| 4516 | |
| 4517 bool HGraph::Optimize(BailoutReason* bailout_reason) { | |
| 4518 OrderBlocks(); | |
| 4519 AssignDominators(); | |
| 4520 | |
| 4521 // We need to create a HConstant "zero" now so that GVN will fold every | |
| 4522 // zero-valued constant in the graph together. | |
| 4523 // The constant is needed to make idef-based bounds check work: the pass | |
| 4524 // evaluates relations with "zero" and that zero cannot be created after GVN. | |
| 4525 GetConstant0(); | |
| 4526 | |
| 4527 #ifdef DEBUG | |
| 4528 // Do a full verify after building the graph and computing dominators. | |
| 4529 Verify(true); | |
| 4530 #endif | |
| 4531 | |
| 4532 if (FLAG_analyze_environment_liveness && maximum_environment_size() != 0) { | |
| 4533 Run<HEnvironmentLivenessAnalysisPhase>(); | |
| 4534 } | |
| 4535 | |
| 4536 if (!CheckConstPhiUses()) { | |
| 4537 *bailout_reason = kUnsupportedPhiUseOfConstVariable; | |
| 4538 return false; | |
| 4539 } | |
| 4540 Run<HRedundantPhiEliminationPhase>(); | |
| 4541 if (!CheckArgumentsPhiUses()) { | |
| 4542 *bailout_reason = kUnsupportedPhiUseOfArguments; | |
| 4543 return false; | |
| 4544 } | |
| 4545 | |
| 4546 // Find and mark unreachable code to simplify optimizations, especially gvn, | |
| 4547 // where unreachable code could unnecessarily defeat LICM. | |
| 4548 Run<HMarkUnreachableBlocksPhase>(); | |
| 4549 | |
| 4550 if (FLAG_dead_code_elimination) Run<HDeadCodeEliminationPhase>(); | |
| 4551 if (FLAG_use_escape_analysis) Run<HEscapeAnalysisPhase>(); | |
| 4552 | |
| 4553 if (FLAG_load_elimination) Run<HLoadEliminationPhase>(); | |
| 4554 | |
| 4555 CollectPhis(); | |
| 4556 | |
| 4557 if (has_osr()) osr()->FinishOsrValues(); | |
| 4558 | |
| 4559 Run<HInferRepresentationPhase>(); | |
| 4560 | |
| 4561 // Remove HSimulate instructions that have turned out not to be needed | |
| 4562 // after all by folding them into the following HSimulate. | |
| 4563 // This must happen after inferring representations. | |
| 4564 Run<HMergeRemovableSimulatesPhase>(); | |
| 4565 | |
| 4566 Run<HMarkDeoptimizeOnUndefinedPhase>(); | |
| 4567 Run<HRepresentationChangesPhase>(); | |
| 4568 | |
| 4569 Run<HInferTypesPhase>(); | |
| 4570 | |
| 4571 // Must be performed before canonicalization to ensure that Canonicalize | |
| 4572 // will not remove semantically meaningful ToInt32 operations e.g. BIT_OR with | |
| 4573 // zero. | |
| 4574 Run<HUint32AnalysisPhase>(); | |
| 4575 | |
| 4576 if (FLAG_use_canonicalizing) Run<HCanonicalizePhase>(); | |
| 4577 | |
| 4578 if (FLAG_use_gvn) Run<HGlobalValueNumberingPhase>(); | |
| 4579 | |
| 4580 if (FLAG_check_elimination) Run<HCheckEliminationPhase>(); | |
| 4581 | |
| 4582 if (FLAG_store_elimination) Run<HStoreEliminationPhase>(); | |
| 4583 | |
| 4584 Run<HRangeAnalysisPhase>(); | |
| 4585 | |
| 4586 Run<HComputeChangeUndefinedToNaN>(); | |
| 4587 | |
| 4588 // Eliminate redundant stack checks on backwards branches. | |
| 4589 Run<HStackCheckEliminationPhase>(); | |
| 4590 | |
| 4591 if (FLAG_array_bounds_checks_elimination) Run<HBoundsCheckEliminationPhase>(); | |
| 4592 if (FLAG_array_bounds_checks_hoisting) Run<HBoundsCheckHoistingPhase>(); | |
| 4593 if (FLAG_array_index_dehoisting) Run<HDehoistIndexComputationsPhase>(); | |
| 4594 if (FLAG_dead_code_elimination) Run<HDeadCodeEliminationPhase>(); | |
| 4595 | |
| 4596 RestoreActualValues(); | |
| 4597 | |
| 4598 // Find unreachable code a second time, GVN and other optimizations may have | |
| 4599 // made blocks unreachable that were previously reachable. | |
| 4600 Run<HMarkUnreachableBlocksPhase>(); | |
| 4601 | |
| 4602 return true; | |
| 4603 } | |
| 4604 | |
| 4605 | |
| 4606 void HGraph::RestoreActualValues() { | |
| 4607 HPhase phase("H_Restore actual values", this); | |
| 4608 | |
| 4609 for (int block_index = 0; block_index < blocks()->length(); block_index++) { | |
| 4610 HBasicBlock* block = blocks()->at(block_index); | |
| 4611 | |
| 4612 #ifdef DEBUG | |
| 4613 for (int i = 0; i < block->phis()->length(); i++) { | |
| 4614 HPhi* phi = block->phis()->at(i); | |
| 4615 DCHECK(phi->ActualValue() == phi); | |
| 4616 } | |
| 4617 #endif | |
| 4618 | |
| 4619 for (HInstructionIterator it(block); !it.Done(); it.Advance()) { | |
| 4620 HInstruction* instruction = it.Current(); | |
| 4621 if (instruction->ActualValue() == instruction) continue; | |
| 4622 if (instruction->CheckFlag(HValue::kIsDead)) { | |
| 4623 // The instruction was marked as deleted but left in the graph | |
| 4624 // as a control flow dependency point for subsequent | |
| 4625 // instructions. | |
| 4626 instruction->DeleteAndReplaceWith(instruction->ActualValue()); | |
| 4627 } else { | |
| 4628 DCHECK(instruction->IsInformativeDefinition()); | |
| 4629 if (instruction->IsPurelyInformativeDefinition()) { | |
| 4630 instruction->DeleteAndReplaceWith(instruction->RedefinedOperand()); | |
| 4631 } else { | |
| 4632 instruction->ReplaceAllUsesWith(instruction->ActualValue()); | |
| 4633 } | |
| 4634 } | |
| 4635 } | |
| 4636 } | |
| 4637 } | |
| 4638 | |
| 4639 | |
| 4640 void HOptimizedGraphBuilder::PushArgumentsFromEnvironment(int count) { | |
| 4641 ZoneList<HValue*> arguments(count, zone()); | |
| 4642 for (int i = 0; i < count; ++i) { | |
| 4643 arguments.Add(Pop(), zone()); | |
| 4644 } | |
| 4645 | |
| 4646 HPushArguments* push_args = New<HPushArguments>(); | |
| 4647 while (!arguments.is_empty()) { | |
| 4648 push_args->AddInput(arguments.RemoveLast()); | |
| 4649 } | |
| 4650 AddInstruction(push_args); | |
| 4651 } | |
| 4652 | |
| 4653 | |
| 4654 template <class Instruction> | |
| 4655 HInstruction* HOptimizedGraphBuilder::PreProcessCall(Instruction* call) { | |
| 4656 PushArgumentsFromEnvironment(call->argument_count()); | |
| 4657 return call; | |
| 4658 } | |
| 4659 | |
| 4660 | |
| 4661 void HOptimizedGraphBuilder::SetUpScope(Scope* scope) { | |
| 4662 HEnvironment* prolog_env = environment(); | |
| 4663 int parameter_count = environment()->parameter_count(); | |
| 4664 ZoneList<HValue*> parameters(parameter_count, zone()); | |
| 4665 for (int i = 0; i < parameter_count; ++i) { | |
| 4666 HInstruction* parameter = Add<HParameter>(static_cast<unsigned>(i)); | |
| 4667 parameters.Add(parameter, zone()); | |
| 4668 environment()->Bind(i, parameter); | |
| 4669 } | |
| 4670 | |
| 4671 HConstant* undefined_constant = graph()->GetConstantUndefined(); | |
| 4672 // Initialize specials and locals to undefined. | |
| 4673 for (int i = parameter_count + 1; i < environment()->length(); ++i) { | |
| 4674 environment()->Bind(i, undefined_constant); | |
| 4675 } | |
| 4676 Add<HPrologue>(); | |
| 4677 | |
| 4678 HEnvironment* initial_env = environment()->CopyWithoutHistory(); | |
| 4679 HBasicBlock* body_entry = CreateBasicBlock(initial_env); | |
| 4680 GotoNoSimulate(body_entry); | |
| 4681 set_current_block(body_entry); | |
| 4682 | |
| 4683 // Initialize context of prolog environment to undefined. | |
| 4684 prolog_env->BindContext(undefined_constant); | |
| 4685 | |
| 4686 // First special is HContext. | |
| 4687 HInstruction* context = Add<HContext>(); | |
| 4688 environment()->BindContext(context); | |
| 4689 | |
| 4690 // Create an arguments object containing the initial parameters. Set the | |
| 4691 // initial values of parameters including "this" having parameter index 0. | |
| 4692 DCHECK_EQ(scope->num_parameters() + 1, parameter_count); | |
| 4693 HArgumentsObject* arguments_object = New<HArgumentsObject>(parameter_count); | |
| 4694 for (int i = 0; i < parameter_count; ++i) { | |
| 4695 HValue* parameter = parameters.at(i); | |
| 4696 arguments_object->AddArgument(parameter, zone()); | |
| 4697 } | |
| 4698 | |
| 4699 AddInstruction(arguments_object); | |
| 4700 graph()->SetArgumentsObject(arguments_object); | |
| 4701 | |
| 4702 // Handle the arguments and arguments shadow variables specially (they do | |
| 4703 // not have declarations). | |
| 4704 if (scope->arguments() != NULL) { | |
| 4705 environment()->Bind(scope->arguments(), graph()->GetArgumentsObject()); | |
| 4706 } | |
| 4707 | |
| 4708 if (scope->this_function_var() != nullptr || | |
| 4709 scope->new_target_var() != nullptr) { | |
| 4710 return Bailout(kSuperReference); | |
| 4711 } | |
| 4712 | |
| 4713 // Trace the call. | |
| 4714 if (FLAG_trace && top_info()->IsOptimizing()) { | |
| 4715 Add<HCallRuntime>(Runtime::FunctionForId(Runtime::kTraceEnter), 0); | |
| 4716 } | |
| 4717 } | |
| 4718 | |
| 4719 | |
| 4720 void HOptimizedGraphBuilder::VisitStatements(ZoneList<Statement*>* statements) { | |
| 4721 for (int i = 0; i < statements->length(); i++) { | |
| 4722 Statement* stmt = statements->at(i); | |
| 4723 CHECK_ALIVE(Visit(stmt)); | |
| 4724 if (stmt->IsJump()) break; | |
| 4725 } | |
| 4726 } | |
| 4727 | |
| 4728 | |
| 4729 void HOptimizedGraphBuilder::VisitBlock(Block* stmt) { | |
| 4730 DCHECK(!HasStackOverflow()); | |
| 4731 DCHECK(current_block() != NULL); | |
| 4732 DCHECK(current_block()->HasPredecessor()); | |
| 4733 | |
| 4734 Scope* outer_scope = scope(); | |
| 4735 Scope* scope = stmt->scope(); | |
| 4736 BreakAndContinueInfo break_info(stmt, outer_scope); | |
| 4737 | |
| 4738 { BreakAndContinueScope push(&break_info, this); | |
| 4739 if (scope != NULL) { | |
| 4740 if (scope->NeedsContext()) { | |
| 4741 // Load the function object. | |
| 4742 Scope* declaration_scope = scope->DeclarationScope(); | |
| 4743 HInstruction* function; | |
| 4744 HValue* outer_context = environment()->context(); | |
| 4745 if (declaration_scope->is_script_scope() || | |
| 4746 declaration_scope->is_eval_scope()) { | |
| 4747 function = new (zone()) | |
| 4748 HLoadContextSlot(outer_context, Context::CLOSURE_INDEX, | |
| 4749 HLoadContextSlot::kNoCheck); | |
| 4750 } else { | |
| 4751 function = New<HThisFunction>(); | |
| 4752 } | |
| 4753 AddInstruction(function); | |
| 4754 // Allocate a block context and store it to the stack frame. | |
| 4755 HInstruction* inner_context = Add<HAllocateBlockContext>( | |
| 4756 outer_context, function, scope->GetScopeInfo(isolate())); | |
| 4757 HInstruction* instr = Add<HStoreFrameContext>(inner_context); | |
| 4758 set_scope(scope); | |
| 4759 environment()->BindContext(inner_context); | |
| 4760 if (instr->HasObservableSideEffects()) { | |
| 4761 AddSimulate(stmt->EntryId(), REMOVABLE_SIMULATE); | |
| 4762 } | |
| 4763 } | |
| 4764 VisitDeclarations(scope->declarations()); | |
| 4765 AddSimulate(stmt->DeclsId(), REMOVABLE_SIMULATE); | |
| 4766 } | |
| 4767 CHECK_BAILOUT(VisitStatements(stmt->statements())); | |
| 4768 } | |
| 4769 set_scope(outer_scope); | |
| 4770 if (scope != NULL && current_block() != NULL && | |
| 4771 scope->ContextLocalCount() > 0) { | |
| 4772 HValue* inner_context = environment()->context(); | |
| 4773 HValue* outer_context = Add<HLoadNamedField>( | |
| 4774 inner_context, nullptr, | |
| 4775 HObjectAccess::ForContextSlot(Context::PREVIOUS_INDEX)); | |
| 4776 | |
| 4777 HInstruction* instr = Add<HStoreFrameContext>(outer_context); | |
| 4778 environment()->BindContext(outer_context); | |
| 4779 if (instr->HasObservableSideEffects()) { | |
| 4780 AddSimulate(stmt->ExitId(), REMOVABLE_SIMULATE); | |
| 4781 } | |
| 4782 } | |
| 4783 HBasicBlock* break_block = break_info.break_block(); | |
| 4784 if (break_block != NULL) { | |
| 4785 if (current_block() != NULL) Goto(break_block); | |
| 4786 break_block->SetJoinId(stmt->ExitId()); | |
| 4787 set_current_block(break_block); | |
| 4788 } | |
| 4789 } | |
| 4790 | |
| 4791 | |
| 4792 void HOptimizedGraphBuilder::VisitExpressionStatement( | |
| 4793 ExpressionStatement* stmt) { | |
| 4794 DCHECK(!HasStackOverflow()); | |
| 4795 DCHECK(current_block() != NULL); | |
| 4796 DCHECK(current_block()->HasPredecessor()); | |
| 4797 VisitForEffect(stmt->expression()); | |
| 4798 } | |
| 4799 | |
| 4800 | |
| 4801 void HOptimizedGraphBuilder::VisitEmptyStatement(EmptyStatement* stmt) { | |
| 4802 DCHECK(!HasStackOverflow()); | |
| 4803 DCHECK(current_block() != NULL); | |
| 4804 DCHECK(current_block()->HasPredecessor()); | |
| 4805 } | |
| 4806 | |
| 4807 | |
| 4808 void HOptimizedGraphBuilder::VisitSloppyBlockFunctionStatement( | |
| 4809 SloppyBlockFunctionStatement* stmt) { | |
| 4810 Visit(stmt->statement()); | |
| 4811 } | |
| 4812 | |
| 4813 | |
| 4814 void HOptimizedGraphBuilder::VisitIfStatement(IfStatement* stmt) { | |
| 4815 DCHECK(!HasStackOverflow()); | |
| 4816 DCHECK(current_block() != NULL); | |
| 4817 DCHECK(current_block()->HasPredecessor()); | |
| 4818 if (stmt->condition()->ToBooleanIsTrue()) { | |
| 4819 Add<HSimulate>(stmt->ThenId()); | |
| 4820 Visit(stmt->then_statement()); | |
| 4821 } else if (stmt->condition()->ToBooleanIsFalse()) { | |
| 4822 Add<HSimulate>(stmt->ElseId()); | |
| 4823 Visit(stmt->else_statement()); | |
| 4824 } else { | |
| 4825 HBasicBlock* cond_true = graph()->CreateBasicBlock(); | |
| 4826 HBasicBlock* cond_false = graph()->CreateBasicBlock(); | |
| 4827 CHECK_BAILOUT(VisitForControl(stmt->condition(), cond_true, cond_false)); | |
| 4828 | |
| 4829 if (cond_true->HasPredecessor()) { | |
| 4830 cond_true->SetJoinId(stmt->ThenId()); | |
| 4831 set_current_block(cond_true); | |
| 4832 CHECK_BAILOUT(Visit(stmt->then_statement())); | |
| 4833 cond_true = current_block(); | |
| 4834 } else { | |
| 4835 cond_true = NULL; | |
| 4836 } | |
| 4837 | |
| 4838 if (cond_false->HasPredecessor()) { | |
| 4839 cond_false->SetJoinId(stmt->ElseId()); | |
| 4840 set_current_block(cond_false); | |
| 4841 CHECK_BAILOUT(Visit(stmt->else_statement())); | |
| 4842 cond_false = current_block(); | |
| 4843 } else { | |
| 4844 cond_false = NULL; | |
| 4845 } | |
| 4846 | |
| 4847 HBasicBlock* join = CreateJoin(cond_true, cond_false, stmt->IfId()); | |
| 4848 set_current_block(join); | |
| 4849 } | |
| 4850 } | |
| 4851 | |
| 4852 | |
| 4853 HBasicBlock* HOptimizedGraphBuilder::BreakAndContinueScope::Get( | |
| 4854 BreakableStatement* stmt, | |
| 4855 BreakType type, | |
| 4856 Scope** scope, | |
| 4857 int* drop_extra) { | |
| 4858 *drop_extra = 0; | |
| 4859 BreakAndContinueScope* current = this; | |
| 4860 while (current != NULL && current->info()->target() != stmt) { | |
| 4861 *drop_extra += current->info()->drop_extra(); | |
| 4862 current = current->next(); | |
| 4863 } | |
| 4864 DCHECK(current != NULL); // Always found (unless stack is malformed). | |
| 4865 *scope = current->info()->scope(); | |
| 4866 | |
| 4867 if (type == BREAK) { | |
| 4868 *drop_extra += current->info()->drop_extra(); | |
| 4869 } | |
| 4870 | |
| 4871 HBasicBlock* block = NULL; | |
| 4872 switch (type) { | |
| 4873 case BREAK: | |
| 4874 block = current->info()->break_block(); | |
| 4875 if (block == NULL) { | |
| 4876 block = current->owner()->graph()->CreateBasicBlock(); | |
| 4877 current->info()->set_break_block(block); | |
| 4878 } | |
| 4879 break; | |
| 4880 | |
| 4881 case CONTINUE: | |
| 4882 block = current->info()->continue_block(); | |
| 4883 if (block == NULL) { | |
| 4884 block = current->owner()->graph()->CreateBasicBlock(); | |
| 4885 current->info()->set_continue_block(block); | |
| 4886 } | |
| 4887 break; | |
| 4888 } | |
| 4889 | |
| 4890 return block; | |
| 4891 } | |
| 4892 | |
| 4893 | |
| 4894 void HOptimizedGraphBuilder::VisitContinueStatement( | |
| 4895 ContinueStatement* stmt) { | |
| 4896 DCHECK(!HasStackOverflow()); | |
| 4897 DCHECK(current_block() != NULL); | |
| 4898 DCHECK(current_block()->HasPredecessor()); | |
| 4899 Scope* outer_scope = NULL; | |
| 4900 Scope* inner_scope = scope(); | |
| 4901 int drop_extra = 0; | |
| 4902 HBasicBlock* continue_block = break_scope()->Get( | |
| 4903 stmt->target(), BreakAndContinueScope::CONTINUE, | |
| 4904 &outer_scope, &drop_extra); | |
| 4905 HValue* context = environment()->context(); | |
| 4906 Drop(drop_extra); | |
| 4907 int context_pop_count = inner_scope->ContextChainLength(outer_scope); | |
| 4908 if (context_pop_count > 0) { | |
| 4909 while (context_pop_count-- > 0) { | |
| 4910 HInstruction* context_instruction = Add<HLoadNamedField>( | |
| 4911 context, nullptr, | |
| 4912 HObjectAccess::ForContextSlot(Context::PREVIOUS_INDEX)); | |
| 4913 context = context_instruction; | |
| 4914 } | |
| 4915 HInstruction* instr = Add<HStoreFrameContext>(context); | |
| 4916 if (instr->HasObservableSideEffects()) { | |
| 4917 AddSimulate(stmt->target()->EntryId(), REMOVABLE_SIMULATE); | |
| 4918 } | |
| 4919 environment()->BindContext(context); | |
| 4920 } | |
| 4921 | |
| 4922 Goto(continue_block); | |
| 4923 set_current_block(NULL); | |
| 4924 } | |
| 4925 | |
| 4926 | |
| 4927 void HOptimizedGraphBuilder::VisitBreakStatement(BreakStatement* stmt) { | |
| 4928 DCHECK(!HasStackOverflow()); | |
| 4929 DCHECK(current_block() != NULL); | |
| 4930 DCHECK(current_block()->HasPredecessor()); | |
| 4931 Scope* outer_scope = NULL; | |
| 4932 Scope* inner_scope = scope(); | |
| 4933 int drop_extra = 0; | |
| 4934 HBasicBlock* break_block = break_scope()->Get( | |
| 4935 stmt->target(), BreakAndContinueScope::BREAK, | |
| 4936 &outer_scope, &drop_extra); | |
| 4937 HValue* context = environment()->context(); | |
| 4938 Drop(drop_extra); | |
| 4939 int context_pop_count = inner_scope->ContextChainLength(outer_scope); | |
| 4940 if (context_pop_count > 0) { | |
| 4941 while (context_pop_count-- > 0) { | |
| 4942 HInstruction* context_instruction = Add<HLoadNamedField>( | |
| 4943 context, nullptr, | |
| 4944 HObjectAccess::ForContextSlot(Context::PREVIOUS_INDEX)); | |
| 4945 context = context_instruction; | |
| 4946 } | |
| 4947 HInstruction* instr = Add<HStoreFrameContext>(context); | |
| 4948 if (instr->HasObservableSideEffects()) { | |
| 4949 AddSimulate(stmt->target()->ExitId(), REMOVABLE_SIMULATE); | |
| 4950 } | |
| 4951 environment()->BindContext(context); | |
| 4952 } | |
| 4953 Goto(break_block); | |
| 4954 set_current_block(NULL); | |
| 4955 } | |
| 4956 | |
| 4957 | |
| 4958 void HOptimizedGraphBuilder::VisitReturnStatement(ReturnStatement* stmt) { | |
| 4959 DCHECK(!HasStackOverflow()); | |
| 4960 DCHECK(current_block() != NULL); | |
| 4961 DCHECK(current_block()->HasPredecessor()); | |
| 4962 FunctionState* state = function_state(); | |
| 4963 AstContext* context = call_context(); | |
| 4964 if (context == NULL) { | |
| 4965 // Not an inlined return, so an actual one. | |
| 4966 CHECK_ALIVE(VisitForValue(stmt->expression())); | |
| 4967 HValue* result = environment()->Pop(); | |
| 4968 Add<HReturn>(result); | |
| 4969 } else if (state->inlining_kind() == CONSTRUCT_CALL_RETURN) { | |
| 4970 // Return from an inlined construct call. In a test context the return value | |
| 4971 // will always evaluate to true, in a value context the return value needs | |
| 4972 // to be a JSObject. | |
| 4973 if (context->IsTest()) { | |
| 4974 TestContext* test = TestContext::cast(context); | |
| 4975 CHECK_ALIVE(VisitForEffect(stmt->expression())); | |
| 4976 Goto(test->if_true(), state); | |
| 4977 } else if (context->IsEffect()) { | |
| 4978 CHECK_ALIVE(VisitForEffect(stmt->expression())); | |
| 4979 Goto(function_return(), state); | |
| 4980 } else { | |
| 4981 DCHECK(context->IsValue()); | |
| 4982 CHECK_ALIVE(VisitForValue(stmt->expression())); | |
| 4983 HValue* return_value = Pop(); | |
| 4984 HValue* receiver = environment()->arguments_environment()->Lookup(0); | |
| 4985 HHasInstanceTypeAndBranch* typecheck = | |
| 4986 New<HHasInstanceTypeAndBranch>(return_value, | |
| 4987 FIRST_SPEC_OBJECT_TYPE, | |
| 4988 LAST_SPEC_OBJECT_TYPE); | |
| 4989 HBasicBlock* if_spec_object = graph()->CreateBasicBlock(); | |
| 4990 HBasicBlock* not_spec_object = graph()->CreateBasicBlock(); | |
| 4991 typecheck->SetSuccessorAt(0, if_spec_object); | |
| 4992 typecheck->SetSuccessorAt(1, not_spec_object); | |
| 4993 FinishCurrentBlock(typecheck); | |
| 4994 AddLeaveInlined(if_spec_object, return_value, state); | |
| 4995 AddLeaveInlined(not_spec_object, receiver, state); | |
| 4996 } | |
| 4997 } else if (state->inlining_kind() == SETTER_CALL_RETURN) { | |
| 4998 // Return from an inlined setter call. The returned value is never used, the | |
| 4999 // value of an assignment is always the value of the RHS of the assignment. | |
| 5000 CHECK_ALIVE(VisitForEffect(stmt->expression())); | |
| 5001 if (context->IsTest()) { | |
| 5002 HValue* rhs = environment()->arguments_environment()->Lookup(1); | |
| 5003 context->ReturnValue(rhs); | |
| 5004 } else if (context->IsEffect()) { | |
| 5005 Goto(function_return(), state); | |
| 5006 } else { | |
| 5007 DCHECK(context->IsValue()); | |
| 5008 HValue* rhs = environment()->arguments_environment()->Lookup(1); | |
| 5009 AddLeaveInlined(rhs, state); | |
| 5010 } | |
| 5011 } else { | |
| 5012 // Return from a normal inlined function. Visit the subexpression in the | |
| 5013 // expression context of the call. | |
| 5014 if (context->IsTest()) { | |
| 5015 TestContext* test = TestContext::cast(context); | |
| 5016 VisitForControl(stmt->expression(), test->if_true(), test->if_false()); | |
| 5017 } else if (context->IsEffect()) { | |
| 5018 // Visit in value context and ignore the result. This is needed to keep | |
| 5019 // environment in sync with full-codegen since some visitors (e.g. | |
| 5020 // VisitCountOperation) use the operand stack differently depending on | |
| 5021 // context. | |
| 5022 CHECK_ALIVE(VisitForValue(stmt->expression())); | |
| 5023 Pop(); | |
| 5024 Goto(function_return(), state); | |
| 5025 } else { | |
| 5026 DCHECK(context->IsValue()); | |
| 5027 CHECK_ALIVE(VisitForValue(stmt->expression())); | |
| 5028 AddLeaveInlined(Pop(), state); | |
| 5029 } | |
| 5030 } | |
| 5031 set_current_block(NULL); | |
| 5032 } | |
| 5033 | |
| 5034 | |
| 5035 void HOptimizedGraphBuilder::VisitWithStatement(WithStatement* stmt) { | |
| 5036 DCHECK(!HasStackOverflow()); | |
| 5037 DCHECK(current_block() != NULL); | |
| 5038 DCHECK(current_block()->HasPredecessor()); | |
| 5039 return Bailout(kWithStatement); | |
| 5040 } | |
| 5041 | |
| 5042 | |
| 5043 void HOptimizedGraphBuilder::VisitSwitchStatement(SwitchStatement* stmt) { | |
| 5044 DCHECK(!HasStackOverflow()); | |
| 5045 DCHECK(current_block() != NULL); | |
| 5046 DCHECK(current_block()->HasPredecessor()); | |
| 5047 | |
| 5048 ZoneList<CaseClause*>* clauses = stmt->cases(); | |
| 5049 int clause_count = clauses->length(); | |
| 5050 ZoneList<HBasicBlock*> body_blocks(clause_count, zone()); | |
| 5051 | |
| 5052 CHECK_ALIVE(VisitForValue(stmt->tag())); | |
| 5053 Add<HSimulate>(stmt->EntryId()); | |
| 5054 HValue* tag_value = Top(); | |
| 5055 Type* tag_type = stmt->tag()->bounds().lower; | |
| 5056 | |
| 5057 // 1. Build all the tests, with dangling true branches | |
| 5058 BailoutId default_id = BailoutId::None(); | |
| 5059 for (int i = 0; i < clause_count; ++i) { | |
| 5060 CaseClause* clause = clauses->at(i); | |
| 5061 if (clause->is_default()) { | |
| 5062 body_blocks.Add(NULL, zone()); | |
| 5063 if (default_id.IsNone()) default_id = clause->EntryId(); | |
| 5064 continue; | |
| 5065 } | |
| 5066 | |
| 5067 // Generate a compare and branch. | |
| 5068 CHECK_ALIVE(VisitForValue(clause->label())); | |
| 5069 HValue* label_value = Pop(); | |
| 5070 | |
| 5071 Type* label_type = clause->label()->bounds().lower; | |
| 5072 Type* combined_type = clause->compare_type(); | |
| 5073 HControlInstruction* compare = BuildCompareInstruction( | |
| 5074 Token::EQ_STRICT, tag_value, label_value, tag_type, label_type, | |
| 5075 combined_type, | |
| 5076 ScriptPositionToSourcePosition(stmt->tag()->position()), | |
| 5077 ScriptPositionToSourcePosition(clause->label()->position()), | |
| 5078 PUSH_BEFORE_SIMULATE, clause->id()); | |
| 5079 | |
| 5080 HBasicBlock* next_test_block = graph()->CreateBasicBlock(); | |
| 5081 HBasicBlock* body_block = graph()->CreateBasicBlock(); | |
| 5082 body_blocks.Add(body_block, zone()); | |
| 5083 compare->SetSuccessorAt(0, body_block); | |
| 5084 compare->SetSuccessorAt(1, next_test_block); | |
| 5085 FinishCurrentBlock(compare); | |
| 5086 | |
| 5087 set_current_block(body_block); | |
| 5088 Drop(1); // tag_value | |
| 5089 | |
| 5090 set_current_block(next_test_block); | |
| 5091 } | |
| 5092 | |
| 5093 // Save the current block to use for the default or to join with the | |
| 5094 // exit. | |
| 5095 HBasicBlock* last_block = current_block(); | |
| 5096 Drop(1); // tag_value | |
| 5097 | |
| 5098 // 2. Loop over the clauses and the linked list of tests in lockstep, | |
| 5099 // translating the clause bodies. | |
| 5100 HBasicBlock* fall_through_block = NULL; | |
| 5101 | |
| 5102 BreakAndContinueInfo break_info(stmt, scope()); | |
| 5103 { BreakAndContinueScope push(&break_info, this); | |
| 5104 for (int i = 0; i < clause_count; ++i) { | |
| 5105 CaseClause* clause = clauses->at(i); | |
| 5106 | |
| 5107 // Identify the block where normal (non-fall-through) control flow | |
| 5108 // goes to. | |
| 5109 HBasicBlock* normal_block = NULL; | |
| 5110 if (clause->is_default()) { | |
| 5111 if (last_block == NULL) continue; | |
| 5112 normal_block = last_block; | |
| 5113 last_block = NULL; // Cleared to indicate we've handled it. | |
| 5114 } else { | |
| 5115 normal_block = body_blocks[i]; | |
| 5116 } | |
| 5117 | |
| 5118 if (fall_through_block == NULL) { | |
| 5119 set_current_block(normal_block); | |
| 5120 } else { | |
| 5121 HBasicBlock* join = CreateJoin(fall_through_block, | |
| 5122 normal_block, | |
| 5123 clause->EntryId()); | |
| 5124 set_current_block(join); | |
| 5125 } | |
| 5126 | |
| 5127 CHECK_BAILOUT(VisitStatements(clause->statements())); | |
| 5128 fall_through_block = current_block(); | |
| 5129 } | |
| 5130 } | |
| 5131 | |
| 5132 // Create an up-to-3-way join. Use the break block if it exists since | |
| 5133 // it's already a join block. | |
| 5134 HBasicBlock* break_block = break_info.break_block(); | |
| 5135 if (break_block == NULL) { | |
| 5136 set_current_block(CreateJoin(fall_through_block, | |
| 5137 last_block, | |
| 5138 stmt->ExitId())); | |
| 5139 } else { | |
| 5140 if (fall_through_block != NULL) Goto(fall_through_block, break_block); | |
| 5141 if (last_block != NULL) Goto(last_block, break_block); | |
| 5142 break_block->SetJoinId(stmt->ExitId()); | |
| 5143 set_current_block(break_block); | |
| 5144 } | |
| 5145 } | |
| 5146 | |
| 5147 | |
| 5148 void HOptimizedGraphBuilder::VisitLoopBody(IterationStatement* stmt, | |
| 5149 HBasicBlock* loop_entry) { | |
| 5150 Add<HSimulate>(stmt->StackCheckId()); | |
| 5151 HStackCheck* stack_check = | |
| 5152 HStackCheck::cast(Add<HStackCheck>(HStackCheck::kBackwardsBranch)); | |
| 5153 DCHECK(loop_entry->IsLoopHeader()); | |
| 5154 loop_entry->loop_information()->set_stack_check(stack_check); | |
| 5155 CHECK_BAILOUT(Visit(stmt->body())); | |
| 5156 } | |
| 5157 | |
| 5158 | |
| 5159 void HOptimizedGraphBuilder::VisitDoWhileStatement(DoWhileStatement* stmt) { | |
| 5160 DCHECK(!HasStackOverflow()); | |
| 5161 DCHECK(current_block() != NULL); | |
| 5162 DCHECK(current_block()->HasPredecessor()); | |
| 5163 DCHECK(current_block() != NULL); | |
| 5164 HBasicBlock* loop_entry = BuildLoopEntry(stmt); | |
| 5165 | |
| 5166 BreakAndContinueInfo break_info(stmt, scope()); | |
| 5167 { | |
| 5168 BreakAndContinueScope push(&break_info, this); | |
| 5169 CHECK_BAILOUT(VisitLoopBody(stmt, loop_entry)); | |
| 5170 } | |
| 5171 HBasicBlock* body_exit = | |
| 5172 JoinContinue(stmt, current_block(), break_info.continue_block()); | |
| 5173 HBasicBlock* loop_successor = NULL; | |
| 5174 if (body_exit != NULL && !stmt->cond()->ToBooleanIsTrue()) { | |
| 5175 set_current_block(body_exit); | |
| 5176 loop_successor = graph()->CreateBasicBlock(); | |
| 5177 if (stmt->cond()->ToBooleanIsFalse()) { | |
| 5178 loop_entry->loop_information()->stack_check()->Eliminate(); | |
| 5179 Goto(loop_successor); | |
| 5180 body_exit = NULL; | |
| 5181 } else { | |
| 5182 // The block for a true condition, the actual predecessor block of the | |
| 5183 // back edge. | |
| 5184 body_exit = graph()->CreateBasicBlock(); | |
| 5185 CHECK_BAILOUT(VisitForControl(stmt->cond(), body_exit, loop_successor)); | |
| 5186 } | |
| 5187 if (body_exit != NULL && body_exit->HasPredecessor()) { | |
| 5188 body_exit->SetJoinId(stmt->BackEdgeId()); | |
| 5189 } else { | |
| 5190 body_exit = NULL; | |
| 5191 } | |
| 5192 if (loop_successor->HasPredecessor()) { | |
| 5193 loop_successor->SetJoinId(stmt->ExitId()); | |
| 5194 } else { | |
| 5195 loop_successor = NULL; | |
| 5196 } | |
| 5197 } | |
| 5198 HBasicBlock* loop_exit = CreateLoop(stmt, | |
| 5199 loop_entry, | |
| 5200 body_exit, | |
| 5201 loop_successor, | |
| 5202 break_info.break_block()); | |
| 5203 set_current_block(loop_exit); | |
| 5204 } | |
| 5205 | |
| 5206 | |
| 5207 void HOptimizedGraphBuilder::VisitWhileStatement(WhileStatement* stmt) { | |
| 5208 DCHECK(!HasStackOverflow()); | |
| 5209 DCHECK(current_block() != NULL); | |
| 5210 DCHECK(current_block()->HasPredecessor()); | |
| 5211 DCHECK(current_block() != NULL); | |
| 5212 HBasicBlock* loop_entry = BuildLoopEntry(stmt); | |
| 5213 | |
| 5214 // If the condition is constant true, do not generate a branch. | |
| 5215 HBasicBlock* loop_successor = NULL; | |
| 5216 if (!stmt->cond()->ToBooleanIsTrue()) { | |
| 5217 HBasicBlock* body_entry = graph()->CreateBasicBlock(); | |
| 5218 loop_successor = graph()->CreateBasicBlock(); | |
| 5219 CHECK_BAILOUT(VisitForControl(stmt->cond(), body_entry, loop_successor)); | |
| 5220 if (body_entry->HasPredecessor()) { | |
| 5221 body_entry->SetJoinId(stmt->BodyId()); | |
| 5222 set_current_block(body_entry); | |
| 5223 } | |
| 5224 if (loop_successor->HasPredecessor()) { | |
| 5225 loop_successor->SetJoinId(stmt->ExitId()); | |
| 5226 } else { | |
| 5227 loop_successor = NULL; | |
| 5228 } | |
| 5229 } | |
| 5230 | |
| 5231 BreakAndContinueInfo break_info(stmt, scope()); | |
| 5232 if (current_block() != NULL) { | |
| 5233 BreakAndContinueScope push(&break_info, this); | |
| 5234 CHECK_BAILOUT(VisitLoopBody(stmt, loop_entry)); | |
| 5235 } | |
| 5236 HBasicBlock* body_exit = | |
| 5237 JoinContinue(stmt, current_block(), break_info.continue_block()); | |
| 5238 HBasicBlock* loop_exit = CreateLoop(stmt, | |
| 5239 loop_entry, | |
| 5240 body_exit, | |
| 5241 loop_successor, | |
| 5242 break_info.break_block()); | |
| 5243 set_current_block(loop_exit); | |
| 5244 } | |
| 5245 | |
| 5246 | |
| 5247 void HOptimizedGraphBuilder::VisitForStatement(ForStatement* stmt) { | |
| 5248 DCHECK(!HasStackOverflow()); | |
| 5249 DCHECK(current_block() != NULL); | |
| 5250 DCHECK(current_block()->HasPredecessor()); | |
| 5251 if (stmt->init() != NULL) { | |
| 5252 CHECK_ALIVE(Visit(stmt->init())); | |
| 5253 } | |
| 5254 DCHECK(current_block() != NULL); | |
| 5255 HBasicBlock* loop_entry = BuildLoopEntry(stmt); | |
| 5256 | |
| 5257 HBasicBlock* loop_successor = NULL; | |
| 5258 if (stmt->cond() != NULL) { | |
| 5259 HBasicBlock* body_entry = graph()->CreateBasicBlock(); | |
| 5260 loop_successor = graph()->CreateBasicBlock(); | |
| 5261 CHECK_BAILOUT(VisitForControl(stmt->cond(), body_entry, loop_successor)); | |
| 5262 if (body_entry->HasPredecessor()) { | |
| 5263 body_entry->SetJoinId(stmt->BodyId()); | |
| 5264 set_current_block(body_entry); | |
| 5265 } | |
| 5266 if (loop_successor->HasPredecessor()) { | |
| 5267 loop_successor->SetJoinId(stmt->ExitId()); | |
| 5268 } else { | |
| 5269 loop_successor = NULL; | |
| 5270 } | |
| 5271 } | |
| 5272 | |
| 5273 BreakAndContinueInfo break_info(stmt, scope()); | |
| 5274 if (current_block() != NULL) { | |
| 5275 BreakAndContinueScope push(&break_info, this); | |
| 5276 CHECK_BAILOUT(VisitLoopBody(stmt, loop_entry)); | |
| 5277 } | |
| 5278 HBasicBlock* body_exit = | |
| 5279 JoinContinue(stmt, current_block(), break_info.continue_block()); | |
| 5280 | |
| 5281 if (stmt->next() != NULL && body_exit != NULL) { | |
| 5282 set_current_block(body_exit); | |
| 5283 CHECK_BAILOUT(Visit(stmt->next())); | |
| 5284 body_exit = current_block(); | |
| 5285 } | |
| 5286 | |
| 5287 HBasicBlock* loop_exit = CreateLoop(stmt, | |
| 5288 loop_entry, | |
| 5289 body_exit, | |
| 5290 loop_successor, | |
| 5291 break_info.break_block()); | |
| 5292 set_current_block(loop_exit); | |
| 5293 } | |
| 5294 | |
| 5295 | |
| 5296 void HOptimizedGraphBuilder::VisitForInStatement(ForInStatement* stmt) { | |
| 5297 DCHECK(!HasStackOverflow()); | |
| 5298 DCHECK(current_block() != NULL); | |
| 5299 DCHECK(current_block()->HasPredecessor()); | |
| 5300 | |
| 5301 if (!FLAG_optimize_for_in) { | |
| 5302 return Bailout(kForInStatementOptimizationIsDisabled); | |
| 5303 } | |
| 5304 | |
| 5305 if (!stmt->each()->IsVariableProxy() || | |
| 5306 !stmt->each()->AsVariableProxy()->var()->IsStackLocal()) { | |
| 5307 return Bailout(kForInStatementWithNonLocalEachVariable); | |
| 5308 } | |
| 5309 | |
| 5310 Variable* each_var = stmt->each()->AsVariableProxy()->var(); | |
| 5311 | |
| 5312 CHECK_ALIVE(VisitForValue(stmt->enumerable())); | |
| 5313 HValue* enumerable = Top(); // Leave enumerable at the top. | |
| 5314 | |
| 5315 IfBuilder if_undefined_or_null(this); | |
| 5316 if_undefined_or_null.If<HCompareObjectEqAndBranch>( | |
| 5317 enumerable, graph()->GetConstantUndefined()); | |
| 5318 if_undefined_or_null.Or(); | |
| 5319 if_undefined_or_null.If<HCompareObjectEqAndBranch>( | |
| 5320 enumerable, graph()->GetConstantNull()); | |
| 5321 if_undefined_or_null.ThenDeopt(Deoptimizer::kUndefinedOrNullInForIn); | |
| 5322 if_undefined_or_null.End(); | |
| 5323 BuildForInBody(stmt, each_var, enumerable); | |
| 5324 } | |
| 5325 | |
| 5326 | |
| 5327 void HOptimizedGraphBuilder::BuildForInBody(ForInStatement* stmt, | |
| 5328 Variable* each_var, | |
| 5329 HValue* enumerable) { | |
| 5330 HInstruction* map; | |
| 5331 HInstruction* array; | |
| 5332 HInstruction* enum_length; | |
| 5333 bool fast = stmt->for_in_type() == ForInStatement::FAST_FOR_IN; | |
| 5334 if (fast) { | |
| 5335 map = Add<HForInPrepareMap>(enumerable); | |
| 5336 Add<HSimulate>(stmt->PrepareId()); | |
| 5337 | |
| 5338 array = Add<HForInCacheArray>(enumerable, map, | |
| 5339 DescriptorArray::kEnumCacheBridgeCacheIndex); | |
| 5340 enum_length = Add<HMapEnumLength>(map); | |
| 5341 | |
| 5342 HInstruction* index_cache = Add<HForInCacheArray>( | |
| 5343 enumerable, map, DescriptorArray::kEnumCacheBridgeIndicesCacheIndex); | |
| 5344 HForInCacheArray::cast(array) | |
| 5345 ->set_index_cache(HForInCacheArray::cast(index_cache)); | |
| 5346 } else { | |
| 5347 Add<HSimulate>(stmt->PrepareId()); | |
| 5348 { | |
| 5349 NoObservableSideEffectsScope no_effects(this); | |
| 5350 BuildJSObjectCheck(enumerable, 0); | |
| 5351 } | |
| 5352 Add<HSimulate>(stmt->ToObjectId()); | |
| 5353 | |
| 5354 map = graph()->GetConstant1(); | |
| 5355 Runtime::FunctionId function_id = Runtime::kGetPropertyNamesFast; | |
| 5356 Add<HPushArguments>(enumerable); | |
| 5357 array = Add<HCallRuntime>(Runtime::FunctionForId(function_id), 1); | |
| 5358 Push(array); | |
| 5359 Add<HSimulate>(stmt->EnumId()); | |
| 5360 Drop(1); | |
| 5361 Handle<Map> array_map = isolate()->factory()->fixed_array_map(); | |
| 5362 HValue* check = Add<HCheckMaps>(array, array_map); | |
| 5363 enum_length = AddLoadFixedArrayLength(array, check); | |
| 5364 } | |
| 5365 | |
| 5366 HInstruction* start_index = Add<HConstant>(0); | |
| 5367 | |
| 5368 Push(map); | |
| 5369 Push(array); | |
| 5370 Push(enum_length); | |
| 5371 Push(start_index); | |
| 5372 | |
| 5373 HBasicBlock* loop_entry = BuildLoopEntry(stmt); | |
| 5374 | |
| 5375 // Reload the values to ensure we have up-to-date values inside of the loop. | |
| 5376 // This is relevant especially for OSR where the values don't come from the | |
| 5377 // computation above, but from the OSR entry block. | |
| 5378 enumerable = environment()->ExpressionStackAt(4); | |
| 5379 HValue* index = environment()->ExpressionStackAt(0); | |
| 5380 HValue* limit = environment()->ExpressionStackAt(1); | |
| 5381 | |
| 5382 // Check that we still have more keys. | |
| 5383 HCompareNumericAndBranch* compare_index = | |
| 5384 New<HCompareNumericAndBranch>(index, limit, Token::LT); | |
| 5385 compare_index->set_observed_input_representation( | |
| 5386 Representation::Smi(), Representation::Smi()); | |
| 5387 | |
| 5388 HBasicBlock* loop_body = graph()->CreateBasicBlock(); | |
| 5389 HBasicBlock* loop_successor = graph()->CreateBasicBlock(); | |
| 5390 | |
| 5391 compare_index->SetSuccessorAt(0, loop_body); | |
| 5392 compare_index->SetSuccessorAt(1, loop_successor); | |
| 5393 FinishCurrentBlock(compare_index); | |
| 5394 | |
| 5395 set_current_block(loop_successor); | |
| 5396 Drop(5); | |
| 5397 | |
| 5398 set_current_block(loop_body); | |
| 5399 | |
| 5400 HValue* key = | |
| 5401 Add<HLoadKeyed>(environment()->ExpressionStackAt(2), // Enum cache. | |
| 5402 index, index, FAST_ELEMENTS); | |
| 5403 | |
| 5404 if (fast) { | |
| 5405 // Check if the expected map still matches that of the enumerable. | |
| 5406 // If not just deoptimize. | |
| 5407 Add<HCheckMapValue>(enumerable, environment()->ExpressionStackAt(3)); | |
| 5408 Bind(each_var, key); | |
| 5409 } else { | |
| 5410 Add<HPushArguments>(enumerable, key); | |
| 5411 Runtime::FunctionId function_id = Runtime::kForInFilter; | |
| 5412 key = Add<HCallRuntime>(Runtime::FunctionForId(function_id), 2); | |
| 5413 Push(key); | |
| 5414 Add<HSimulate>(stmt->FilterId()); | |
| 5415 key = Pop(); | |
| 5416 Bind(each_var, key); | |
| 5417 IfBuilder if_undefined(this); | |
| 5418 if_undefined.If<HCompareObjectEqAndBranch>(key, | |
| 5419 graph()->GetConstantUndefined()); | |
| 5420 if_undefined.ThenDeopt(Deoptimizer::kUndefined); | |
| 5421 if_undefined.End(); | |
| 5422 Add<HSimulate>(stmt->AssignmentId()); | |
| 5423 } | |
| 5424 | |
| 5425 BreakAndContinueInfo break_info(stmt, scope(), 5); | |
| 5426 { | |
| 5427 BreakAndContinueScope push(&break_info, this); | |
| 5428 CHECK_BAILOUT(VisitLoopBody(stmt, loop_entry)); | |
| 5429 } | |
| 5430 | |
| 5431 HBasicBlock* body_exit = | |
| 5432 JoinContinue(stmt, current_block(), break_info.continue_block()); | |
| 5433 | |
| 5434 if (body_exit != NULL) { | |
| 5435 set_current_block(body_exit); | |
| 5436 | |
| 5437 HValue* current_index = Pop(); | |
| 5438 Push(AddUncasted<HAdd>(current_index, graph()->GetConstant1())); | |
| 5439 body_exit = current_block(); | |
| 5440 } | |
| 5441 | |
| 5442 HBasicBlock* loop_exit = CreateLoop(stmt, | |
| 5443 loop_entry, | |
| 5444 body_exit, | |
| 5445 loop_successor, | |
| 5446 break_info.break_block()); | |
| 5447 | |
| 5448 set_current_block(loop_exit); | |
| 5449 } | |
| 5450 | |
| 5451 | |
| 5452 void HOptimizedGraphBuilder::VisitForOfStatement(ForOfStatement* stmt) { | |
| 5453 DCHECK(!HasStackOverflow()); | |
| 5454 DCHECK(current_block() != NULL); | |
| 5455 DCHECK(current_block()->HasPredecessor()); | |
| 5456 return Bailout(kForOfStatement); | |
| 5457 } | |
| 5458 | |
| 5459 | |
| 5460 void HOptimizedGraphBuilder::VisitTryCatchStatement(TryCatchStatement* stmt) { | |
| 5461 DCHECK(!HasStackOverflow()); | |
| 5462 DCHECK(current_block() != NULL); | |
| 5463 DCHECK(current_block()->HasPredecessor()); | |
| 5464 return Bailout(kTryCatchStatement); | |
| 5465 } | |
| 5466 | |
| 5467 | |
| 5468 void HOptimizedGraphBuilder::VisitTryFinallyStatement( | |
| 5469 TryFinallyStatement* stmt) { | |
| 5470 DCHECK(!HasStackOverflow()); | |
| 5471 DCHECK(current_block() != NULL); | |
| 5472 DCHECK(current_block()->HasPredecessor()); | |
| 5473 return Bailout(kTryFinallyStatement); | |
| 5474 } | |
| 5475 | |
| 5476 | |
| 5477 void HOptimizedGraphBuilder::VisitDebuggerStatement(DebuggerStatement* stmt) { | |
| 5478 DCHECK(!HasStackOverflow()); | |
| 5479 DCHECK(current_block() != NULL); | |
| 5480 DCHECK(current_block()->HasPredecessor()); | |
| 5481 return Bailout(kDebuggerStatement); | |
| 5482 } | |
| 5483 | |
| 5484 | |
| 5485 void HOptimizedGraphBuilder::VisitCaseClause(CaseClause* clause) { | |
| 5486 UNREACHABLE(); | |
| 5487 } | |
| 5488 | |
| 5489 | |
| 5490 void HOptimizedGraphBuilder::VisitFunctionLiteral(FunctionLiteral* expr) { | |
| 5491 DCHECK(!HasStackOverflow()); | |
| 5492 DCHECK(current_block() != NULL); | |
| 5493 DCHECK(current_block()->HasPredecessor()); | |
| 5494 Handle<SharedFunctionInfo> shared_info = Compiler::GetSharedFunctionInfo( | |
| 5495 expr, current_info()->script(), top_info()); | |
| 5496 // We also have a stack overflow if the recursive compilation did. | |
| 5497 if (HasStackOverflow()) return; | |
| 5498 // Use the fast case closure allocation code that allocates in new | |
| 5499 // space for nested functions that don't need literals cloning. | |
| 5500 HConstant* shared_info_value = Add<HConstant>(shared_info); | |
| 5501 HInstruction* instr; | |
| 5502 if (!expr->pretenure() && shared_info->num_literals() == 0) { | |
| 5503 FastNewClosureStub stub(isolate(), shared_info->language_mode(), | |
| 5504 shared_info->kind()); | |
| 5505 FastNewClosureDescriptor descriptor(isolate()); | |
| 5506 HValue* values[] = {context(), shared_info_value}; | |
| 5507 HConstant* stub_value = Add<HConstant>(stub.GetCode()); | |
| 5508 instr = New<HCallWithDescriptor>(stub_value, 0, descriptor, | |
| 5509 Vector<HValue*>(values, arraysize(values)), | |
| 5510 NORMAL_CALL); | |
| 5511 } else { | |
| 5512 Add<HPushArguments>(shared_info_value); | |
| 5513 Runtime::FunctionId function_id = | |
| 5514 expr->pretenure() ? Runtime::kNewClosure_Tenured : Runtime::kNewClosure; | |
| 5515 instr = New<HCallRuntime>(Runtime::FunctionForId(function_id), 1); | |
| 5516 } | |
| 5517 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 5518 } | |
| 5519 | |
| 5520 | |
| 5521 void HOptimizedGraphBuilder::VisitClassLiteral(ClassLiteral* lit) { | |
| 5522 DCHECK(!HasStackOverflow()); | |
| 5523 DCHECK(current_block() != NULL); | |
| 5524 DCHECK(current_block()->HasPredecessor()); | |
| 5525 return Bailout(kClassLiteral); | |
| 5526 } | |
| 5527 | |
| 5528 | |
| 5529 void HOptimizedGraphBuilder::VisitNativeFunctionLiteral( | |
| 5530 NativeFunctionLiteral* expr) { | |
| 5531 DCHECK(!HasStackOverflow()); | |
| 5532 DCHECK(current_block() != NULL); | |
| 5533 DCHECK(current_block()->HasPredecessor()); | |
| 5534 return Bailout(kNativeFunctionLiteral); | |
| 5535 } | |
| 5536 | |
| 5537 | |
| 5538 void HOptimizedGraphBuilder::VisitConditional(Conditional* expr) { | |
| 5539 DCHECK(!HasStackOverflow()); | |
| 5540 DCHECK(current_block() != NULL); | |
| 5541 DCHECK(current_block()->HasPredecessor()); | |
| 5542 HBasicBlock* cond_true = graph()->CreateBasicBlock(); | |
| 5543 HBasicBlock* cond_false = graph()->CreateBasicBlock(); | |
| 5544 CHECK_BAILOUT(VisitForControl(expr->condition(), cond_true, cond_false)); | |
| 5545 | |
| 5546 // Visit the true and false subexpressions in the same AST context as the | |
| 5547 // whole expression. | |
| 5548 if (cond_true->HasPredecessor()) { | |
| 5549 cond_true->SetJoinId(expr->ThenId()); | |
| 5550 set_current_block(cond_true); | |
| 5551 CHECK_BAILOUT(Visit(expr->then_expression())); | |
| 5552 cond_true = current_block(); | |
| 5553 } else { | |
| 5554 cond_true = NULL; | |
| 5555 } | |
| 5556 | |
| 5557 if (cond_false->HasPredecessor()) { | |
| 5558 cond_false->SetJoinId(expr->ElseId()); | |
| 5559 set_current_block(cond_false); | |
| 5560 CHECK_BAILOUT(Visit(expr->else_expression())); | |
| 5561 cond_false = current_block(); | |
| 5562 } else { | |
| 5563 cond_false = NULL; | |
| 5564 } | |
| 5565 | |
| 5566 if (!ast_context()->IsTest()) { | |
| 5567 HBasicBlock* join = CreateJoin(cond_true, cond_false, expr->id()); | |
| 5568 set_current_block(join); | |
| 5569 if (join != NULL && !ast_context()->IsEffect()) { | |
| 5570 return ast_context()->ReturnValue(Pop()); | |
| 5571 } | |
| 5572 } | |
| 5573 } | |
| 5574 | |
| 5575 | |
| 5576 HOptimizedGraphBuilder::GlobalPropertyAccess | |
| 5577 HOptimizedGraphBuilder::LookupGlobalProperty(Variable* var, LookupIterator* it, | |
| 5578 PropertyAccessType access_type) { | |
| 5579 if (var->is_this() || !current_info()->has_global_object()) { | |
| 5580 return kUseGeneric; | |
| 5581 } | |
| 5582 | |
| 5583 switch (it->state()) { | |
| 5584 case LookupIterator::ACCESSOR: | |
| 5585 case LookupIterator::ACCESS_CHECK: | |
| 5586 case LookupIterator::INTERCEPTOR: | |
| 5587 case LookupIterator::INTEGER_INDEXED_EXOTIC: | |
| 5588 case LookupIterator::NOT_FOUND: | |
| 5589 return kUseGeneric; | |
| 5590 case LookupIterator::DATA: | |
| 5591 if (access_type == STORE && it->IsReadOnly()) return kUseGeneric; | |
| 5592 return kUseCell; | |
| 5593 case LookupIterator::JSPROXY: | |
| 5594 case LookupIterator::TRANSITION: | |
| 5595 UNREACHABLE(); | |
| 5596 } | |
| 5597 UNREACHABLE(); | |
| 5598 return kUseGeneric; | |
| 5599 } | |
| 5600 | |
| 5601 | |
| 5602 HValue* HOptimizedGraphBuilder::BuildContextChainWalk(Variable* var) { | |
| 5603 DCHECK(var->IsContextSlot()); | |
| 5604 HValue* context = environment()->context(); | |
| 5605 int length = scope()->ContextChainLength(var->scope()); | |
| 5606 while (length-- > 0) { | |
| 5607 context = Add<HLoadNamedField>( | |
| 5608 context, nullptr, | |
| 5609 HObjectAccess::ForContextSlot(Context::PREVIOUS_INDEX)); | |
| 5610 } | |
| 5611 return context; | |
| 5612 } | |
| 5613 | |
| 5614 | |
| 5615 void HOptimizedGraphBuilder::VisitVariableProxy(VariableProxy* expr) { | |
| 5616 DCHECK(!HasStackOverflow()); | |
| 5617 DCHECK(current_block() != NULL); | |
| 5618 DCHECK(current_block()->HasPredecessor()); | |
| 5619 Variable* variable = expr->var(); | |
| 5620 switch (variable->location()) { | |
| 5621 case VariableLocation::GLOBAL: | |
| 5622 case VariableLocation::UNALLOCATED: { | |
| 5623 if (IsLexicalVariableMode(variable->mode())) { | |
| 5624 // TODO(rossberg): should this be an DCHECK? | |
| 5625 return Bailout(kReferenceToGlobalLexicalVariable); | |
| 5626 } | |
| 5627 // Handle known global constants like 'undefined' specially to avoid a | |
| 5628 // load from a global cell for them. | |
| 5629 Handle<Object> constant_value = | |
| 5630 isolate()->factory()->GlobalConstantFor(variable->name()); | |
| 5631 if (!constant_value.is_null()) { | |
| 5632 HConstant* instr = New<HConstant>(constant_value); | |
| 5633 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 5634 } | |
| 5635 | |
| 5636 Handle<GlobalObject> global(current_info()->global_object()); | |
| 5637 | |
| 5638 // Lookup in script contexts. | |
| 5639 { | |
| 5640 Handle<ScriptContextTable> script_contexts( | |
| 5641 global->native_context()->script_context_table()); | |
| 5642 ScriptContextTable::LookupResult lookup; | |
| 5643 if (ScriptContextTable::Lookup(script_contexts, variable->name(), | |
| 5644 &lookup)) { | |
| 5645 Handle<Context> script_context = ScriptContextTable::GetContext( | |
| 5646 script_contexts, lookup.context_index); | |
| 5647 Handle<Object> current_value = | |
| 5648 FixedArray::get(script_context, lookup.slot_index); | |
| 5649 | |
| 5650 // If the values is not the hole, it will stay initialized, | |
| 5651 // so no need to generate a check. | |
| 5652 if (*current_value == *isolate()->factory()->the_hole_value()) { | |
| 5653 return Bailout(kReferenceToUninitializedVariable); | |
| 5654 } | |
| 5655 HInstruction* result = New<HLoadNamedField>( | |
| 5656 Add<HConstant>(script_context), nullptr, | |
| 5657 HObjectAccess::ForContextSlot(lookup.slot_index)); | |
| 5658 return ast_context()->ReturnInstruction(result, expr->id()); | |
| 5659 } | |
| 5660 } | |
| 5661 | |
| 5662 LookupIterator it(global, variable->name(), LookupIterator::OWN); | |
| 5663 GlobalPropertyAccess type = LookupGlobalProperty(variable, &it, LOAD); | |
| 5664 | |
| 5665 if (type == kUseCell) { | |
| 5666 Handle<PropertyCell> cell = it.GetPropertyCell(); | |
| 5667 top_info()->dependencies()->AssumePropertyCell(cell); | |
| 5668 auto cell_type = it.property_details().cell_type(); | |
| 5669 if (cell_type == PropertyCellType::kConstant || | |
| 5670 cell_type == PropertyCellType::kUndefined) { | |
| 5671 Handle<Object> constant_object(cell->value(), isolate()); | |
| 5672 if (constant_object->IsConsString()) { | |
| 5673 constant_object = | |
| 5674 String::Flatten(Handle<String>::cast(constant_object)); | |
| 5675 } | |
| 5676 HConstant* constant = New<HConstant>(constant_object); | |
| 5677 return ast_context()->ReturnInstruction(constant, expr->id()); | |
| 5678 } else { | |
| 5679 auto access = HObjectAccess::ForPropertyCellValue(); | |
| 5680 UniqueSet<Map>* field_maps = nullptr; | |
| 5681 if (cell_type == PropertyCellType::kConstantType) { | |
| 5682 switch (cell->GetConstantType()) { | |
| 5683 case PropertyCellConstantType::kSmi: | |
| 5684 access = access.WithRepresentation(Representation::Smi()); | |
| 5685 break; | |
| 5686 case PropertyCellConstantType::kStableMap: { | |
| 5687 // Check that the map really is stable. The heap object could | |
| 5688 // have mutated without the cell updating state. In that case, | |
| 5689 // make no promises about the loaded value except that it's a | |
| 5690 // heap object. | |
| 5691 access = | |
| 5692 access.WithRepresentation(Representation::HeapObject()); | |
| 5693 Handle<Map> map(HeapObject::cast(cell->value())->map()); | |
| 5694 if (map->is_stable()) { | |
| 5695 field_maps = new (zone()) | |
| 5696 UniqueSet<Map>(Unique<Map>::CreateImmovable(map), zone()); | |
| 5697 } | |
| 5698 break; | |
| 5699 } | |
| 5700 } | |
| 5701 } | |
| 5702 HConstant* cell_constant = Add<HConstant>(cell); | |
| 5703 HLoadNamedField* instr; | |
| 5704 if (field_maps == nullptr) { | |
| 5705 instr = New<HLoadNamedField>(cell_constant, nullptr, access); | |
| 5706 } else { | |
| 5707 instr = New<HLoadNamedField>(cell_constant, nullptr, access, | |
| 5708 field_maps, HType::HeapObject()); | |
| 5709 } | |
| 5710 instr->ClearDependsOnFlag(kInobjectFields); | |
| 5711 instr->SetDependsOnFlag(kGlobalVars); | |
| 5712 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 5713 } | |
| 5714 } else if (variable->IsGlobalSlot()) { | |
| 5715 DCHECK(variable->index() > 0); | |
| 5716 DCHECK(variable->IsStaticGlobalObjectProperty()); | |
| 5717 int slot_index = variable->index(); | |
| 5718 int depth = scope()->ContextChainLength(variable->scope()); | |
| 5719 | |
| 5720 HLoadGlobalViaContext* instr = | |
| 5721 New<HLoadGlobalViaContext>(depth, slot_index); | |
| 5722 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 5723 | |
| 5724 } else { | |
| 5725 HValue* global_object = Add<HLoadNamedField>( | |
| 5726 context(), nullptr, | |
| 5727 HObjectAccess::ForContextSlot(Context::GLOBAL_OBJECT_INDEX)); | |
| 5728 HLoadGlobalGeneric* instr = New<HLoadGlobalGeneric>( | |
| 5729 global_object, variable->name(), ast_context()->typeof_mode()); | |
| 5730 instr->SetVectorAndSlot(handle(current_feedback_vector(), isolate()), | |
| 5731 expr->VariableFeedbackSlot()); | |
| 5732 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 5733 } | |
| 5734 } | |
| 5735 | |
| 5736 case VariableLocation::PARAMETER: | |
| 5737 case VariableLocation::LOCAL: { | |
| 5738 HValue* value = LookupAndMakeLive(variable); | |
| 5739 if (value == graph()->GetConstantHole()) { | |
| 5740 DCHECK(IsDeclaredVariableMode(variable->mode()) && | |
| 5741 variable->mode() != VAR); | |
| 5742 return Bailout(kReferenceToUninitializedVariable); | |
| 5743 } | |
| 5744 return ast_context()->ReturnValue(value); | |
| 5745 } | |
| 5746 | |
| 5747 case VariableLocation::CONTEXT: { | |
| 5748 HValue* context = BuildContextChainWalk(variable); | |
| 5749 HLoadContextSlot::Mode mode; | |
| 5750 switch (variable->mode()) { | |
| 5751 case LET: | |
| 5752 case CONST: | |
| 5753 mode = HLoadContextSlot::kCheckDeoptimize; | |
| 5754 break; | |
| 5755 case CONST_LEGACY: | |
| 5756 mode = HLoadContextSlot::kCheckReturnUndefined; | |
| 5757 break; | |
| 5758 default: | |
| 5759 mode = HLoadContextSlot::kNoCheck; | |
| 5760 break; | |
| 5761 } | |
| 5762 HLoadContextSlot* instr = | |
| 5763 new(zone()) HLoadContextSlot(context, variable->index(), mode); | |
| 5764 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 5765 } | |
| 5766 | |
| 5767 case VariableLocation::LOOKUP: | |
| 5768 return Bailout(kReferenceToAVariableWhichRequiresDynamicLookup); | |
| 5769 } | |
| 5770 } | |
| 5771 | |
| 5772 | |
| 5773 void HOptimizedGraphBuilder::VisitLiteral(Literal* expr) { | |
| 5774 DCHECK(!HasStackOverflow()); | |
| 5775 DCHECK(current_block() != NULL); | |
| 5776 DCHECK(current_block()->HasPredecessor()); | |
| 5777 HConstant* instr = New<HConstant>(expr->value()); | |
| 5778 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 5779 } | |
| 5780 | |
| 5781 | |
| 5782 void HOptimizedGraphBuilder::VisitRegExpLiteral(RegExpLiteral* expr) { | |
| 5783 DCHECK(!HasStackOverflow()); | |
| 5784 DCHECK(current_block() != NULL); | |
| 5785 DCHECK(current_block()->HasPredecessor()); | |
| 5786 Handle<JSFunction> closure = function_state()->compilation_info()->closure(); | |
| 5787 Handle<LiteralsArray> literals(closure->literals()); | |
| 5788 HRegExpLiteral* instr = New<HRegExpLiteral>(literals, | |
| 5789 expr->pattern(), | |
| 5790 expr->flags(), | |
| 5791 expr->literal_index()); | |
| 5792 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 5793 } | |
| 5794 | |
| 5795 | |
| 5796 static bool CanInlinePropertyAccess(Handle<Map> map) { | |
| 5797 if (map->instance_type() == HEAP_NUMBER_TYPE) return true; | |
| 5798 if (map->instance_type() < FIRST_NONSTRING_TYPE) return true; | |
| 5799 return map->IsJSObjectMap() && !map->is_dictionary_map() && | |
| 5800 !map->has_named_interceptor() && | |
| 5801 // TODO(verwaest): Whitelist contexts to which we have access. | |
| 5802 !map->is_access_check_needed(); | |
| 5803 } | |
| 5804 | |
| 5805 | |
| 5806 // Determines whether the given array or object literal boilerplate satisfies | |
| 5807 // all limits to be considered for fast deep-copying and computes the total | |
| 5808 // size of all objects that are part of the graph. | |
| 5809 static bool IsFastLiteral(Handle<JSObject> boilerplate, | |
| 5810 int max_depth, | |
| 5811 int* max_properties) { | |
| 5812 if (boilerplate->map()->is_deprecated() && | |
| 5813 !JSObject::TryMigrateInstance(boilerplate)) { | |
| 5814 return false; | |
| 5815 } | |
| 5816 | |
| 5817 DCHECK(max_depth >= 0 && *max_properties >= 0); | |
| 5818 if (max_depth == 0) return false; | |
| 5819 | |
| 5820 Isolate* isolate = boilerplate->GetIsolate(); | |
| 5821 Handle<FixedArrayBase> elements(boilerplate->elements()); | |
| 5822 if (elements->length() > 0 && | |
| 5823 elements->map() != isolate->heap()->fixed_cow_array_map()) { | |
| 5824 if (boilerplate->HasFastSmiOrObjectElements()) { | |
| 5825 Handle<FixedArray> fast_elements = Handle<FixedArray>::cast(elements); | |
| 5826 int length = elements->length(); | |
| 5827 for (int i = 0; i < length; i++) { | |
| 5828 if ((*max_properties)-- == 0) return false; | |
| 5829 Handle<Object> value(fast_elements->get(i), isolate); | |
| 5830 if (value->IsJSObject()) { | |
| 5831 Handle<JSObject> value_object = Handle<JSObject>::cast(value); | |
| 5832 if (!IsFastLiteral(value_object, | |
| 5833 max_depth - 1, | |
| 5834 max_properties)) { | |
| 5835 return false; | |
| 5836 } | |
| 5837 } | |
| 5838 } | |
| 5839 } else if (!boilerplate->HasFastDoubleElements()) { | |
| 5840 return false; | |
| 5841 } | |
| 5842 } | |
| 5843 | |
| 5844 Handle<FixedArray> properties(boilerplate->properties()); | |
| 5845 if (properties->length() > 0) { | |
| 5846 return false; | |
| 5847 } else { | |
| 5848 Handle<DescriptorArray> descriptors( | |
| 5849 boilerplate->map()->instance_descriptors()); | |
| 5850 int limit = boilerplate->map()->NumberOfOwnDescriptors(); | |
| 5851 for (int i = 0; i < limit; i++) { | |
| 5852 PropertyDetails details = descriptors->GetDetails(i); | |
| 5853 if (details.type() != DATA) continue; | |
| 5854 if ((*max_properties)-- == 0) return false; | |
| 5855 FieldIndex field_index = FieldIndex::ForDescriptor(boilerplate->map(), i); | |
| 5856 if (boilerplate->IsUnboxedDoubleField(field_index)) continue; | |
| 5857 Handle<Object> value(boilerplate->RawFastPropertyAt(field_index), | |
| 5858 isolate); | |
| 5859 if (value->IsJSObject()) { | |
| 5860 Handle<JSObject> value_object = Handle<JSObject>::cast(value); | |
| 5861 if (!IsFastLiteral(value_object, | |
| 5862 max_depth - 1, | |
| 5863 max_properties)) { | |
| 5864 return false; | |
| 5865 } | |
| 5866 } | |
| 5867 } | |
| 5868 } | |
| 5869 return true; | |
| 5870 } | |
| 5871 | |
| 5872 | |
| 5873 void HOptimizedGraphBuilder::VisitObjectLiteral(ObjectLiteral* expr) { | |
| 5874 DCHECK(!HasStackOverflow()); | |
| 5875 DCHECK(current_block() != NULL); | |
| 5876 DCHECK(current_block()->HasPredecessor()); | |
| 5877 | |
| 5878 Handle<JSFunction> closure = function_state()->compilation_info()->closure(); | |
| 5879 HInstruction* literal; | |
| 5880 | |
| 5881 // Check whether to use fast or slow deep-copying for boilerplate. | |
| 5882 int max_properties = kMaxFastLiteralProperties; | |
| 5883 Handle<Object> literals_cell( | |
| 5884 closure->literals()->literal(expr->literal_index()), isolate()); | |
| 5885 Handle<AllocationSite> site; | |
| 5886 Handle<JSObject> boilerplate; | |
| 5887 if (!literals_cell->IsUndefined()) { | |
| 5888 // Retrieve the boilerplate | |
| 5889 site = Handle<AllocationSite>::cast(literals_cell); | |
| 5890 boilerplate = Handle<JSObject>(JSObject::cast(site->transition_info()), | |
| 5891 isolate()); | |
| 5892 } | |
| 5893 | |
| 5894 if (!boilerplate.is_null() && | |
| 5895 IsFastLiteral(boilerplate, kMaxFastLiteralDepth, &max_properties)) { | |
| 5896 AllocationSiteUsageContext site_context(isolate(), site, false); | |
| 5897 site_context.EnterNewScope(); | |
| 5898 literal = BuildFastLiteral(boilerplate, &site_context); | |
| 5899 site_context.ExitScope(site, boilerplate); | |
| 5900 } else { | |
| 5901 NoObservableSideEffectsScope no_effects(this); | |
| 5902 Handle<LiteralsArray> closure_literals(closure->literals(), isolate()); | |
| 5903 Handle<FixedArray> constant_properties = expr->constant_properties(); | |
| 5904 int literal_index = expr->literal_index(); | |
| 5905 int flags = expr->ComputeFlags(true); | |
| 5906 | |
| 5907 Add<HPushArguments>(Add<HConstant>(closure_literals), | |
| 5908 Add<HConstant>(literal_index), | |
| 5909 Add<HConstant>(constant_properties), | |
| 5910 Add<HConstant>(flags)); | |
| 5911 | |
| 5912 Runtime::FunctionId function_id = Runtime::kCreateObjectLiteral; | |
| 5913 literal = Add<HCallRuntime>(Runtime::FunctionForId(function_id), 4); | |
| 5914 } | |
| 5915 | |
| 5916 // The object is expected in the bailout environment during computation | |
| 5917 // of the property values and is the value of the entire expression. | |
| 5918 Push(literal); | |
| 5919 for (int i = 0; i < expr->properties()->length(); i++) { | |
| 5920 ObjectLiteral::Property* property = expr->properties()->at(i); | |
| 5921 if (property->is_computed_name()) return Bailout(kComputedPropertyName); | |
| 5922 if (property->IsCompileTimeValue()) continue; | |
| 5923 | |
| 5924 Literal* key = property->key()->AsLiteral(); | |
| 5925 Expression* value = property->value(); | |
| 5926 | |
| 5927 switch (property->kind()) { | |
| 5928 case ObjectLiteral::Property::MATERIALIZED_LITERAL: | |
| 5929 DCHECK(!CompileTimeValue::IsCompileTimeValue(value)); | |
| 5930 // Fall through. | |
| 5931 case ObjectLiteral::Property::COMPUTED: | |
| 5932 // It is safe to use [[Put]] here because the boilerplate already | |
| 5933 // contains computed properties with an uninitialized value. | |
| 5934 if (key->value()->IsInternalizedString()) { | |
| 5935 if (property->emit_store()) { | |
| 5936 CHECK_ALIVE(VisitForValue(value)); | |
| 5937 HValue* value = Pop(); | |
| 5938 | |
| 5939 Handle<Map> map = property->GetReceiverType(); | |
| 5940 Handle<String> name = key->AsPropertyName(); | |
| 5941 HValue* store; | |
| 5942 FeedbackVectorSlot slot = property->GetSlot(); | |
| 5943 if (map.is_null()) { | |
| 5944 // If we don't know the monomorphic type, do a generic store. | |
| 5945 CHECK_ALIVE(store = BuildNamedGeneric(STORE, NULL, slot, literal, | |
| 5946 name, value)); | |
| 5947 } else { | |
| 5948 PropertyAccessInfo info(this, STORE, map, name); | |
| 5949 if (info.CanAccessMonomorphic()) { | |
| 5950 HValue* checked_literal = Add<HCheckMaps>(literal, map); | |
| 5951 DCHECK(!info.IsAccessorConstant()); | |
| 5952 store = BuildMonomorphicAccess( | |
| 5953 &info, literal, checked_literal, value, | |
| 5954 BailoutId::None(), BailoutId::None()); | |
| 5955 } else { | |
| 5956 CHECK_ALIVE(store = BuildNamedGeneric(STORE, NULL, slot, | |
| 5957 literal, name, value)); | |
| 5958 } | |
| 5959 } | |
| 5960 if (store->IsInstruction()) { | |
| 5961 AddInstruction(HInstruction::cast(store)); | |
| 5962 } | |
| 5963 DCHECK(store->HasObservableSideEffects()); | |
| 5964 Add<HSimulate>(key->id(), REMOVABLE_SIMULATE); | |
| 5965 | |
| 5966 // Add [[HomeObject]] to function literals. | |
| 5967 if (FunctionLiteral::NeedsHomeObject(property->value())) { | |
| 5968 Handle<Symbol> sym = isolate()->factory()->home_object_symbol(); | |
| 5969 HInstruction* store_home = BuildNamedGeneric( | |
| 5970 STORE, NULL, property->GetSlot(1), value, sym, literal); | |
| 5971 AddInstruction(store_home); | |
| 5972 DCHECK(store_home->HasObservableSideEffects()); | |
| 5973 Add<HSimulate>(property->value()->id(), REMOVABLE_SIMULATE); | |
| 5974 } | |
| 5975 } else { | |
| 5976 CHECK_ALIVE(VisitForEffect(value)); | |
| 5977 } | |
| 5978 break; | |
| 5979 } | |
| 5980 // Fall through. | |
| 5981 case ObjectLiteral::Property::PROTOTYPE: | |
| 5982 case ObjectLiteral::Property::SETTER: | |
| 5983 case ObjectLiteral::Property::GETTER: | |
| 5984 return Bailout(kObjectLiteralWithComplexProperty); | |
| 5985 default: UNREACHABLE(); | |
| 5986 } | |
| 5987 } | |
| 5988 | |
| 5989 if (expr->has_function()) { | |
| 5990 // Return the result of the transformation to fast properties | |
| 5991 // instead of the original since this operation changes the map | |
| 5992 // of the object. This makes sure that the original object won't | |
| 5993 // be used by other optimized code before it is transformed | |
| 5994 // (e.g. because of code motion). | |
| 5995 HToFastProperties* result = Add<HToFastProperties>(Pop()); | |
| 5996 return ast_context()->ReturnValue(result); | |
| 5997 } else { | |
| 5998 return ast_context()->ReturnValue(Pop()); | |
| 5999 } | |
| 6000 } | |
| 6001 | |
| 6002 | |
| 6003 void HOptimizedGraphBuilder::VisitArrayLiteral(ArrayLiteral* expr) { | |
| 6004 DCHECK(!HasStackOverflow()); | |
| 6005 DCHECK(current_block() != NULL); | |
| 6006 DCHECK(current_block()->HasPredecessor()); | |
| 6007 ZoneList<Expression*>* subexprs = expr->values(); | |
| 6008 int length = subexprs->length(); | |
| 6009 HInstruction* literal; | |
| 6010 | |
| 6011 Handle<AllocationSite> site; | |
| 6012 Handle<LiteralsArray> literals(environment()->closure()->literals(), | |
| 6013 isolate()); | |
| 6014 bool uninitialized = false; | |
| 6015 Handle<Object> literals_cell(literals->literal(expr->literal_index()), | |
| 6016 isolate()); | |
| 6017 Handle<JSObject> boilerplate_object; | |
| 6018 if (literals_cell->IsUndefined()) { | |
| 6019 uninitialized = true; | |
| 6020 Handle<Object> raw_boilerplate; | |
| 6021 ASSIGN_RETURN_ON_EXCEPTION_VALUE( | |
| 6022 isolate(), raw_boilerplate, | |
| 6023 Runtime::CreateArrayLiteralBoilerplate( | |
| 6024 isolate(), literals, expr->constant_elements(), | |
| 6025 is_strong(function_language_mode())), | |
| 6026 Bailout(kArrayBoilerplateCreationFailed)); | |
| 6027 | |
| 6028 boilerplate_object = Handle<JSObject>::cast(raw_boilerplate); | |
| 6029 AllocationSiteCreationContext creation_context(isolate()); | |
| 6030 site = creation_context.EnterNewScope(); | |
| 6031 if (JSObject::DeepWalk(boilerplate_object, &creation_context).is_null()) { | |
| 6032 return Bailout(kArrayBoilerplateCreationFailed); | |
| 6033 } | |
| 6034 creation_context.ExitScope(site, boilerplate_object); | |
| 6035 literals->set_literal(expr->literal_index(), *site); | |
| 6036 | |
| 6037 if (boilerplate_object->elements()->map() == | |
| 6038 isolate()->heap()->fixed_cow_array_map()) { | |
| 6039 isolate()->counters()->cow_arrays_created_runtime()->Increment(); | |
| 6040 } | |
| 6041 } else { | |
| 6042 DCHECK(literals_cell->IsAllocationSite()); | |
| 6043 site = Handle<AllocationSite>::cast(literals_cell); | |
| 6044 boilerplate_object = Handle<JSObject>( | |
| 6045 JSObject::cast(site->transition_info()), isolate()); | |
| 6046 } | |
| 6047 | |
| 6048 DCHECK(!boilerplate_object.is_null()); | |
| 6049 DCHECK(site->SitePointsToLiteral()); | |
| 6050 | |
| 6051 ElementsKind boilerplate_elements_kind = | |
| 6052 boilerplate_object->GetElementsKind(); | |
| 6053 | |
| 6054 // Check whether to use fast or slow deep-copying for boilerplate. | |
| 6055 int max_properties = kMaxFastLiteralProperties; | |
| 6056 if (IsFastLiteral(boilerplate_object, | |
| 6057 kMaxFastLiteralDepth, | |
| 6058 &max_properties)) { | |
| 6059 AllocationSiteUsageContext site_context(isolate(), site, false); | |
| 6060 site_context.EnterNewScope(); | |
| 6061 literal = BuildFastLiteral(boilerplate_object, &site_context); | |
| 6062 site_context.ExitScope(site, boilerplate_object); | |
| 6063 } else { | |
| 6064 NoObservableSideEffectsScope no_effects(this); | |
| 6065 // Boilerplate already exists and constant elements are never accessed, | |
| 6066 // pass an empty fixed array to the runtime function instead. | |
| 6067 Handle<FixedArray> constants = isolate()->factory()->empty_fixed_array(); | |
| 6068 int literal_index = expr->literal_index(); | |
| 6069 int flags = expr->ComputeFlags(true); | |
| 6070 | |
| 6071 Add<HPushArguments>(Add<HConstant>(literals), | |
| 6072 Add<HConstant>(literal_index), | |
| 6073 Add<HConstant>(constants), | |
| 6074 Add<HConstant>(flags)); | |
| 6075 | |
| 6076 Runtime::FunctionId function_id = Runtime::kCreateArrayLiteral; | |
| 6077 literal = Add<HCallRuntime>(Runtime::FunctionForId(function_id), 4); | |
| 6078 | |
| 6079 // Register to deopt if the boilerplate ElementsKind changes. | |
| 6080 top_info()->dependencies()->AssumeTransitionStable(site); | |
| 6081 } | |
| 6082 | |
| 6083 // The array is expected in the bailout environment during computation | |
| 6084 // of the property values and is the value of the entire expression. | |
| 6085 Push(literal); | |
| 6086 // The literal index is on the stack, too. | |
| 6087 Push(Add<HConstant>(expr->literal_index())); | |
| 6088 | |
| 6089 HInstruction* elements = NULL; | |
| 6090 | |
| 6091 for (int i = 0; i < length; i++) { | |
| 6092 Expression* subexpr = subexprs->at(i); | |
| 6093 if (subexpr->IsSpread()) { | |
| 6094 return Bailout(kSpread); | |
| 6095 } | |
| 6096 | |
| 6097 // If the subexpression is a literal or a simple materialized literal it | |
| 6098 // is already set in the cloned array. | |
| 6099 if (CompileTimeValue::IsCompileTimeValue(subexpr)) continue; | |
| 6100 | |
| 6101 CHECK_ALIVE(VisitForValue(subexpr)); | |
| 6102 HValue* value = Pop(); | |
| 6103 if (!Smi::IsValid(i)) return Bailout(kNonSmiKeyInArrayLiteral); | |
| 6104 | |
| 6105 elements = AddLoadElements(literal); | |
| 6106 | |
| 6107 HValue* key = Add<HConstant>(i); | |
| 6108 | |
| 6109 switch (boilerplate_elements_kind) { | |
| 6110 case FAST_SMI_ELEMENTS: | |
| 6111 case FAST_HOLEY_SMI_ELEMENTS: | |
| 6112 case FAST_ELEMENTS: | |
| 6113 case FAST_HOLEY_ELEMENTS: | |
| 6114 case FAST_DOUBLE_ELEMENTS: | |
| 6115 case FAST_HOLEY_DOUBLE_ELEMENTS: { | |
| 6116 HStoreKeyed* instr = Add<HStoreKeyed>(elements, key, value, | |
| 6117 boilerplate_elements_kind); | |
| 6118 instr->SetUninitialized(uninitialized); | |
| 6119 break; | |
| 6120 } | |
| 6121 default: | |
| 6122 UNREACHABLE(); | |
| 6123 break; | |
| 6124 } | |
| 6125 | |
| 6126 Add<HSimulate>(expr->GetIdForElement(i)); | |
| 6127 } | |
| 6128 | |
| 6129 Drop(1); // array literal index | |
| 6130 return ast_context()->ReturnValue(Pop()); | |
| 6131 } | |
| 6132 | |
| 6133 | |
| 6134 HCheckMaps* HOptimizedGraphBuilder::AddCheckMap(HValue* object, | |
| 6135 Handle<Map> map) { | |
| 6136 BuildCheckHeapObject(object); | |
| 6137 return Add<HCheckMaps>(object, map); | |
| 6138 } | |
| 6139 | |
| 6140 | |
| 6141 HInstruction* HOptimizedGraphBuilder::BuildLoadNamedField( | |
| 6142 PropertyAccessInfo* info, | |
| 6143 HValue* checked_object) { | |
| 6144 // See if this is a load for an immutable property | |
| 6145 if (checked_object->ActualValue()->IsConstant()) { | |
| 6146 Handle<Object> object( | |
| 6147 HConstant::cast(checked_object->ActualValue())->handle(isolate())); | |
| 6148 | |
| 6149 if (object->IsJSObject()) { | |
| 6150 LookupIterator it(object, info->name(), | |
| 6151 LookupIterator::OWN_SKIP_INTERCEPTOR); | |
| 6152 Handle<Object> value = JSReceiver::GetDataProperty(&it); | |
| 6153 if (it.IsFound() && it.IsReadOnly() && !it.IsConfigurable()) { | |
| 6154 return New<HConstant>(value); | |
| 6155 } | |
| 6156 } | |
| 6157 } | |
| 6158 | |
| 6159 HObjectAccess access = info->access(); | |
| 6160 if (access.representation().IsDouble() && | |
| 6161 (!FLAG_unbox_double_fields || !access.IsInobject())) { | |
| 6162 // Load the heap number. | |
| 6163 checked_object = Add<HLoadNamedField>( | |
| 6164 checked_object, nullptr, | |
| 6165 access.WithRepresentation(Representation::Tagged())); | |
| 6166 // Load the double value from it. | |
| 6167 access = HObjectAccess::ForHeapNumberValue(); | |
| 6168 } | |
| 6169 | |
| 6170 SmallMapList* map_list = info->field_maps(); | |
| 6171 if (map_list->length() == 0) { | |
| 6172 return New<HLoadNamedField>(checked_object, checked_object, access); | |
| 6173 } | |
| 6174 | |
| 6175 UniqueSet<Map>* maps = new(zone()) UniqueSet<Map>(map_list->length(), zone()); | |
| 6176 for (int i = 0; i < map_list->length(); ++i) { | |
| 6177 maps->Add(Unique<Map>::CreateImmovable(map_list->at(i)), zone()); | |
| 6178 } | |
| 6179 return New<HLoadNamedField>( | |
| 6180 checked_object, checked_object, access, maps, info->field_type()); | |
| 6181 } | |
| 6182 | |
| 6183 | |
| 6184 HInstruction* HOptimizedGraphBuilder::BuildStoreNamedField( | |
| 6185 PropertyAccessInfo* info, | |
| 6186 HValue* checked_object, | |
| 6187 HValue* value) { | |
| 6188 bool transition_to_field = info->IsTransition(); | |
| 6189 // TODO(verwaest): Move this logic into PropertyAccessInfo. | |
| 6190 HObjectAccess field_access = info->access(); | |
| 6191 | |
| 6192 HStoreNamedField *instr; | |
| 6193 if (field_access.representation().IsDouble() && | |
| 6194 (!FLAG_unbox_double_fields || !field_access.IsInobject())) { | |
| 6195 HObjectAccess heap_number_access = | |
| 6196 field_access.WithRepresentation(Representation::Tagged()); | |
| 6197 if (transition_to_field) { | |
| 6198 // The store requires a mutable HeapNumber to be allocated. | |
| 6199 NoObservableSideEffectsScope no_side_effects(this); | |
| 6200 HInstruction* heap_number_size = Add<HConstant>(HeapNumber::kSize); | |
| 6201 | |
| 6202 // TODO(hpayer): Allocation site pretenuring support. | |
| 6203 HInstruction* heap_number = Add<HAllocate>(heap_number_size, | |
| 6204 HType::HeapObject(), | |
| 6205 NOT_TENURED, | |
| 6206 MUTABLE_HEAP_NUMBER_TYPE); | |
| 6207 AddStoreMapConstant( | |
| 6208 heap_number, isolate()->factory()->mutable_heap_number_map()); | |
| 6209 Add<HStoreNamedField>(heap_number, HObjectAccess::ForHeapNumberValue(), | |
| 6210 value); | |
| 6211 instr = New<HStoreNamedField>(checked_object->ActualValue(), | |
| 6212 heap_number_access, | |
| 6213 heap_number); | |
| 6214 } else { | |
| 6215 // Already holds a HeapNumber; load the box and write its value field. | |
| 6216 HInstruction* heap_number = | |
| 6217 Add<HLoadNamedField>(checked_object, nullptr, heap_number_access); | |
| 6218 instr = New<HStoreNamedField>(heap_number, | |
| 6219 HObjectAccess::ForHeapNumberValue(), | |
| 6220 value, STORE_TO_INITIALIZED_ENTRY); | |
| 6221 } | |
| 6222 } else { | |
| 6223 if (field_access.representation().IsHeapObject()) { | |
| 6224 BuildCheckHeapObject(value); | |
| 6225 } | |
| 6226 | |
| 6227 if (!info->field_maps()->is_empty()) { | |
| 6228 DCHECK(field_access.representation().IsHeapObject()); | |
| 6229 value = Add<HCheckMaps>(value, info->field_maps()); | |
| 6230 } | |
| 6231 | |
| 6232 // This is a normal store. | |
| 6233 instr = New<HStoreNamedField>( | |
| 6234 checked_object->ActualValue(), field_access, value, | |
| 6235 transition_to_field ? INITIALIZING_STORE : STORE_TO_INITIALIZED_ENTRY); | |
| 6236 } | |
| 6237 | |
| 6238 if (transition_to_field) { | |
| 6239 Handle<Map> transition(info->transition()); | |
| 6240 DCHECK(!transition->is_deprecated()); | |
| 6241 instr->SetTransition(Add<HConstant>(transition)); | |
| 6242 } | |
| 6243 return instr; | |
| 6244 } | |
| 6245 | |
| 6246 | |
| 6247 bool HOptimizedGraphBuilder::PropertyAccessInfo::IsCompatible( | |
| 6248 PropertyAccessInfo* info) { | |
| 6249 if (!CanInlinePropertyAccess(map_)) return false; | |
| 6250 | |
| 6251 // Currently only handle Type::Number as a polymorphic case. | |
| 6252 // TODO(verwaest): Support monomorphic handling of numbers with a HCheckNumber | |
| 6253 // instruction. | |
| 6254 if (IsNumberType()) return false; | |
| 6255 | |
| 6256 // Values are only compatible for monomorphic load if they all behave the same | |
| 6257 // regarding value wrappers. | |
| 6258 if (IsValueWrapped() != info->IsValueWrapped()) return false; | |
| 6259 | |
| 6260 if (!LookupDescriptor()) return false; | |
| 6261 | |
| 6262 if (!IsFound()) { | |
| 6263 return (!info->IsFound() || info->has_holder()) && | |
| 6264 map()->prototype() == info->map()->prototype(); | |
| 6265 } | |
| 6266 | |
| 6267 // Mismatch if the other access info found the property in the prototype | |
| 6268 // chain. | |
| 6269 if (info->has_holder()) return false; | |
| 6270 | |
| 6271 if (IsAccessorConstant()) { | |
| 6272 return accessor_.is_identical_to(info->accessor_) && | |
| 6273 api_holder_.is_identical_to(info->api_holder_); | |
| 6274 } | |
| 6275 | |
| 6276 if (IsDataConstant()) { | |
| 6277 return constant_.is_identical_to(info->constant_); | |
| 6278 } | |
| 6279 | |
| 6280 DCHECK(IsData()); | |
| 6281 if (!info->IsData()) return false; | |
| 6282 | |
| 6283 Representation r = access_.representation(); | |
| 6284 if (IsLoad()) { | |
| 6285 if (!info->access_.representation().IsCompatibleForLoad(r)) return false; | |
| 6286 } else { | |
| 6287 if (!info->access_.representation().IsCompatibleForStore(r)) return false; | |
| 6288 } | |
| 6289 if (info->access_.offset() != access_.offset()) return false; | |
| 6290 if (info->access_.IsInobject() != access_.IsInobject()) return false; | |
| 6291 if (IsLoad()) { | |
| 6292 if (field_maps_.is_empty()) { | |
| 6293 info->field_maps_.Clear(); | |
| 6294 } else if (!info->field_maps_.is_empty()) { | |
| 6295 for (int i = 0; i < field_maps_.length(); ++i) { | |
| 6296 info->field_maps_.AddMapIfMissing(field_maps_.at(i), info->zone()); | |
| 6297 } | |
| 6298 info->field_maps_.Sort(); | |
| 6299 } | |
| 6300 } else { | |
| 6301 // We can only merge stores that agree on their field maps. The comparison | |
| 6302 // below is safe, since we keep the field maps sorted. | |
| 6303 if (field_maps_.length() != info->field_maps_.length()) return false; | |
| 6304 for (int i = 0; i < field_maps_.length(); ++i) { | |
| 6305 if (!field_maps_.at(i).is_identical_to(info->field_maps_.at(i))) { | |
| 6306 return false; | |
| 6307 } | |
| 6308 } | |
| 6309 } | |
| 6310 info->GeneralizeRepresentation(r); | |
| 6311 info->field_type_ = info->field_type_.Combine(field_type_); | |
| 6312 return true; | |
| 6313 } | |
| 6314 | |
| 6315 | |
| 6316 bool HOptimizedGraphBuilder::PropertyAccessInfo::LookupDescriptor() { | |
| 6317 if (!map_->IsJSObjectMap()) return true; | |
| 6318 LookupDescriptor(*map_, *name_); | |
| 6319 return LoadResult(map_); | |
| 6320 } | |
| 6321 | |
| 6322 | |
| 6323 bool HOptimizedGraphBuilder::PropertyAccessInfo::LoadResult(Handle<Map> map) { | |
| 6324 if (!IsLoad() && IsProperty() && IsReadOnly()) { | |
| 6325 return false; | |
| 6326 } | |
| 6327 | |
| 6328 if (IsData()) { | |
| 6329 // Construct the object field access. | |
| 6330 int index = GetLocalFieldIndexFromMap(map); | |
| 6331 access_ = HObjectAccess::ForField(map, index, representation(), name_); | |
| 6332 | |
| 6333 // Load field map for heap objects. | |
| 6334 return LoadFieldMaps(map); | |
| 6335 } else if (IsAccessorConstant()) { | |
| 6336 Handle<Object> accessors = GetAccessorsFromMap(map); | |
| 6337 if (!accessors->IsAccessorPair()) return false; | |
| 6338 Object* raw_accessor = | |
| 6339 IsLoad() ? Handle<AccessorPair>::cast(accessors)->getter() | |
| 6340 : Handle<AccessorPair>::cast(accessors)->setter(); | |
| 6341 if (!raw_accessor->IsJSFunction()) return false; | |
| 6342 Handle<JSFunction> accessor = handle(JSFunction::cast(raw_accessor)); | |
| 6343 if (accessor->shared()->IsApiFunction()) { | |
| 6344 CallOptimization call_optimization(accessor); | |
| 6345 if (call_optimization.is_simple_api_call()) { | |
| 6346 CallOptimization::HolderLookup holder_lookup; | |
| 6347 api_holder_ = | |
| 6348 call_optimization.LookupHolderOfExpectedType(map_, &holder_lookup); | |
| 6349 } | |
| 6350 } | |
| 6351 accessor_ = accessor; | |
| 6352 } else if (IsDataConstant()) { | |
| 6353 constant_ = GetConstantFromMap(map); | |
| 6354 } | |
| 6355 | |
| 6356 return true; | |
| 6357 } | |
| 6358 | |
| 6359 | |
| 6360 bool HOptimizedGraphBuilder::PropertyAccessInfo::LoadFieldMaps( | |
| 6361 Handle<Map> map) { | |
| 6362 // Clear any previously collected field maps/type. | |
| 6363 field_maps_.Clear(); | |
| 6364 field_type_ = HType::Tagged(); | |
| 6365 | |
| 6366 // Figure out the field type from the accessor map. | |
| 6367 Handle<HeapType> field_type = GetFieldTypeFromMap(map); | |
| 6368 | |
| 6369 // Collect the (stable) maps from the field type. | |
| 6370 int num_field_maps = field_type->NumClasses(); | |
| 6371 if (num_field_maps > 0) { | |
| 6372 DCHECK(access_.representation().IsHeapObject()); | |
| 6373 field_maps_.Reserve(num_field_maps, zone()); | |
| 6374 HeapType::Iterator<Map> it = field_type->Classes(); | |
| 6375 while (!it.Done()) { | |
| 6376 Handle<Map> field_map = it.Current(); | |
| 6377 if (!field_map->is_stable()) { | |
| 6378 field_maps_.Clear(); | |
| 6379 break; | |
| 6380 } | |
| 6381 field_maps_.Add(field_map, zone()); | |
| 6382 it.Advance(); | |
| 6383 } | |
| 6384 } | |
| 6385 | |
| 6386 if (field_maps_.is_empty()) { | |
| 6387 // Store is not safe if the field map was cleared. | |
| 6388 return IsLoad() || !field_type->Is(HeapType::None()); | |
| 6389 } | |
| 6390 | |
| 6391 field_maps_.Sort(); | |
| 6392 DCHECK_EQ(num_field_maps, field_maps_.length()); | |
| 6393 | |
| 6394 // Determine field HType from field HeapType. | |
| 6395 field_type_ = HType::FromType<HeapType>(field_type); | |
| 6396 DCHECK(field_type_.IsHeapObject()); | |
| 6397 | |
| 6398 // Add dependency on the map that introduced the field. | |
| 6399 top_info()->dependencies()->AssumeFieldType(GetFieldOwnerFromMap(map)); | |
| 6400 return true; | |
| 6401 } | |
| 6402 | |
| 6403 | |
| 6404 bool HOptimizedGraphBuilder::PropertyAccessInfo::LookupInPrototypes() { | |
| 6405 Handle<Map> map = this->map(); | |
| 6406 | |
| 6407 while (map->prototype()->IsJSObject()) { | |
| 6408 holder_ = handle(JSObject::cast(map->prototype())); | |
| 6409 if (holder_->map()->is_deprecated()) { | |
| 6410 JSObject::TryMigrateInstance(holder_); | |
| 6411 } | |
| 6412 map = Handle<Map>(holder_->map()); | |
| 6413 if (!CanInlinePropertyAccess(map)) { | |
| 6414 NotFound(); | |
| 6415 return false; | |
| 6416 } | |
| 6417 LookupDescriptor(*map, *name_); | |
| 6418 if (IsFound()) return LoadResult(map); | |
| 6419 } | |
| 6420 | |
| 6421 NotFound(); | |
| 6422 return !map->prototype()->IsJSReceiver(); | |
| 6423 } | |
| 6424 | |
| 6425 | |
| 6426 bool HOptimizedGraphBuilder::PropertyAccessInfo::IsIntegerIndexedExotic() { | |
| 6427 InstanceType instance_type = map_->instance_type(); | |
| 6428 return instance_type == JS_TYPED_ARRAY_TYPE && name_->IsString() && | |
| 6429 IsSpecialIndex(isolate()->unicode_cache(), String::cast(*name_)); | |
| 6430 } | |
| 6431 | |
| 6432 | |
| 6433 bool HOptimizedGraphBuilder::PropertyAccessInfo::CanAccessMonomorphic() { | |
| 6434 if (!CanInlinePropertyAccess(map_)) return false; | |
| 6435 if (IsJSObjectFieldAccessor()) return IsLoad(); | |
| 6436 if (IsJSArrayBufferViewFieldAccessor()) return IsLoad(); | |
| 6437 if (map_->IsJSFunctionMap() && map_->is_constructor() && | |
| 6438 !map_->has_non_instance_prototype() && | |
| 6439 name_.is_identical_to(isolate()->factory()->prototype_string())) { | |
| 6440 return IsLoad(); | |
| 6441 } | |
| 6442 if (!LookupDescriptor()) return false; | |
| 6443 if (IsFound()) return IsLoad() || !IsReadOnly(); | |
| 6444 if (IsIntegerIndexedExotic()) return false; | |
| 6445 if (!LookupInPrototypes()) return false; | |
| 6446 if (IsLoad()) return true; | |
| 6447 | |
| 6448 if (IsAccessorConstant()) return true; | |
| 6449 LookupTransition(*map_, *name_, NONE); | |
| 6450 if (IsTransitionToData() && map_->unused_property_fields() > 0) { | |
| 6451 // Construct the object field access. | |
| 6452 int descriptor = transition()->LastAdded(); | |
| 6453 int index = | |
| 6454 transition()->instance_descriptors()->GetFieldIndex(descriptor) - | |
| 6455 map_->GetInObjectProperties(); | |
| 6456 PropertyDetails details = | |
| 6457 transition()->instance_descriptors()->GetDetails(descriptor); | |
| 6458 Representation representation = details.representation(); | |
| 6459 access_ = HObjectAccess::ForField(map_, index, representation, name_); | |
| 6460 | |
| 6461 // Load field map for heap objects. | |
| 6462 return LoadFieldMaps(transition()); | |
| 6463 } | |
| 6464 return false; | |
| 6465 } | |
| 6466 | |
| 6467 | |
| 6468 bool HOptimizedGraphBuilder::PropertyAccessInfo::CanAccessAsMonomorphic( | |
| 6469 SmallMapList* maps) { | |
| 6470 DCHECK(map_.is_identical_to(maps->first())); | |
| 6471 if (!CanAccessMonomorphic()) return false; | |
| 6472 STATIC_ASSERT(kMaxLoadPolymorphism == kMaxStorePolymorphism); | |
| 6473 if (maps->length() > kMaxLoadPolymorphism) return false; | |
| 6474 HObjectAccess access = HObjectAccess::ForMap(); // bogus default | |
| 6475 if (GetJSObjectFieldAccess(&access)) { | |
| 6476 for (int i = 1; i < maps->length(); ++i) { | |
| 6477 PropertyAccessInfo test_info(builder_, access_type_, maps->at(i), name_); | |
| 6478 HObjectAccess test_access = HObjectAccess::ForMap(); // bogus default | |
| 6479 if (!test_info.GetJSObjectFieldAccess(&test_access)) return false; | |
| 6480 if (!access.Equals(test_access)) return false; | |
| 6481 } | |
| 6482 return true; | |
| 6483 } | |
| 6484 if (GetJSArrayBufferViewFieldAccess(&access)) { | |
| 6485 for (int i = 1; i < maps->length(); ++i) { | |
| 6486 PropertyAccessInfo test_info(builder_, access_type_, maps->at(i), name_); | |
| 6487 HObjectAccess test_access = HObjectAccess::ForMap(); // bogus default | |
| 6488 if (!test_info.GetJSArrayBufferViewFieldAccess(&test_access)) { | |
| 6489 return false; | |
| 6490 } | |
| 6491 if (!access.Equals(test_access)) return false; | |
| 6492 } | |
| 6493 return true; | |
| 6494 } | |
| 6495 | |
| 6496 // Currently only handle numbers as a polymorphic case. | |
| 6497 // TODO(verwaest): Support monomorphic handling of numbers with a HCheckNumber | |
| 6498 // instruction. | |
| 6499 if (IsNumberType()) return false; | |
| 6500 | |
| 6501 // Multiple maps cannot transition to the same target map. | |
| 6502 DCHECK(!IsLoad() || !IsTransition()); | |
| 6503 if (IsTransition() && maps->length() > 1) return false; | |
| 6504 | |
| 6505 for (int i = 1; i < maps->length(); ++i) { | |
| 6506 PropertyAccessInfo test_info(builder_, access_type_, maps->at(i), name_); | |
| 6507 if (!test_info.IsCompatible(this)) return false; | |
| 6508 } | |
| 6509 | |
| 6510 return true; | |
| 6511 } | |
| 6512 | |
| 6513 | |
| 6514 Handle<Map> HOptimizedGraphBuilder::PropertyAccessInfo::map() { | |
| 6515 JSFunction* ctor = IC::GetRootConstructor( | |
| 6516 *map_, current_info()->closure()->context()->native_context()); | |
| 6517 if (ctor != NULL) return handle(ctor->initial_map()); | |
| 6518 return map_; | |
| 6519 } | |
| 6520 | |
| 6521 | |
| 6522 static bool NeedsWrapping(Handle<Map> map, Handle<JSFunction> target) { | |
| 6523 return !map->IsJSObjectMap() && | |
| 6524 is_sloppy(target->shared()->language_mode()) && | |
| 6525 !target->shared()->native(); | |
| 6526 } | |
| 6527 | |
| 6528 | |
| 6529 bool HOptimizedGraphBuilder::PropertyAccessInfo::NeedsWrappingFor( | |
| 6530 Handle<JSFunction> target) const { | |
| 6531 return NeedsWrapping(map_, target); | |
| 6532 } | |
| 6533 | |
| 6534 | |
| 6535 HValue* HOptimizedGraphBuilder::BuildMonomorphicAccess( | |
| 6536 PropertyAccessInfo* info, HValue* object, HValue* checked_object, | |
| 6537 HValue* value, BailoutId ast_id, BailoutId return_id, | |
| 6538 bool can_inline_accessor) { | |
| 6539 HObjectAccess access = HObjectAccess::ForMap(); // bogus default | |
| 6540 if (info->GetJSObjectFieldAccess(&access)) { | |
| 6541 DCHECK(info->IsLoad()); | |
| 6542 return New<HLoadNamedField>(object, checked_object, access); | |
| 6543 } | |
| 6544 | |
| 6545 if (info->GetJSArrayBufferViewFieldAccess(&access)) { | |
| 6546 DCHECK(info->IsLoad()); | |
| 6547 checked_object = Add<HCheckArrayBufferNotNeutered>(checked_object); | |
| 6548 return New<HLoadNamedField>(object, checked_object, access); | |
| 6549 } | |
| 6550 | |
| 6551 if (info->name().is_identical_to(isolate()->factory()->prototype_string()) && | |
| 6552 info->map()->IsJSFunctionMap() && info->map()->is_constructor()) { | |
| 6553 DCHECK(!info->map()->has_non_instance_prototype()); | |
| 6554 return New<HLoadFunctionPrototype>(checked_object); | |
| 6555 } | |
| 6556 | |
| 6557 HValue* checked_holder = checked_object; | |
| 6558 if (info->has_holder()) { | |
| 6559 Handle<JSObject> prototype(JSObject::cast(info->map()->prototype())); | |
| 6560 checked_holder = BuildCheckPrototypeMaps(prototype, info->holder()); | |
| 6561 } | |
| 6562 | |
| 6563 if (!info->IsFound()) { | |
| 6564 DCHECK(info->IsLoad()); | |
| 6565 if (is_strong(function_language_mode())) { | |
| 6566 return New<HCallRuntime>( | |
| 6567 Runtime::FunctionForId(Runtime::kThrowStrongModeImplicitConversion), | |
| 6568 0); | |
| 6569 } else { | |
| 6570 return graph()->GetConstantUndefined(); | |
| 6571 } | |
| 6572 } | |
| 6573 | |
| 6574 if (info->IsData()) { | |
| 6575 if (info->IsLoad()) { | |
| 6576 return BuildLoadNamedField(info, checked_holder); | |
| 6577 } else { | |
| 6578 return BuildStoreNamedField(info, checked_object, value); | |
| 6579 } | |
| 6580 } | |
| 6581 | |
| 6582 if (info->IsTransition()) { | |
| 6583 DCHECK(!info->IsLoad()); | |
| 6584 return BuildStoreNamedField(info, checked_object, value); | |
| 6585 } | |
| 6586 | |
| 6587 if (info->IsAccessorConstant()) { | |
| 6588 Push(checked_object); | |
| 6589 int argument_count = 1; | |
| 6590 if (!info->IsLoad()) { | |
| 6591 argument_count = 2; | |
| 6592 Push(value); | |
| 6593 } | |
| 6594 | |
| 6595 if (info->NeedsWrappingFor(info->accessor())) { | |
| 6596 HValue* function = Add<HConstant>(info->accessor()); | |
| 6597 PushArgumentsFromEnvironment(argument_count); | |
| 6598 return New<HCallFunction>(function, argument_count, WRAP_AND_CALL); | |
| 6599 } else if (FLAG_inline_accessors && can_inline_accessor) { | |
| 6600 bool success = info->IsLoad() | |
| 6601 ? TryInlineGetter(info->accessor(), info->map(), ast_id, return_id) | |
| 6602 : TryInlineSetter( | |
| 6603 info->accessor(), info->map(), ast_id, return_id, value); | |
| 6604 if (success || HasStackOverflow()) return NULL; | |
| 6605 } | |
| 6606 | |
| 6607 PushArgumentsFromEnvironment(argument_count); | |
| 6608 return BuildCallConstantFunction(info->accessor(), argument_count); | |
| 6609 } | |
| 6610 | |
| 6611 DCHECK(info->IsDataConstant()); | |
| 6612 if (info->IsLoad()) { | |
| 6613 return New<HConstant>(info->constant()); | |
| 6614 } else { | |
| 6615 return New<HCheckValue>(value, Handle<JSFunction>::cast(info->constant())); | |
| 6616 } | |
| 6617 } | |
| 6618 | |
| 6619 | |
| 6620 void HOptimizedGraphBuilder::HandlePolymorphicNamedFieldAccess( | |
| 6621 PropertyAccessType access_type, Expression* expr, FeedbackVectorSlot slot, | |
| 6622 BailoutId ast_id, BailoutId return_id, HValue* object, HValue* value, | |
| 6623 SmallMapList* maps, Handle<String> name) { | |
| 6624 // Something did not match; must use a polymorphic load. | |
| 6625 int count = 0; | |
| 6626 HBasicBlock* join = NULL; | |
| 6627 HBasicBlock* number_block = NULL; | |
| 6628 bool handled_string = false; | |
| 6629 | |
| 6630 bool handle_smi = false; | |
| 6631 STATIC_ASSERT(kMaxLoadPolymorphism == kMaxStorePolymorphism); | |
| 6632 int i; | |
| 6633 for (i = 0; i < maps->length() && count < kMaxLoadPolymorphism; ++i) { | |
| 6634 PropertyAccessInfo info(this, access_type, maps->at(i), name); | |
| 6635 if (info.IsStringType()) { | |
| 6636 if (handled_string) continue; | |
| 6637 handled_string = true; | |
| 6638 } | |
| 6639 if (info.CanAccessMonomorphic()) { | |
| 6640 count++; | |
| 6641 if (info.IsNumberType()) { | |
| 6642 handle_smi = true; | |
| 6643 break; | |
| 6644 } | |
| 6645 } | |
| 6646 } | |
| 6647 | |
| 6648 if (i < maps->length()) { | |
| 6649 count = -1; | |
| 6650 maps->Clear(); | |
| 6651 } else { | |
| 6652 count = 0; | |
| 6653 } | |
| 6654 HControlInstruction* smi_check = NULL; | |
| 6655 handled_string = false; | |
| 6656 | |
| 6657 for (i = 0; i < maps->length() && count < kMaxLoadPolymorphism; ++i) { | |
| 6658 PropertyAccessInfo info(this, access_type, maps->at(i), name); | |
| 6659 if (info.IsStringType()) { | |
| 6660 if (handled_string) continue; | |
| 6661 handled_string = true; | |
| 6662 } | |
| 6663 if (!info.CanAccessMonomorphic()) continue; | |
| 6664 | |
| 6665 if (count == 0) { | |
| 6666 join = graph()->CreateBasicBlock(); | |
| 6667 if (handle_smi) { | |
| 6668 HBasicBlock* empty_smi_block = graph()->CreateBasicBlock(); | |
| 6669 HBasicBlock* not_smi_block = graph()->CreateBasicBlock(); | |
| 6670 number_block = graph()->CreateBasicBlock(); | |
| 6671 smi_check = New<HIsSmiAndBranch>( | |
| 6672 object, empty_smi_block, not_smi_block); | |
| 6673 FinishCurrentBlock(smi_check); | |
| 6674 GotoNoSimulate(empty_smi_block, number_block); | |
| 6675 set_current_block(not_smi_block); | |
| 6676 } else { | |
| 6677 BuildCheckHeapObject(object); | |
| 6678 } | |
| 6679 } | |
| 6680 ++count; | |
| 6681 HBasicBlock* if_true = graph()->CreateBasicBlock(); | |
| 6682 HBasicBlock* if_false = graph()->CreateBasicBlock(); | |
| 6683 HUnaryControlInstruction* compare; | |
| 6684 | |
| 6685 HValue* dependency; | |
| 6686 if (info.IsNumberType()) { | |
| 6687 Handle<Map> heap_number_map = isolate()->factory()->heap_number_map(); | |
| 6688 compare = New<HCompareMap>(object, heap_number_map, if_true, if_false); | |
| 6689 dependency = smi_check; | |
| 6690 } else if (info.IsStringType()) { | |
| 6691 compare = New<HIsStringAndBranch>(object, if_true, if_false); | |
| 6692 dependency = compare; | |
| 6693 } else { | |
| 6694 compare = New<HCompareMap>(object, info.map(), if_true, if_false); | |
| 6695 dependency = compare; | |
| 6696 } | |
| 6697 FinishCurrentBlock(compare); | |
| 6698 | |
| 6699 if (info.IsNumberType()) { | |
| 6700 GotoNoSimulate(if_true, number_block); | |
| 6701 if_true = number_block; | |
| 6702 } | |
| 6703 | |
| 6704 set_current_block(if_true); | |
| 6705 | |
| 6706 HValue* access = | |
| 6707 BuildMonomorphicAccess(&info, object, dependency, value, ast_id, | |
| 6708 return_id, FLAG_polymorphic_inlining); | |
| 6709 | |
| 6710 HValue* result = NULL; | |
| 6711 switch (access_type) { | |
| 6712 case LOAD: | |
| 6713 result = access; | |
| 6714 break; | |
| 6715 case STORE: | |
| 6716 result = value; | |
| 6717 break; | |
| 6718 } | |
| 6719 | |
| 6720 if (access == NULL) { | |
| 6721 if (HasStackOverflow()) return; | |
| 6722 } else { | |
| 6723 if (access->IsInstruction()) { | |
| 6724 HInstruction* instr = HInstruction::cast(access); | |
| 6725 if (!instr->IsLinked()) AddInstruction(instr); | |
| 6726 } | |
| 6727 if (!ast_context()->IsEffect()) Push(result); | |
| 6728 } | |
| 6729 | |
| 6730 if (current_block() != NULL) Goto(join); | |
| 6731 set_current_block(if_false); | |
| 6732 } | |
| 6733 | |
| 6734 // Finish up. Unconditionally deoptimize if we've handled all the maps we | |
| 6735 // know about and do not want to handle ones we've never seen. Otherwise | |
| 6736 // use a generic IC. | |
| 6737 if (count == maps->length() && FLAG_deoptimize_uncommon_cases) { | |
| 6738 FinishExitWithHardDeoptimization( | |
| 6739 Deoptimizer::kUnknownMapInPolymorphicAccess); | |
| 6740 } else { | |
| 6741 HInstruction* instr = | |
| 6742 BuildNamedGeneric(access_type, expr, slot, object, name, value); | |
| 6743 AddInstruction(instr); | |
| 6744 if (!ast_context()->IsEffect()) Push(access_type == LOAD ? instr : value); | |
| 6745 | |
| 6746 if (join != NULL) { | |
| 6747 Goto(join); | |
| 6748 } else { | |
| 6749 Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 6750 if (!ast_context()->IsEffect()) ast_context()->ReturnValue(Pop()); | |
| 6751 return; | |
| 6752 } | |
| 6753 } | |
| 6754 | |
| 6755 DCHECK(join != NULL); | |
| 6756 if (join->HasPredecessor()) { | |
| 6757 join->SetJoinId(ast_id); | |
| 6758 set_current_block(join); | |
| 6759 if (!ast_context()->IsEffect()) ast_context()->ReturnValue(Pop()); | |
| 6760 } else { | |
| 6761 set_current_block(NULL); | |
| 6762 } | |
| 6763 } | |
| 6764 | |
| 6765 | |
| 6766 static bool ComputeReceiverTypes(Expression* expr, | |
| 6767 HValue* receiver, | |
| 6768 SmallMapList** t, | |
| 6769 Zone* zone) { | |
| 6770 SmallMapList* maps = expr->GetReceiverTypes(); | |
| 6771 *t = maps; | |
| 6772 bool monomorphic = expr->IsMonomorphic(); | |
| 6773 if (maps != NULL && receiver->HasMonomorphicJSObjectType()) { | |
| 6774 Map* root_map = receiver->GetMonomorphicJSObjectMap()->FindRootMap(); | |
| 6775 maps->FilterForPossibleTransitions(root_map); | |
| 6776 monomorphic = maps->length() == 1; | |
| 6777 } | |
| 6778 return monomorphic && CanInlinePropertyAccess(maps->first()); | |
| 6779 } | |
| 6780 | |
| 6781 | |
| 6782 static bool AreStringTypes(SmallMapList* maps) { | |
| 6783 for (int i = 0; i < maps->length(); i++) { | |
| 6784 if (maps->at(i)->instance_type() >= FIRST_NONSTRING_TYPE) return false; | |
| 6785 } | |
| 6786 return true; | |
| 6787 } | |
| 6788 | |
| 6789 | |
| 6790 void HOptimizedGraphBuilder::BuildStore(Expression* expr, Property* prop, | |
| 6791 FeedbackVectorSlot slot, | |
| 6792 BailoutId ast_id, BailoutId return_id, | |
| 6793 bool is_uninitialized) { | |
| 6794 if (!prop->key()->IsPropertyName()) { | |
| 6795 // Keyed store. | |
| 6796 HValue* value = Pop(); | |
| 6797 HValue* key = Pop(); | |
| 6798 HValue* object = Pop(); | |
| 6799 bool has_side_effects = false; | |
| 6800 HValue* result = | |
| 6801 HandleKeyedElementAccess(object, key, value, expr, slot, ast_id, | |
| 6802 return_id, STORE, &has_side_effects); | |
| 6803 if (has_side_effects) { | |
| 6804 if (!ast_context()->IsEffect()) Push(value); | |
| 6805 Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 6806 if (!ast_context()->IsEffect()) Drop(1); | |
| 6807 } | |
| 6808 if (result == NULL) return; | |
| 6809 return ast_context()->ReturnValue(value); | |
| 6810 } | |
| 6811 | |
| 6812 // Named store. | |
| 6813 HValue* value = Pop(); | |
| 6814 HValue* object = Pop(); | |
| 6815 | |
| 6816 Literal* key = prop->key()->AsLiteral(); | |
| 6817 Handle<String> name = Handle<String>::cast(key->value()); | |
| 6818 DCHECK(!name.is_null()); | |
| 6819 | |
| 6820 HValue* access = BuildNamedAccess(STORE, ast_id, return_id, expr, slot, | |
| 6821 object, name, value, is_uninitialized); | |
| 6822 if (access == NULL) return; | |
| 6823 | |
| 6824 if (!ast_context()->IsEffect()) Push(value); | |
| 6825 if (access->IsInstruction()) AddInstruction(HInstruction::cast(access)); | |
| 6826 if (access->HasObservableSideEffects()) { | |
| 6827 Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 6828 } | |
| 6829 if (!ast_context()->IsEffect()) Drop(1); | |
| 6830 return ast_context()->ReturnValue(value); | |
| 6831 } | |
| 6832 | |
| 6833 | |
| 6834 void HOptimizedGraphBuilder::HandlePropertyAssignment(Assignment* expr) { | |
| 6835 Property* prop = expr->target()->AsProperty(); | |
| 6836 DCHECK(prop != NULL); | |
| 6837 CHECK_ALIVE(VisitForValue(prop->obj())); | |
| 6838 if (!prop->key()->IsPropertyName()) { | |
| 6839 CHECK_ALIVE(VisitForValue(prop->key())); | |
| 6840 } | |
| 6841 CHECK_ALIVE(VisitForValue(expr->value())); | |
| 6842 BuildStore(expr, prop, expr->AssignmentSlot(), expr->id(), | |
| 6843 expr->AssignmentId(), expr->IsUninitialized()); | |
| 6844 } | |
| 6845 | |
| 6846 | |
| 6847 // Because not every expression has a position and there is not common | |
| 6848 // superclass of Assignment and CountOperation, we cannot just pass the | |
| 6849 // owning expression instead of position and ast_id separately. | |
| 6850 void HOptimizedGraphBuilder::HandleGlobalVariableAssignment( | |
| 6851 Variable* var, HValue* value, FeedbackVectorSlot slot, BailoutId ast_id) { | |
| 6852 Handle<GlobalObject> global(current_info()->global_object()); | |
| 6853 | |
| 6854 // Lookup in script contexts. | |
| 6855 { | |
| 6856 Handle<ScriptContextTable> script_contexts( | |
| 6857 global->native_context()->script_context_table()); | |
| 6858 ScriptContextTable::LookupResult lookup; | |
| 6859 if (ScriptContextTable::Lookup(script_contexts, var->name(), &lookup)) { | |
| 6860 if (lookup.mode == CONST) { | |
| 6861 return Bailout(kNonInitializerAssignmentToConst); | |
| 6862 } | |
| 6863 Handle<Context> script_context = | |
| 6864 ScriptContextTable::GetContext(script_contexts, lookup.context_index); | |
| 6865 | |
| 6866 Handle<Object> current_value = | |
| 6867 FixedArray::get(script_context, lookup.slot_index); | |
| 6868 | |
| 6869 // If the values is not the hole, it will stay initialized, | |
| 6870 // so no need to generate a check. | |
| 6871 if (*current_value == *isolate()->factory()->the_hole_value()) { | |
| 6872 return Bailout(kReferenceToUninitializedVariable); | |
| 6873 } | |
| 6874 | |
| 6875 HStoreNamedField* instr = Add<HStoreNamedField>( | |
| 6876 Add<HConstant>(script_context), | |
| 6877 HObjectAccess::ForContextSlot(lookup.slot_index), value); | |
| 6878 USE(instr); | |
| 6879 DCHECK(instr->HasObservableSideEffects()); | |
| 6880 Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 6881 return; | |
| 6882 } | |
| 6883 } | |
| 6884 | |
| 6885 LookupIterator it(global, var->name(), LookupIterator::OWN); | |
| 6886 GlobalPropertyAccess type = LookupGlobalProperty(var, &it, STORE); | |
| 6887 if (type == kUseCell) { | |
| 6888 Handle<PropertyCell> cell = it.GetPropertyCell(); | |
| 6889 top_info()->dependencies()->AssumePropertyCell(cell); | |
| 6890 auto cell_type = it.property_details().cell_type(); | |
| 6891 if (cell_type == PropertyCellType::kConstant || | |
| 6892 cell_type == PropertyCellType::kUndefined) { | |
| 6893 Handle<Object> constant(cell->value(), isolate()); | |
| 6894 if (value->IsConstant()) { | |
| 6895 HConstant* c_value = HConstant::cast(value); | |
| 6896 if (!constant.is_identical_to(c_value->handle(isolate()))) { | |
| 6897 Add<HDeoptimize>(Deoptimizer::kConstantGlobalVariableAssignment, | |
| 6898 Deoptimizer::EAGER); | |
| 6899 } | |
| 6900 } else { | |
| 6901 HValue* c_constant = Add<HConstant>(constant); | |
| 6902 IfBuilder builder(this); | |
| 6903 if (constant->IsNumber()) { | |
| 6904 builder.If<HCompareNumericAndBranch>(value, c_constant, Token::EQ); | |
| 6905 } else { | |
| 6906 builder.If<HCompareObjectEqAndBranch>(value, c_constant); | |
| 6907 } | |
| 6908 builder.Then(); | |
| 6909 builder.Else(); | |
| 6910 Add<HDeoptimize>(Deoptimizer::kConstantGlobalVariableAssignment, | |
| 6911 Deoptimizer::EAGER); | |
| 6912 builder.End(); | |
| 6913 } | |
| 6914 } | |
| 6915 HConstant* cell_constant = Add<HConstant>(cell); | |
| 6916 auto access = HObjectAccess::ForPropertyCellValue(); | |
| 6917 if (cell_type == PropertyCellType::kConstantType) { | |
| 6918 switch (cell->GetConstantType()) { | |
| 6919 case PropertyCellConstantType::kSmi: | |
| 6920 access = access.WithRepresentation(Representation::Smi()); | |
| 6921 break; | |
| 6922 case PropertyCellConstantType::kStableMap: { | |
| 6923 // The map may no longer be stable, deopt if it's ever different from | |
| 6924 // what is currently there, which will allow for restablization. | |
| 6925 Handle<Map> map(HeapObject::cast(cell->value())->map()); | |
| 6926 Add<HCheckHeapObject>(value); | |
| 6927 value = Add<HCheckMaps>(value, map); | |
| 6928 access = access.WithRepresentation(Representation::HeapObject()); | |
| 6929 break; | |
| 6930 } | |
| 6931 } | |
| 6932 } | |
| 6933 HInstruction* instr = Add<HStoreNamedField>(cell_constant, access, value); | |
| 6934 instr->ClearChangesFlag(kInobjectFields); | |
| 6935 instr->SetChangesFlag(kGlobalVars); | |
| 6936 if (instr->HasObservableSideEffects()) { | |
| 6937 Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 6938 } | |
| 6939 } else if (var->IsGlobalSlot()) { | |
| 6940 DCHECK(var->index() > 0); | |
| 6941 DCHECK(var->IsStaticGlobalObjectProperty()); | |
| 6942 int slot_index = var->index(); | |
| 6943 int depth = scope()->ContextChainLength(var->scope()); | |
| 6944 | |
| 6945 HStoreGlobalViaContext* instr = Add<HStoreGlobalViaContext>( | |
| 6946 value, depth, slot_index, function_language_mode()); | |
| 6947 USE(instr); | |
| 6948 DCHECK(instr->HasObservableSideEffects()); | |
| 6949 Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 6950 | |
| 6951 } else { | |
| 6952 HValue* global_object = Add<HLoadNamedField>( | |
| 6953 context(), nullptr, | |
| 6954 HObjectAccess::ForContextSlot(Context::GLOBAL_OBJECT_INDEX)); | |
| 6955 HStoreNamedGeneric* instr = | |
| 6956 Add<HStoreNamedGeneric>(global_object, var->name(), value, | |
| 6957 function_language_mode(), PREMONOMORPHIC); | |
| 6958 if (FLAG_vector_stores) { | |
| 6959 Handle<TypeFeedbackVector> vector = | |
| 6960 handle(current_feedback_vector(), isolate()); | |
| 6961 instr->SetVectorAndSlot(vector, slot); | |
| 6962 } | |
| 6963 USE(instr); | |
| 6964 DCHECK(instr->HasObservableSideEffects()); | |
| 6965 Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 6966 } | |
| 6967 } | |
| 6968 | |
| 6969 | |
| 6970 void HOptimizedGraphBuilder::HandleCompoundAssignment(Assignment* expr) { | |
| 6971 Expression* target = expr->target(); | |
| 6972 VariableProxy* proxy = target->AsVariableProxy(); | |
| 6973 Property* prop = target->AsProperty(); | |
| 6974 DCHECK(proxy == NULL || prop == NULL); | |
| 6975 | |
| 6976 // We have a second position recorded in the FullCodeGenerator to have | |
| 6977 // type feedback for the binary operation. | |
| 6978 BinaryOperation* operation = expr->binary_operation(); | |
| 6979 | |
| 6980 if (proxy != NULL) { | |
| 6981 Variable* var = proxy->var(); | |
| 6982 if (var->mode() == LET) { | |
| 6983 return Bailout(kUnsupportedLetCompoundAssignment); | |
| 6984 } | |
| 6985 | |
| 6986 CHECK_ALIVE(VisitForValue(operation)); | |
| 6987 | |
| 6988 switch (var->location()) { | |
| 6989 case VariableLocation::GLOBAL: | |
| 6990 case VariableLocation::UNALLOCATED: | |
| 6991 HandleGlobalVariableAssignment(var, Top(), expr->AssignmentSlot(), | |
| 6992 expr->AssignmentId()); | |
| 6993 break; | |
| 6994 | |
| 6995 case VariableLocation::PARAMETER: | |
| 6996 case VariableLocation::LOCAL: | |
| 6997 if (var->mode() == CONST_LEGACY) { | |
| 6998 return Bailout(kUnsupportedConstCompoundAssignment); | |
| 6999 } | |
| 7000 if (var->mode() == CONST) { | |
| 7001 return Bailout(kNonInitializerAssignmentToConst); | |
| 7002 } | |
| 7003 BindIfLive(var, Top()); | |
| 7004 break; | |
| 7005 | |
| 7006 case VariableLocation::CONTEXT: { | |
| 7007 // Bail out if we try to mutate a parameter value in a function | |
| 7008 // using the arguments object. We do not (yet) correctly handle the | |
| 7009 // arguments property of the function. | |
| 7010 if (current_info()->scope()->arguments() != NULL) { | |
| 7011 // Parameters will be allocated to context slots. We have no | |
| 7012 // direct way to detect that the variable is a parameter so we do | |
| 7013 // a linear search of the parameter variables. | |
| 7014 int count = current_info()->scope()->num_parameters(); | |
| 7015 for (int i = 0; i < count; ++i) { | |
| 7016 if (var == current_info()->scope()->parameter(i)) { | |
| 7017 Bailout(kAssignmentToParameterFunctionUsesArgumentsObject); | |
| 7018 } | |
| 7019 } | |
| 7020 } | |
| 7021 | |
| 7022 HStoreContextSlot::Mode mode; | |
| 7023 | |
| 7024 switch (var->mode()) { | |
| 7025 case LET: | |
| 7026 mode = HStoreContextSlot::kCheckDeoptimize; | |
| 7027 break; | |
| 7028 case CONST: | |
| 7029 return Bailout(kNonInitializerAssignmentToConst); | |
| 7030 case CONST_LEGACY: | |
| 7031 return ast_context()->ReturnValue(Pop()); | |
| 7032 default: | |
| 7033 mode = HStoreContextSlot::kNoCheck; | |
| 7034 } | |
| 7035 | |
| 7036 HValue* context = BuildContextChainWalk(var); | |
| 7037 HStoreContextSlot* instr = Add<HStoreContextSlot>( | |
| 7038 context, var->index(), mode, Top()); | |
| 7039 if (instr->HasObservableSideEffects()) { | |
| 7040 Add<HSimulate>(expr->AssignmentId(), REMOVABLE_SIMULATE); | |
| 7041 } | |
| 7042 break; | |
| 7043 } | |
| 7044 | |
| 7045 case VariableLocation::LOOKUP: | |
| 7046 return Bailout(kCompoundAssignmentToLookupSlot); | |
| 7047 } | |
| 7048 return ast_context()->ReturnValue(Pop()); | |
| 7049 | |
| 7050 } else if (prop != NULL) { | |
| 7051 CHECK_ALIVE(VisitForValue(prop->obj())); | |
| 7052 HValue* object = Top(); | |
| 7053 HValue* key = NULL; | |
| 7054 if (!prop->key()->IsPropertyName() || prop->IsStringAccess()) { | |
| 7055 CHECK_ALIVE(VisitForValue(prop->key())); | |
| 7056 key = Top(); | |
| 7057 } | |
| 7058 | |
| 7059 CHECK_ALIVE(PushLoad(prop, object, key)); | |
| 7060 | |
| 7061 CHECK_ALIVE(VisitForValue(expr->value())); | |
| 7062 HValue* right = Pop(); | |
| 7063 HValue* left = Pop(); | |
| 7064 | |
| 7065 Push(BuildBinaryOperation(operation, left, right, PUSH_BEFORE_SIMULATE)); | |
| 7066 | |
| 7067 BuildStore(expr, prop, expr->AssignmentSlot(), expr->id(), | |
| 7068 expr->AssignmentId(), expr->IsUninitialized()); | |
| 7069 } else { | |
| 7070 return Bailout(kInvalidLhsInCompoundAssignment); | |
| 7071 } | |
| 7072 } | |
| 7073 | |
| 7074 | |
| 7075 void HOptimizedGraphBuilder::VisitAssignment(Assignment* expr) { | |
| 7076 DCHECK(!HasStackOverflow()); | |
| 7077 DCHECK(current_block() != NULL); | |
| 7078 DCHECK(current_block()->HasPredecessor()); | |
| 7079 VariableProxy* proxy = expr->target()->AsVariableProxy(); | |
| 7080 Property* prop = expr->target()->AsProperty(); | |
| 7081 DCHECK(proxy == NULL || prop == NULL); | |
| 7082 | |
| 7083 if (expr->is_compound()) { | |
| 7084 HandleCompoundAssignment(expr); | |
| 7085 return; | |
| 7086 } | |
| 7087 | |
| 7088 if (prop != NULL) { | |
| 7089 HandlePropertyAssignment(expr); | |
| 7090 } else if (proxy != NULL) { | |
| 7091 Variable* var = proxy->var(); | |
| 7092 | |
| 7093 if (var->mode() == CONST) { | |
| 7094 if (expr->op() != Token::INIT_CONST) { | |
| 7095 return Bailout(kNonInitializerAssignmentToConst); | |
| 7096 } | |
| 7097 } else if (var->mode() == CONST_LEGACY) { | |
| 7098 if (expr->op() != Token::INIT_CONST_LEGACY) { | |
| 7099 CHECK_ALIVE(VisitForValue(expr->value())); | |
| 7100 return ast_context()->ReturnValue(Pop()); | |
| 7101 } | |
| 7102 | |
| 7103 if (var->IsStackAllocated()) { | |
| 7104 // We insert a use of the old value to detect unsupported uses of const | |
| 7105 // variables (e.g. initialization inside a loop). | |
| 7106 HValue* old_value = environment()->Lookup(var); | |
| 7107 Add<HUseConst>(old_value); | |
| 7108 } | |
| 7109 } | |
| 7110 | |
| 7111 if (proxy->IsArguments()) return Bailout(kAssignmentToArguments); | |
| 7112 | |
| 7113 // Handle the assignment. | |
| 7114 switch (var->location()) { | |
| 7115 case VariableLocation::GLOBAL: | |
| 7116 case VariableLocation::UNALLOCATED: | |
| 7117 CHECK_ALIVE(VisitForValue(expr->value())); | |
| 7118 HandleGlobalVariableAssignment(var, Top(), expr->AssignmentSlot(), | |
| 7119 expr->AssignmentId()); | |
| 7120 return ast_context()->ReturnValue(Pop()); | |
| 7121 | |
| 7122 case VariableLocation::PARAMETER: | |
| 7123 case VariableLocation::LOCAL: { | |
| 7124 // Perform an initialization check for let declared variables | |
| 7125 // or parameters. | |
| 7126 if (var->mode() == LET && expr->op() == Token::ASSIGN) { | |
| 7127 HValue* env_value = environment()->Lookup(var); | |
| 7128 if (env_value == graph()->GetConstantHole()) { | |
| 7129 return Bailout(kAssignmentToLetVariableBeforeInitialization); | |
| 7130 } | |
| 7131 } | |
| 7132 // We do not allow the arguments object to occur in a context where it | |
| 7133 // may escape, but assignments to stack-allocated locals are | |
| 7134 // permitted. | |
| 7135 CHECK_ALIVE(VisitForValue(expr->value(), ARGUMENTS_ALLOWED)); | |
| 7136 HValue* value = Pop(); | |
| 7137 BindIfLive(var, value); | |
| 7138 return ast_context()->ReturnValue(value); | |
| 7139 } | |
| 7140 | |
| 7141 case VariableLocation::CONTEXT: { | |
| 7142 // Bail out if we try to mutate a parameter value in a function using | |
| 7143 // the arguments object. We do not (yet) correctly handle the | |
| 7144 // arguments property of the function. | |
| 7145 if (current_info()->scope()->arguments() != NULL) { | |
| 7146 // Parameters will rewrite to context slots. We have no direct way | |
| 7147 // to detect that the variable is a parameter. | |
| 7148 int count = current_info()->scope()->num_parameters(); | |
| 7149 for (int i = 0; i < count; ++i) { | |
| 7150 if (var == current_info()->scope()->parameter(i)) { | |
| 7151 return Bailout(kAssignmentToParameterInArgumentsObject); | |
| 7152 } | |
| 7153 } | |
| 7154 } | |
| 7155 | |
| 7156 CHECK_ALIVE(VisitForValue(expr->value())); | |
| 7157 HStoreContextSlot::Mode mode; | |
| 7158 if (expr->op() == Token::ASSIGN) { | |
| 7159 switch (var->mode()) { | |
| 7160 case LET: | |
| 7161 mode = HStoreContextSlot::kCheckDeoptimize; | |
| 7162 break; | |
| 7163 case CONST: | |
| 7164 // This case is checked statically so no need to | |
| 7165 // perform checks here | |
| 7166 UNREACHABLE(); | |
| 7167 case CONST_LEGACY: | |
| 7168 return ast_context()->ReturnValue(Pop()); | |
| 7169 default: | |
| 7170 mode = HStoreContextSlot::kNoCheck; | |
| 7171 } | |
| 7172 } else if (expr->op() == Token::INIT_VAR || | |
| 7173 expr->op() == Token::INIT_LET || | |
| 7174 expr->op() == Token::INIT_CONST) { | |
| 7175 mode = HStoreContextSlot::kNoCheck; | |
| 7176 } else { | |
| 7177 DCHECK(expr->op() == Token::INIT_CONST_LEGACY); | |
| 7178 | |
| 7179 mode = HStoreContextSlot::kCheckIgnoreAssignment; | |
| 7180 } | |
| 7181 | |
| 7182 HValue* context = BuildContextChainWalk(var); | |
| 7183 HStoreContextSlot* instr = Add<HStoreContextSlot>( | |
| 7184 context, var->index(), mode, Top()); | |
| 7185 if (instr->HasObservableSideEffects()) { | |
| 7186 Add<HSimulate>(expr->AssignmentId(), REMOVABLE_SIMULATE); | |
| 7187 } | |
| 7188 return ast_context()->ReturnValue(Pop()); | |
| 7189 } | |
| 7190 | |
| 7191 case VariableLocation::LOOKUP: | |
| 7192 return Bailout(kAssignmentToLOOKUPVariable); | |
| 7193 } | |
| 7194 } else { | |
| 7195 return Bailout(kInvalidLeftHandSideInAssignment); | |
| 7196 } | |
| 7197 } | |
| 7198 | |
| 7199 | |
| 7200 void HOptimizedGraphBuilder::VisitYield(Yield* expr) { | |
| 7201 // Generators are not optimized, so we should never get here. | |
| 7202 UNREACHABLE(); | |
| 7203 } | |
| 7204 | |
| 7205 | |
| 7206 void HOptimizedGraphBuilder::VisitThrow(Throw* expr) { | |
| 7207 DCHECK(!HasStackOverflow()); | |
| 7208 DCHECK(current_block() != NULL); | |
| 7209 DCHECK(current_block()->HasPredecessor()); | |
| 7210 if (!ast_context()->IsEffect()) { | |
| 7211 // The parser turns invalid left-hand sides in assignments into throw | |
| 7212 // statements, which may not be in effect contexts. We might still try | |
| 7213 // to optimize such functions; bail out now if we do. | |
| 7214 return Bailout(kInvalidLeftHandSideInAssignment); | |
| 7215 } | |
| 7216 CHECK_ALIVE(VisitForValue(expr->exception())); | |
| 7217 | |
| 7218 HValue* value = environment()->Pop(); | |
| 7219 if (!top_info()->is_tracking_positions()) SetSourcePosition(expr->position()); | |
| 7220 Add<HPushArguments>(value); | |
| 7221 Add<HCallRuntime>(Runtime::FunctionForId(Runtime::kThrow), 1); | |
| 7222 Add<HSimulate>(expr->id()); | |
| 7223 | |
| 7224 // If the throw definitely exits the function, we can finish with a dummy | |
| 7225 // control flow at this point. This is not the case if the throw is inside | |
| 7226 // an inlined function which may be replaced. | |
| 7227 if (call_context() == NULL) { | |
| 7228 FinishExitCurrentBlock(New<HAbnormalExit>()); | |
| 7229 } | |
| 7230 } | |
| 7231 | |
| 7232 | |
| 7233 HInstruction* HGraphBuilder::AddLoadStringInstanceType(HValue* string) { | |
| 7234 if (string->IsConstant()) { | |
| 7235 HConstant* c_string = HConstant::cast(string); | |
| 7236 if (c_string->HasStringValue()) { | |
| 7237 return Add<HConstant>(c_string->StringValue()->map()->instance_type()); | |
| 7238 } | |
| 7239 } | |
| 7240 return Add<HLoadNamedField>( | |
| 7241 Add<HLoadNamedField>(string, nullptr, HObjectAccess::ForMap()), nullptr, | |
| 7242 HObjectAccess::ForMapInstanceType()); | |
| 7243 } | |
| 7244 | |
| 7245 | |
| 7246 HInstruction* HGraphBuilder::AddLoadStringLength(HValue* string) { | |
| 7247 return AddInstruction(BuildLoadStringLength(string)); | |
| 7248 } | |
| 7249 | |
| 7250 | |
| 7251 HInstruction* HGraphBuilder::BuildLoadStringLength(HValue* string) { | |
| 7252 if (string->IsConstant()) { | |
| 7253 HConstant* c_string = HConstant::cast(string); | |
| 7254 if (c_string->HasStringValue()) { | |
| 7255 return New<HConstant>(c_string->StringValue()->length()); | |
| 7256 } | |
| 7257 } | |
| 7258 return New<HLoadNamedField>(string, nullptr, | |
| 7259 HObjectAccess::ForStringLength()); | |
| 7260 } | |
| 7261 | |
| 7262 | |
| 7263 HInstruction* HOptimizedGraphBuilder::BuildNamedGeneric( | |
| 7264 PropertyAccessType access_type, Expression* expr, FeedbackVectorSlot slot, | |
| 7265 HValue* object, Handle<Name> name, HValue* value, bool is_uninitialized) { | |
| 7266 if (is_uninitialized) { | |
| 7267 Add<HDeoptimize>( | |
| 7268 Deoptimizer::kInsufficientTypeFeedbackForGenericNamedAccess, | |
| 7269 Deoptimizer::SOFT); | |
| 7270 } | |
| 7271 if (access_type == LOAD) { | |
| 7272 Handle<TypeFeedbackVector> vector = | |
| 7273 handle(current_feedback_vector(), isolate()); | |
| 7274 | |
| 7275 if (!expr->AsProperty()->key()->IsPropertyName()) { | |
| 7276 // It's possible that a keyed load of a constant string was converted | |
| 7277 // to a named load. Here, at the last minute, we need to make sure to | |
| 7278 // use a generic Keyed Load if we are using the type vector, because | |
| 7279 // it has to share information with full code. | |
| 7280 HConstant* key = Add<HConstant>(name); | |
| 7281 HLoadKeyedGeneric* result = New<HLoadKeyedGeneric>( | |
| 7282 object, key, function_language_mode(), PREMONOMORPHIC); | |
| 7283 result->SetVectorAndSlot(vector, slot); | |
| 7284 return result; | |
| 7285 } | |
| 7286 | |
| 7287 HLoadNamedGeneric* result = New<HLoadNamedGeneric>( | |
| 7288 object, name, function_language_mode(), PREMONOMORPHIC); | |
| 7289 result->SetVectorAndSlot(vector, slot); | |
| 7290 return result; | |
| 7291 } else { | |
| 7292 if (FLAG_vector_stores && | |
| 7293 current_feedback_vector()->GetKind(slot) == | |
| 7294 FeedbackVectorSlotKind::KEYED_STORE_IC) { | |
| 7295 // It's possible that a keyed store of a constant string was converted | |
| 7296 // to a named store. Here, at the last minute, we need to make sure to | |
| 7297 // use a generic Keyed Store if we are using the type vector, because | |
| 7298 // it has to share information with full code. | |
| 7299 HConstant* key = Add<HConstant>(name); | |
| 7300 HStoreKeyedGeneric* result = New<HStoreKeyedGeneric>( | |
| 7301 object, key, value, function_language_mode(), PREMONOMORPHIC); | |
| 7302 Handle<TypeFeedbackVector> vector = | |
| 7303 handle(current_feedback_vector(), isolate()); | |
| 7304 result->SetVectorAndSlot(vector, slot); | |
| 7305 return result; | |
| 7306 } | |
| 7307 | |
| 7308 HStoreNamedGeneric* result = New<HStoreNamedGeneric>( | |
| 7309 object, name, value, function_language_mode(), PREMONOMORPHIC); | |
| 7310 if (FLAG_vector_stores) { | |
| 7311 Handle<TypeFeedbackVector> vector = | |
| 7312 handle(current_feedback_vector(), isolate()); | |
| 7313 result->SetVectorAndSlot(vector, slot); | |
| 7314 } | |
| 7315 return result; | |
| 7316 } | |
| 7317 } | |
| 7318 | |
| 7319 | |
| 7320 HInstruction* HOptimizedGraphBuilder::BuildKeyedGeneric( | |
| 7321 PropertyAccessType access_type, Expression* expr, FeedbackVectorSlot slot, | |
| 7322 HValue* object, HValue* key, HValue* value) { | |
| 7323 if (access_type == LOAD) { | |
| 7324 InlineCacheState initial_state = expr->AsProperty()->GetInlineCacheState(); | |
| 7325 HLoadKeyedGeneric* result = New<HLoadKeyedGeneric>( | |
| 7326 object, key, function_language_mode(), initial_state); | |
| 7327 // HLoadKeyedGeneric with vector ics benefits from being encoded as | |
| 7328 // MEGAMORPHIC because the vector/slot combo becomes unnecessary. | |
| 7329 if (initial_state != MEGAMORPHIC) { | |
| 7330 // We need to pass vector information. | |
| 7331 Handle<TypeFeedbackVector> vector = | |
| 7332 handle(current_feedback_vector(), isolate()); | |
| 7333 result->SetVectorAndSlot(vector, slot); | |
| 7334 } | |
| 7335 return result; | |
| 7336 } else { | |
| 7337 HStoreKeyedGeneric* result = New<HStoreKeyedGeneric>( | |
| 7338 object, key, value, function_language_mode(), PREMONOMORPHIC); | |
| 7339 if (FLAG_vector_stores) { | |
| 7340 Handle<TypeFeedbackVector> vector = | |
| 7341 handle(current_feedback_vector(), isolate()); | |
| 7342 result->SetVectorAndSlot(vector, slot); | |
| 7343 } | |
| 7344 return result; | |
| 7345 } | |
| 7346 } | |
| 7347 | |
| 7348 | |
| 7349 LoadKeyedHoleMode HOptimizedGraphBuilder::BuildKeyedHoleMode(Handle<Map> map) { | |
| 7350 // Loads from a "stock" fast holey double arrays can elide the hole check. | |
| 7351 // Loads from a "stock" fast holey array can convert the hole to undefined | |
| 7352 // with impunity. | |
| 7353 LoadKeyedHoleMode load_mode = NEVER_RETURN_HOLE; | |
| 7354 bool holey_double_elements = | |
| 7355 *map == isolate()->get_initial_js_array_map(FAST_HOLEY_DOUBLE_ELEMENTS); | |
| 7356 bool holey_elements = | |
| 7357 *map == isolate()->get_initial_js_array_map(FAST_HOLEY_ELEMENTS); | |
| 7358 if ((holey_double_elements || holey_elements) && | |
| 7359 isolate()->IsFastArrayConstructorPrototypeChainIntact()) { | |
| 7360 load_mode = | |
| 7361 holey_double_elements ? ALLOW_RETURN_HOLE : CONVERT_HOLE_TO_UNDEFINED; | |
| 7362 | |
| 7363 Handle<JSObject> prototype(JSObject::cast(map->prototype()), isolate()); | |
| 7364 Handle<JSObject> object_prototype = isolate()->initial_object_prototype(); | |
| 7365 BuildCheckPrototypeMaps(prototype, object_prototype); | |
| 7366 graph()->MarkDependsOnEmptyArrayProtoElements(); | |
| 7367 } | |
| 7368 return load_mode; | |
| 7369 } | |
| 7370 | |
| 7371 | |
| 7372 HInstruction* HOptimizedGraphBuilder::BuildMonomorphicElementAccess( | |
| 7373 HValue* object, | |
| 7374 HValue* key, | |
| 7375 HValue* val, | |
| 7376 HValue* dependency, | |
| 7377 Handle<Map> map, | |
| 7378 PropertyAccessType access_type, | |
| 7379 KeyedAccessStoreMode store_mode) { | |
| 7380 HCheckMaps* checked_object = Add<HCheckMaps>(object, map, dependency); | |
| 7381 | |
| 7382 if (access_type == STORE && map->prototype()->IsJSObject()) { | |
| 7383 // monomorphic stores need a prototype chain check because shape | |
| 7384 // changes could allow callbacks on elements in the chain that | |
| 7385 // aren't compatible with monomorphic keyed stores. | |
| 7386 PrototypeIterator iter(map); | |
| 7387 JSObject* holder = NULL; | |
| 7388 while (!iter.IsAtEnd()) { | |
| 7389 holder = *PrototypeIterator::GetCurrent<JSObject>(iter); | |
| 7390 iter.Advance(); | |
| 7391 } | |
| 7392 DCHECK(holder && holder->IsJSObject()); | |
| 7393 | |
| 7394 BuildCheckPrototypeMaps(handle(JSObject::cast(map->prototype())), | |
| 7395 Handle<JSObject>(holder)); | |
| 7396 } | |
| 7397 | |
| 7398 LoadKeyedHoleMode load_mode = BuildKeyedHoleMode(map); | |
| 7399 return BuildUncheckedMonomorphicElementAccess( | |
| 7400 checked_object, key, val, | |
| 7401 map->instance_type() == JS_ARRAY_TYPE, | |
| 7402 map->elements_kind(), access_type, | |
| 7403 load_mode, store_mode); | |
| 7404 } | |
| 7405 | |
| 7406 | |
| 7407 static bool CanInlineElementAccess(Handle<Map> map) { | |
| 7408 return map->IsJSObjectMap() && !map->has_dictionary_elements() && | |
| 7409 !map->has_sloppy_arguments_elements() && | |
| 7410 !map->has_indexed_interceptor() && !map->is_access_check_needed(); | |
| 7411 } | |
| 7412 | |
| 7413 | |
| 7414 HInstruction* HOptimizedGraphBuilder::TryBuildConsolidatedElementLoad( | |
| 7415 HValue* object, | |
| 7416 HValue* key, | |
| 7417 HValue* val, | |
| 7418 SmallMapList* maps) { | |
| 7419 // For polymorphic loads of similar elements kinds (i.e. all tagged or all | |
| 7420 // double), always use the "worst case" code without a transition. This is | |
| 7421 // much faster than transitioning the elements to the worst case, trading a | |
| 7422 // HTransitionElements for a HCheckMaps, and avoiding mutation of the array. | |
| 7423 bool has_double_maps = false; | |
| 7424 bool has_smi_or_object_maps = false; | |
| 7425 bool has_js_array_access = false; | |
| 7426 bool has_non_js_array_access = false; | |
| 7427 bool has_seen_holey_elements = false; | |
| 7428 Handle<Map> most_general_consolidated_map; | |
| 7429 for (int i = 0; i < maps->length(); ++i) { | |
| 7430 Handle<Map> map = maps->at(i); | |
| 7431 if (!CanInlineElementAccess(map)) return NULL; | |
| 7432 // Don't allow mixing of JSArrays with JSObjects. | |
| 7433 if (map->instance_type() == JS_ARRAY_TYPE) { | |
| 7434 if (has_non_js_array_access) return NULL; | |
| 7435 has_js_array_access = true; | |
| 7436 } else if (has_js_array_access) { | |
| 7437 return NULL; | |
| 7438 } else { | |
| 7439 has_non_js_array_access = true; | |
| 7440 } | |
| 7441 // Don't allow mixed, incompatible elements kinds. | |
| 7442 if (map->has_fast_double_elements()) { | |
| 7443 if (has_smi_or_object_maps) return NULL; | |
| 7444 has_double_maps = true; | |
| 7445 } else if (map->has_fast_smi_or_object_elements()) { | |
| 7446 if (has_double_maps) return NULL; | |
| 7447 has_smi_or_object_maps = true; | |
| 7448 } else { | |
| 7449 return NULL; | |
| 7450 } | |
| 7451 // Remember if we've ever seen holey elements. | |
| 7452 if (IsHoleyElementsKind(map->elements_kind())) { | |
| 7453 has_seen_holey_elements = true; | |
| 7454 } | |
| 7455 // Remember the most general elements kind, the code for its load will | |
| 7456 // properly handle all of the more specific cases. | |
| 7457 if ((i == 0) || IsMoreGeneralElementsKindTransition( | |
| 7458 most_general_consolidated_map->elements_kind(), | |
| 7459 map->elements_kind())) { | |
| 7460 most_general_consolidated_map = map; | |
| 7461 } | |
| 7462 } | |
| 7463 if (!has_double_maps && !has_smi_or_object_maps) return NULL; | |
| 7464 | |
| 7465 HCheckMaps* checked_object = Add<HCheckMaps>(object, maps); | |
| 7466 // FAST_ELEMENTS is considered more general than FAST_HOLEY_SMI_ELEMENTS. | |
| 7467 // If we've seen both, the consolidated load must use FAST_HOLEY_ELEMENTS. | |
| 7468 ElementsKind consolidated_elements_kind = has_seen_holey_elements | |
| 7469 ? GetHoleyElementsKind(most_general_consolidated_map->elements_kind()) | |
| 7470 : most_general_consolidated_map->elements_kind(); | |
| 7471 LoadKeyedHoleMode load_mode = NEVER_RETURN_HOLE; | |
| 7472 if (has_seen_holey_elements) { | |
| 7473 // Make sure that all of the maps we are handling have the initial array | |
| 7474 // prototype. | |
| 7475 bool saw_non_array_prototype = false; | |
| 7476 for (int i = 0; i < maps->length(); ++i) { | |
| 7477 Handle<Map> map = maps->at(i); | |
| 7478 if (map->prototype() != *isolate()->initial_array_prototype()) { | |
| 7479 // We can't guarantee that loading the hole is safe. The prototype may | |
| 7480 // have an element at this position. | |
| 7481 saw_non_array_prototype = true; | |
| 7482 break; | |
| 7483 } | |
| 7484 } | |
| 7485 | |
| 7486 if (!saw_non_array_prototype) { | |
| 7487 Handle<Map> holey_map = handle( | |
| 7488 isolate()->get_initial_js_array_map(consolidated_elements_kind)); | |
| 7489 load_mode = BuildKeyedHoleMode(holey_map); | |
| 7490 if (load_mode != NEVER_RETURN_HOLE) { | |
| 7491 for (int i = 0; i < maps->length(); ++i) { | |
| 7492 Handle<Map> map = maps->at(i); | |
| 7493 // The prototype check was already done for the holey map in | |
| 7494 // BuildKeyedHoleMode. | |
| 7495 if (!map.is_identical_to(holey_map)) { | |
| 7496 Handle<JSObject> prototype(JSObject::cast(map->prototype()), | |
| 7497 isolate()); | |
| 7498 Handle<JSObject> object_prototype = | |
| 7499 isolate()->initial_object_prototype(); | |
| 7500 BuildCheckPrototypeMaps(prototype, object_prototype); | |
| 7501 } | |
| 7502 } | |
| 7503 } | |
| 7504 } | |
| 7505 } | |
| 7506 HInstruction* instr = BuildUncheckedMonomorphicElementAccess( | |
| 7507 checked_object, key, val, | |
| 7508 most_general_consolidated_map->instance_type() == JS_ARRAY_TYPE, | |
| 7509 consolidated_elements_kind, LOAD, load_mode, STANDARD_STORE); | |
| 7510 return instr; | |
| 7511 } | |
| 7512 | |
| 7513 | |
| 7514 HValue* HOptimizedGraphBuilder::HandlePolymorphicElementAccess( | |
| 7515 Expression* expr, FeedbackVectorSlot slot, HValue* object, HValue* key, | |
| 7516 HValue* val, SmallMapList* maps, PropertyAccessType access_type, | |
| 7517 KeyedAccessStoreMode store_mode, bool* has_side_effects) { | |
| 7518 *has_side_effects = false; | |
| 7519 BuildCheckHeapObject(object); | |
| 7520 | |
| 7521 if (access_type == LOAD) { | |
| 7522 HInstruction* consolidated_load = | |
| 7523 TryBuildConsolidatedElementLoad(object, key, val, maps); | |
| 7524 if (consolidated_load != NULL) { | |
| 7525 *has_side_effects |= consolidated_load->HasObservableSideEffects(); | |
| 7526 return consolidated_load; | |
| 7527 } | |
| 7528 } | |
| 7529 | |
| 7530 // Elements_kind transition support. | |
| 7531 MapHandleList transition_target(maps->length()); | |
| 7532 // Collect possible transition targets. | |
| 7533 MapHandleList possible_transitioned_maps(maps->length()); | |
| 7534 for (int i = 0; i < maps->length(); ++i) { | |
| 7535 Handle<Map> map = maps->at(i); | |
| 7536 // Loads from strings or loads with a mix of string and non-string maps | |
| 7537 // shouldn't be handled polymorphically. | |
| 7538 DCHECK(access_type != LOAD || !map->IsStringMap()); | |
| 7539 ElementsKind elements_kind = map->elements_kind(); | |
| 7540 if (CanInlineElementAccess(map) && IsFastElementsKind(elements_kind) && | |
| 7541 elements_kind != GetInitialFastElementsKind()) { | |
| 7542 possible_transitioned_maps.Add(map); | |
| 7543 } | |
| 7544 if (IsSloppyArgumentsElements(elements_kind)) { | |
| 7545 HInstruction* result = | |
| 7546 BuildKeyedGeneric(access_type, expr, slot, object, key, val); | |
| 7547 *has_side_effects = result->HasObservableSideEffects(); | |
| 7548 return AddInstruction(result); | |
| 7549 } | |
| 7550 } | |
| 7551 // Get transition target for each map (NULL == no transition). | |
| 7552 for (int i = 0; i < maps->length(); ++i) { | |
| 7553 Handle<Map> map = maps->at(i); | |
| 7554 Handle<Map> transitioned_map = | |
| 7555 Map::FindTransitionedMap(map, &possible_transitioned_maps); | |
| 7556 transition_target.Add(transitioned_map); | |
| 7557 } | |
| 7558 | |
| 7559 MapHandleList untransitionable_maps(maps->length()); | |
| 7560 HTransitionElementsKind* transition = NULL; | |
| 7561 for (int i = 0; i < maps->length(); ++i) { | |
| 7562 Handle<Map> map = maps->at(i); | |
| 7563 DCHECK(map->IsMap()); | |
| 7564 if (!transition_target.at(i).is_null()) { | |
| 7565 DCHECK(Map::IsValidElementsTransition( | |
| 7566 map->elements_kind(), | |
| 7567 transition_target.at(i)->elements_kind())); | |
| 7568 transition = Add<HTransitionElementsKind>(object, map, | |
| 7569 transition_target.at(i)); | |
| 7570 } else { | |
| 7571 untransitionable_maps.Add(map); | |
| 7572 } | |
| 7573 } | |
| 7574 | |
| 7575 // If only one map is left after transitioning, handle this case | |
| 7576 // monomorphically. | |
| 7577 DCHECK(untransitionable_maps.length() >= 1); | |
| 7578 if (untransitionable_maps.length() == 1) { | |
| 7579 Handle<Map> untransitionable_map = untransitionable_maps[0]; | |
| 7580 HInstruction* instr = NULL; | |
| 7581 if (!CanInlineElementAccess(untransitionable_map)) { | |
| 7582 instr = AddInstruction( | |
| 7583 BuildKeyedGeneric(access_type, expr, slot, object, key, val)); | |
| 7584 } else { | |
| 7585 instr = BuildMonomorphicElementAccess( | |
| 7586 object, key, val, transition, untransitionable_map, access_type, | |
| 7587 store_mode); | |
| 7588 } | |
| 7589 *has_side_effects |= instr->HasObservableSideEffects(); | |
| 7590 return access_type == STORE ? val : instr; | |
| 7591 } | |
| 7592 | |
| 7593 HBasicBlock* join = graph()->CreateBasicBlock(); | |
| 7594 | |
| 7595 for (int i = 0; i < untransitionable_maps.length(); ++i) { | |
| 7596 Handle<Map> map = untransitionable_maps[i]; | |
| 7597 ElementsKind elements_kind = map->elements_kind(); | |
| 7598 HBasicBlock* this_map = graph()->CreateBasicBlock(); | |
| 7599 HBasicBlock* other_map = graph()->CreateBasicBlock(); | |
| 7600 HCompareMap* mapcompare = | |
| 7601 New<HCompareMap>(object, map, this_map, other_map); | |
| 7602 FinishCurrentBlock(mapcompare); | |
| 7603 | |
| 7604 set_current_block(this_map); | |
| 7605 HInstruction* access = NULL; | |
| 7606 if (!CanInlineElementAccess(map)) { | |
| 7607 access = AddInstruction( | |
| 7608 BuildKeyedGeneric(access_type, expr, slot, object, key, val)); | |
| 7609 } else { | |
| 7610 DCHECK(IsFastElementsKind(elements_kind) || | |
| 7611 IsFixedTypedArrayElementsKind(elements_kind)); | |
| 7612 LoadKeyedHoleMode load_mode = BuildKeyedHoleMode(map); | |
| 7613 // Happily, mapcompare is a checked object. | |
| 7614 access = BuildUncheckedMonomorphicElementAccess( | |
| 7615 mapcompare, key, val, | |
| 7616 map->instance_type() == JS_ARRAY_TYPE, | |
| 7617 elements_kind, access_type, | |
| 7618 load_mode, | |
| 7619 store_mode); | |
| 7620 } | |
| 7621 *has_side_effects |= access->HasObservableSideEffects(); | |
| 7622 // The caller will use has_side_effects and add a correct Simulate. | |
| 7623 access->SetFlag(HValue::kHasNoObservableSideEffects); | |
| 7624 if (access_type == LOAD) { | |
| 7625 Push(access); | |
| 7626 } | |
| 7627 NoObservableSideEffectsScope scope(this); | |
| 7628 GotoNoSimulate(join); | |
| 7629 set_current_block(other_map); | |
| 7630 } | |
| 7631 | |
| 7632 // Ensure that we visited at least one map above that goes to join. This is | |
| 7633 // necessary because FinishExitWithHardDeoptimization does an AbnormalExit | |
| 7634 // rather than joining the join block. If this becomes an issue, insert a | |
| 7635 // generic access in the case length() == 0. | |
| 7636 DCHECK(join->predecessors()->length() > 0); | |
| 7637 // Deopt if none of the cases matched. | |
| 7638 NoObservableSideEffectsScope scope(this); | |
| 7639 FinishExitWithHardDeoptimization( | |
| 7640 Deoptimizer::kUnknownMapInPolymorphicElementAccess); | |
| 7641 set_current_block(join); | |
| 7642 return access_type == STORE ? val : Pop(); | |
| 7643 } | |
| 7644 | |
| 7645 | |
| 7646 HValue* HOptimizedGraphBuilder::HandleKeyedElementAccess( | |
| 7647 HValue* obj, HValue* key, HValue* val, Expression* expr, | |
| 7648 FeedbackVectorSlot slot, BailoutId ast_id, BailoutId return_id, | |
| 7649 PropertyAccessType access_type, bool* has_side_effects) { | |
| 7650 if (key->ActualValue()->IsConstant()) { | |
| 7651 Handle<Object> constant = | |
| 7652 HConstant::cast(key->ActualValue())->handle(isolate()); | |
| 7653 uint32_t array_index; | |
| 7654 if (constant->IsString() && | |
| 7655 !Handle<String>::cast(constant)->AsArrayIndex(&array_index)) { | |
| 7656 if (!constant->IsUniqueName()) { | |
| 7657 constant = isolate()->factory()->InternalizeString( | |
| 7658 Handle<String>::cast(constant)); | |
| 7659 } | |
| 7660 HValue* access = | |
| 7661 BuildNamedAccess(access_type, ast_id, return_id, expr, slot, obj, | |
| 7662 Handle<String>::cast(constant), val, false); | |
| 7663 if (access == NULL || access->IsPhi() || | |
| 7664 HInstruction::cast(access)->IsLinked()) { | |
| 7665 *has_side_effects = false; | |
| 7666 } else { | |
| 7667 HInstruction* instr = HInstruction::cast(access); | |
| 7668 AddInstruction(instr); | |
| 7669 *has_side_effects = instr->HasObservableSideEffects(); | |
| 7670 } | |
| 7671 return access; | |
| 7672 } | |
| 7673 } | |
| 7674 | |
| 7675 DCHECK(!expr->IsPropertyName()); | |
| 7676 HInstruction* instr = NULL; | |
| 7677 | |
| 7678 SmallMapList* maps; | |
| 7679 bool monomorphic = ComputeReceiverTypes(expr, obj, &maps, zone()); | |
| 7680 | |
| 7681 bool force_generic = false; | |
| 7682 if (expr->GetKeyType() == PROPERTY) { | |
| 7683 // Non-Generic accesses assume that elements are being accessed, and will | |
| 7684 // deopt for non-index keys, which the IC knows will occur. | |
| 7685 // TODO(jkummerow): Consider adding proper support for property accesses. | |
| 7686 force_generic = true; | |
| 7687 monomorphic = false; | |
| 7688 } else if (access_type == STORE && | |
| 7689 (monomorphic || (maps != NULL && !maps->is_empty()))) { | |
| 7690 // Stores can't be mono/polymorphic if their prototype chain has dictionary | |
| 7691 // elements. However a receiver map that has dictionary elements itself | |
| 7692 // should be left to normal mono/poly behavior (the other maps may benefit | |
| 7693 // from highly optimized stores). | |
| 7694 for (int i = 0; i < maps->length(); i++) { | |
| 7695 Handle<Map> current_map = maps->at(i); | |
| 7696 if (current_map->DictionaryElementsInPrototypeChainOnly()) { | |
| 7697 force_generic = true; | |
| 7698 monomorphic = false; | |
| 7699 break; | |
| 7700 } | |
| 7701 } | |
| 7702 } else if (access_type == LOAD && !monomorphic && | |
| 7703 (maps != NULL && !maps->is_empty())) { | |
| 7704 // Polymorphic loads have to go generic if any of the maps are strings. | |
| 7705 // If some, but not all of the maps are strings, we should go generic | |
| 7706 // because polymorphic access wants to key on ElementsKind and isn't | |
| 7707 // compatible with strings. | |
| 7708 for (int i = 0; i < maps->length(); i++) { | |
| 7709 Handle<Map> current_map = maps->at(i); | |
| 7710 if (current_map->IsStringMap()) { | |
| 7711 force_generic = true; | |
| 7712 break; | |
| 7713 } | |
| 7714 } | |
| 7715 } | |
| 7716 | |
| 7717 if (monomorphic) { | |
| 7718 Handle<Map> map = maps->first(); | |
| 7719 if (!CanInlineElementAccess(map)) { | |
| 7720 instr = AddInstruction( | |
| 7721 BuildKeyedGeneric(access_type, expr, slot, obj, key, val)); | |
| 7722 } else { | |
| 7723 BuildCheckHeapObject(obj); | |
| 7724 instr = BuildMonomorphicElementAccess( | |
| 7725 obj, key, val, NULL, map, access_type, expr->GetStoreMode()); | |
| 7726 } | |
| 7727 } else if (!force_generic && (maps != NULL && !maps->is_empty())) { | |
| 7728 return HandlePolymorphicElementAccess(expr, slot, obj, key, val, maps, | |
| 7729 access_type, expr->GetStoreMode(), | |
| 7730 has_side_effects); | |
| 7731 } else { | |
| 7732 if (access_type == STORE) { | |
| 7733 if (expr->IsAssignment() && | |
| 7734 expr->AsAssignment()->HasNoTypeInformation()) { | |
| 7735 Add<HDeoptimize>(Deoptimizer::kInsufficientTypeFeedbackForKeyedStore, | |
| 7736 Deoptimizer::SOFT); | |
| 7737 } | |
| 7738 } else { | |
| 7739 if (expr->AsProperty()->HasNoTypeInformation()) { | |
| 7740 Add<HDeoptimize>(Deoptimizer::kInsufficientTypeFeedbackForKeyedLoad, | |
| 7741 Deoptimizer::SOFT); | |
| 7742 } | |
| 7743 } | |
| 7744 instr = AddInstruction( | |
| 7745 BuildKeyedGeneric(access_type, expr, slot, obj, key, val)); | |
| 7746 } | |
| 7747 *has_side_effects = instr->HasObservableSideEffects(); | |
| 7748 return instr; | |
| 7749 } | |
| 7750 | |
| 7751 | |
| 7752 void HOptimizedGraphBuilder::EnsureArgumentsArePushedForAccess() { | |
| 7753 // Outermost function already has arguments on the stack. | |
| 7754 if (function_state()->outer() == NULL) return; | |
| 7755 | |
| 7756 if (function_state()->arguments_pushed()) return; | |
| 7757 | |
| 7758 // Push arguments when entering inlined function. | |
| 7759 HEnterInlined* entry = function_state()->entry(); | |
| 7760 entry->set_arguments_pushed(); | |
| 7761 | |
| 7762 HArgumentsObject* arguments = entry->arguments_object(); | |
| 7763 const ZoneList<HValue*>* arguments_values = arguments->arguments_values(); | |
| 7764 | |
| 7765 HInstruction* insert_after = entry; | |
| 7766 for (int i = 0; i < arguments_values->length(); i++) { | |
| 7767 HValue* argument = arguments_values->at(i); | |
| 7768 HInstruction* push_argument = New<HPushArguments>(argument); | |
| 7769 push_argument->InsertAfter(insert_after); | |
| 7770 insert_after = push_argument; | |
| 7771 } | |
| 7772 | |
| 7773 HArgumentsElements* arguments_elements = New<HArgumentsElements>(true); | |
| 7774 arguments_elements->ClearFlag(HValue::kUseGVN); | |
| 7775 arguments_elements->InsertAfter(insert_after); | |
| 7776 function_state()->set_arguments_elements(arguments_elements); | |
| 7777 } | |
| 7778 | |
| 7779 | |
| 7780 bool HOptimizedGraphBuilder::TryArgumentsAccess(Property* expr) { | |
| 7781 VariableProxy* proxy = expr->obj()->AsVariableProxy(); | |
| 7782 if (proxy == NULL) return false; | |
| 7783 if (!proxy->var()->IsStackAllocated()) return false; | |
| 7784 if (!environment()->Lookup(proxy->var())->CheckFlag(HValue::kIsArguments)) { | |
| 7785 return false; | |
| 7786 } | |
| 7787 | |
| 7788 HInstruction* result = NULL; | |
| 7789 if (expr->key()->IsPropertyName()) { | |
| 7790 Handle<String> name = expr->key()->AsLiteral()->AsPropertyName(); | |
| 7791 if (!String::Equals(name, isolate()->factory()->length_string())) { | |
| 7792 return false; | |
| 7793 } | |
| 7794 | |
| 7795 if (function_state()->outer() == NULL) { | |
| 7796 HInstruction* elements = Add<HArgumentsElements>(false); | |
| 7797 result = New<HArgumentsLength>(elements); | |
| 7798 } else { | |
| 7799 // Number of arguments without receiver. | |
| 7800 int argument_count = environment()-> | |
| 7801 arguments_environment()->parameter_count() - 1; | |
| 7802 result = New<HConstant>(argument_count); | |
| 7803 } | |
| 7804 } else { | |
| 7805 Push(graph()->GetArgumentsObject()); | |
| 7806 CHECK_ALIVE_OR_RETURN(VisitForValue(expr->key()), true); | |
| 7807 HValue* key = Pop(); | |
| 7808 Drop(1); // Arguments object. | |
| 7809 if (function_state()->outer() == NULL) { | |
| 7810 HInstruction* elements = Add<HArgumentsElements>(false); | |
| 7811 HInstruction* length = Add<HArgumentsLength>(elements); | |
| 7812 HInstruction* checked_key = Add<HBoundsCheck>(key, length); | |
| 7813 result = New<HAccessArgumentsAt>(elements, length, checked_key); | |
| 7814 } else { | |
| 7815 EnsureArgumentsArePushedForAccess(); | |
| 7816 | |
| 7817 // Number of arguments without receiver. | |
| 7818 HInstruction* elements = function_state()->arguments_elements(); | |
| 7819 int argument_count = environment()-> | |
| 7820 arguments_environment()->parameter_count() - 1; | |
| 7821 HInstruction* length = Add<HConstant>(argument_count); | |
| 7822 HInstruction* checked_key = Add<HBoundsCheck>(key, length); | |
| 7823 result = New<HAccessArgumentsAt>(elements, length, checked_key); | |
| 7824 } | |
| 7825 } | |
| 7826 ast_context()->ReturnInstruction(result, expr->id()); | |
| 7827 return true; | |
| 7828 } | |
| 7829 | |
| 7830 | |
| 7831 HValue* HOptimizedGraphBuilder::BuildNamedAccess( | |
| 7832 PropertyAccessType access, BailoutId ast_id, BailoutId return_id, | |
| 7833 Expression* expr, FeedbackVectorSlot slot, HValue* object, | |
| 7834 Handle<String> name, HValue* value, bool is_uninitialized) { | |
| 7835 SmallMapList* maps; | |
| 7836 ComputeReceiverTypes(expr, object, &maps, zone()); | |
| 7837 DCHECK(maps != NULL); | |
| 7838 | |
| 7839 if (maps->length() > 0) { | |
| 7840 PropertyAccessInfo info(this, access, maps->first(), name); | |
| 7841 if (!info.CanAccessAsMonomorphic(maps)) { | |
| 7842 HandlePolymorphicNamedFieldAccess(access, expr, slot, ast_id, return_id, | |
| 7843 object, value, maps, name); | |
| 7844 return NULL; | |
| 7845 } | |
| 7846 | |
| 7847 HValue* checked_object; | |
| 7848 // Type::Number() is only supported by polymorphic load/call handling. | |
| 7849 DCHECK(!info.IsNumberType()); | |
| 7850 BuildCheckHeapObject(object); | |
| 7851 if (AreStringTypes(maps)) { | |
| 7852 checked_object = | |
| 7853 Add<HCheckInstanceType>(object, HCheckInstanceType::IS_STRING); | |
| 7854 } else { | |
| 7855 checked_object = Add<HCheckMaps>(object, maps); | |
| 7856 } | |
| 7857 return BuildMonomorphicAccess( | |
| 7858 &info, object, checked_object, value, ast_id, return_id); | |
| 7859 } | |
| 7860 | |
| 7861 return BuildNamedGeneric(access, expr, slot, object, name, value, | |
| 7862 is_uninitialized); | |
| 7863 } | |
| 7864 | |
| 7865 | |
| 7866 void HOptimizedGraphBuilder::PushLoad(Property* expr, | |
| 7867 HValue* object, | |
| 7868 HValue* key) { | |
| 7869 ValueContext for_value(this, ARGUMENTS_NOT_ALLOWED); | |
| 7870 Push(object); | |
| 7871 if (key != NULL) Push(key); | |
| 7872 BuildLoad(expr, expr->LoadId()); | |
| 7873 } | |
| 7874 | |
| 7875 | |
| 7876 void HOptimizedGraphBuilder::BuildLoad(Property* expr, | |
| 7877 BailoutId ast_id) { | |
| 7878 HInstruction* instr = NULL; | |
| 7879 if (expr->IsStringAccess()) { | |
| 7880 HValue* index = Pop(); | |
| 7881 HValue* string = Pop(); | |
| 7882 HInstruction* char_code = BuildStringCharCodeAt(string, index); | |
| 7883 AddInstruction(char_code); | |
| 7884 instr = NewUncasted<HStringCharFromCode>(char_code); | |
| 7885 | |
| 7886 } else if (expr->key()->IsPropertyName()) { | |
| 7887 Handle<String> name = expr->key()->AsLiteral()->AsPropertyName(); | |
| 7888 HValue* object = Pop(); | |
| 7889 | |
| 7890 HValue* value = BuildNamedAccess(LOAD, ast_id, expr->LoadId(), expr, | |
| 7891 expr->PropertyFeedbackSlot(), object, name, | |
| 7892 NULL, expr->IsUninitialized()); | |
| 7893 if (value == NULL) return; | |
| 7894 if (value->IsPhi()) return ast_context()->ReturnValue(value); | |
| 7895 instr = HInstruction::cast(value); | |
| 7896 if (instr->IsLinked()) return ast_context()->ReturnValue(instr); | |
| 7897 | |
| 7898 } else { | |
| 7899 HValue* key = Pop(); | |
| 7900 HValue* obj = Pop(); | |
| 7901 | |
| 7902 bool has_side_effects = false; | |
| 7903 HValue* load = HandleKeyedElementAccess( | |
| 7904 obj, key, NULL, expr, expr->PropertyFeedbackSlot(), ast_id, | |
| 7905 expr->LoadId(), LOAD, &has_side_effects); | |
| 7906 if (has_side_effects) { | |
| 7907 if (ast_context()->IsEffect()) { | |
| 7908 Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 7909 } else { | |
| 7910 Push(load); | |
| 7911 Add<HSimulate>(ast_id, REMOVABLE_SIMULATE); | |
| 7912 Drop(1); | |
| 7913 } | |
| 7914 } | |
| 7915 if (load == NULL) return; | |
| 7916 return ast_context()->ReturnValue(load); | |
| 7917 } | |
| 7918 return ast_context()->ReturnInstruction(instr, ast_id); | |
| 7919 } | |
| 7920 | |
| 7921 | |
| 7922 void HOptimizedGraphBuilder::VisitProperty(Property* expr) { | |
| 7923 DCHECK(!HasStackOverflow()); | |
| 7924 DCHECK(current_block() != NULL); | |
| 7925 DCHECK(current_block()->HasPredecessor()); | |
| 7926 | |
| 7927 if (TryArgumentsAccess(expr)) return; | |
| 7928 | |
| 7929 CHECK_ALIVE(VisitForValue(expr->obj())); | |
| 7930 if (!expr->key()->IsPropertyName() || expr->IsStringAccess()) { | |
| 7931 CHECK_ALIVE(VisitForValue(expr->key())); | |
| 7932 } | |
| 7933 | |
| 7934 BuildLoad(expr, expr->id()); | |
| 7935 } | |
| 7936 | |
| 7937 | |
| 7938 HInstruction* HGraphBuilder::BuildConstantMapCheck(Handle<JSObject> constant) { | |
| 7939 HCheckMaps* check = Add<HCheckMaps>( | |
| 7940 Add<HConstant>(constant), handle(constant->map())); | |
| 7941 check->ClearDependsOnFlag(kElementsKind); | |
| 7942 return check; | |
| 7943 } | |
| 7944 | |
| 7945 | |
| 7946 HInstruction* HGraphBuilder::BuildCheckPrototypeMaps(Handle<JSObject> prototype, | |
| 7947 Handle<JSObject> holder) { | |
| 7948 PrototypeIterator iter(isolate(), prototype, | |
| 7949 PrototypeIterator::START_AT_RECEIVER); | |
| 7950 while (holder.is_null() || | |
| 7951 !PrototypeIterator::GetCurrent(iter).is_identical_to(holder)) { | |
| 7952 BuildConstantMapCheck(PrototypeIterator::GetCurrent<JSObject>(iter)); | |
| 7953 iter.Advance(); | |
| 7954 if (iter.IsAtEnd()) { | |
| 7955 return NULL; | |
| 7956 } | |
| 7957 } | |
| 7958 return BuildConstantMapCheck(PrototypeIterator::GetCurrent<JSObject>(iter)); | |
| 7959 } | |
| 7960 | |
| 7961 | |
| 7962 void HOptimizedGraphBuilder::AddCheckPrototypeMaps(Handle<JSObject> holder, | |
| 7963 Handle<Map> receiver_map) { | |
| 7964 if (!holder.is_null()) { | |
| 7965 Handle<JSObject> prototype(JSObject::cast(receiver_map->prototype())); | |
| 7966 BuildCheckPrototypeMaps(prototype, holder); | |
| 7967 } | |
| 7968 } | |
| 7969 | |
| 7970 | |
| 7971 HInstruction* HOptimizedGraphBuilder::NewPlainFunctionCall(HValue* fun, | |
| 7972 int argument_count) { | |
| 7973 return New<HCallJSFunction>(fun, argument_count); | |
| 7974 } | |
| 7975 | |
| 7976 | |
| 7977 HInstruction* HOptimizedGraphBuilder::NewArgumentAdaptorCall( | |
| 7978 HValue* fun, HValue* context, | |
| 7979 int argument_count, HValue* expected_param_count) { | |
| 7980 ArgumentAdaptorDescriptor descriptor(isolate()); | |
| 7981 HValue* arity = Add<HConstant>(argument_count - 1); | |
| 7982 | |
| 7983 HValue* op_vals[] = { context, fun, arity, expected_param_count }; | |
| 7984 | |
| 7985 Handle<Code> adaptor = | |
| 7986 isolate()->builtins()->ArgumentsAdaptorTrampoline(); | |
| 7987 HConstant* adaptor_value = Add<HConstant>(adaptor); | |
| 7988 | |
| 7989 return New<HCallWithDescriptor>(adaptor_value, argument_count, descriptor, | |
| 7990 Vector<HValue*>(op_vals, arraysize(op_vals))); | |
| 7991 } | |
| 7992 | |
| 7993 | |
| 7994 HInstruction* HOptimizedGraphBuilder::BuildCallConstantFunction( | |
| 7995 Handle<JSFunction> jsfun, int argument_count) { | |
| 7996 HValue* target = Add<HConstant>(jsfun); | |
| 7997 // For constant functions, we try to avoid calling the | |
| 7998 // argument adaptor and instead call the function directly | |
| 7999 int formal_parameter_count = | |
| 8000 jsfun->shared()->internal_formal_parameter_count(); | |
| 8001 bool dont_adapt_arguments = | |
| 8002 (formal_parameter_count == | |
| 8003 SharedFunctionInfo::kDontAdaptArgumentsSentinel); | |
| 8004 int arity = argument_count - 1; | |
| 8005 bool can_invoke_directly = | |
| 8006 dont_adapt_arguments || formal_parameter_count == arity; | |
| 8007 if (can_invoke_directly) { | |
| 8008 if (jsfun.is_identical_to(current_info()->closure())) { | |
| 8009 graph()->MarkRecursive(); | |
| 8010 } | |
| 8011 return NewPlainFunctionCall(target, argument_count); | |
| 8012 } else { | |
| 8013 HValue* param_count_value = Add<HConstant>(formal_parameter_count); | |
| 8014 HValue* context = Add<HLoadNamedField>( | |
| 8015 target, nullptr, HObjectAccess::ForFunctionContextPointer()); | |
| 8016 return NewArgumentAdaptorCall(target, context, | |
| 8017 argument_count, param_count_value); | |
| 8018 } | |
| 8019 UNREACHABLE(); | |
| 8020 return NULL; | |
| 8021 } | |
| 8022 | |
| 8023 | |
| 8024 class FunctionSorter { | |
| 8025 public: | |
| 8026 explicit FunctionSorter(int index = 0, int ticks = 0, int size = 0) | |
| 8027 : index_(index), ticks_(ticks), size_(size) {} | |
| 8028 | |
| 8029 int index() const { return index_; } | |
| 8030 int ticks() const { return ticks_; } | |
| 8031 int size() const { return size_; } | |
| 8032 | |
| 8033 private: | |
| 8034 int index_; | |
| 8035 int ticks_; | |
| 8036 int size_; | |
| 8037 }; | |
| 8038 | |
| 8039 | |
| 8040 inline bool operator<(const FunctionSorter& lhs, const FunctionSorter& rhs) { | |
| 8041 int diff = lhs.ticks() - rhs.ticks(); | |
| 8042 if (diff != 0) return diff > 0; | |
| 8043 return lhs.size() < rhs.size(); | |
| 8044 } | |
| 8045 | |
| 8046 | |
| 8047 void HOptimizedGraphBuilder::HandlePolymorphicCallNamed(Call* expr, | |
| 8048 HValue* receiver, | |
| 8049 SmallMapList* maps, | |
| 8050 Handle<String> name) { | |
| 8051 int argument_count = expr->arguments()->length() + 1; // Includes receiver. | |
| 8052 FunctionSorter order[kMaxCallPolymorphism]; | |
| 8053 | |
| 8054 bool handle_smi = false; | |
| 8055 bool handled_string = false; | |
| 8056 int ordered_functions = 0; | |
| 8057 | |
| 8058 int i; | |
| 8059 for (i = 0; i < maps->length() && ordered_functions < kMaxCallPolymorphism; | |
| 8060 ++i) { | |
| 8061 PropertyAccessInfo info(this, LOAD, maps->at(i), name); | |
| 8062 if (info.CanAccessMonomorphic() && info.IsDataConstant() && | |
| 8063 info.constant()->IsJSFunction()) { | |
| 8064 if (info.IsStringType()) { | |
| 8065 if (handled_string) continue; | |
| 8066 handled_string = true; | |
| 8067 } | |
| 8068 Handle<JSFunction> target = Handle<JSFunction>::cast(info.constant()); | |
| 8069 if (info.IsNumberType()) { | |
| 8070 handle_smi = true; | |
| 8071 } | |
| 8072 expr->set_target(target); | |
| 8073 order[ordered_functions++] = FunctionSorter( | |
| 8074 i, target->shared()->profiler_ticks(), InliningAstSize(target)); | |
| 8075 } | |
| 8076 } | |
| 8077 | |
| 8078 std::sort(order, order + ordered_functions); | |
| 8079 | |
| 8080 if (i < maps->length()) { | |
| 8081 maps->Clear(); | |
| 8082 ordered_functions = -1; | |
| 8083 } | |
| 8084 | |
| 8085 HBasicBlock* number_block = NULL; | |
| 8086 HBasicBlock* join = NULL; | |
| 8087 handled_string = false; | |
| 8088 int count = 0; | |
| 8089 | |
| 8090 for (int fn = 0; fn < ordered_functions; ++fn) { | |
| 8091 int i = order[fn].index(); | |
| 8092 PropertyAccessInfo info(this, LOAD, maps->at(i), name); | |
| 8093 if (info.IsStringType()) { | |
| 8094 if (handled_string) continue; | |
| 8095 handled_string = true; | |
| 8096 } | |
| 8097 // Reloads the target. | |
| 8098 info.CanAccessMonomorphic(); | |
| 8099 Handle<JSFunction> target = Handle<JSFunction>::cast(info.constant()); | |
| 8100 | |
| 8101 expr->set_target(target); | |
| 8102 if (count == 0) { | |
| 8103 // Only needed once. | |
| 8104 join = graph()->CreateBasicBlock(); | |
| 8105 if (handle_smi) { | |
| 8106 HBasicBlock* empty_smi_block = graph()->CreateBasicBlock(); | |
| 8107 HBasicBlock* not_smi_block = graph()->CreateBasicBlock(); | |
| 8108 number_block = graph()->CreateBasicBlock(); | |
| 8109 FinishCurrentBlock(New<HIsSmiAndBranch>( | |
| 8110 receiver, empty_smi_block, not_smi_block)); | |
| 8111 GotoNoSimulate(empty_smi_block, number_block); | |
| 8112 set_current_block(not_smi_block); | |
| 8113 } else { | |
| 8114 BuildCheckHeapObject(receiver); | |
| 8115 } | |
| 8116 } | |
| 8117 ++count; | |
| 8118 HBasicBlock* if_true = graph()->CreateBasicBlock(); | |
| 8119 HBasicBlock* if_false = graph()->CreateBasicBlock(); | |
| 8120 HUnaryControlInstruction* compare; | |
| 8121 | |
| 8122 Handle<Map> map = info.map(); | |
| 8123 if (info.IsNumberType()) { | |
| 8124 Handle<Map> heap_number_map = isolate()->factory()->heap_number_map(); | |
| 8125 compare = New<HCompareMap>(receiver, heap_number_map, if_true, if_false); | |
| 8126 } else if (info.IsStringType()) { | |
| 8127 compare = New<HIsStringAndBranch>(receiver, if_true, if_false); | |
| 8128 } else { | |
| 8129 compare = New<HCompareMap>(receiver, map, if_true, if_false); | |
| 8130 } | |
| 8131 FinishCurrentBlock(compare); | |
| 8132 | |
| 8133 if (info.IsNumberType()) { | |
| 8134 GotoNoSimulate(if_true, number_block); | |
| 8135 if_true = number_block; | |
| 8136 } | |
| 8137 | |
| 8138 set_current_block(if_true); | |
| 8139 | |
| 8140 AddCheckPrototypeMaps(info.holder(), map); | |
| 8141 | |
| 8142 HValue* function = Add<HConstant>(expr->target()); | |
| 8143 environment()->SetExpressionStackAt(0, function); | |
| 8144 Push(receiver); | |
| 8145 CHECK_ALIVE(VisitExpressions(expr->arguments())); | |
| 8146 bool needs_wrapping = info.NeedsWrappingFor(target); | |
| 8147 bool try_inline = FLAG_polymorphic_inlining && !needs_wrapping; | |
| 8148 if (FLAG_trace_inlining && try_inline) { | |
| 8149 Handle<JSFunction> caller = current_info()->closure(); | |
| 8150 base::SmartArrayPointer<char> caller_name = | |
| 8151 caller->shared()->DebugName()->ToCString(); | |
| 8152 PrintF("Trying to inline the polymorphic call to %s from %s\n", | |
| 8153 name->ToCString().get(), | |
| 8154 caller_name.get()); | |
| 8155 } | |
| 8156 if (try_inline && TryInlineCall(expr)) { | |
| 8157 // Trying to inline will signal that we should bailout from the | |
| 8158 // entire compilation by setting stack overflow on the visitor. | |
| 8159 if (HasStackOverflow()) return; | |
| 8160 } else { | |
| 8161 // Since HWrapReceiver currently cannot actually wrap numbers and strings, | |
| 8162 // use the regular CallFunctionStub for method calls to wrap the receiver. | |
| 8163 // TODO(verwaest): Support creation of value wrappers directly in | |
| 8164 // HWrapReceiver. | |
| 8165 HInstruction* call = needs_wrapping | |
| 8166 ? NewUncasted<HCallFunction>( | |
| 8167 function, argument_count, WRAP_AND_CALL) | |
| 8168 : BuildCallConstantFunction(target, argument_count); | |
| 8169 PushArgumentsFromEnvironment(argument_count); | |
| 8170 AddInstruction(call); | |
| 8171 Drop(1); // Drop the function. | |
| 8172 if (!ast_context()->IsEffect()) Push(call); | |
| 8173 } | |
| 8174 | |
| 8175 if (current_block() != NULL) Goto(join); | |
| 8176 set_current_block(if_false); | |
| 8177 } | |
| 8178 | |
| 8179 // Finish up. Unconditionally deoptimize if we've handled all the maps we | |
| 8180 // know about and do not want to handle ones we've never seen. Otherwise | |
| 8181 // use a generic IC. | |
| 8182 if (ordered_functions == maps->length() && FLAG_deoptimize_uncommon_cases) { | |
| 8183 FinishExitWithHardDeoptimization(Deoptimizer::kUnknownMapInPolymorphicCall); | |
| 8184 } else { | |
| 8185 Property* prop = expr->expression()->AsProperty(); | |
| 8186 HInstruction* function = | |
| 8187 BuildNamedGeneric(LOAD, prop, prop->PropertyFeedbackSlot(), receiver, | |
| 8188 name, NULL, prop->IsUninitialized()); | |
| 8189 AddInstruction(function); | |
| 8190 Push(function); | |
| 8191 AddSimulate(prop->LoadId(), REMOVABLE_SIMULATE); | |
| 8192 | |
| 8193 environment()->SetExpressionStackAt(1, function); | |
| 8194 environment()->SetExpressionStackAt(0, receiver); | |
| 8195 CHECK_ALIVE(VisitExpressions(expr->arguments())); | |
| 8196 | |
| 8197 CallFunctionFlags flags = receiver->type().IsJSObject() | |
| 8198 ? NO_CALL_FUNCTION_FLAGS : CALL_AS_METHOD; | |
| 8199 HInstruction* call = New<HCallFunction>( | |
| 8200 function, argument_count, flags); | |
| 8201 | |
| 8202 PushArgumentsFromEnvironment(argument_count); | |
| 8203 | |
| 8204 Drop(1); // Function. | |
| 8205 | |
| 8206 if (join != NULL) { | |
| 8207 AddInstruction(call); | |
| 8208 if (!ast_context()->IsEffect()) Push(call); | |
| 8209 Goto(join); | |
| 8210 } else { | |
| 8211 return ast_context()->ReturnInstruction(call, expr->id()); | |
| 8212 } | |
| 8213 } | |
| 8214 | |
| 8215 // We assume that control flow is always live after an expression. So | |
| 8216 // even without predecessors to the join block, we set it as the exit | |
| 8217 // block and continue by adding instructions there. | |
| 8218 DCHECK(join != NULL); | |
| 8219 if (join->HasPredecessor()) { | |
| 8220 set_current_block(join); | |
| 8221 join->SetJoinId(expr->id()); | |
| 8222 if (!ast_context()->IsEffect()) return ast_context()->ReturnValue(Pop()); | |
| 8223 } else { | |
| 8224 set_current_block(NULL); | |
| 8225 } | |
| 8226 } | |
| 8227 | |
| 8228 | |
| 8229 void HOptimizedGraphBuilder::TraceInline(Handle<JSFunction> target, | |
| 8230 Handle<JSFunction> caller, | |
| 8231 const char* reason) { | |
| 8232 if (FLAG_trace_inlining) { | |
| 8233 base::SmartArrayPointer<char> target_name = | |
| 8234 target->shared()->DebugName()->ToCString(); | |
| 8235 base::SmartArrayPointer<char> caller_name = | |
| 8236 caller->shared()->DebugName()->ToCString(); | |
| 8237 if (reason == NULL) { | |
| 8238 PrintF("Inlined %s called from %s.\n", target_name.get(), | |
| 8239 caller_name.get()); | |
| 8240 } else { | |
| 8241 PrintF("Did not inline %s called from %s (%s).\n", | |
| 8242 target_name.get(), caller_name.get(), reason); | |
| 8243 } | |
| 8244 } | |
| 8245 } | |
| 8246 | |
| 8247 | |
| 8248 static const int kNotInlinable = 1000000000; | |
| 8249 | |
| 8250 | |
| 8251 int HOptimizedGraphBuilder::InliningAstSize(Handle<JSFunction> target) { | |
| 8252 if (!FLAG_use_inlining) return kNotInlinable; | |
| 8253 | |
| 8254 // Precondition: call is monomorphic and we have found a target with the | |
| 8255 // appropriate arity. | |
| 8256 Handle<JSFunction> caller = current_info()->closure(); | |
| 8257 Handle<SharedFunctionInfo> target_shared(target->shared()); | |
| 8258 | |
| 8259 // Always inline functions that force inlining. | |
| 8260 if (target_shared->force_inline()) { | |
| 8261 return 0; | |
| 8262 } | |
| 8263 if (target->IsBuiltin()) { | |
| 8264 return kNotInlinable; | |
| 8265 } | |
| 8266 | |
| 8267 if (target_shared->IsApiFunction()) { | |
| 8268 TraceInline(target, caller, "target is api function"); | |
| 8269 return kNotInlinable; | |
| 8270 } | |
| 8271 | |
| 8272 // Do a quick check on source code length to avoid parsing large | |
| 8273 // inlining candidates. | |
| 8274 if (target_shared->SourceSize() > | |
| 8275 Min(FLAG_max_inlined_source_size, kUnlimitedMaxInlinedSourceSize)) { | |
| 8276 TraceInline(target, caller, "target text too big"); | |
| 8277 return kNotInlinable; | |
| 8278 } | |
| 8279 | |
| 8280 // Target must be inlineable. | |
| 8281 BailoutReason noopt_reason = target_shared->disable_optimization_reason(); | |
| 8282 if (!target_shared->IsInlineable() && noopt_reason != kHydrogenFilter) { | |
| 8283 TraceInline(target, caller, "target not inlineable"); | |
| 8284 return kNotInlinable; | |
| 8285 } | |
| 8286 if (noopt_reason != kNoReason && noopt_reason != kHydrogenFilter) { | |
| 8287 TraceInline(target, caller, "target contains unsupported syntax [early]"); | |
| 8288 return kNotInlinable; | |
| 8289 } | |
| 8290 | |
| 8291 int nodes_added = target_shared->ast_node_count(); | |
| 8292 return nodes_added; | |
| 8293 } | |
| 8294 | |
| 8295 | |
| 8296 bool HOptimizedGraphBuilder::TryInline(Handle<JSFunction> target, | |
| 8297 int arguments_count, | |
| 8298 HValue* implicit_return_value, | |
| 8299 BailoutId ast_id, BailoutId return_id, | |
| 8300 InliningKind inlining_kind) { | |
| 8301 if (target->context()->native_context() != | |
| 8302 top_info()->closure()->context()->native_context()) { | |
| 8303 return false; | |
| 8304 } | |
| 8305 int nodes_added = InliningAstSize(target); | |
| 8306 if (nodes_added == kNotInlinable) return false; | |
| 8307 | |
| 8308 Handle<JSFunction> caller = current_info()->closure(); | |
| 8309 | |
| 8310 if (nodes_added > Min(FLAG_max_inlined_nodes, kUnlimitedMaxInlinedNodes)) { | |
| 8311 TraceInline(target, caller, "target AST is too large [early]"); | |
| 8312 return false; | |
| 8313 } | |
| 8314 | |
| 8315 // Don't inline deeper than the maximum number of inlining levels. | |
| 8316 HEnvironment* env = environment(); | |
| 8317 int current_level = 1; | |
| 8318 while (env->outer() != NULL) { | |
| 8319 if (current_level == FLAG_max_inlining_levels) { | |
| 8320 TraceInline(target, caller, "inline depth limit reached"); | |
| 8321 return false; | |
| 8322 } | |
| 8323 if (env->outer()->frame_type() == JS_FUNCTION) { | |
| 8324 current_level++; | |
| 8325 } | |
| 8326 env = env->outer(); | |
| 8327 } | |
| 8328 | |
| 8329 // Don't inline recursive functions. | |
| 8330 for (FunctionState* state = function_state(); | |
| 8331 state != NULL; | |
| 8332 state = state->outer()) { | |
| 8333 if (*state->compilation_info()->closure() == *target) { | |
| 8334 TraceInline(target, caller, "target is recursive"); | |
| 8335 return false; | |
| 8336 } | |
| 8337 } | |
| 8338 | |
| 8339 // We don't want to add more than a certain number of nodes from inlining. | |
| 8340 // Always inline small methods (<= 10 nodes). | |
| 8341 if (inlined_count_ > Min(FLAG_max_inlined_nodes_cumulative, | |
| 8342 kUnlimitedMaxInlinedNodesCumulative)) { | |
| 8343 TraceInline(target, caller, "cumulative AST node limit reached"); | |
| 8344 return false; | |
| 8345 } | |
| 8346 | |
| 8347 // Parse and allocate variables. | |
| 8348 // Use the same AstValueFactory for creating strings in the sub-compilation | |
| 8349 // step, but don't transfer ownership to target_info. | |
| 8350 ParseInfo parse_info(zone(), target); | |
| 8351 parse_info.set_ast_value_factory( | |
| 8352 top_info()->parse_info()->ast_value_factory()); | |
| 8353 parse_info.set_ast_value_factory_owned(false); | |
| 8354 | |
| 8355 CompilationInfo target_info(&parse_info); | |
| 8356 Handle<SharedFunctionInfo> target_shared(target->shared()); | |
| 8357 if (target_shared->HasDebugInfo()) { | |
| 8358 TraceInline(target, caller, "target is being debugged"); | |
| 8359 return false; | |
| 8360 } | |
| 8361 if (!Compiler::ParseAndAnalyze(target_info.parse_info())) { | |
| 8362 if (target_info.isolate()->has_pending_exception()) { | |
| 8363 // Parse or scope error, never optimize this function. | |
| 8364 SetStackOverflow(); | |
| 8365 target_shared->DisableOptimization(kParseScopeError); | |
| 8366 } | |
| 8367 TraceInline(target, caller, "parse failure"); | |
| 8368 return false; | |
| 8369 } | |
| 8370 | |
| 8371 if (target_info.scope()->num_heap_slots() > 0) { | |
| 8372 TraceInline(target, caller, "target has context-allocated variables"); | |
| 8373 return false; | |
| 8374 } | |
| 8375 FunctionLiteral* function = target_info.literal(); | |
| 8376 | |
| 8377 // The following conditions must be checked again after re-parsing, because | |
| 8378 // earlier the information might not have been complete due to lazy parsing. | |
| 8379 nodes_added = function->ast_node_count(); | |
| 8380 if (nodes_added > Min(FLAG_max_inlined_nodes, kUnlimitedMaxInlinedNodes)) { | |
| 8381 TraceInline(target, caller, "target AST is too large [late]"); | |
| 8382 return false; | |
| 8383 } | |
| 8384 if (function->dont_optimize()) { | |
| 8385 TraceInline(target, caller, "target contains unsupported syntax [late]"); | |
| 8386 return false; | |
| 8387 } | |
| 8388 | |
| 8389 // If the function uses the arguments object check that inlining of functions | |
| 8390 // with arguments object is enabled and the arguments-variable is | |
| 8391 // stack allocated. | |
| 8392 if (function->scope()->arguments() != NULL) { | |
| 8393 if (!FLAG_inline_arguments) { | |
| 8394 TraceInline(target, caller, "target uses arguments object"); | |
| 8395 return false; | |
| 8396 } | |
| 8397 } | |
| 8398 | |
| 8399 // All declarations must be inlineable. | |
| 8400 ZoneList<Declaration*>* decls = target_info.scope()->declarations(); | |
| 8401 int decl_count = decls->length(); | |
| 8402 for (int i = 0; i < decl_count; ++i) { | |
| 8403 if (!decls->at(i)->IsInlineable()) { | |
| 8404 TraceInline(target, caller, "target has non-trivial declaration"); | |
| 8405 return false; | |
| 8406 } | |
| 8407 } | |
| 8408 | |
| 8409 // Generate the deoptimization data for the unoptimized version of | |
| 8410 // the target function if we don't already have it. | |
| 8411 if (!Compiler::EnsureDeoptimizationSupport(&target_info)) { | |
| 8412 TraceInline(target, caller, "could not generate deoptimization info"); | |
| 8413 return false; | |
| 8414 } | |
| 8415 | |
| 8416 // In strong mode it is an error to call a function with too few arguments. | |
| 8417 // In that case do not inline because then the arity check would be skipped. | |
| 8418 if (is_strong(function->language_mode()) && | |
| 8419 arguments_count < function->parameter_count()) { | |
| 8420 TraceInline(target, caller, | |
| 8421 "too few arguments passed to a strong function"); | |
| 8422 return false; | |
| 8423 } | |
| 8424 | |
| 8425 // ---------------------------------------------------------------- | |
| 8426 // After this point, we've made a decision to inline this function (so | |
| 8427 // TryInline should always return true). | |
| 8428 | |
| 8429 // Type-check the inlined function. | |
| 8430 DCHECK(target_shared->has_deoptimization_support()); | |
| 8431 AstTyper(target_info.isolate(), target_info.zone(), target_info.closure(), | |
| 8432 target_info.scope(), target_info.osr_ast_id(), target_info.literal()) | |
| 8433 .Run(); | |
| 8434 | |
| 8435 int inlining_id = 0; | |
| 8436 if (top_info()->is_tracking_positions()) { | |
| 8437 inlining_id = top_info()->TraceInlinedFunction( | |
| 8438 target_shared, source_position(), function_state()->inlining_id()); | |
| 8439 } | |
| 8440 | |
| 8441 // Save the pending call context. Set up new one for the inlined function. | |
| 8442 // The function state is new-allocated because we need to delete it | |
| 8443 // in two different places. | |
| 8444 FunctionState* target_state = | |
| 8445 new FunctionState(this, &target_info, inlining_kind, inlining_id); | |
| 8446 | |
| 8447 HConstant* undefined = graph()->GetConstantUndefined(); | |
| 8448 | |
| 8449 HEnvironment* inner_env = | |
| 8450 environment()->CopyForInlining(target, | |
| 8451 arguments_count, | |
| 8452 function, | |
| 8453 undefined, | |
| 8454 function_state()->inlining_kind()); | |
| 8455 | |
| 8456 HConstant* context = Add<HConstant>(Handle<Context>(target->context())); | |
| 8457 inner_env->BindContext(context); | |
| 8458 | |
| 8459 // Create a dematerialized arguments object for the function, also copy the | |
| 8460 // current arguments values to use them for materialization. | |
| 8461 HEnvironment* arguments_env = inner_env->arguments_environment(); | |
| 8462 int parameter_count = arguments_env->parameter_count(); | |
| 8463 HArgumentsObject* arguments_object = Add<HArgumentsObject>(parameter_count); | |
| 8464 for (int i = 0; i < parameter_count; i++) { | |
| 8465 arguments_object->AddArgument(arguments_env->Lookup(i), zone()); | |
| 8466 } | |
| 8467 | |
| 8468 // If the function uses arguments object then bind bind one. | |
| 8469 if (function->scope()->arguments() != NULL) { | |
| 8470 DCHECK(function->scope()->arguments()->IsStackAllocated()); | |
| 8471 inner_env->Bind(function->scope()->arguments(), arguments_object); | |
| 8472 } | |
| 8473 | |
| 8474 // Capture the state before invoking the inlined function for deopt in the | |
| 8475 // inlined function. This simulate has no bailout-id since it's not directly | |
| 8476 // reachable for deopt, and is only used to capture the state. If the simulate | |
| 8477 // becomes reachable by merging, the ast id of the simulate merged into it is | |
| 8478 // adopted. | |
| 8479 Add<HSimulate>(BailoutId::None()); | |
| 8480 | |
| 8481 current_block()->UpdateEnvironment(inner_env); | |
| 8482 Scope* saved_scope = scope(); | |
| 8483 set_scope(target_info.scope()); | |
| 8484 HEnterInlined* enter_inlined = | |
| 8485 Add<HEnterInlined>(return_id, target, context, arguments_count, function, | |
| 8486 function_state()->inlining_kind(), | |
| 8487 function->scope()->arguments(), arguments_object); | |
| 8488 if (top_info()->is_tracking_positions()) { | |
| 8489 enter_inlined->set_inlining_id(inlining_id); | |
| 8490 } | |
| 8491 function_state()->set_entry(enter_inlined); | |
| 8492 | |
| 8493 VisitDeclarations(target_info.scope()->declarations()); | |
| 8494 VisitStatements(function->body()); | |
| 8495 set_scope(saved_scope); | |
| 8496 if (HasStackOverflow()) { | |
| 8497 // Bail out if the inline function did, as we cannot residualize a call | |
| 8498 // instead, but do not disable optimization for the outer function. | |
| 8499 TraceInline(target, caller, "inline graph construction failed"); | |
| 8500 target_shared->DisableOptimization(kInliningBailedOut); | |
| 8501 current_info()->RetryOptimization(kInliningBailedOut); | |
| 8502 delete target_state; | |
| 8503 return true; | |
| 8504 } | |
| 8505 | |
| 8506 // Update inlined nodes count. | |
| 8507 inlined_count_ += nodes_added; | |
| 8508 | |
| 8509 Handle<Code> unoptimized_code(target_shared->code()); | |
| 8510 DCHECK(unoptimized_code->kind() == Code::FUNCTION); | |
| 8511 Handle<TypeFeedbackInfo> type_info( | |
| 8512 TypeFeedbackInfo::cast(unoptimized_code->type_feedback_info())); | |
| 8513 graph()->update_type_change_checksum(type_info->own_type_change_checksum()); | |
| 8514 | |
| 8515 TraceInline(target, caller, NULL); | |
| 8516 | |
| 8517 if (current_block() != NULL) { | |
| 8518 FunctionState* state = function_state(); | |
| 8519 if (state->inlining_kind() == CONSTRUCT_CALL_RETURN) { | |
| 8520 // Falling off the end of an inlined construct call. In a test context the | |
| 8521 // return value will always evaluate to true, in a value context the | |
| 8522 // return value is the newly allocated receiver. | |
| 8523 if (call_context()->IsTest()) { | |
| 8524 Goto(inlined_test_context()->if_true(), state); | |
| 8525 } else if (call_context()->IsEffect()) { | |
| 8526 Goto(function_return(), state); | |
| 8527 } else { | |
| 8528 DCHECK(call_context()->IsValue()); | |
| 8529 AddLeaveInlined(implicit_return_value, state); | |
| 8530 } | |
| 8531 } else if (state->inlining_kind() == SETTER_CALL_RETURN) { | |
| 8532 // Falling off the end of an inlined setter call. The returned value is | |
| 8533 // never used, the value of an assignment is always the value of the RHS | |
| 8534 // of the assignment. | |
| 8535 if (call_context()->IsTest()) { | |
| 8536 inlined_test_context()->ReturnValue(implicit_return_value); | |
| 8537 } else if (call_context()->IsEffect()) { | |
| 8538 Goto(function_return(), state); | |
| 8539 } else { | |
| 8540 DCHECK(call_context()->IsValue()); | |
| 8541 AddLeaveInlined(implicit_return_value, state); | |
| 8542 } | |
| 8543 } else { | |
| 8544 // Falling off the end of a normal inlined function. This basically means | |
| 8545 // returning undefined. | |
| 8546 if (call_context()->IsTest()) { | |
| 8547 Goto(inlined_test_context()->if_false(), state); | |
| 8548 } else if (call_context()->IsEffect()) { | |
| 8549 Goto(function_return(), state); | |
| 8550 } else { | |
| 8551 DCHECK(call_context()->IsValue()); | |
| 8552 AddLeaveInlined(undefined, state); | |
| 8553 } | |
| 8554 } | |
| 8555 } | |
| 8556 | |
| 8557 // Fix up the function exits. | |
| 8558 if (inlined_test_context() != NULL) { | |
| 8559 HBasicBlock* if_true = inlined_test_context()->if_true(); | |
| 8560 HBasicBlock* if_false = inlined_test_context()->if_false(); | |
| 8561 | |
| 8562 HEnterInlined* entry = function_state()->entry(); | |
| 8563 | |
| 8564 // Pop the return test context from the expression context stack. | |
| 8565 DCHECK(ast_context() == inlined_test_context()); | |
| 8566 ClearInlinedTestContext(); | |
| 8567 delete target_state; | |
| 8568 | |
| 8569 // Forward to the real test context. | |
| 8570 if (if_true->HasPredecessor()) { | |
| 8571 entry->RegisterReturnTarget(if_true, zone()); | |
| 8572 if_true->SetJoinId(ast_id); | |
| 8573 HBasicBlock* true_target = TestContext::cast(ast_context())->if_true(); | |
| 8574 Goto(if_true, true_target, function_state()); | |
| 8575 } | |
| 8576 if (if_false->HasPredecessor()) { | |
| 8577 entry->RegisterReturnTarget(if_false, zone()); | |
| 8578 if_false->SetJoinId(ast_id); | |
| 8579 HBasicBlock* false_target = TestContext::cast(ast_context())->if_false(); | |
| 8580 Goto(if_false, false_target, function_state()); | |
| 8581 } | |
| 8582 set_current_block(NULL); | |
| 8583 return true; | |
| 8584 | |
| 8585 } else if (function_return()->HasPredecessor()) { | |
| 8586 function_state()->entry()->RegisterReturnTarget(function_return(), zone()); | |
| 8587 function_return()->SetJoinId(ast_id); | |
| 8588 set_current_block(function_return()); | |
| 8589 } else { | |
| 8590 set_current_block(NULL); | |
| 8591 } | |
| 8592 delete target_state; | |
| 8593 return true; | |
| 8594 } | |
| 8595 | |
| 8596 | |
| 8597 bool HOptimizedGraphBuilder::TryInlineCall(Call* expr) { | |
| 8598 return TryInline(expr->target(), expr->arguments()->length(), NULL, | |
| 8599 expr->id(), expr->ReturnId(), NORMAL_RETURN); | |
| 8600 } | |
| 8601 | |
| 8602 | |
| 8603 bool HOptimizedGraphBuilder::TryInlineConstruct(CallNew* expr, | |
| 8604 HValue* implicit_return_value) { | |
| 8605 return TryInline(expr->target(), expr->arguments()->length(), | |
| 8606 implicit_return_value, expr->id(), expr->ReturnId(), | |
| 8607 CONSTRUCT_CALL_RETURN); | |
| 8608 } | |
| 8609 | |
| 8610 | |
| 8611 bool HOptimizedGraphBuilder::TryInlineGetter(Handle<JSFunction> getter, | |
| 8612 Handle<Map> receiver_map, | |
| 8613 BailoutId ast_id, | |
| 8614 BailoutId return_id) { | |
| 8615 if (TryInlineApiGetter(getter, receiver_map, ast_id)) return true; | |
| 8616 return TryInline(getter, 0, NULL, ast_id, return_id, GETTER_CALL_RETURN); | |
| 8617 } | |
| 8618 | |
| 8619 | |
| 8620 bool HOptimizedGraphBuilder::TryInlineSetter(Handle<JSFunction> setter, | |
| 8621 Handle<Map> receiver_map, | |
| 8622 BailoutId id, | |
| 8623 BailoutId assignment_id, | |
| 8624 HValue* implicit_return_value) { | |
| 8625 if (TryInlineApiSetter(setter, receiver_map, id)) return true; | |
| 8626 return TryInline(setter, 1, implicit_return_value, id, assignment_id, | |
| 8627 SETTER_CALL_RETURN); | |
| 8628 } | |
| 8629 | |
| 8630 | |
| 8631 bool HOptimizedGraphBuilder::TryInlineIndirectCall(Handle<JSFunction> function, | |
| 8632 Call* expr, | |
| 8633 int arguments_count) { | |
| 8634 return TryInline(function, arguments_count, NULL, expr->id(), | |
| 8635 expr->ReturnId(), NORMAL_RETURN); | |
| 8636 } | |
| 8637 | |
| 8638 | |
| 8639 bool HOptimizedGraphBuilder::TryInlineBuiltinFunctionCall(Call* expr) { | |
| 8640 if (!expr->target()->shared()->HasBuiltinFunctionId()) return false; | |
| 8641 BuiltinFunctionId id = expr->target()->shared()->builtin_function_id(); | |
| 8642 switch (id) { | |
| 8643 case kMathExp: | |
| 8644 if (!FLAG_fast_math) break; | |
| 8645 // Fall through if FLAG_fast_math. | |
| 8646 case kMathRound: | |
| 8647 case kMathFround: | |
| 8648 case kMathFloor: | |
| 8649 case kMathAbs: | |
| 8650 case kMathSqrt: | |
| 8651 case kMathLog: | |
| 8652 case kMathClz32: | |
| 8653 if (expr->arguments()->length() == 1) { | |
| 8654 HValue* argument = Pop(); | |
| 8655 Drop(2); // Receiver and function. | |
| 8656 HInstruction* op = NewUncasted<HUnaryMathOperation>(argument, id); | |
| 8657 ast_context()->ReturnInstruction(op, expr->id()); | |
| 8658 return true; | |
| 8659 } | |
| 8660 break; | |
| 8661 case kMathImul: | |
| 8662 if (expr->arguments()->length() == 2) { | |
| 8663 HValue* right = Pop(); | |
| 8664 HValue* left = Pop(); | |
| 8665 Drop(2); // Receiver and function. | |
| 8666 HInstruction* op = | |
| 8667 HMul::NewImul(isolate(), zone(), context(), left, right); | |
| 8668 ast_context()->ReturnInstruction(op, expr->id()); | |
| 8669 return true; | |
| 8670 } | |
| 8671 break; | |
| 8672 default: | |
| 8673 // Not supported for inlining yet. | |
| 8674 break; | |
| 8675 } | |
| 8676 return false; | |
| 8677 } | |
| 8678 | |
| 8679 | |
| 8680 // static | |
| 8681 bool HOptimizedGraphBuilder::IsReadOnlyLengthDescriptor( | |
| 8682 Handle<Map> jsarray_map) { | |
| 8683 DCHECK(!jsarray_map->is_dictionary_map()); | |
| 8684 Isolate* isolate = jsarray_map->GetIsolate(); | |
| 8685 Handle<Name> length_string = isolate->factory()->length_string(); | |
| 8686 DescriptorArray* descriptors = jsarray_map->instance_descriptors(); | |
| 8687 int number = descriptors->SearchWithCache(*length_string, *jsarray_map); | |
| 8688 DCHECK_NE(DescriptorArray::kNotFound, number); | |
| 8689 return descriptors->GetDetails(number).IsReadOnly(); | |
| 8690 } | |
| 8691 | |
| 8692 | |
| 8693 // static | |
| 8694 bool HOptimizedGraphBuilder::CanInlineArrayResizeOperation( | |
| 8695 Handle<Map> receiver_map) { | |
| 8696 return !receiver_map.is_null() && | |
| 8697 receiver_map->instance_type() == JS_ARRAY_TYPE && | |
| 8698 IsFastElementsKind(receiver_map->elements_kind()) && | |
| 8699 !receiver_map->is_dictionary_map() && !receiver_map->is_observed() && | |
| 8700 receiver_map->is_extensible() && | |
| 8701 (!receiver_map->is_prototype_map() || receiver_map->is_stable()) && | |
| 8702 !IsReadOnlyLengthDescriptor(receiver_map); | |
| 8703 } | |
| 8704 | |
| 8705 | |
| 8706 bool HOptimizedGraphBuilder::TryInlineBuiltinMethodCall( | |
| 8707 Call* expr, Handle<JSFunction> function, Handle<Map> receiver_map, | |
| 8708 int args_count_no_receiver) { | |
| 8709 if (!function->shared()->HasBuiltinFunctionId()) return false; | |
| 8710 BuiltinFunctionId id = function->shared()->builtin_function_id(); | |
| 8711 int argument_count = args_count_no_receiver + 1; // Plus receiver. | |
| 8712 | |
| 8713 if (receiver_map.is_null()) { | |
| 8714 HValue* receiver = environment()->ExpressionStackAt(args_count_no_receiver); | |
| 8715 if (receiver->IsConstant() && | |
| 8716 HConstant::cast(receiver)->handle(isolate())->IsHeapObject()) { | |
| 8717 receiver_map = | |
| 8718 handle(Handle<HeapObject>::cast( | |
| 8719 HConstant::cast(receiver)->handle(isolate()))->map()); | |
| 8720 } | |
| 8721 } | |
| 8722 // Try to inline calls like Math.* as operations in the calling function. | |
| 8723 switch (id) { | |
| 8724 case kStringCharCodeAt: | |
| 8725 case kStringCharAt: | |
| 8726 if (argument_count == 2) { | |
| 8727 HValue* index = Pop(); | |
| 8728 HValue* string = Pop(); | |
| 8729 Drop(1); // Function. | |
| 8730 HInstruction* char_code = | |
| 8731 BuildStringCharCodeAt(string, index); | |
| 8732 if (id == kStringCharCodeAt) { | |
| 8733 ast_context()->ReturnInstruction(char_code, expr->id()); | |
| 8734 return true; | |
| 8735 } | |
| 8736 AddInstruction(char_code); | |
| 8737 HInstruction* result = NewUncasted<HStringCharFromCode>(char_code); | |
| 8738 ast_context()->ReturnInstruction(result, expr->id()); | |
| 8739 return true; | |
| 8740 } | |
| 8741 break; | |
| 8742 case kStringFromCharCode: | |
| 8743 if (argument_count == 2) { | |
| 8744 HValue* argument = Pop(); | |
| 8745 Drop(2); // Receiver and function. | |
| 8746 HInstruction* result = NewUncasted<HStringCharFromCode>(argument); | |
| 8747 ast_context()->ReturnInstruction(result, expr->id()); | |
| 8748 return true; | |
| 8749 } | |
| 8750 break; | |
| 8751 case kMathExp: | |
| 8752 if (!FLAG_fast_math) break; | |
| 8753 // Fall through if FLAG_fast_math. | |
| 8754 case kMathRound: | |
| 8755 case kMathFround: | |
| 8756 case kMathFloor: | |
| 8757 case kMathAbs: | |
| 8758 case kMathSqrt: | |
| 8759 case kMathLog: | |
| 8760 case kMathClz32: | |
| 8761 if (argument_count == 2) { | |
| 8762 HValue* argument = Pop(); | |
| 8763 Drop(2); // Receiver and function. | |
| 8764 HInstruction* op = NewUncasted<HUnaryMathOperation>(argument, id); | |
| 8765 ast_context()->ReturnInstruction(op, expr->id()); | |
| 8766 return true; | |
| 8767 } | |
| 8768 break; | |
| 8769 case kMathPow: | |
| 8770 if (argument_count == 3) { | |
| 8771 HValue* right = Pop(); | |
| 8772 HValue* left = Pop(); | |
| 8773 Drop(2); // Receiver and function. | |
| 8774 HInstruction* result = NULL; | |
| 8775 // Use sqrt() if exponent is 0.5 or -0.5. | |
| 8776 if (right->IsConstant() && HConstant::cast(right)->HasDoubleValue()) { | |
| 8777 double exponent = HConstant::cast(right)->DoubleValue(); | |
| 8778 if (exponent == 0.5) { | |
| 8779 result = NewUncasted<HUnaryMathOperation>(left, kMathPowHalf); | |
| 8780 } else if (exponent == -0.5) { | |
| 8781 HValue* one = graph()->GetConstant1(); | |
| 8782 HInstruction* sqrt = AddUncasted<HUnaryMathOperation>( | |
| 8783 left, kMathPowHalf); | |
| 8784 // MathPowHalf doesn't have side effects so there's no need for | |
| 8785 // an environment simulation here. | |
| 8786 DCHECK(!sqrt->HasObservableSideEffects()); | |
| 8787 result = NewUncasted<HDiv>(one, sqrt); | |
| 8788 } else if (exponent == 2.0) { | |
| 8789 result = NewUncasted<HMul>(left, left); | |
| 8790 } | |
| 8791 } | |
| 8792 | |
| 8793 if (result == NULL) { | |
| 8794 result = NewUncasted<HPower>(left, right); | |
| 8795 } | |
| 8796 ast_context()->ReturnInstruction(result, expr->id()); | |
| 8797 return true; | |
| 8798 } | |
| 8799 break; | |
| 8800 case kMathMax: | |
| 8801 case kMathMin: | |
| 8802 if (argument_count == 3) { | |
| 8803 HValue* right = Pop(); | |
| 8804 HValue* left = Pop(); | |
| 8805 Drop(2); // Receiver and function. | |
| 8806 HMathMinMax::Operation op = (id == kMathMin) ? HMathMinMax::kMathMin | |
| 8807 : HMathMinMax::kMathMax; | |
| 8808 HInstruction* result = NewUncasted<HMathMinMax>(left, right, op); | |
| 8809 ast_context()->ReturnInstruction(result, expr->id()); | |
| 8810 return true; | |
| 8811 } | |
| 8812 break; | |
| 8813 case kMathImul: | |
| 8814 if (argument_count == 3) { | |
| 8815 HValue* right = Pop(); | |
| 8816 HValue* left = Pop(); | |
| 8817 Drop(2); // Receiver and function. | |
| 8818 HInstruction* result = | |
| 8819 HMul::NewImul(isolate(), zone(), context(), left, right); | |
| 8820 ast_context()->ReturnInstruction(result, expr->id()); | |
| 8821 return true; | |
| 8822 } | |
| 8823 break; | |
| 8824 case kArrayPop: { | |
| 8825 if (!CanInlineArrayResizeOperation(receiver_map)) return false; | |
| 8826 ElementsKind elements_kind = receiver_map->elements_kind(); | |
| 8827 | |
| 8828 Drop(args_count_no_receiver); | |
| 8829 HValue* result; | |
| 8830 HValue* reduced_length; | |
| 8831 HValue* receiver = Pop(); | |
| 8832 | |
| 8833 HValue* checked_object = AddCheckMap(receiver, receiver_map); | |
| 8834 HValue* length = | |
| 8835 Add<HLoadNamedField>(checked_object, nullptr, | |
| 8836 HObjectAccess::ForArrayLength(elements_kind)); | |
| 8837 | |
| 8838 Drop(1); // Function. | |
| 8839 | |
| 8840 { NoObservableSideEffectsScope scope(this); | |
| 8841 IfBuilder length_checker(this); | |
| 8842 | |
| 8843 HValue* bounds_check = length_checker.If<HCompareNumericAndBranch>( | |
| 8844 length, graph()->GetConstant0(), Token::EQ); | |
| 8845 length_checker.Then(); | |
| 8846 | |
| 8847 if (!ast_context()->IsEffect()) Push(graph()->GetConstantUndefined()); | |
| 8848 | |
| 8849 length_checker.Else(); | |
| 8850 HValue* elements = AddLoadElements(checked_object); | |
| 8851 // Ensure that we aren't popping from a copy-on-write array. | |
| 8852 if (IsFastSmiOrObjectElementsKind(elements_kind)) { | |
| 8853 elements = BuildCopyElementsOnWrite(checked_object, elements, | |
| 8854 elements_kind, length); | |
| 8855 } | |
| 8856 reduced_length = AddUncasted<HSub>(length, graph()->GetConstant1()); | |
| 8857 result = AddElementAccess(elements, reduced_length, NULL, | |
| 8858 bounds_check, elements_kind, LOAD); | |
| 8859 HValue* hole = IsFastSmiOrObjectElementsKind(elements_kind) | |
| 8860 ? graph()->GetConstantHole() | |
| 8861 : Add<HConstant>(HConstant::kHoleNaN); | |
| 8862 if (IsFastSmiOrObjectElementsKind(elements_kind)) { | |
| 8863 elements_kind = FAST_HOLEY_ELEMENTS; | |
| 8864 } | |
| 8865 AddElementAccess( | |
| 8866 elements, reduced_length, hole, bounds_check, elements_kind, STORE); | |
| 8867 Add<HStoreNamedField>( | |
| 8868 checked_object, HObjectAccess::ForArrayLength(elements_kind), | |
| 8869 reduced_length, STORE_TO_INITIALIZED_ENTRY); | |
| 8870 | |
| 8871 if (!ast_context()->IsEffect()) Push(result); | |
| 8872 | |
| 8873 length_checker.End(); | |
| 8874 } | |
| 8875 result = ast_context()->IsEffect() ? graph()->GetConstant0() : Top(); | |
| 8876 Add<HSimulate>(expr->id(), REMOVABLE_SIMULATE); | |
| 8877 if (!ast_context()->IsEffect()) Drop(1); | |
| 8878 | |
| 8879 ast_context()->ReturnValue(result); | |
| 8880 return true; | |
| 8881 } | |
| 8882 case kArrayPush: { | |
| 8883 if (!CanInlineArrayResizeOperation(receiver_map)) return false; | |
| 8884 ElementsKind elements_kind = receiver_map->elements_kind(); | |
| 8885 | |
| 8886 // If there may be elements accessors in the prototype chain, the fast | |
| 8887 // inlined version can't be used. | |
| 8888 if (receiver_map->DictionaryElementsInPrototypeChainOnly()) return false; | |
| 8889 // If there currently can be no elements accessors on the prototype chain, | |
| 8890 // it doesn't mean that there won't be any later. Install a full prototype | |
| 8891 // chain check to trap element accessors being installed on the prototype | |
| 8892 // chain, which would cause elements to go to dictionary mode and result | |
| 8893 // in a map change. | |
| 8894 Handle<JSObject> prototype(JSObject::cast(receiver_map->prototype())); | |
| 8895 BuildCheckPrototypeMaps(prototype, Handle<JSObject>()); | |
| 8896 | |
| 8897 // Protect against adding elements to the Array prototype, which needs to | |
| 8898 // route through appropriate bottlenecks. | |
| 8899 if (isolate()->IsFastArrayConstructorPrototypeChainIntact() && | |
| 8900 !prototype->IsJSArray()) { | |
| 8901 return false; | |
| 8902 } | |
| 8903 | |
| 8904 const int argc = args_count_no_receiver; | |
| 8905 if (argc != 1) return false; | |
| 8906 | |
| 8907 HValue* value_to_push = Pop(); | |
| 8908 HValue* array = Pop(); | |
| 8909 Drop(1); // Drop function. | |
| 8910 | |
| 8911 HInstruction* new_size = NULL; | |
| 8912 HValue* length = NULL; | |
| 8913 | |
| 8914 { | |
| 8915 NoObservableSideEffectsScope scope(this); | |
| 8916 | |
| 8917 length = Add<HLoadNamedField>( | |
| 8918 array, nullptr, HObjectAccess::ForArrayLength(elements_kind)); | |
| 8919 | |
| 8920 new_size = AddUncasted<HAdd>(length, graph()->GetConstant1()); | |
| 8921 | |
| 8922 bool is_array = receiver_map->instance_type() == JS_ARRAY_TYPE; | |
| 8923 HValue* checked_array = Add<HCheckMaps>(array, receiver_map); | |
| 8924 BuildUncheckedMonomorphicElementAccess( | |
| 8925 checked_array, length, value_to_push, is_array, elements_kind, | |
| 8926 STORE, NEVER_RETURN_HOLE, STORE_AND_GROW_NO_TRANSITION); | |
| 8927 | |
| 8928 if (!ast_context()->IsEffect()) Push(new_size); | |
| 8929 Add<HSimulate>(expr->id(), REMOVABLE_SIMULATE); | |
| 8930 if (!ast_context()->IsEffect()) Drop(1); | |
| 8931 } | |
| 8932 | |
| 8933 ast_context()->ReturnValue(new_size); | |
| 8934 return true; | |
| 8935 } | |
| 8936 case kArrayShift: { | |
| 8937 if (!CanInlineArrayResizeOperation(receiver_map)) return false; | |
| 8938 ElementsKind kind = receiver_map->elements_kind(); | |
| 8939 | |
| 8940 // If there may be elements accessors in the prototype chain, the fast | |
| 8941 // inlined version can't be used. | |
| 8942 if (receiver_map->DictionaryElementsInPrototypeChainOnly()) return false; | |
| 8943 | |
| 8944 // If there currently can be no elements accessors on the prototype chain, | |
| 8945 // it doesn't mean that there won't be any later. Install a full prototype | |
| 8946 // chain check to trap element accessors being installed on the prototype | |
| 8947 // chain, which would cause elements to go to dictionary mode and result | |
| 8948 // in a map change. | |
| 8949 BuildCheckPrototypeMaps( | |
| 8950 handle(JSObject::cast(receiver_map->prototype()), isolate()), | |
| 8951 Handle<JSObject>::null()); | |
| 8952 | |
| 8953 // Threshold for fast inlined Array.shift(). | |
| 8954 HConstant* inline_threshold = Add<HConstant>(static_cast<int32_t>(16)); | |
| 8955 | |
| 8956 Drop(args_count_no_receiver); | |
| 8957 HValue* receiver = Pop(); | |
| 8958 HValue* function = Pop(); | |
| 8959 HValue* result; | |
| 8960 | |
| 8961 { | |
| 8962 NoObservableSideEffectsScope scope(this); | |
| 8963 | |
| 8964 HValue* length = Add<HLoadNamedField>( | |
| 8965 receiver, nullptr, HObjectAccess::ForArrayLength(kind)); | |
| 8966 | |
| 8967 IfBuilder if_lengthiszero(this); | |
| 8968 HValue* lengthiszero = if_lengthiszero.If<HCompareNumericAndBranch>( | |
| 8969 length, graph()->GetConstant0(), Token::EQ); | |
| 8970 if_lengthiszero.Then(); | |
| 8971 { | |
| 8972 if (!ast_context()->IsEffect()) Push(graph()->GetConstantUndefined()); | |
| 8973 } | |
| 8974 if_lengthiszero.Else(); | |
| 8975 { | |
| 8976 HValue* elements = AddLoadElements(receiver); | |
| 8977 | |
| 8978 // Check if we can use the fast inlined Array.shift(). | |
| 8979 IfBuilder if_inline(this); | |
| 8980 if_inline.If<HCompareNumericAndBranch>( | |
| 8981 length, inline_threshold, Token::LTE); | |
| 8982 if (IsFastSmiOrObjectElementsKind(kind)) { | |
| 8983 // We cannot handle copy-on-write backing stores here. | |
| 8984 if_inline.AndIf<HCompareMap>( | |
| 8985 elements, isolate()->factory()->fixed_array_map()); | |
| 8986 } | |
| 8987 if_inline.Then(); | |
| 8988 { | |
| 8989 // Remember the result. | |
| 8990 if (!ast_context()->IsEffect()) { | |
| 8991 Push(AddElementAccess(elements, graph()->GetConstant0(), NULL, | |
| 8992 lengthiszero, kind, LOAD)); | |
| 8993 } | |
| 8994 | |
| 8995 // Compute the new length. | |
| 8996 HValue* new_length = AddUncasted<HSub>( | |
| 8997 length, graph()->GetConstant1()); | |
| 8998 new_length->ClearFlag(HValue::kCanOverflow); | |
| 8999 | |
| 9000 // Copy the remaining elements. | |
| 9001 LoopBuilder loop(this, context(), LoopBuilder::kPostIncrement); | |
| 9002 { | |
| 9003 HValue* new_key = loop.BeginBody( | |
| 9004 graph()->GetConstant0(), new_length, Token::LT); | |
| 9005 HValue* key = AddUncasted<HAdd>(new_key, graph()->GetConstant1()); | |
| 9006 key->ClearFlag(HValue::kCanOverflow); | |
| 9007 ElementsKind copy_kind = | |
| 9008 kind == FAST_HOLEY_SMI_ELEMENTS ? FAST_HOLEY_ELEMENTS : kind; | |
| 9009 HValue* element = AddUncasted<HLoadKeyed>( | |
| 9010 elements, key, lengthiszero, copy_kind, ALLOW_RETURN_HOLE); | |
| 9011 HStoreKeyed* store = | |
| 9012 Add<HStoreKeyed>(elements, new_key, element, copy_kind); | |
| 9013 store->SetFlag(HValue::kAllowUndefinedAsNaN); | |
| 9014 } | |
| 9015 loop.EndBody(); | |
| 9016 | |
| 9017 // Put a hole at the end. | |
| 9018 HValue* hole = IsFastSmiOrObjectElementsKind(kind) | |
| 9019 ? graph()->GetConstantHole() | |
| 9020 : Add<HConstant>(HConstant::kHoleNaN); | |
| 9021 if (IsFastSmiOrObjectElementsKind(kind)) kind = FAST_HOLEY_ELEMENTS; | |
| 9022 Add<HStoreKeyed>( | |
| 9023 elements, new_length, hole, kind, INITIALIZING_STORE); | |
| 9024 | |
| 9025 // Remember new length. | |
| 9026 Add<HStoreNamedField>( | |
| 9027 receiver, HObjectAccess::ForArrayLength(kind), | |
| 9028 new_length, STORE_TO_INITIALIZED_ENTRY); | |
| 9029 } | |
| 9030 if_inline.Else(); | |
| 9031 { | |
| 9032 Add<HPushArguments>(receiver); | |
| 9033 result = Add<HCallJSFunction>(function, 1); | |
| 9034 if (!ast_context()->IsEffect()) Push(result); | |
| 9035 } | |
| 9036 if_inline.End(); | |
| 9037 } | |
| 9038 if_lengthiszero.End(); | |
| 9039 } | |
| 9040 result = ast_context()->IsEffect() ? graph()->GetConstant0() : Top(); | |
| 9041 Add<HSimulate>(expr->id(), REMOVABLE_SIMULATE); | |
| 9042 if (!ast_context()->IsEffect()) Drop(1); | |
| 9043 ast_context()->ReturnValue(result); | |
| 9044 return true; | |
| 9045 } | |
| 9046 case kArrayIndexOf: | |
| 9047 case kArrayLastIndexOf: { | |
| 9048 if (receiver_map.is_null()) return false; | |
| 9049 if (receiver_map->instance_type() != JS_ARRAY_TYPE) return false; | |
| 9050 ElementsKind kind = receiver_map->elements_kind(); | |
| 9051 if (!IsFastElementsKind(kind)) return false; | |
| 9052 if (receiver_map->is_observed()) return false; | |
| 9053 if (argument_count != 2) return false; | |
| 9054 if (!receiver_map->is_extensible()) return false; | |
| 9055 | |
| 9056 // If there may be elements accessors in the prototype chain, the fast | |
| 9057 // inlined version can't be used. | |
| 9058 if (receiver_map->DictionaryElementsInPrototypeChainOnly()) return false; | |
| 9059 | |
| 9060 // If there currently can be no elements accessors on the prototype chain, | |
| 9061 // it doesn't mean that there won't be any later. Install a full prototype | |
| 9062 // chain check to trap element accessors being installed on the prototype | |
| 9063 // chain, which would cause elements to go to dictionary mode and result | |
| 9064 // in a map change. | |
| 9065 BuildCheckPrototypeMaps( | |
| 9066 handle(JSObject::cast(receiver_map->prototype()), isolate()), | |
| 9067 Handle<JSObject>::null()); | |
| 9068 | |
| 9069 HValue* search_element = Pop(); | |
| 9070 HValue* receiver = Pop(); | |
| 9071 Drop(1); // Drop function. | |
| 9072 | |
| 9073 ArrayIndexOfMode mode = (id == kArrayIndexOf) | |
| 9074 ? kFirstIndexOf : kLastIndexOf; | |
| 9075 HValue* index = BuildArrayIndexOf(receiver, search_element, kind, mode); | |
| 9076 | |
| 9077 if (!ast_context()->IsEffect()) Push(index); | |
| 9078 Add<HSimulate>(expr->id(), REMOVABLE_SIMULATE); | |
| 9079 if (!ast_context()->IsEffect()) Drop(1); | |
| 9080 ast_context()->ReturnValue(index); | |
| 9081 return true; | |
| 9082 } | |
| 9083 default: | |
| 9084 // Not yet supported for inlining. | |
| 9085 break; | |
| 9086 } | |
| 9087 return false; | |
| 9088 } | |
| 9089 | |
| 9090 | |
| 9091 bool HOptimizedGraphBuilder::TryInlineApiFunctionCall(Call* expr, | |
| 9092 HValue* receiver) { | |
| 9093 Handle<JSFunction> function = expr->target(); | |
| 9094 int argc = expr->arguments()->length(); | |
| 9095 SmallMapList receiver_maps; | |
| 9096 return TryInlineApiCall(function, | |
| 9097 receiver, | |
| 9098 &receiver_maps, | |
| 9099 argc, | |
| 9100 expr->id(), | |
| 9101 kCallApiFunction); | |
| 9102 } | |
| 9103 | |
| 9104 | |
| 9105 bool HOptimizedGraphBuilder::TryInlineApiMethodCall( | |
| 9106 Call* expr, | |
| 9107 HValue* receiver, | |
| 9108 SmallMapList* receiver_maps) { | |
| 9109 Handle<JSFunction> function = expr->target(); | |
| 9110 int argc = expr->arguments()->length(); | |
| 9111 return TryInlineApiCall(function, | |
| 9112 receiver, | |
| 9113 receiver_maps, | |
| 9114 argc, | |
| 9115 expr->id(), | |
| 9116 kCallApiMethod); | |
| 9117 } | |
| 9118 | |
| 9119 | |
| 9120 bool HOptimizedGraphBuilder::TryInlineApiGetter(Handle<JSFunction> function, | |
| 9121 Handle<Map> receiver_map, | |
| 9122 BailoutId ast_id) { | |
| 9123 SmallMapList receiver_maps(1, zone()); | |
| 9124 receiver_maps.Add(receiver_map, zone()); | |
| 9125 return TryInlineApiCall(function, | |
| 9126 NULL, // Receiver is on expression stack. | |
| 9127 &receiver_maps, | |
| 9128 0, | |
| 9129 ast_id, | |
| 9130 kCallApiGetter); | |
| 9131 } | |
| 9132 | |
| 9133 | |
| 9134 bool HOptimizedGraphBuilder::TryInlineApiSetter(Handle<JSFunction> function, | |
| 9135 Handle<Map> receiver_map, | |
| 9136 BailoutId ast_id) { | |
| 9137 SmallMapList receiver_maps(1, zone()); | |
| 9138 receiver_maps.Add(receiver_map, zone()); | |
| 9139 return TryInlineApiCall(function, | |
| 9140 NULL, // Receiver is on expression stack. | |
| 9141 &receiver_maps, | |
| 9142 1, | |
| 9143 ast_id, | |
| 9144 kCallApiSetter); | |
| 9145 } | |
| 9146 | |
| 9147 | |
| 9148 bool HOptimizedGraphBuilder::TryInlineApiCall(Handle<JSFunction> function, | |
| 9149 HValue* receiver, | |
| 9150 SmallMapList* receiver_maps, | |
| 9151 int argc, | |
| 9152 BailoutId ast_id, | |
| 9153 ApiCallType call_type) { | |
| 9154 if (function->context()->native_context() != | |
| 9155 top_info()->closure()->context()->native_context()) { | |
| 9156 return false; | |
| 9157 } | |
| 9158 CallOptimization optimization(function); | |
| 9159 if (!optimization.is_simple_api_call()) return false; | |
| 9160 Handle<Map> holder_map; | |
| 9161 for (int i = 0; i < receiver_maps->length(); ++i) { | |
| 9162 auto map = receiver_maps->at(i); | |
| 9163 // Don't inline calls to receivers requiring accesschecks. | |
| 9164 if (map->is_access_check_needed()) return false; | |
| 9165 } | |
| 9166 if (call_type == kCallApiFunction) { | |
| 9167 // Cannot embed a direct reference to the global proxy map | |
| 9168 // as it maybe dropped on deserialization. | |
| 9169 CHECK(!isolate()->serializer_enabled()); | |
| 9170 DCHECK_EQ(0, receiver_maps->length()); | |
| 9171 receiver_maps->Add(handle(function->global_proxy()->map()), zone()); | |
| 9172 } | |
| 9173 CallOptimization::HolderLookup holder_lookup = | |
| 9174 CallOptimization::kHolderNotFound; | |
| 9175 Handle<JSObject> api_holder = optimization.LookupHolderOfExpectedType( | |
| 9176 receiver_maps->first(), &holder_lookup); | |
| 9177 if (holder_lookup == CallOptimization::kHolderNotFound) return false; | |
| 9178 | |
| 9179 if (FLAG_trace_inlining) { | |
| 9180 PrintF("Inlining api function "); | |
| 9181 function->ShortPrint(); | |
| 9182 PrintF("\n"); | |
| 9183 } | |
| 9184 | |
| 9185 bool is_function = false; | |
| 9186 bool is_store = false; | |
| 9187 switch (call_type) { | |
| 9188 case kCallApiFunction: | |
| 9189 case kCallApiMethod: | |
| 9190 // Need to check that none of the receiver maps could have changed. | |
| 9191 Add<HCheckMaps>(receiver, receiver_maps); | |
| 9192 // Need to ensure the chain between receiver and api_holder is intact. | |
| 9193 if (holder_lookup == CallOptimization::kHolderFound) { | |
| 9194 AddCheckPrototypeMaps(api_holder, receiver_maps->first()); | |
| 9195 } else { | |
| 9196 DCHECK_EQ(holder_lookup, CallOptimization::kHolderIsReceiver); | |
| 9197 } | |
| 9198 // Includes receiver. | |
| 9199 PushArgumentsFromEnvironment(argc + 1); | |
| 9200 is_function = true; | |
| 9201 break; | |
| 9202 case kCallApiGetter: | |
| 9203 // Receiver and prototype chain cannot have changed. | |
| 9204 DCHECK_EQ(0, argc); | |
| 9205 DCHECK_NULL(receiver); | |
| 9206 // Receiver is on expression stack. | |
| 9207 receiver = Pop(); | |
| 9208 Add<HPushArguments>(receiver); | |
| 9209 break; | |
| 9210 case kCallApiSetter: | |
| 9211 { | |
| 9212 is_store = true; | |
| 9213 // Receiver and prototype chain cannot have changed. | |
| 9214 DCHECK_EQ(1, argc); | |
| 9215 DCHECK_NULL(receiver); | |
| 9216 // Receiver and value are on expression stack. | |
| 9217 HValue* value = Pop(); | |
| 9218 receiver = Pop(); | |
| 9219 Add<HPushArguments>(receiver, value); | |
| 9220 break; | |
| 9221 } | |
| 9222 } | |
| 9223 | |
| 9224 HValue* holder = NULL; | |
| 9225 switch (holder_lookup) { | |
| 9226 case CallOptimization::kHolderFound: | |
| 9227 holder = Add<HConstant>(api_holder); | |
| 9228 break; | |
| 9229 case CallOptimization::kHolderIsReceiver: | |
| 9230 holder = receiver; | |
| 9231 break; | |
| 9232 case CallOptimization::kHolderNotFound: | |
| 9233 UNREACHABLE(); | |
| 9234 break; | |
| 9235 } | |
| 9236 Handle<CallHandlerInfo> api_call_info = optimization.api_call_info(); | |
| 9237 Handle<Object> call_data_obj(api_call_info->data(), isolate()); | |
| 9238 bool call_data_undefined = call_data_obj->IsUndefined(); | |
| 9239 HValue* call_data = Add<HConstant>(call_data_obj); | |
| 9240 ApiFunction fun(v8::ToCData<Address>(api_call_info->callback())); | |
| 9241 ExternalReference ref = ExternalReference(&fun, | |
| 9242 ExternalReference::DIRECT_API_CALL, | |
| 9243 isolate()); | |
| 9244 HValue* api_function_address = Add<HConstant>(ExternalReference(ref)); | |
| 9245 | |
| 9246 HValue* op_vals[] = {context(), Add<HConstant>(function), call_data, holder, | |
| 9247 api_function_address, nullptr}; | |
| 9248 | |
| 9249 HInstruction* call = nullptr; | |
| 9250 if (!is_function) { | |
| 9251 CallApiAccessorStub stub(isolate(), is_store, call_data_undefined); | |
| 9252 Handle<Code> code = stub.GetCode(); | |
| 9253 HConstant* code_value = Add<HConstant>(code); | |
| 9254 ApiAccessorDescriptor descriptor(isolate()); | |
| 9255 call = New<HCallWithDescriptor>( | |
| 9256 code_value, argc + 1, descriptor, | |
| 9257 Vector<HValue*>(op_vals, arraysize(op_vals) - 1)); | |
| 9258 } else if (argc <= CallApiFunctionWithFixedArgsStub::kMaxFixedArgs) { | |
| 9259 CallApiFunctionWithFixedArgsStub stub(isolate(), argc, call_data_undefined); | |
| 9260 Handle<Code> code = stub.GetCode(); | |
| 9261 HConstant* code_value = Add<HConstant>(code); | |
| 9262 ApiFunctionWithFixedArgsDescriptor descriptor(isolate()); | |
| 9263 call = New<HCallWithDescriptor>( | |
| 9264 code_value, argc + 1, descriptor, | |
| 9265 Vector<HValue*>(op_vals, arraysize(op_vals) - 1)); | |
| 9266 Drop(1); // Drop function. | |
| 9267 } else { | |
| 9268 op_vals[arraysize(op_vals) - 1] = Add<HConstant>(argc); | |
| 9269 CallApiFunctionStub stub(isolate(), call_data_undefined); | |
| 9270 Handle<Code> code = stub.GetCode(); | |
| 9271 HConstant* code_value = Add<HConstant>(code); | |
| 9272 ApiFunctionDescriptor descriptor(isolate()); | |
| 9273 call = | |
| 9274 New<HCallWithDescriptor>(code_value, argc + 1, descriptor, | |
| 9275 Vector<HValue*>(op_vals, arraysize(op_vals))); | |
| 9276 Drop(1); // Drop function. | |
| 9277 } | |
| 9278 | |
| 9279 ast_context()->ReturnInstruction(call, ast_id); | |
| 9280 return true; | |
| 9281 } | |
| 9282 | |
| 9283 | |
| 9284 void HOptimizedGraphBuilder::HandleIndirectCall(Call* expr, HValue* function, | |
| 9285 int arguments_count) { | |
| 9286 Handle<JSFunction> known_function; | |
| 9287 int args_count_no_receiver = arguments_count - 1; | |
| 9288 if (function->IsConstant() && | |
| 9289 HConstant::cast(function)->handle(isolate())->IsJSFunction()) { | |
| 9290 known_function = | |
| 9291 Handle<JSFunction>::cast(HConstant::cast(function)->handle(isolate())); | |
| 9292 if (TryInlineBuiltinMethodCall(expr, known_function, Handle<Map>(), | |
| 9293 args_count_no_receiver)) { | |
| 9294 if (FLAG_trace_inlining) { | |
| 9295 PrintF("Inlining builtin "); | |
| 9296 known_function->ShortPrint(); | |
| 9297 PrintF("\n"); | |
| 9298 } | |
| 9299 return; | |
| 9300 } | |
| 9301 | |
| 9302 if (TryInlineIndirectCall(known_function, expr, args_count_no_receiver)) { | |
| 9303 return; | |
| 9304 } | |
| 9305 } | |
| 9306 | |
| 9307 PushArgumentsFromEnvironment(arguments_count); | |
| 9308 HInvokeFunction* call = | |
| 9309 New<HInvokeFunction>(function, known_function, arguments_count); | |
| 9310 Drop(1); // Function | |
| 9311 ast_context()->ReturnInstruction(call, expr->id()); | |
| 9312 } | |
| 9313 | |
| 9314 | |
| 9315 bool HOptimizedGraphBuilder::TryIndirectCall(Call* expr) { | |
| 9316 DCHECK(expr->expression()->IsProperty()); | |
| 9317 | |
| 9318 if (!expr->IsMonomorphic()) { | |
| 9319 return false; | |
| 9320 } | |
| 9321 Handle<Map> function_map = expr->GetReceiverTypes()->first(); | |
| 9322 if (function_map->instance_type() != JS_FUNCTION_TYPE || | |
| 9323 !expr->target()->shared()->HasBuiltinFunctionId()) { | |
| 9324 return false; | |
| 9325 } | |
| 9326 | |
| 9327 switch (expr->target()->shared()->builtin_function_id()) { | |
| 9328 case kFunctionCall: { | |
| 9329 if (expr->arguments()->length() == 0) return false; | |
| 9330 BuildFunctionCall(expr); | |
| 9331 return true; | |
| 9332 } | |
| 9333 case kFunctionApply: { | |
| 9334 // For .apply, only the pattern f.apply(receiver, arguments) | |
| 9335 // is supported. | |
| 9336 if (current_info()->scope()->arguments() == NULL) return false; | |
| 9337 | |
| 9338 if (!CanBeFunctionApplyArguments(expr)) return false; | |
| 9339 | |
| 9340 BuildFunctionApply(expr); | |
| 9341 return true; | |
| 9342 } | |
| 9343 default: { return false; } | |
| 9344 } | |
| 9345 UNREACHABLE(); | |
| 9346 } | |
| 9347 | |
| 9348 | |
| 9349 void HOptimizedGraphBuilder::BuildFunctionApply(Call* expr) { | |
| 9350 ZoneList<Expression*>* args = expr->arguments(); | |
| 9351 CHECK_ALIVE(VisitForValue(args->at(0))); | |
| 9352 HValue* receiver = Pop(); // receiver | |
| 9353 HValue* function = Pop(); // f | |
| 9354 Drop(1); // apply | |
| 9355 | |
| 9356 Handle<Map> function_map = expr->GetReceiverTypes()->first(); | |
| 9357 HValue* checked_function = AddCheckMap(function, function_map); | |
| 9358 | |
| 9359 if (function_state()->outer() == NULL) { | |
| 9360 HInstruction* elements = Add<HArgumentsElements>(false); | |
| 9361 HInstruction* length = Add<HArgumentsLength>(elements); | |
| 9362 HValue* wrapped_receiver = BuildWrapReceiver(receiver, checked_function); | |
| 9363 HInstruction* result = New<HApplyArguments>(function, | |
| 9364 wrapped_receiver, | |
| 9365 length, | |
| 9366 elements); | |
| 9367 ast_context()->ReturnInstruction(result, expr->id()); | |
| 9368 } else { | |
| 9369 // We are inside inlined function and we know exactly what is inside | |
| 9370 // arguments object. But we need to be able to materialize at deopt. | |
| 9371 DCHECK_EQ(environment()->arguments_environment()->parameter_count(), | |
| 9372 function_state()->entry()->arguments_object()->arguments_count()); | |
| 9373 HArgumentsObject* args = function_state()->entry()->arguments_object(); | |
| 9374 const ZoneList<HValue*>* arguments_values = args->arguments_values(); | |
| 9375 int arguments_count = arguments_values->length(); | |
| 9376 Push(function); | |
| 9377 Push(BuildWrapReceiver(receiver, checked_function)); | |
| 9378 for (int i = 1; i < arguments_count; i++) { | |
| 9379 Push(arguments_values->at(i)); | |
| 9380 } | |
| 9381 HandleIndirectCall(expr, function, arguments_count); | |
| 9382 } | |
| 9383 } | |
| 9384 | |
| 9385 | |
| 9386 // f.call(...) | |
| 9387 void HOptimizedGraphBuilder::BuildFunctionCall(Call* expr) { | |
| 9388 HValue* function = Top(); // f | |
| 9389 Handle<Map> function_map = expr->GetReceiverTypes()->first(); | |
| 9390 HValue* checked_function = AddCheckMap(function, function_map); | |
| 9391 | |
| 9392 // f and call are on the stack in the unoptimized code | |
| 9393 // during evaluation of the arguments. | |
| 9394 CHECK_ALIVE(VisitExpressions(expr->arguments())); | |
| 9395 | |
| 9396 int args_length = expr->arguments()->length(); | |
| 9397 int receiver_index = args_length - 1; | |
| 9398 // Patch the receiver. | |
| 9399 HValue* receiver = BuildWrapReceiver( | |
| 9400 environment()->ExpressionStackAt(receiver_index), checked_function); | |
| 9401 environment()->SetExpressionStackAt(receiver_index, receiver); | |
| 9402 | |
| 9403 // Call must not be on the stack from now on. | |
| 9404 int call_index = args_length + 1; | |
| 9405 environment()->RemoveExpressionStackAt(call_index); | |
| 9406 | |
| 9407 HandleIndirectCall(expr, function, args_length); | |
| 9408 } | |
| 9409 | |
| 9410 | |
| 9411 HValue* HOptimizedGraphBuilder::ImplicitReceiverFor(HValue* function, | |
| 9412 Handle<JSFunction> target) { | |
| 9413 SharedFunctionInfo* shared = target->shared(); | |
| 9414 if (is_sloppy(shared->language_mode()) && !shared->native()) { | |
| 9415 // Cannot embed a direct reference to the global proxy | |
| 9416 // as is it dropped on deserialization. | |
| 9417 CHECK(!isolate()->serializer_enabled()); | |
| 9418 Handle<JSObject> global_proxy(target->context()->global_proxy()); | |
| 9419 return Add<HConstant>(global_proxy); | |
| 9420 } | |
| 9421 return graph()->GetConstantUndefined(); | |
| 9422 } | |
| 9423 | |
| 9424 | |
| 9425 void HOptimizedGraphBuilder::BuildArrayCall(Expression* expression, | |
| 9426 int arguments_count, | |
| 9427 HValue* function, | |
| 9428 Handle<AllocationSite> site) { | |
| 9429 Add<HCheckValue>(function, array_function()); | |
| 9430 | |
| 9431 if (IsCallArrayInlineable(arguments_count, site)) { | |
| 9432 BuildInlinedCallArray(expression, arguments_count, site); | |
| 9433 return; | |
| 9434 } | |
| 9435 | |
| 9436 HInstruction* call = PreProcessCall(New<HCallNewArray>( | |
| 9437 function, arguments_count + 1, site->GetElementsKind(), site)); | |
| 9438 if (expression->IsCall()) { | |
| 9439 Drop(1); | |
| 9440 } | |
| 9441 ast_context()->ReturnInstruction(call, expression->id()); | |
| 9442 } | |
| 9443 | |
| 9444 | |
| 9445 HValue* HOptimizedGraphBuilder::BuildArrayIndexOf(HValue* receiver, | |
| 9446 HValue* search_element, | |
| 9447 ElementsKind kind, | |
| 9448 ArrayIndexOfMode mode) { | |
| 9449 DCHECK(IsFastElementsKind(kind)); | |
| 9450 | |
| 9451 NoObservableSideEffectsScope no_effects(this); | |
| 9452 | |
| 9453 HValue* elements = AddLoadElements(receiver); | |
| 9454 HValue* length = AddLoadArrayLength(receiver, kind); | |
| 9455 | |
| 9456 HValue* initial; | |
| 9457 HValue* terminating; | |
| 9458 Token::Value token; | |
| 9459 LoopBuilder::Direction direction; | |
| 9460 if (mode == kFirstIndexOf) { | |
| 9461 initial = graph()->GetConstant0(); | |
| 9462 terminating = length; | |
| 9463 token = Token::LT; | |
| 9464 direction = LoopBuilder::kPostIncrement; | |
| 9465 } else { | |
| 9466 DCHECK_EQ(kLastIndexOf, mode); | |
| 9467 initial = length; | |
| 9468 terminating = graph()->GetConstant0(); | |
| 9469 token = Token::GT; | |
| 9470 direction = LoopBuilder::kPreDecrement; | |
| 9471 } | |
| 9472 | |
| 9473 Push(graph()->GetConstantMinus1()); | |
| 9474 if (IsFastDoubleElementsKind(kind) || IsFastSmiElementsKind(kind)) { | |
| 9475 // Make sure that we can actually compare numbers correctly below, see | |
| 9476 // https://code.google.com/p/chromium/issues/detail?id=407946 for details. | |
| 9477 search_element = AddUncasted<HForceRepresentation>( | |
| 9478 search_element, IsFastSmiElementsKind(kind) ? Representation::Smi() | |
| 9479 : Representation::Double()); | |
| 9480 | |
| 9481 LoopBuilder loop(this, context(), direction); | |
| 9482 { | |
| 9483 HValue* index = loop.BeginBody(initial, terminating, token); | |
| 9484 HValue* element = AddUncasted<HLoadKeyed>(elements, index, nullptr, kind, | |
| 9485 ALLOW_RETURN_HOLE); | |
| 9486 IfBuilder if_issame(this); | |
| 9487 if_issame.If<HCompareNumericAndBranch>(element, search_element, | |
| 9488 Token::EQ_STRICT); | |
| 9489 if_issame.Then(); | |
| 9490 { | |
| 9491 Drop(1); | |
| 9492 Push(index); | |
| 9493 loop.Break(); | |
| 9494 } | |
| 9495 if_issame.End(); | |
| 9496 } | |
| 9497 loop.EndBody(); | |
| 9498 } else { | |
| 9499 IfBuilder if_isstring(this); | |
| 9500 if_isstring.If<HIsStringAndBranch>(search_element); | |
| 9501 if_isstring.Then(); | |
| 9502 { | |
| 9503 LoopBuilder loop(this, context(), direction); | |
| 9504 { | |
| 9505 HValue* index = loop.BeginBody(initial, terminating, token); | |
| 9506 HValue* element = AddUncasted<HLoadKeyed>(elements, index, nullptr, | |
| 9507 kind, ALLOW_RETURN_HOLE); | |
| 9508 IfBuilder if_issame(this); | |
| 9509 if_issame.If<HIsStringAndBranch>(element); | |
| 9510 if_issame.AndIf<HStringCompareAndBranch>( | |
| 9511 element, search_element, Token::EQ_STRICT); | |
| 9512 if_issame.Then(); | |
| 9513 { | |
| 9514 Drop(1); | |
| 9515 Push(index); | |
| 9516 loop.Break(); | |
| 9517 } | |
| 9518 if_issame.End(); | |
| 9519 } | |
| 9520 loop.EndBody(); | |
| 9521 } | |
| 9522 if_isstring.Else(); | |
| 9523 { | |
| 9524 IfBuilder if_isnumber(this); | |
| 9525 if_isnumber.If<HIsSmiAndBranch>(search_element); | |
| 9526 if_isnumber.OrIf<HCompareMap>( | |
| 9527 search_element, isolate()->factory()->heap_number_map()); | |
| 9528 if_isnumber.Then(); | |
| 9529 { | |
| 9530 HValue* search_number = | |
| 9531 AddUncasted<HForceRepresentation>(search_element, | |
| 9532 Representation::Double()); | |
| 9533 LoopBuilder loop(this, context(), direction); | |
| 9534 { | |
| 9535 HValue* index = loop.BeginBody(initial, terminating, token); | |
| 9536 HValue* element = AddUncasted<HLoadKeyed>(elements, index, nullptr, | |
| 9537 kind, ALLOW_RETURN_HOLE); | |
| 9538 | |
| 9539 IfBuilder if_element_isnumber(this); | |
| 9540 if_element_isnumber.If<HIsSmiAndBranch>(element); | |
| 9541 if_element_isnumber.OrIf<HCompareMap>( | |
| 9542 element, isolate()->factory()->heap_number_map()); | |
| 9543 if_element_isnumber.Then(); | |
| 9544 { | |
| 9545 HValue* number = | |
| 9546 AddUncasted<HForceRepresentation>(element, | |
| 9547 Representation::Double()); | |
| 9548 IfBuilder if_issame(this); | |
| 9549 if_issame.If<HCompareNumericAndBranch>( | |
| 9550 number, search_number, Token::EQ_STRICT); | |
| 9551 if_issame.Then(); | |
| 9552 { | |
| 9553 Drop(1); | |
| 9554 Push(index); | |
| 9555 loop.Break(); | |
| 9556 } | |
| 9557 if_issame.End(); | |
| 9558 } | |
| 9559 if_element_isnumber.End(); | |
| 9560 } | |
| 9561 loop.EndBody(); | |
| 9562 } | |
| 9563 if_isnumber.Else(); | |
| 9564 { | |
| 9565 LoopBuilder loop(this, context(), direction); | |
| 9566 { | |
| 9567 HValue* index = loop.BeginBody(initial, terminating, token); | |
| 9568 HValue* element = AddUncasted<HLoadKeyed>(elements, index, nullptr, | |
| 9569 kind, ALLOW_RETURN_HOLE); | |
| 9570 IfBuilder if_issame(this); | |
| 9571 if_issame.If<HCompareObjectEqAndBranch>( | |
| 9572 element, search_element); | |
| 9573 if_issame.Then(); | |
| 9574 { | |
| 9575 Drop(1); | |
| 9576 Push(index); | |
| 9577 loop.Break(); | |
| 9578 } | |
| 9579 if_issame.End(); | |
| 9580 } | |
| 9581 loop.EndBody(); | |
| 9582 } | |
| 9583 if_isnumber.End(); | |
| 9584 } | |
| 9585 if_isstring.End(); | |
| 9586 } | |
| 9587 | |
| 9588 return Pop(); | |
| 9589 } | |
| 9590 | |
| 9591 | |
| 9592 bool HOptimizedGraphBuilder::TryHandleArrayCall(Call* expr, HValue* function) { | |
| 9593 if (!array_function().is_identical_to(expr->target())) { | |
| 9594 return false; | |
| 9595 } | |
| 9596 | |
| 9597 Handle<AllocationSite> site = expr->allocation_site(); | |
| 9598 if (site.is_null()) return false; | |
| 9599 | |
| 9600 BuildArrayCall(expr, | |
| 9601 expr->arguments()->length(), | |
| 9602 function, | |
| 9603 site); | |
| 9604 return true; | |
| 9605 } | |
| 9606 | |
| 9607 | |
| 9608 bool HOptimizedGraphBuilder::TryHandleArrayCallNew(CallNew* expr, | |
| 9609 HValue* function) { | |
| 9610 if (!array_function().is_identical_to(expr->target())) { | |
| 9611 return false; | |
| 9612 } | |
| 9613 | |
| 9614 Handle<AllocationSite> site = expr->allocation_site(); | |
| 9615 if (site.is_null()) return false; | |
| 9616 | |
| 9617 BuildArrayCall(expr, expr->arguments()->length(), function, site); | |
| 9618 return true; | |
| 9619 } | |
| 9620 | |
| 9621 | |
| 9622 bool HOptimizedGraphBuilder::CanBeFunctionApplyArguments(Call* expr) { | |
| 9623 ZoneList<Expression*>* args = expr->arguments(); | |
| 9624 if (args->length() != 2) return false; | |
| 9625 VariableProxy* arg_two = args->at(1)->AsVariableProxy(); | |
| 9626 if (arg_two == NULL || !arg_two->var()->IsStackAllocated()) return false; | |
| 9627 HValue* arg_two_value = LookupAndMakeLive(arg_two->var()); | |
| 9628 if (!arg_two_value->CheckFlag(HValue::kIsArguments)) return false; | |
| 9629 return true; | |
| 9630 } | |
| 9631 | |
| 9632 | |
| 9633 void HOptimizedGraphBuilder::VisitCall(Call* expr) { | |
| 9634 DCHECK(!HasStackOverflow()); | |
| 9635 DCHECK(current_block() != NULL); | |
| 9636 DCHECK(current_block()->HasPredecessor()); | |
| 9637 if (!top_info()->is_tracking_positions()) SetSourcePosition(expr->position()); | |
| 9638 Expression* callee = expr->expression(); | |
| 9639 int argument_count = expr->arguments()->length() + 1; // Plus receiver. | |
| 9640 HInstruction* call = NULL; | |
| 9641 | |
| 9642 Property* prop = callee->AsProperty(); | |
| 9643 if (prop != NULL) { | |
| 9644 CHECK_ALIVE(VisitForValue(prop->obj())); | |
| 9645 HValue* receiver = Top(); | |
| 9646 | |
| 9647 SmallMapList* maps; | |
| 9648 ComputeReceiverTypes(expr, receiver, &maps, zone()); | |
| 9649 | |
| 9650 if (prop->key()->IsPropertyName() && maps->length() > 0) { | |
| 9651 Handle<String> name = prop->key()->AsLiteral()->AsPropertyName(); | |
| 9652 PropertyAccessInfo info(this, LOAD, maps->first(), name); | |
| 9653 if (!info.CanAccessAsMonomorphic(maps)) { | |
| 9654 HandlePolymorphicCallNamed(expr, receiver, maps, name); | |
| 9655 return; | |
| 9656 } | |
| 9657 } | |
| 9658 HValue* key = NULL; | |
| 9659 if (!prop->key()->IsPropertyName()) { | |
| 9660 CHECK_ALIVE(VisitForValue(prop->key())); | |
| 9661 key = Pop(); | |
| 9662 } | |
| 9663 | |
| 9664 CHECK_ALIVE(PushLoad(prop, receiver, key)); | |
| 9665 HValue* function = Pop(); | |
| 9666 | |
| 9667 if (function->IsConstant() && | |
| 9668 HConstant::cast(function)->handle(isolate())->IsJSFunction()) { | |
| 9669 // Push the function under the receiver. | |
| 9670 environment()->SetExpressionStackAt(0, function); | |
| 9671 Push(receiver); | |
| 9672 | |
| 9673 Handle<JSFunction> known_function = Handle<JSFunction>::cast( | |
| 9674 HConstant::cast(function)->handle(isolate())); | |
| 9675 expr->set_target(known_function); | |
| 9676 | |
| 9677 if (TryIndirectCall(expr)) return; | |
| 9678 CHECK_ALIVE(VisitExpressions(expr->arguments())); | |
| 9679 | |
| 9680 Handle<Map> map = maps->length() == 1 ? maps->first() : Handle<Map>(); | |
| 9681 if (TryInlineBuiltinMethodCall(expr, known_function, map, | |
| 9682 expr->arguments()->length())) { | |
| 9683 if (FLAG_trace_inlining) { | |
| 9684 PrintF("Inlining builtin "); | |
| 9685 known_function->ShortPrint(); | |
| 9686 PrintF("\n"); | |
| 9687 } | |
| 9688 return; | |
| 9689 } | |
| 9690 if (TryInlineApiMethodCall(expr, receiver, maps)) return; | |
| 9691 | |
| 9692 // Wrap the receiver if necessary. | |
| 9693 if (NeedsWrapping(maps->first(), known_function)) { | |
| 9694 // Since HWrapReceiver currently cannot actually wrap numbers and | |
| 9695 // strings, use the regular CallFunctionStub for method calls to wrap | |
| 9696 // the receiver. | |
| 9697 // TODO(verwaest): Support creation of value wrappers directly in | |
| 9698 // HWrapReceiver. | |
| 9699 call = New<HCallFunction>( | |
| 9700 function, argument_count, WRAP_AND_CALL); | |
| 9701 } else if (TryInlineCall(expr)) { | |
| 9702 return; | |
| 9703 } else { | |
| 9704 call = BuildCallConstantFunction(known_function, argument_count); | |
| 9705 } | |
| 9706 | |
| 9707 } else { | |
| 9708 ArgumentsAllowedFlag arguments_flag = ARGUMENTS_NOT_ALLOWED; | |
| 9709 if (CanBeFunctionApplyArguments(expr) && expr->is_uninitialized()) { | |
| 9710 // We have to use EAGER deoptimization here because Deoptimizer::SOFT | |
| 9711 // gets ignored by the always-opt flag, which leads to incorrect code. | |
| 9712 Add<HDeoptimize>( | |
| 9713 Deoptimizer::kInsufficientTypeFeedbackForCallWithArguments, | |
| 9714 Deoptimizer::EAGER); | |
| 9715 arguments_flag = ARGUMENTS_FAKED; | |
| 9716 } | |
| 9717 | |
| 9718 // Push the function under the receiver. | |
| 9719 environment()->SetExpressionStackAt(0, function); | |
| 9720 Push(receiver); | |
| 9721 | |
| 9722 CHECK_ALIVE(VisitExpressions(expr->arguments(), arguments_flag)); | |
| 9723 CallFunctionFlags flags = receiver->type().IsJSObject() | |
| 9724 ? NO_CALL_FUNCTION_FLAGS : CALL_AS_METHOD; | |
| 9725 call = New<HCallFunction>(function, argument_count, flags); | |
| 9726 } | |
| 9727 PushArgumentsFromEnvironment(argument_count); | |
| 9728 | |
| 9729 } else { | |
| 9730 VariableProxy* proxy = expr->expression()->AsVariableProxy(); | |
| 9731 if (proxy != NULL && proxy->var()->is_possibly_eval(isolate())) { | |
| 9732 return Bailout(kPossibleDirectCallToEval); | |
| 9733 } | |
| 9734 | |
| 9735 // The function is on the stack in the unoptimized code during | |
| 9736 // evaluation of the arguments. | |
| 9737 CHECK_ALIVE(VisitForValue(expr->expression())); | |
| 9738 HValue* function = Top(); | |
| 9739 if (function->IsConstant() && | |
| 9740 HConstant::cast(function)->handle(isolate())->IsJSFunction()) { | |
| 9741 Handle<Object> constant = HConstant::cast(function)->handle(isolate()); | |
| 9742 Handle<JSFunction> target = Handle<JSFunction>::cast(constant); | |
| 9743 expr->SetKnownGlobalTarget(target); | |
| 9744 } | |
| 9745 | |
| 9746 // Placeholder for the receiver. | |
| 9747 Push(graph()->GetConstantUndefined()); | |
| 9748 CHECK_ALIVE(VisitExpressions(expr->arguments())); | |
| 9749 | |
| 9750 if (expr->IsMonomorphic()) { | |
| 9751 Add<HCheckValue>(function, expr->target()); | |
| 9752 | |
| 9753 // Patch the global object on the stack by the expected receiver. | |
| 9754 HValue* receiver = ImplicitReceiverFor(function, expr->target()); | |
| 9755 const int receiver_index = argument_count - 1; | |
| 9756 environment()->SetExpressionStackAt(receiver_index, receiver); | |
| 9757 | |
| 9758 if (TryInlineBuiltinFunctionCall(expr)) { | |
| 9759 if (FLAG_trace_inlining) { | |
| 9760 PrintF("Inlining builtin "); | |
| 9761 expr->target()->ShortPrint(); | |
| 9762 PrintF("\n"); | |
| 9763 } | |
| 9764 return; | |
| 9765 } | |
| 9766 if (TryInlineApiFunctionCall(expr, receiver)) return; | |
| 9767 if (TryHandleArrayCall(expr, function)) return; | |
| 9768 if (TryInlineCall(expr)) return; | |
| 9769 | |
| 9770 PushArgumentsFromEnvironment(argument_count); | |
| 9771 call = BuildCallConstantFunction(expr->target(), argument_count); | |
| 9772 } else { | |
| 9773 PushArgumentsFromEnvironment(argument_count); | |
| 9774 HCallFunction* call_function = | |
| 9775 New<HCallFunction>(function, argument_count); | |
| 9776 call = call_function; | |
| 9777 if (expr->is_uninitialized() && | |
| 9778 expr->IsUsingCallFeedbackICSlot(isolate())) { | |
| 9779 // We've never seen this call before, so let's have Crankshaft learn | |
| 9780 // through the type vector. | |
| 9781 Handle<TypeFeedbackVector> vector = | |
| 9782 handle(current_feedback_vector(), isolate()); | |
| 9783 FeedbackVectorSlot slot = expr->CallFeedbackICSlot(); | |
| 9784 call_function->SetVectorAndSlot(vector, slot); | |
| 9785 } | |
| 9786 } | |
| 9787 } | |
| 9788 | |
| 9789 Drop(1); // Drop the function. | |
| 9790 return ast_context()->ReturnInstruction(call, expr->id()); | |
| 9791 } | |
| 9792 | |
| 9793 | |
| 9794 void HOptimizedGraphBuilder::BuildInlinedCallArray( | |
| 9795 Expression* expression, | |
| 9796 int argument_count, | |
| 9797 Handle<AllocationSite> site) { | |
| 9798 DCHECK(!site.is_null()); | |
| 9799 DCHECK(argument_count >= 0 && argument_count <= 1); | |
| 9800 NoObservableSideEffectsScope no_effects(this); | |
| 9801 | |
| 9802 // We should at least have the constructor on the expression stack. | |
| 9803 HValue* constructor = environment()->ExpressionStackAt(argument_count); | |
| 9804 | |
| 9805 // Register on the site for deoptimization if the transition feedback changes. | |
| 9806 top_info()->dependencies()->AssumeTransitionStable(site); | |
| 9807 ElementsKind kind = site->GetElementsKind(); | |
| 9808 HInstruction* site_instruction = Add<HConstant>(site); | |
| 9809 | |
| 9810 // In the single constant argument case, we may have to adjust elements kind | |
| 9811 // to avoid creating a packed non-empty array. | |
| 9812 if (argument_count == 1 && !IsHoleyElementsKind(kind)) { | |
| 9813 HValue* argument = environment()->Top(); | |
| 9814 if (argument->IsConstant()) { | |
| 9815 HConstant* constant_argument = HConstant::cast(argument); | |
| 9816 DCHECK(constant_argument->HasSmiValue()); | |
| 9817 int constant_array_size = constant_argument->Integer32Value(); | |
| 9818 if (constant_array_size != 0) { | |
| 9819 kind = GetHoleyElementsKind(kind); | |
| 9820 } | |
| 9821 } | |
| 9822 } | |
| 9823 | |
| 9824 // Build the array. | |
| 9825 JSArrayBuilder array_builder(this, | |
| 9826 kind, | |
| 9827 site_instruction, | |
| 9828 constructor, | |
| 9829 DISABLE_ALLOCATION_SITES); | |
| 9830 HValue* new_object = argument_count == 0 | |
| 9831 ? array_builder.AllocateEmptyArray() | |
| 9832 : BuildAllocateArrayFromLength(&array_builder, Top()); | |
| 9833 | |
| 9834 int args_to_drop = argument_count + (expression->IsCall() ? 2 : 1); | |
| 9835 Drop(args_to_drop); | |
| 9836 ast_context()->ReturnValue(new_object); | |
| 9837 } | |
| 9838 | |
| 9839 | |
| 9840 // Checks whether allocation using the given constructor can be inlined. | |
| 9841 static bool IsAllocationInlineable(Handle<JSFunction> constructor) { | |
| 9842 return constructor->has_initial_map() && | |
| 9843 constructor->initial_map()->instance_type() == JS_OBJECT_TYPE && | |
| 9844 constructor->initial_map()->instance_size() < | |
| 9845 HAllocate::kMaxInlineSize; | |
| 9846 } | |
| 9847 | |
| 9848 | |
| 9849 bool HOptimizedGraphBuilder::IsCallArrayInlineable( | |
| 9850 int argument_count, | |
| 9851 Handle<AllocationSite> site) { | |
| 9852 Handle<JSFunction> caller = current_info()->closure(); | |
| 9853 Handle<JSFunction> target = array_function(); | |
| 9854 // We should have the function plus array arguments on the environment stack. | |
| 9855 DCHECK(environment()->length() >= (argument_count + 1)); | |
| 9856 DCHECK(!site.is_null()); | |
| 9857 | |
| 9858 bool inline_ok = false; | |
| 9859 if (site->CanInlineCall()) { | |
| 9860 // We also want to avoid inlining in certain 1 argument scenarios. | |
| 9861 if (argument_count == 1) { | |
| 9862 HValue* argument = Top(); | |
| 9863 if (argument->IsConstant()) { | |
| 9864 // Do not inline if the constant length argument is not a smi or | |
| 9865 // outside the valid range for unrolled loop initialization. | |
| 9866 HConstant* constant_argument = HConstant::cast(argument); | |
| 9867 if (constant_argument->HasSmiValue()) { | |
| 9868 int value = constant_argument->Integer32Value(); | |
| 9869 inline_ok = value >= 0 && value <= kElementLoopUnrollThreshold; | |
| 9870 if (!inline_ok) { | |
| 9871 TraceInline(target, caller, | |
| 9872 "Constant length outside of valid inlining range."); | |
| 9873 } | |
| 9874 } | |
| 9875 } else { | |
| 9876 TraceInline(target, caller, | |
| 9877 "Dont inline [new] Array(n) where n isn't constant."); | |
| 9878 } | |
| 9879 } else if (argument_count == 0) { | |
| 9880 inline_ok = true; | |
| 9881 } else { | |
| 9882 TraceInline(target, caller, "Too many arguments to inline."); | |
| 9883 } | |
| 9884 } else { | |
| 9885 TraceInline(target, caller, "AllocationSite requested no inlining."); | |
| 9886 } | |
| 9887 | |
| 9888 if (inline_ok) { | |
| 9889 TraceInline(target, caller, NULL); | |
| 9890 } | |
| 9891 return inline_ok; | |
| 9892 } | |
| 9893 | |
| 9894 | |
| 9895 void HOptimizedGraphBuilder::VisitCallNew(CallNew* expr) { | |
| 9896 DCHECK(!HasStackOverflow()); | |
| 9897 DCHECK(current_block() != NULL); | |
| 9898 DCHECK(current_block()->HasPredecessor()); | |
| 9899 if (!top_info()->is_tracking_positions()) SetSourcePosition(expr->position()); | |
| 9900 int argument_count = expr->arguments()->length() + 1; // Plus constructor. | |
| 9901 Factory* factory = isolate()->factory(); | |
| 9902 | |
| 9903 // The constructor function is on the stack in the unoptimized code | |
| 9904 // during evaluation of the arguments. | |
| 9905 CHECK_ALIVE(VisitForValue(expr->expression())); | |
| 9906 HValue* function = Top(); | |
| 9907 CHECK_ALIVE(VisitExpressions(expr->arguments())); | |
| 9908 | |
| 9909 if (function->IsConstant() && | |
| 9910 HConstant::cast(function)->handle(isolate())->IsJSFunction()) { | |
| 9911 Handle<Object> constant = HConstant::cast(function)->handle(isolate()); | |
| 9912 expr->SetKnownGlobalTarget(Handle<JSFunction>::cast(constant)); | |
| 9913 } | |
| 9914 | |
| 9915 if (FLAG_inline_construct && | |
| 9916 expr->IsMonomorphic() && | |
| 9917 IsAllocationInlineable(expr->target())) { | |
| 9918 Handle<JSFunction> constructor = expr->target(); | |
| 9919 HValue* check = Add<HCheckValue>(function, constructor); | |
| 9920 | |
| 9921 // Force completion of inobject slack tracking before generating | |
| 9922 // allocation code to finalize instance size. | |
| 9923 if (constructor->IsInobjectSlackTrackingInProgress()) { | |
| 9924 constructor->CompleteInobjectSlackTracking(); | |
| 9925 } | |
| 9926 | |
| 9927 // Calculate instance size from initial map of constructor. | |
| 9928 DCHECK(constructor->has_initial_map()); | |
| 9929 Handle<Map> initial_map(constructor->initial_map()); | |
| 9930 int instance_size = initial_map->instance_size(); | |
| 9931 | |
| 9932 // Allocate an instance of the implicit receiver object. | |
| 9933 HValue* size_in_bytes = Add<HConstant>(instance_size); | |
| 9934 HAllocationMode allocation_mode; | |
| 9935 HAllocate* receiver = BuildAllocate( | |
| 9936 size_in_bytes, HType::JSObject(), JS_OBJECT_TYPE, allocation_mode); | |
| 9937 receiver->set_known_initial_map(initial_map); | |
| 9938 | |
| 9939 // Initialize map and fields of the newly allocated object. | |
| 9940 { NoObservableSideEffectsScope no_effects(this); | |
| 9941 DCHECK(initial_map->instance_type() == JS_OBJECT_TYPE); | |
| 9942 Add<HStoreNamedField>(receiver, | |
| 9943 HObjectAccess::ForMapAndOffset(initial_map, JSObject::kMapOffset), | |
| 9944 Add<HConstant>(initial_map)); | |
| 9945 HValue* empty_fixed_array = Add<HConstant>(factory->empty_fixed_array()); | |
| 9946 Add<HStoreNamedField>(receiver, | |
| 9947 HObjectAccess::ForMapAndOffset(initial_map, | |
| 9948 JSObject::kPropertiesOffset), | |
| 9949 empty_fixed_array); | |
| 9950 Add<HStoreNamedField>(receiver, | |
| 9951 HObjectAccess::ForMapAndOffset(initial_map, | |
| 9952 JSObject::kElementsOffset), | |
| 9953 empty_fixed_array); | |
| 9954 BuildInitializeInobjectProperties(receiver, initial_map); | |
| 9955 } | |
| 9956 | |
| 9957 // Replace the constructor function with a newly allocated receiver using | |
| 9958 // the index of the receiver from the top of the expression stack. | |
| 9959 const int receiver_index = argument_count - 1; | |
| 9960 DCHECK(environment()->ExpressionStackAt(receiver_index) == function); | |
| 9961 environment()->SetExpressionStackAt(receiver_index, receiver); | |
| 9962 | |
| 9963 if (TryInlineConstruct(expr, receiver)) { | |
| 9964 // Inlining worked, add a dependency on the initial map to make sure that | |
| 9965 // this code is deoptimized whenever the initial map of the constructor | |
| 9966 // changes. | |
| 9967 top_info()->dependencies()->AssumeInitialMapCantChange(initial_map); | |
| 9968 return; | |
| 9969 } | |
| 9970 | |
| 9971 // TODO(mstarzinger): For now we remove the previous HAllocate and all | |
| 9972 // corresponding instructions and instead add HPushArguments for the | |
| 9973 // arguments in case inlining failed. What we actually should do is for | |
| 9974 // inlining to try to build a subgraph without mutating the parent graph. | |
| 9975 HInstruction* instr = current_block()->last(); | |
| 9976 do { | |
| 9977 HInstruction* prev_instr = instr->previous(); | |
| 9978 instr->DeleteAndReplaceWith(NULL); | |
| 9979 instr = prev_instr; | |
| 9980 } while (instr != check); | |
| 9981 environment()->SetExpressionStackAt(receiver_index, function); | |
| 9982 HInstruction* call = | |
| 9983 PreProcessCall(New<HCallNew>(function, argument_count)); | |
| 9984 return ast_context()->ReturnInstruction(call, expr->id()); | |
| 9985 } else { | |
| 9986 // The constructor function is both an operand to the instruction and an | |
| 9987 // argument to the construct call. | |
| 9988 if (TryHandleArrayCallNew(expr, function)) return; | |
| 9989 | |
| 9990 HInstruction* call = | |
| 9991 PreProcessCall(New<HCallNew>(function, argument_count)); | |
| 9992 return ast_context()->ReturnInstruction(call, expr->id()); | |
| 9993 } | |
| 9994 } | |
| 9995 | |
| 9996 | |
| 9997 void HOptimizedGraphBuilder::BuildInitializeInobjectProperties( | |
| 9998 HValue* receiver, Handle<Map> initial_map) { | |
| 9999 if (initial_map->GetInObjectProperties() != 0) { | |
| 10000 HConstant* undefined = graph()->GetConstantUndefined(); | |
| 10001 for (int i = 0; i < initial_map->GetInObjectProperties(); i++) { | |
| 10002 int property_offset = initial_map->GetInObjectPropertyOffset(i); | |
| 10003 Add<HStoreNamedField>(receiver, HObjectAccess::ForMapAndOffset( | |
| 10004 initial_map, property_offset), | |
| 10005 undefined); | |
| 10006 } | |
| 10007 } | |
| 10008 } | |
| 10009 | |
| 10010 | |
| 10011 HValue* HGraphBuilder::BuildAllocateEmptyArrayBuffer(HValue* byte_length) { | |
| 10012 // We HForceRepresentation here to avoid allocations during an *-to-tagged | |
| 10013 // HChange that could cause GC while the array buffer object is not fully | |
| 10014 // initialized. | |
| 10015 HObjectAccess byte_length_access(HObjectAccess::ForJSArrayBufferByteLength()); | |
| 10016 byte_length = AddUncasted<HForceRepresentation>( | |
| 10017 byte_length, byte_length_access.representation()); | |
| 10018 HAllocate* result = | |
| 10019 BuildAllocate(Add<HConstant>(JSArrayBuffer::kSizeWithInternalFields), | |
| 10020 HType::JSObject(), JS_ARRAY_BUFFER_TYPE, HAllocationMode()); | |
| 10021 | |
| 10022 HValue* global_object = Add<HLoadNamedField>( | |
| 10023 context(), nullptr, | |
| 10024 HObjectAccess::ForContextSlot(Context::GLOBAL_OBJECT_INDEX)); | |
| 10025 HValue* native_context = Add<HLoadNamedField>( | |
| 10026 global_object, nullptr, HObjectAccess::ForGlobalObjectNativeContext()); | |
| 10027 Add<HStoreNamedField>( | |
| 10028 result, HObjectAccess::ForMap(), | |
| 10029 Add<HLoadNamedField>( | |
| 10030 native_context, nullptr, | |
| 10031 HObjectAccess::ForContextSlot(Context::ARRAY_BUFFER_MAP_INDEX))); | |
| 10032 | |
| 10033 HConstant* empty_fixed_array = | |
| 10034 Add<HConstant>(isolate()->factory()->empty_fixed_array()); | |
| 10035 Add<HStoreNamedField>( | |
| 10036 result, HObjectAccess::ForJSArrayOffset(JSArray::kPropertiesOffset), | |
| 10037 empty_fixed_array); | |
| 10038 Add<HStoreNamedField>( | |
| 10039 result, HObjectAccess::ForJSArrayOffset(JSArray::kElementsOffset), | |
| 10040 empty_fixed_array); | |
| 10041 Add<HStoreNamedField>( | |
| 10042 result, HObjectAccess::ForJSArrayBufferBackingStore().WithRepresentation( | |
| 10043 Representation::Smi()), | |
| 10044 graph()->GetConstant0()); | |
| 10045 Add<HStoreNamedField>(result, byte_length_access, byte_length); | |
| 10046 Add<HStoreNamedField>(result, HObjectAccess::ForJSArrayBufferBitFieldSlot(), | |
| 10047 graph()->GetConstant0()); | |
| 10048 Add<HStoreNamedField>( | |
| 10049 result, HObjectAccess::ForJSArrayBufferBitField(), | |
| 10050 Add<HConstant>((1 << JSArrayBuffer::IsExternal::kShift) | | |
| 10051 (1 << JSArrayBuffer::IsNeuterable::kShift))); | |
| 10052 | |
| 10053 for (int field = 0; field < v8::ArrayBuffer::kInternalFieldCount; ++field) { | |
| 10054 Add<HStoreNamedField>( | |
| 10055 result, | |
| 10056 HObjectAccess::ForObservableJSObjectOffset( | |
| 10057 JSArrayBuffer::kSize + field * kPointerSize, Representation::Smi()), | |
| 10058 graph()->GetConstant0()); | |
| 10059 } | |
| 10060 | |
| 10061 return result; | |
| 10062 } | |
| 10063 | |
| 10064 | |
| 10065 template <class ViewClass> | |
| 10066 void HGraphBuilder::BuildArrayBufferViewInitialization( | |
| 10067 HValue* obj, | |
| 10068 HValue* buffer, | |
| 10069 HValue* byte_offset, | |
| 10070 HValue* byte_length) { | |
| 10071 | |
| 10072 for (int offset = ViewClass::kSize; | |
| 10073 offset < ViewClass::kSizeWithInternalFields; | |
| 10074 offset += kPointerSize) { | |
| 10075 Add<HStoreNamedField>(obj, | |
| 10076 HObjectAccess::ForObservableJSObjectOffset(offset), | |
| 10077 graph()->GetConstant0()); | |
| 10078 } | |
| 10079 | |
| 10080 Add<HStoreNamedField>( | |
| 10081 obj, | |
| 10082 HObjectAccess::ForJSArrayBufferViewByteOffset(), | |
| 10083 byte_offset); | |
| 10084 Add<HStoreNamedField>( | |
| 10085 obj, | |
| 10086 HObjectAccess::ForJSArrayBufferViewByteLength(), | |
| 10087 byte_length); | |
| 10088 Add<HStoreNamedField>(obj, HObjectAccess::ForJSArrayBufferViewBuffer(), | |
| 10089 buffer); | |
| 10090 } | |
| 10091 | |
| 10092 | |
| 10093 void HOptimizedGraphBuilder::GenerateDataViewInitialize( | |
| 10094 CallRuntime* expr) { | |
| 10095 ZoneList<Expression*>* arguments = expr->arguments(); | |
| 10096 | |
| 10097 DCHECK(arguments->length()== 4); | |
| 10098 CHECK_ALIVE(VisitForValue(arguments->at(0))); | |
| 10099 HValue* obj = Pop(); | |
| 10100 | |
| 10101 CHECK_ALIVE(VisitForValue(arguments->at(1))); | |
| 10102 HValue* buffer = Pop(); | |
| 10103 | |
| 10104 CHECK_ALIVE(VisitForValue(arguments->at(2))); | |
| 10105 HValue* byte_offset = Pop(); | |
| 10106 | |
| 10107 CHECK_ALIVE(VisitForValue(arguments->at(3))); | |
| 10108 HValue* byte_length = Pop(); | |
| 10109 | |
| 10110 { | |
| 10111 NoObservableSideEffectsScope scope(this); | |
| 10112 BuildArrayBufferViewInitialization<JSDataView>( | |
| 10113 obj, buffer, byte_offset, byte_length); | |
| 10114 } | |
| 10115 } | |
| 10116 | |
| 10117 | |
| 10118 static Handle<Map> TypedArrayMap(Isolate* isolate, | |
| 10119 ExternalArrayType array_type, | |
| 10120 ElementsKind target_kind) { | |
| 10121 Handle<Context> native_context = isolate->native_context(); | |
| 10122 Handle<JSFunction> fun; | |
| 10123 switch (array_type) { | |
| 10124 #define TYPED_ARRAY_CASE(Type, type, TYPE, ctype, size) \ | |
| 10125 case kExternal##Type##Array: \ | |
| 10126 fun = Handle<JSFunction>(native_context->type##_array_fun()); \ | |
| 10127 break; | |
| 10128 | |
| 10129 TYPED_ARRAYS(TYPED_ARRAY_CASE) | |
| 10130 #undef TYPED_ARRAY_CASE | |
| 10131 } | |
| 10132 Handle<Map> map(fun->initial_map()); | |
| 10133 return Map::AsElementsKind(map, target_kind); | |
| 10134 } | |
| 10135 | |
| 10136 | |
| 10137 HValue* HOptimizedGraphBuilder::BuildAllocateExternalElements( | |
| 10138 ExternalArrayType array_type, | |
| 10139 bool is_zero_byte_offset, | |
| 10140 HValue* buffer, HValue* byte_offset, HValue* length) { | |
| 10141 Handle<Map> external_array_map( | |
| 10142 isolate()->heap()->MapForFixedTypedArray(array_type)); | |
| 10143 | |
| 10144 // The HForceRepresentation is to prevent possible deopt on int-smi | |
| 10145 // conversion after allocation but before the new object fields are set. | |
| 10146 length = AddUncasted<HForceRepresentation>(length, Representation::Smi()); | |
| 10147 HValue* elements = Add<HAllocate>( | |
| 10148 Add<HConstant>(FixedTypedArrayBase::kHeaderSize), HType::HeapObject(), | |
| 10149 NOT_TENURED, external_array_map->instance_type()); | |
| 10150 | |
| 10151 AddStoreMapConstant(elements, external_array_map); | |
| 10152 Add<HStoreNamedField>(elements, | |
| 10153 HObjectAccess::ForFixedArrayLength(), length); | |
| 10154 | |
| 10155 HValue* backing_store = Add<HLoadNamedField>( | |
| 10156 buffer, nullptr, HObjectAccess::ForJSArrayBufferBackingStore()); | |
| 10157 | |
| 10158 HValue* typed_array_start; | |
| 10159 if (is_zero_byte_offset) { | |
| 10160 typed_array_start = backing_store; | |
| 10161 } else { | |
| 10162 HInstruction* external_pointer = | |
| 10163 AddUncasted<HAdd>(backing_store, byte_offset); | |
| 10164 // Arguments are checked prior to call to TypedArrayInitialize, | |
| 10165 // including byte_offset. | |
| 10166 external_pointer->ClearFlag(HValue::kCanOverflow); | |
| 10167 typed_array_start = external_pointer; | |
| 10168 } | |
| 10169 | |
| 10170 Add<HStoreNamedField>(elements, | |
| 10171 HObjectAccess::ForFixedTypedArrayBaseBasePointer(), | |
| 10172 graph()->GetConstant0()); | |
| 10173 Add<HStoreNamedField>(elements, | |
| 10174 HObjectAccess::ForFixedTypedArrayBaseExternalPointer(), | |
| 10175 typed_array_start); | |
| 10176 | |
| 10177 return elements; | |
| 10178 } | |
| 10179 | |
| 10180 | |
| 10181 HValue* HOptimizedGraphBuilder::BuildAllocateFixedTypedArray( | |
| 10182 ExternalArrayType array_type, size_t element_size, | |
| 10183 ElementsKind fixed_elements_kind, HValue* byte_length, HValue* length, | |
| 10184 bool initialize) { | |
| 10185 STATIC_ASSERT( | |
| 10186 (FixedTypedArrayBase::kHeaderSize & kObjectAlignmentMask) == 0); | |
| 10187 HValue* total_size; | |
| 10188 | |
| 10189 // if fixed array's elements are not aligned to object's alignment, | |
| 10190 // we need to align the whole array to object alignment. | |
| 10191 if (element_size % kObjectAlignment != 0) { | |
| 10192 total_size = BuildObjectSizeAlignment( | |
| 10193 byte_length, FixedTypedArrayBase::kHeaderSize); | |
| 10194 } else { | |
| 10195 total_size = AddUncasted<HAdd>(byte_length, | |
| 10196 Add<HConstant>(FixedTypedArrayBase::kHeaderSize)); | |
| 10197 total_size->ClearFlag(HValue::kCanOverflow); | |
| 10198 } | |
| 10199 | |
| 10200 // The HForceRepresentation is to prevent possible deopt on int-smi | |
| 10201 // conversion after allocation but before the new object fields are set. | |
| 10202 length = AddUncasted<HForceRepresentation>(length, Representation::Smi()); | |
| 10203 Handle<Map> fixed_typed_array_map( | |
| 10204 isolate()->heap()->MapForFixedTypedArray(array_type)); | |
| 10205 HAllocate* elements = | |
| 10206 Add<HAllocate>(total_size, HType::HeapObject(), NOT_TENURED, | |
| 10207 fixed_typed_array_map->instance_type()); | |
| 10208 | |
| 10209 #ifndef V8_HOST_ARCH_64_BIT | |
| 10210 if (array_type == kExternalFloat64Array) { | |
| 10211 elements->MakeDoubleAligned(); | |
| 10212 } | |
| 10213 #endif | |
| 10214 | |
| 10215 AddStoreMapConstant(elements, fixed_typed_array_map); | |
| 10216 | |
| 10217 Add<HStoreNamedField>(elements, | |
| 10218 HObjectAccess::ForFixedArrayLength(), | |
| 10219 length); | |
| 10220 Add<HStoreNamedField>( | |
| 10221 elements, HObjectAccess::ForFixedTypedArrayBaseBasePointer(), elements); | |
| 10222 | |
| 10223 Add<HStoreNamedField>( | |
| 10224 elements, HObjectAccess::ForFixedTypedArrayBaseExternalPointer(), | |
| 10225 Add<HConstant>(ExternalReference::fixed_typed_array_base_data_offset())); | |
| 10226 | |
| 10227 HValue* filler = Add<HConstant>(static_cast<int32_t>(0)); | |
| 10228 | |
| 10229 if (initialize) { | |
| 10230 LoopBuilder builder(this, context(), LoopBuilder::kPostIncrement); | |
| 10231 | |
| 10232 HValue* backing_store = AddUncasted<HAdd>( | |
| 10233 Add<HConstant>(ExternalReference::fixed_typed_array_base_data_offset()), | |
| 10234 elements, Strength::WEAK, AddOfExternalAndTagged); | |
| 10235 | |
| 10236 HValue* key = builder.BeginBody( | |
| 10237 Add<HConstant>(static_cast<int32_t>(0)), | |
| 10238 length, Token::LT); | |
| 10239 Add<HStoreKeyed>(backing_store, key, filler, fixed_elements_kind); | |
| 10240 | |
| 10241 builder.EndBody(); | |
| 10242 } | |
| 10243 return elements; | |
| 10244 } | |
| 10245 | |
| 10246 | |
| 10247 void HOptimizedGraphBuilder::GenerateTypedArrayInitialize( | |
| 10248 CallRuntime* expr) { | |
| 10249 ZoneList<Expression*>* arguments = expr->arguments(); | |
| 10250 | |
| 10251 static const int kObjectArg = 0; | |
| 10252 static const int kArrayIdArg = 1; | |
| 10253 static const int kBufferArg = 2; | |
| 10254 static const int kByteOffsetArg = 3; | |
| 10255 static const int kByteLengthArg = 4; | |
| 10256 static const int kInitializeArg = 5; | |
| 10257 static const int kArgsLength = 6; | |
| 10258 DCHECK(arguments->length() == kArgsLength); | |
| 10259 | |
| 10260 | |
| 10261 CHECK_ALIVE(VisitForValue(arguments->at(kObjectArg))); | |
| 10262 HValue* obj = Pop(); | |
| 10263 | |
| 10264 if (!arguments->at(kArrayIdArg)->IsLiteral()) { | |
| 10265 // This should never happen in real use, but can happen when fuzzing. | |
| 10266 // Just bail out. | |
| 10267 Bailout(kNeedSmiLiteral); | |
| 10268 return; | |
| 10269 } | |
| 10270 Handle<Object> value = | |
| 10271 static_cast<Literal*>(arguments->at(kArrayIdArg))->value(); | |
| 10272 if (!value->IsSmi()) { | |
| 10273 // This should never happen in real use, but can happen when fuzzing. | |
| 10274 // Just bail out. | |
| 10275 Bailout(kNeedSmiLiteral); | |
| 10276 return; | |
| 10277 } | |
| 10278 int array_id = Smi::cast(*value)->value(); | |
| 10279 | |
| 10280 HValue* buffer; | |
| 10281 if (!arguments->at(kBufferArg)->IsNullLiteral()) { | |
| 10282 CHECK_ALIVE(VisitForValue(arguments->at(kBufferArg))); | |
| 10283 buffer = Pop(); | |
| 10284 } else { | |
| 10285 buffer = NULL; | |
| 10286 } | |
| 10287 | |
| 10288 HValue* byte_offset; | |
| 10289 bool is_zero_byte_offset; | |
| 10290 | |
| 10291 if (arguments->at(kByteOffsetArg)->IsLiteral() | |
| 10292 && Smi::FromInt(0) == | |
| 10293 *static_cast<Literal*>(arguments->at(kByteOffsetArg))->value()) { | |
| 10294 byte_offset = Add<HConstant>(static_cast<int32_t>(0)); | |
| 10295 is_zero_byte_offset = true; | |
| 10296 } else { | |
| 10297 CHECK_ALIVE(VisitForValue(arguments->at(kByteOffsetArg))); | |
| 10298 byte_offset = Pop(); | |
| 10299 is_zero_byte_offset = false; | |
| 10300 DCHECK(buffer != NULL); | |
| 10301 } | |
| 10302 | |
| 10303 CHECK_ALIVE(VisitForValue(arguments->at(kByteLengthArg))); | |
| 10304 HValue* byte_length = Pop(); | |
| 10305 | |
| 10306 CHECK(arguments->at(kInitializeArg)->IsLiteral()); | |
| 10307 bool initialize = static_cast<Literal*>(arguments->at(kInitializeArg)) | |
| 10308 ->value() | |
| 10309 ->BooleanValue(); | |
| 10310 | |
| 10311 NoObservableSideEffectsScope scope(this); | |
| 10312 IfBuilder byte_offset_smi(this); | |
| 10313 | |
| 10314 if (!is_zero_byte_offset) { | |
| 10315 byte_offset_smi.If<HIsSmiAndBranch>(byte_offset); | |
| 10316 byte_offset_smi.Then(); | |
| 10317 } | |
| 10318 | |
| 10319 ExternalArrayType array_type = | |
| 10320 kExternalInt8Array; // Bogus initialization. | |
| 10321 size_t element_size = 1; // Bogus initialization. | |
| 10322 ElementsKind fixed_elements_kind = // Bogus initialization. | |
| 10323 INT8_ELEMENTS; | |
| 10324 Runtime::ArrayIdToTypeAndSize(array_id, | |
| 10325 &array_type, | |
| 10326 &fixed_elements_kind, | |
| 10327 &element_size); | |
| 10328 | |
| 10329 | |
| 10330 { // byte_offset is Smi. | |
| 10331 HValue* allocated_buffer = buffer; | |
| 10332 if (buffer == NULL) { | |
| 10333 allocated_buffer = BuildAllocateEmptyArrayBuffer(byte_length); | |
| 10334 } | |
| 10335 BuildArrayBufferViewInitialization<JSTypedArray>(obj, allocated_buffer, | |
| 10336 byte_offset, byte_length); | |
| 10337 | |
| 10338 | |
| 10339 HInstruction* length = AddUncasted<HDiv>(byte_length, | |
| 10340 Add<HConstant>(static_cast<int32_t>(element_size))); | |
| 10341 | |
| 10342 Add<HStoreNamedField>(obj, | |
| 10343 HObjectAccess::ForJSTypedArrayLength(), | |
| 10344 length); | |
| 10345 | |
| 10346 HValue* elements; | |
| 10347 if (buffer != NULL) { | |
| 10348 elements = BuildAllocateExternalElements( | |
| 10349 array_type, is_zero_byte_offset, buffer, byte_offset, length); | |
| 10350 Handle<Map> obj_map = | |
| 10351 TypedArrayMap(isolate(), array_type, fixed_elements_kind); | |
| 10352 AddStoreMapConstant(obj, obj_map); | |
| 10353 } else { | |
| 10354 DCHECK(is_zero_byte_offset); | |
| 10355 elements = BuildAllocateFixedTypedArray(array_type, element_size, | |
| 10356 fixed_elements_kind, byte_length, | |
| 10357 length, initialize); | |
| 10358 } | |
| 10359 Add<HStoreNamedField>( | |
| 10360 obj, HObjectAccess::ForElementsPointer(), elements); | |
| 10361 } | |
| 10362 | |
| 10363 if (!is_zero_byte_offset) { | |
| 10364 byte_offset_smi.Else(); | |
| 10365 { // byte_offset is not Smi. | |
| 10366 Push(obj); | |
| 10367 CHECK_ALIVE(VisitForValue(arguments->at(kArrayIdArg))); | |
| 10368 Push(buffer); | |
| 10369 Push(byte_offset); | |
| 10370 Push(byte_length); | |
| 10371 CHECK_ALIVE(VisitForValue(arguments->at(kInitializeArg))); | |
| 10372 PushArgumentsFromEnvironment(kArgsLength); | |
| 10373 Add<HCallRuntime>(expr->function(), kArgsLength); | |
| 10374 } | |
| 10375 } | |
| 10376 byte_offset_smi.End(); | |
| 10377 } | |
| 10378 | |
| 10379 | |
| 10380 void HOptimizedGraphBuilder::GenerateMaxSmi(CallRuntime* expr) { | |
| 10381 DCHECK(expr->arguments()->length() == 0); | |
| 10382 HConstant* max_smi = New<HConstant>(static_cast<int32_t>(Smi::kMaxValue)); | |
| 10383 return ast_context()->ReturnInstruction(max_smi, expr->id()); | |
| 10384 } | |
| 10385 | |
| 10386 | |
| 10387 void HOptimizedGraphBuilder::GenerateTypedArrayMaxSizeInHeap( | |
| 10388 CallRuntime* expr) { | |
| 10389 DCHECK(expr->arguments()->length() == 0); | |
| 10390 HConstant* result = New<HConstant>(static_cast<int32_t>( | |
| 10391 FLAG_typed_array_max_size_in_heap)); | |
| 10392 return ast_context()->ReturnInstruction(result, expr->id()); | |
| 10393 } | |
| 10394 | |
| 10395 | |
| 10396 void HOptimizedGraphBuilder::GenerateArrayBufferGetByteLength( | |
| 10397 CallRuntime* expr) { | |
| 10398 DCHECK(expr->arguments()->length() == 1); | |
| 10399 CHECK_ALIVE(VisitForValue(expr->arguments()->at(0))); | |
| 10400 HValue* buffer = Pop(); | |
| 10401 HInstruction* result = New<HLoadNamedField>( | |
| 10402 buffer, nullptr, HObjectAccess::ForJSArrayBufferByteLength()); | |
| 10403 return ast_context()->ReturnInstruction(result, expr->id()); | |
| 10404 } | |
| 10405 | |
| 10406 | |
| 10407 void HOptimizedGraphBuilder::GenerateArrayBufferViewGetByteLength( | |
| 10408 CallRuntime* expr) { | |
| 10409 NoObservableSideEffectsScope scope(this); | |
| 10410 DCHECK(expr->arguments()->length() == 1); | |
| 10411 CHECK_ALIVE(VisitForValue(expr->arguments()->at(0))); | |
| 10412 HValue* view = Pop(); | |
| 10413 | |
| 10414 return ast_context()->ReturnValue(BuildArrayBufferViewFieldAccessor( | |
| 10415 view, nullptr, | |
| 10416 FieldIndex::ForInObjectOffset(JSArrayBufferView::kByteLengthOffset))); | |
| 10417 } | |
| 10418 | |
| 10419 | |
| 10420 void HOptimizedGraphBuilder::GenerateArrayBufferViewGetByteOffset( | |
| 10421 CallRuntime* expr) { | |
| 10422 NoObservableSideEffectsScope scope(this); | |
| 10423 DCHECK(expr->arguments()->length() == 1); | |
| 10424 CHECK_ALIVE(VisitForValue(expr->arguments()->at(0))); | |
| 10425 HValue* view = Pop(); | |
| 10426 | |
| 10427 return ast_context()->ReturnValue(BuildArrayBufferViewFieldAccessor( | |
| 10428 view, nullptr, | |
| 10429 FieldIndex::ForInObjectOffset(JSArrayBufferView::kByteOffsetOffset))); | |
| 10430 } | |
| 10431 | |
| 10432 | |
| 10433 void HOptimizedGraphBuilder::GenerateTypedArrayGetLength( | |
| 10434 CallRuntime* expr) { | |
| 10435 NoObservableSideEffectsScope scope(this); | |
| 10436 DCHECK(expr->arguments()->length() == 1); | |
| 10437 CHECK_ALIVE(VisitForValue(expr->arguments()->at(0))); | |
| 10438 HValue* view = Pop(); | |
| 10439 | |
| 10440 return ast_context()->ReturnValue(BuildArrayBufferViewFieldAccessor( | |
| 10441 view, nullptr, | |
| 10442 FieldIndex::ForInObjectOffset(JSTypedArray::kLengthOffset))); | |
| 10443 } | |
| 10444 | |
| 10445 | |
| 10446 void HOptimizedGraphBuilder::VisitCallRuntime(CallRuntime* expr) { | |
| 10447 DCHECK(!HasStackOverflow()); | |
| 10448 DCHECK(current_block() != NULL); | |
| 10449 DCHECK(current_block()->HasPredecessor()); | |
| 10450 if (expr->is_jsruntime()) { | |
| 10451 return Bailout(kCallToAJavaScriptRuntimeFunction); | |
| 10452 } | |
| 10453 | |
| 10454 const Runtime::Function* function = expr->function(); | |
| 10455 DCHECK(function != NULL); | |
| 10456 switch (function->function_id) { | |
| 10457 #define CALL_INTRINSIC_GENERATOR(Name) \ | |
| 10458 case Runtime::kInline##Name: \ | |
| 10459 return Generate##Name(expr); | |
| 10460 | |
| 10461 FOR_EACH_HYDROGEN_INTRINSIC(CALL_INTRINSIC_GENERATOR) | |
| 10462 #undef CALL_INTRINSIC_GENERATOR | |
| 10463 default: { | |
| 10464 int argument_count = expr->arguments()->length(); | |
| 10465 CHECK_ALIVE(VisitExpressions(expr->arguments())); | |
| 10466 PushArgumentsFromEnvironment(argument_count); | |
| 10467 HCallRuntime* call = New<HCallRuntime>(function, argument_count); | |
| 10468 return ast_context()->ReturnInstruction(call, expr->id()); | |
| 10469 } | |
| 10470 } | |
| 10471 } | |
| 10472 | |
| 10473 | |
| 10474 void HOptimizedGraphBuilder::VisitUnaryOperation(UnaryOperation* expr) { | |
| 10475 DCHECK(!HasStackOverflow()); | |
| 10476 DCHECK(current_block() != NULL); | |
| 10477 DCHECK(current_block()->HasPredecessor()); | |
| 10478 switch (expr->op()) { | |
| 10479 case Token::DELETE: return VisitDelete(expr); | |
| 10480 case Token::VOID: return VisitVoid(expr); | |
| 10481 case Token::TYPEOF: return VisitTypeof(expr); | |
| 10482 case Token::NOT: return VisitNot(expr); | |
| 10483 default: UNREACHABLE(); | |
| 10484 } | |
| 10485 } | |
| 10486 | |
| 10487 | |
| 10488 void HOptimizedGraphBuilder::VisitDelete(UnaryOperation* expr) { | |
| 10489 Property* prop = expr->expression()->AsProperty(); | |
| 10490 VariableProxy* proxy = expr->expression()->AsVariableProxy(); | |
| 10491 if (prop != NULL) { | |
| 10492 CHECK_ALIVE(VisitForValue(prop->obj())); | |
| 10493 CHECK_ALIVE(VisitForValue(prop->key())); | |
| 10494 HValue* key = Pop(); | |
| 10495 HValue* obj = Pop(); | |
| 10496 Add<HPushArguments>(obj, key); | |
| 10497 HInstruction* instr = New<HCallRuntime>( | |
| 10498 Runtime::FunctionForId(is_strict(function_language_mode()) | |
| 10499 ? Runtime::kDeleteProperty_Strict | |
| 10500 : Runtime::kDeleteProperty_Sloppy), | |
| 10501 2); | |
| 10502 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 10503 } else if (proxy != NULL) { | |
| 10504 Variable* var = proxy->var(); | |
| 10505 if (var->IsUnallocatedOrGlobalSlot()) { | |
| 10506 Bailout(kDeleteWithGlobalVariable); | |
| 10507 } else if (var->IsStackAllocated() || var->IsContextSlot()) { | |
| 10508 // Result of deleting non-global variables is false. 'this' is not really | |
| 10509 // a variable, though we implement it as one. The subexpression does not | |
| 10510 // have side effects. | |
| 10511 HValue* value = var->HasThisName(isolate()) ? graph()->GetConstantTrue() | |
| 10512 : graph()->GetConstantFalse(); | |
| 10513 return ast_context()->ReturnValue(value); | |
| 10514 } else { | |
| 10515 Bailout(kDeleteWithNonGlobalVariable); | |
| 10516 } | |
| 10517 } else { | |
| 10518 // Result of deleting non-property, non-variable reference is true. | |
| 10519 // Evaluate the subexpression for side effects. | |
| 10520 CHECK_ALIVE(VisitForEffect(expr->expression())); | |
| 10521 return ast_context()->ReturnValue(graph()->GetConstantTrue()); | |
| 10522 } | |
| 10523 } | |
| 10524 | |
| 10525 | |
| 10526 void HOptimizedGraphBuilder::VisitVoid(UnaryOperation* expr) { | |
| 10527 CHECK_ALIVE(VisitForEffect(expr->expression())); | |
| 10528 return ast_context()->ReturnValue(graph()->GetConstantUndefined()); | |
| 10529 } | |
| 10530 | |
| 10531 | |
| 10532 void HOptimizedGraphBuilder::VisitTypeof(UnaryOperation* expr) { | |
| 10533 CHECK_ALIVE(VisitForTypeOf(expr->expression())); | |
| 10534 HValue* value = Pop(); | |
| 10535 HInstruction* instr = New<HTypeof>(value); | |
| 10536 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 10537 } | |
| 10538 | |
| 10539 | |
| 10540 void HOptimizedGraphBuilder::VisitNot(UnaryOperation* expr) { | |
| 10541 if (ast_context()->IsTest()) { | |
| 10542 TestContext* context = TestContext::cast(ast_context()); | |
| 10543 VisitForControl(expr->expression(), | |
| 10544 context->if_false(), | |
| 10545 context->if_true()); | |
| 10546 return; | |
| 10547 } | |
| 10548 | |
| 10549 if (ast_context()->IsEffect()) { | |
| 10550 VisitForEffect(expr->expression()); | |
| 10551 return; | |
| 10552 } | |
| 10553 | |
| 10554 DCHECK(ast_context()->IsValue()); | |
| 10555 HBasicBlock* materialize_false = graph()->CreateBasicBlock(); | |
| 10556 HBasicBlock* materialize_true = graph()->CreateBasicBlock(); | |
| 10557 CHECK_BAILOUT(VisitForControl(expr->expression(), | |
| 10558 materialize_false, | |
| 10559 materialize_true)); | |
| 10560 | |
| 10561 if (materialize_false->HasPredecessor()) { | |
| 10562 materialize_false->SetJoinId(expr->MaterializeFalseId()); | |
| 10563 set_current_block(materialize_false); | |
| 10564 Push(graph()->GetConstantFalse()); | |
| 10565 } else { | |
| 10566 materialize_false = NULL; | |
| 10567 } | |
| 10568 | |
| 10569 if (materialize_true->HasPredecessor()) { | |
| 10570 materialize_true->SetJoinId(expr->MaterializeTrueId()); | |
| 10571 set_current_block(materialize_true); | |
| 10572 Push(graph()->GetConstantTrue()); | |
| 10573 } else { | |
| 10574 materialize_true = NULL; | |
| 10575 } | |
| 10576 | |
| 10577 HBasicBlock* join = | |
| 10578 CreateJoin(materialize_false, materialize_true, expr->id()); | |
| 10579 set_current_block(join); | |
| 10580 if (join != NULL) return ast_context()->ReturnValue(Pop()); | |
| 10581 } | |
| 10582 | |
| 10583 | |
| 10584 static Representation RepresentationFor(Type* type) { | |
| 10585 DisallowHeapAllocation no_allocation; | |
| 10586 if (type->Is(Type::None())) return Representation::None(); | |
| 10587 if (type->Is(Type::SignedSmall())) return Representation::Smi(); | |
| 10588 if (type->Is(Type::Signed32())) return Representation::Integer32(); | |
| 10589 if (type->Is(Type::Number())) return Representation::Double(); | |
| 10590 return Representation::Tagged(); | |
| 10591 } | |
| 10592 | |
| 10593 | |
| 10594 HInstruction* HOptimizedGraphBuilder::BuildIncrement( | |
| 10595 bool returns_original_input, | |
| 10596 CountOperation* expr) { | |
| 10597 // The input to the count operation is on top of the expression stack. | |
| 10598 Representation rep = RepresentationFor(expr->type()); | |
| 10599 if (rep.IsNone() || rep.IsTagged()) { | |
| 10600 rep = Representation::Smi(); | |
| 10601 } | |
| 10602 | |
| 10603 if (returns_original_input && !is_strong(function_language_mode())) { | |
| 10604 // We need an explicit HValue representing ToNumber(input). The | |
| 10605 // actual HChange instruction we need is (sometimes) added in a later | |
| 10606 // phase, so it is not available now to be used as an input to HAdd and | |
| 10607 // as the return value. | |
| 10608 HInstruction* number_input = AddUncasted<HForceRepresentation>(Pop(), rep); | |
| 10609 if (!rep.IsDouble()) { | |
| 10610 number_input->SetFlag(HInstruction::kFlexibleRepresentation); | |
| 10611 number_input->SetFlag(HInstruction::kCannotBeTagged); | |
| 10612 } | |
| 10613 Push(number_input); | |
| 10614 } | |
| 10615 | |
| 10616 // The addition has no side effects, so we do not need | |
| 10617 // to simulate the expression stack after this instruction. | |
| 10618 // Any later failures deopt to the load of the input or earlier. | |
| 10619 HConstant* delta = (expr->op() == Token::INC) | |
| 10620 ? graph()->GetConstant1() | |
| 10621 : graph()->GetConstantMinus1(); | |
| 10622 HInstruction* instr = | |
| 10623 AddUncasted<HAdd>(Top(), delta, strength(function_language_mode())); | |
| 10624 if (instr->IsAdd()) { | |
| 10625 HAdd* add = HAdd::cast(instr); | |
| 10626 add->set_observed_input_representation(1, rep); | |
| 10627 add->set_observed_input_representation(2, Representation::Smi()); | |
| 10628 } | |
| 10629 if (!is_strong(function_language_mode())) { | |
| 10630 instr->ClearAllSideEffects(); | |
| 10631 } else { | |
| 10632 Add<HSimulate>(expr->ToNumberId(), REMOVABLE_SIMULATE); | |
| 10633 } | |
| 10634 instr->SetFlag(HInstruction::kCannotBeTagged); | |
| 10635 return instr; | |
| 10636 } | |
| 10637 | |
| 10638 | |
| 10639 void HOptimizedGraphBuilder::BuildStoreForEffect( | |
| 10640 Expression* expr, Property* prop, FeedbackVectorSlot slot, BailoutId ast_id, | |
| 10641 BailoutId return_id, HValue* object, HValue* key, HValue* value) { | |
| 10642 EffectContext for_effect(this); | |
| 10643 Push(object); | |
| 10644 if (key != NULL) Push(key); | |
| 10645 Push(value); | |
| 10646 BuildStore(expr, prop, slot, ast_id, return_id); | |
| 10647 } | |
| 10648 | |
| 10649 | |
| 10650 void HOptimizedGraphBuilder::VisitCountOperation(CountOperation* expr) { | |
| 10651 DCHECK(!HasStackOverflow()); | |
| 10652 DCHECK(current_block() != NULL); | |
| 10653 DCHECK(current_block()->HasPredecessor()); | |
| 10654 if (!top_info()->is_tracking_positions()) SetSourcePosition(expr->position()); | |
| 10655 Expression* target = expr->expression(); | |
| 10656 VariableProxy* proxy = target->AsVariableProxy(); | |
| 10657 Property* prop = target->AsProperty(); | |
| 10658 if (proxy == NULL && prop == NULL) { | |
| 10659 return Bailout(kInvalidLhsInCountOperation); | |
| 10660 } | |
| 10661 | |
| 10662 // Match the full code generator stack by simulating an extra stack | |
| 10663 // element for postfix operations in a non-effect context. The return | |
| 10664 // value is ToNumber(input). | |
| 10665 bool returns_original_input = | |
| 10666 expr->is_postfix() && !ast_context()->IsEffect(); | |
| 10667 HValue* input = NULL; // ToNumber(original_input). | |
| 10668 HValue* after = NULL; // The result after incrementing or decrementing. | |
| 10669 | |
| 10670 if (proxy != NULL) { | |
| 10671 Variable* var = proxy->var(); | |
| 10672 if (var->mode() == CONST_LEGACY) { | |
| 10673 return Bailout(kUnsupportedCountOperationWithConst); | |
| 10674 } | |
| 10675 if (var->mode() == CONST) { | |
| 10676 return Bailout(kNonInitializerAssignmentToConst); | |
| 10677 } | |
| 10678 // Argument of the count operation is a variable, not a property. | |
| 10679 DCHECK(prop == NULL); | |
| 10680 CHECK_ALIVE(VisitForValue(target)); | |
| 10681 | |
| 10682 after = BuildIncrement(returns_original_input, expr); | |
| 10683 input = returns_original_input ? Top() : Pop(); | |
| 10684 Push(after); | |
| 10685 | |
| 10686 switch (var->location()) { | |
| 10687 case VariableLocation::GLOBAL: | |
| 10688 case VariableLocation::UNALLOCATED: | |
| 10689 HandleGlobalVariableAssignment(var, after, expr->CountSlot(), | |
| 10690 expr->AssignmentId()); | |
| 10691 break; | |
| 10692 | |
| 10693 case VariableLocation::PARAMETER: | |
| 10694 case VariableLocation::LOCAL: | |
| 10695 BindIfLive(var, after); | |
| 10696 break; | |
| 10697 | |
| 10698 case VariableLocation::CONTEXT: { | |
| 10699 // Bail out if we try to mutate a parameter value in a function | |
| 10700 // using the arguments object. We do not (yet) correctly handle the | |
| 10701 // arguments property of the function. | |
| 10702 if (current_info()->scope()->arguments() != NULL) { | |
| 10703 // Parameters will rewrite to context slots. We have no direct | |
| 10704 // way to detect that the variable is a parameter so we use a | |
| 10705 // linear search of the parameter list. | |
| 10706 int count = current_info()->scope()->num_parameters(); | |
| 10707 for (int i = 0; i < count; ++i) { | |
| 10708 if (var == current_info()->scope()->parameter(i)) { | |
| 10709 return Bailout(kAssignmentToParameterInArgumentsObject); | |
| 10710 } | |
| 10711 } | |
| 10712 } | |
| 10713 | |
| 10714 HValue* context = BuildContextChainWalk(var); | |
| 10715 HStoreContextSlot::Mode mode = IsLexicalVariableMode(var->mode()) | |
| 10716 ? HStoreContextSlot::kCheckDeoptimize : HStoreContextSlot::kNoCheck; | |
| 10717 HStoreContextSlot* instr = Add<HStoreContextSlot>(context, var->index(), | |
| 10718 mode, after); | |
| 10719 if (instr->HasObservableSideEffects()) { | |
| 10720 Add<HSimulate>(expr->AssignmentId(), REMOVABLE_SIMULATE); | |
| 10721 } | |
| 10722 break; | |
| 10723 } | |
| 10724 | |
| 10725 case VariableLocation::LOOKUP: | |
| 10726 return Bailout(kLookupVariableInCountOperation); | |
| 10727 } | |
| 10728 | |
| 10729 Drop(returns_original_input ? 2 : 1); | |
| 10730 return ast_context()->ReturnValue(expr->is_postfix() ? input : after); | |
| 10731 } | |
| 10732 | |
| 10733 // Argument of the count operation is a property. | |
| 10734 DCHECK(prop != NULL); | |
| 10735 if (returns_original_input) Push(graph()->GetConstantUndefined()); | |
| 10736 | |
| 10737 CHECK_ALIVE(VisitForValue(prop->obj())); | |
| 10738 HValue* object = Top(); | |
| 10739 | |
| 10740 HValue* key = NULL; | |
| 10741 if (!prop->key()->IsPropertyName() || prop->IsStringAccess()) { | |
| 10742 CHECK_ALIVE(VisitForValue(prop->key())); | |
| 10743 key = Top(); | |
| 10744 } | |
| 10745 | |
| 10746 CHECK_ALIVE(PushLoad(prop, object, key)); | |
| 10747 | |
| 10748 after = BuildIncrement(returns_original_input, expr); | |
| 10749 | |
| 10750 if (returns_original_input) { | |
| 10751 input = Pop(); | |
| 10752 // Drop object and key to push it again in the effect context below. | |
| 10753 Drop(key == NULL ? 1 : 2); | |
| 10754 environment()->SetExpressionStackAt(0, input); | |
| 10755 CHECK_ALIVE(BuildStoreForEffect(expr, prop, expr->CountSlot(), expr->id(), | |
| 10756 expr->AssignmentId(), object, key, after)); | |
| 10757 return ast_context()->ReturnValue(Pop()); | |
| 10758 } | |
| 10759 | |
| 10760 environment()->SetExpressionStackAt(0, after); | |
| 10761 return BuildStore(expr, prop, expr->CountSlot(), expr->id(), | |
| 10762 expr->AssignmentId()); | |
| 10763 } | |
| 10764 | |
| 10765 | |
| 10766 HInstruction* HOptimizedGraphBuilder::BuildStringCharCodeAt( | |
| 10767 HValue* string, | |
| 10768 HValue* index) { | |
| 10769 if (string->IsConstant() && index->IsConstant()) { | |
| 10770 HConstant* c_string = HConstant::cast(string); | |
| 10771 HConstant* c_index = HConstant::cast(index); | |
| 10772 if (c_string->HasStringValue() && c_index->HasNumberValue()) { | |
| 10773 int32_t i = c_index->NumberValueAsInteger32(); | |
| 10774 Handle<String> s = c_string->StringValue(); | |
| 10775 if (i < 0 || i >= s->length()) { | |
| 10776 return New<HConstant>(std::numeric_limits<double>::quiet_NaN()); | |
| 10777 } | |
| 10778 return New<HConstant>(s->Get(i)); | |
| 10779 } | |
| 10780 } | |
| 10781 string = BuildCheckString(string); | |
| 10782 index = Add<HBoundsCheck>(index, AddLoadStringLength(string)); | |
| 10783 return New<HStringCharCodeAt>(string, index); | |
| 10784 } | |
| 10785 | |
| 10786 | |
| 10787 // Checks if the given shift amounts have following forms: | |
| 10788 // (N1) and (N2) with N1 + N2 = 32; (sa) and (32 - sa). | |
| 10789 static bool ShiftAmountsAllowReplaceByRotate(HValue* sa, | |
| 10790 HValue* const32_minus_sa) { | |
| 10791 if (sa->IsConstant() && const32_minus_sa->IsConstant()) { | |
| 10792 const HConstant* c1 = HConstant::cast(sa); | |
| 10793 const HConstant* c2 = HConstant::cast(const32_minus_sa); | |
| 10794 return c1->HasInteger32Value() && c2->HasInteger32Value() && | |
| 10795 (c1->Integer32Value() + c2->Integer32Value() == 32); | |
| 10796 } | |
| 10797 if (!const32_minus_sa->IsSub()) return false; | |
| 10798 HSub* sub = HSub::cast(const32_minus_sa); | |
| 10799 return sub->left()->EqualsInteger32Constant(32) && sub->right() == sa; | |
| 10800 } | |
| 10801 | |
| 10802 | |
| 10803 // Checks if the left and the right are shift instructions with the oposite | |
| 10804 // directions that can be replaced by one rotate right instruction or not. | |
| 10805 // Returns the operand and the shift amount for the rotate instruction in the | |
| 10806 // former case. | |
| 10807 bool HGraphBuilder::MatchRotateRight(HValue* left, | |
| 10808 HValue* right, | |
| 10809 HValue** operand, | |
| 10810 HValue** shift_amount) { | |
| 10811 HShl* shl; | |
| 10812 HShr* shr; | |
| 10813 if (left->IsShl() && right->IsShr()) { | |
| 10814 shl = HShl::cast(left); | |
| 10815 shr = HShr::cast(right); | |
| 10816 } else if (left->IsShr() && right->IsShl()) { | |
| 10817 shl = HShl::cast(right); | |
| 10818 shr = HShr::cast(left); | |
| 10819 } else { | |
| 10820 return false; | |
| 10821 } | |
| 10822 if (shl->left() != shr->left()) return false; | |
| 10823 | |
| 10824 if (!ShiftAmountsAllowReplaceByRotate(shl->right(), shr->right()) && | |
| 10825 !ShiftAmountsAllowReplaceByRotate(shr->right(), shl->right())) { | |
| 10826 return false; | |
| 10827 } | |
| 10828 *operand = shr->left(); | |
| 10829 *shift_amount = shr->right(); | |
| 10830 return true; | |
| 10831 } | |
| 10832 | |
| 10833 | |
| 10834 bool CanBeZero(HValue* right) { | |
| 10835 if (right->IsConstant()) { | |
| 10836 HConstant* right_const = HConstant::cast(right); | |
| 10837 if (right_const->HasInteger32Value() && | |
| 10838 (right_const->Integer32Value() & 0x1f) != 0) { | |
| 10839 return false; | |
| 10840 } | |
| 10841 } | |
| 10842 return true; | |
| 10843 } | |
| 10844 | |
| 10845 | |
| 10846 HValue* HGraphBuilder::EnforceNumberType(HValue* number, | |
| 10847 Type* expected) { | |
| 10848 if (expected->Is(Type::SignedSmall())) { | |
| 10849 return AddUncasted<HForceRepresentation>(number, Representation::Smi()); | |
| 10850 } | |
| 10851 if (expected->Is(Type::Signed32())) { | |
| 10852 return AddUncasted<HForceRepresentation>(number, | |
| 10853 Representation::Integer32()); | |
| 10854 } | |
| 10855 return number; | |
| 10856 } | |
| 10857 | |
| 10858 | |
| 10859 HValue* HGraphBuilder::TruncateToNumber(HValue* value, Type** expected) { | |
| 10860 if (value->IsConstant()) { | |
| 10861 HConstant* constant = HConstant::cast(value); | |
| 10862 Maybe<HConstant*> number = | |
| 10863 constant->CopyToTruncatedNumber(isolate(), zone()); | |
| 10864 if (number.IsJust()) { | |
| 10865 *expected = Type::Number(zone()); | |
| 10866 return AddInstruction(number.FromJust()); | |
| 10867 } | |
| 10868 } | |
| 10869 | |
| 10870 // We put temporary values on the stack, which don't correspond to anything | |
| 10871 // in baseline code. Since nothing is observable we avoid recording those | |
| 10872 // pushes with a NoObservableSideEffectsScope. | |
| 10873 NoObservableSideEffectsScope no_effects(this); | |
| 10874 | |
| 10875 Type* expected_type = *expected; | |
| 10876 | |
| 10877 // Separate the number type from the rest. | |
| 10878 Type* expected_obj = | |
| 10879 Type::Intersect(expected_type, Type::NonNumber(zone()), zone()); | |
| 10880 Type* expected_number = | |
| 10881 Type::Intersect(expected_type, Type::Number(zone()), zone()); | |
| 10882 | |
| 10883 // We expect to get a number. | |
| 10884 // (We need to check first, since Type::None->Is(Type::Any()) == true. | |
| 10885 if (expected_obj->Is(Type::None())) { | |
| 10886 DCHECK(!expected_number->Is(Type::None(zone()))); | |
| 10887 return value; | |
| 10888 } | |
| 10889 | |
| 10890 if (expected_obj->Is(Type::Undefined(zone()))) { | |
| 10891 // This is already done by HChange. | |
| 10892 *expected = Type::Union(expected_number, Type::Number(zone()), zone()); | |
| 10893 return value; | |
| 10894 } | |
| 10895 | |
| 10896 return value; | |
| 10897 } | |
| 10898 | |
| 10899 | |
| 10900 HValue* HOptimizedGraphBuilder::BuildBinaryOperation( | |
| 10901 BinaryOperation* expr, | |
| 10902 HValue* left, | |
| 10903 HValue* right, | |
| 10904 PushBeforeSimulateBehavior push_sim_result) { | |
| 10905 Type* left_type = expr->left()->bounds().lower; | |
| 10906 Type* right_type = expr->right()->bounds().lower; | |
| 10907 Type* result_type = expr->bounds().lower; | |
| 10908 Maybe<int> fixed_right_arg = expr->fixed_right_arg(); | |
| 10909 Handle<AllocationSite> allocation_site = expr->allocation_site(); | |
| 10910 | |
| 10911 HAllocationMode allocation_mode; | |
| 10912 if (FLAG_allocation_site_pretenuring && !allocation_site.is_null()) { | |
| 10913 allocation_mode = HAllocationMode(allocation_site); | |
| 10914 } | |
| 10915 HValue* result = HGraphBuilder::BuildBinaryOperation( | |
| 10916 expr->op(), left, right, left_type, right_type, result_type, | |
| 10917 fixed_right_arg, allocation_mode, strength(function_language_mode()), | |
| 10918 expr->id()); | |
| 10919 // Add a simulate after instructions with observable side effects, and | |
| 10920 // after phis, which are the result of BuildBinaryOperation when we | |
| 10921 // inlined some complex subgraph. | |
| 10922 if (result->HasObservableSideEffects() || result->IsPhi()) { | |
| 10923 if (push_sim_result == PUSH_BEFORE_SIMULATE) { | |
| 10924 Push(result); | |
| 10925 Add<HSimulate>(expr->id(), REMOVABLE_SIMULATE); | |
| 10926 Drop(1); | |
| 10927 } else { | |
| 10928 Add<HSimulate>(expr->id(), REMOVABLE_SIMULATE); | |
| 10929 } | |
| 10930 } | |
| 10931 return result; | |
| 10932 } | |
| 10933 | |
| 10934 | |
| 10935 HValue* HGraphBuilder::BuildBinaryOperation( | |
| 10936 Token::Value op, HValue* left, HValue* right, Type* left_type, | |
| 10937 Type* right_type, Type* result_type, Maybe<int> fixed_right_arg, | |
| 10938 HAllocationMode allocation_mode, Strength strength, BailoutId opt_id) { | |
| 10939 bool maybe_string_add = false; | |
| 10940 if (op == Token::ADD) { | |
| 10941 // If we are adding constant string with something for which we don't have | |
| 10942 // a feedback yet, assume that it's also going to be a string and don't | |
| 10943 // generate deopt instructions. | |
| 10944 if (!left_type->IsInhabited() && right->IsConstant() && | |
| 10945 HConstant::cast(right)->HasStringValue()) { | |
| 10946 left_type = Type::String(); | |
| 10947 } | |
| 10948 | |
| 10949 if (!right_type->IsInhabited() && left->IsConstant() && | |
| 10950 HConstant::cast(left)->HasStringValue()) { | |
| 10951 right_type = Type::String(); | |
| 10952 } | |
| 10953 | |
| 10954 maybe_string_add = (left_type->Maybe(Type::String()) || | |
| 10955 left_type->Maybe(Type::Receiver()) || | |
| 10956 right_type->Maybe(Type::String()) || | |
| 10957 right_type->Maybe(Type::Receiver())); | |
| 10958 } | |
| 10959 | |
| 10960 Representation left_rep = RepresentationFor(left_type); | |
| 10961 Representation right_rep = RepresentationFor(right_type); | |
| 10962 | |
| 10963 if (!left_type->IsInhabited()) { | |
| 10964 Add<HDeoptimize>( | |
| 10965 Deoptimizer::kInsufficientTypeFeedbackForLHSOfBinaryOperation, | |
| 10966 Deoptimizer::SOFT); | |
| 10967 left_type = Type::Any(zone()); | |
| 10968 left_rep = RepresentationFor(left_type); | |
| 10969 maybe_string_add = op == Token::ADD; | |
| 10970 } | |
| 10971 | |
| 10972 if (!right_type->IsInhabited()) { | |
| 10973 Add<HDeoptimize>( | |
| 10974 Deoptimizer::kInsufficientTypeFeedbackForRHSOfBinaryOperation, | |
| 10975 Deoptimizer::SOFT); | |
| 10976 right_type = Type::Any(zone()); | |
| 10977 right_rep = RepresentationFor(right_type); | |
| 10978 maybe_string_add = op == Token::ADD; | |
| 10979 } | |
| 10980 | |
| 10981 if (!maybe_string_add && !is_strong(strength)) { | |
| 10982 left = TruncateToNumber(left, &left_type); | |
| 10983 right = TruncateToNumber(right, &right_type); | |
| 10984 } | |
| 10985 | |
| 10986 // Special case for string addition here. | |
| 10987 if (op == Token::ADD && | |
| 10988 (left_type->Is(Type::String()) || right_type->Is(Type::String()))) { | |
| 10989 if (is_strong(strength)) { | |
| 10990 // In strong mode, if the one side of an addition is a string, | |
| 10991 // the other side must be a string too. | |
| 10992 left = BuildCheckString(left); | |
| 10993 right = BuildCheckString(right); | |
| 10994 } else { | |
| 10995 // Validate type feedback for left argument. | |
| 10996 if (left_type->Is(Type::String())) { | |
| 10997 left = BuildCheckString(left); | |
| 10998 } | |
| 10999 | |
| 11000 // Validate type feedback for right argument. | |
| 11001 if (right_type->Is(Type::String())) { | |
| 11002 right = BuildCheckString(right); | |
| 11003 } | |
| 11004 | |
| 11005 // Convert left argument as necessary. | |
| 11006 if (left_type->Is(Type::Number())) { | |
| 11007 DCHECK(right_type->Is(Type::String())); | |
| 11008 left = BuildNumberToString(left, left_type); | |
| 11009 } else if (!left_type->Is(Type::String())) { | |
| 11010 DCHECK(right_type->Is(Type::String())); | |
| 11011 return AddUncasted<HStringAdd>( | |
| 11012 left, right, allocation_mode.GetPretenureMode(), | |
| 11013 STRING_ADD_CONVERT_LEFT, allocation_mode.feedback_site()); | |
| 11014 } | |
| 11015 | |
| 11016 // Convert right argument as necessary. | |
| 11017 if (right_type->Is(Type::Number())) { | |
| 11018 DCHECK(left_type->Is(Type::String())); | |
| 11019 right = BuildNumberToString(right, right_type); | |
| 11020 } else if (!right_type->Is(Type::String())) { | |
| 11021 DCHECK(left_type->Is(Type::String())); | |
| 11022 return AddUncasted<HStringAdd>( | |
| 11023 left, right, allocation_mode.GetPretenureMode(), | |
| 11024 STRING_ADD_CONVERT_RIGHT, allocation_mode.feedback_site()); | |
| 11025 } | |
| 11026 } | |
| 11027 | |
| 11028 // Fast paths for empty constant strings. | |
| 11029 Handle<String> left_string = | |
| 11030 left->IsConstant() && HConstant::cast(left)->HasStringValue() | |
| 11031 ? HConstant::cast(left)->StringValue() | |
| 11032 : Handle<String>(); | |
| 11033 Handle<String> right_string = | |
| 11034 right->IsConstant() && HConstant::cast(right)->HasStringValue() | |
| 11035 ? HConstant::cast(right)->StringValue() | |
| 11036 : Handle<String>(); | |
| 11037 if (!left_string.is_null() && left_string->length() == 0) return right; | |
| 11038 if (!right_string.is_null() && right_string->length() == 0) return left; | |
| 11039 if (!left_string.is_null() && !right_string.is_null()) { | |
| 11040 return AddUncasted<HStringAdd>( | |
| 11041 left, right, allocation_mode.GetPretenureMode(), | |
| 11042 STRING_ADD_CHECK_NONE, allocation_mode.feedback_site()); | |
| 11043 } | |
| 11044 | |
| 11045 // Register the dependent code with the allocation site. | |
| 11046 if (!allocation_mode.feedback_site().is_null()) { | |
| 11047 DCHECK(!graph()->info()->IsStub()); | |
| 11048 Handle<AllocationSite> site(allocation_mode.feedback_site()); | |
| 11049 top_info()->dependencies()->AssumeTenuringDecision(site); | |
| 11050 } | |
| 11051 | |
| 11052 // Inline the string addition into the stub when creating allocation | |
| 11053 // mementos to gather allocation site feedback, or if we can statically | |
| 11054 // infer that we're going to create a cons string. | |
| 11055 if ((graph()->info()->IsStub() && | |
| 11056 allocation_mode.CreateAllocationMementos()) || | |
| 11057 (left->IsConstant() && | |
| 11058 HConstant::cast(left)->HasStringValue() && | |
| 11059 HConstant::cast(left)->StringValue()->length() + 1 >= | |
| 11060 ConsString::kMinLength) || | |
| 11061 (right->IsConstant() && | |
| 11062 HConstant::cast(right)->HasStringValue() && | |
| 11063 HConstant::cast(right)->StringValue()->length() + 1 >= | |
| 11064 ConsString::kMinLength)) { | |
| 11065 return BuildStringAdd(left, right, allocation_mode); | |
| 11066 } | |
| 11067 | |
| 11068 // Fallback to using the string add stub. | |
| 11069 return AddUncasted<HStringAdd>( | |
| 11070 left, right, allocation_mode.GetPretenureMode(), STRING_ADD_CHECK_NONE, | |
| 11071 allocation_mode.feedback_site()); | |
| 11072 } | |
| 11073 | |
| 11074 if (graph()->info()->IsStub()) { | |
| 11075 left = EnforceNumberType(left, left_type); | |
| 11076 right = EnforceNumberType(right, right_type); | |
| 11077 } | |
| 11078 | |
| 11079 Representation result_rep = RepresentationFor(result_type); | |
| 11080 | |
| 11081 bool is_non_primitive = (left_rep.IsTagged() && !left_rep.IsSmi()) || | |
| 11082 (right_rep.IsTagged() && !right_rep.IsSmi()); | |
| 11083 | |
| 11084 HInstruction* instr = NULL; | |
| 11085 // Only the stub is allowed to call into the runtime, since otherwise we would | |
| 11086 // inline several instructions (including the two pushes) for every tagged | |
| 11087 // operation in optimized code, which is more expensive, than a stub call. | |
| 11088 if (graph()->info()->IsStub() && is_non_primitive) { | |
| 11089 Runtime::FunctionId function_id; | |
| 11090 switch (op) { | |
| 11091 default: | |
| 11092 UNREACHABLE(); | |
| 11093 case Token::ADD: | |
| 11094 function_id = | |
| 11095 is_strong(strength) ? Runtime::kAdd_Strong : Runtime::kAdd; | |
| 11096 break; | |
| 11097 case Token::SUB: | |
| 11098 function_id = is_strong(strength) ? Runtime::kSubtract_Strong | |
| 11099 : Runtime::kSubtract; | |
| 11100 break; | |
| 11101 case Token::MUL: | |
| 11102 function_id = is_strong(strength) ? Runtime::kMultiply_Strong | |
| 11103 : Runtime::kMultiply; | |
| 11104 break; | |
| 11105 case Token::DIV: | |
| 11106 function_id = | |
| 11107 is_strong(strength) ? Runtime::kDivide_Strong : Runtime::kDivide; | |
| 11108 break; | |
| 11109 case Token::MOD: | |
| 11110 function_id = | |
| 11111 is_strong(strength) ? Runtime::kModulus_Strong : Runtime::kModulus; | |
| 11112 break; | |
| 11113 case Token::BIT_OR: | |
| 11114 function_id = is_strong(strength) ? Runtime::kBitwiseOr_Strong | |
| 11115 : Runtime::kBitwiseOr; | |
| 11116 break; | |
| 11117 case Token::BIT_AND: | |
| 11118 function_id = is_strong(strength) ? Runtime::kBitwiseAnd_Strong | |
| 11119 : Runtime::kBitwiseAnd; | |
| 11120 break; | |
| 11121 case Token::BIT_XOR: | |
| 11122 function_id = is_strong(strength) ? Runtime::kBitwiseXor_Strong | |
| 11123 : Runtime::kBitwiseXor; | |
| 11124 break; | |
| 11125 case Token::SAR: | |
| 11126 function_id = is_strong(strength) ? Runtime::kShiftRight_Strong | |
| 11127 : Runtime::kShiftRight; | |
| 11128 break; | |
| 11129 case Token::SHR: | |
| 11130 function_id = is_strong(strength) ? Runtime::kShiftRightLogical_Strong | |
| 11131 : Runtime::kShiftRightLogical; | |
| 11132 break; | |
| 11133 case Token::SHL: | |
| 11134 function_id = is_strong(strength) ? Runtime::kShiftLeft_Strong | |
| 11135 : Runtime::kShiftLeft; | |
| 11136 break; | |
| 11137 } | |
| 11138 Add<HPushArguments>(left, right); | |
| 11139 instr = AddUncasted<HCallRuntime>(Runtime::FunctionForId(function_id), 2); | |
| 11140 } else { | |
| 11141 if (is_strong(strength) && Token::IsBitOp(op)) { | |
| 11142 // TODO(conradw): This is not efficient, but is necessary to prevent | |
| 11143 // conversion of oddball values to numbers in strong mode. It would be | |
| 11144 // better to prevent the conversion rather than adding a runtime check. | |
| 11145 IfBuilder if_builder(this); | |
| 11146 if_builder.If<HHasInstanceTypeAndBranch>(left, ODDBALL_TYPE); | |
| 11147 if_builder.OrIf<HHasInstanceTypeAndBranch>(right, ODDBALL_TYPE); | |
| 11148 if_builder.Then(); | |
| 11149 Add<HCallRuntime>( | |
| 11150 Runtime::FunctionForId(Runtime::kThrowStrongModeImplicitConversion), | |
| 11151 0); | |
| 11152 if (!graph()->info()->IsStub()) { | |
| 11153 Add<HSimulate>(opt_id, REMOVABLE_SIMULATE); | |
| 11154 } | |
| 11155 if_builder.End(); | |
| 11156 } | |
| 11157 switch (op) { | |
| 11158 case Token::ADD: | |
| 11159 instr = AddUncasted<HAdd>(left, right, strength); | |
| 11160 break; | |
| 11161 case Token::SUB: | |
| 11162 instr = AddUncasted<HSub>(left, right, strength); | |
| 11163 break; | |
| 11164 case Token::MUL: | |
| 11165 instr = AddUncasted<HMul>(left, right, strength); | |
| 11166 break; | |
| 11167 case Token::MOD: { | |
| 11168 if (fixed_right_arg.IsJust() && | |
| 11169 !right->EqualsInteger32Constant(fixed_right_arg.FromJust())) { | |
| 11170 HConstant* fixed_right = | |
| 11171 Add<HConstant>(static_cast<int>(fixed_right_arg.FromJust())); | |
| 11172 IfBuilder if_same(this); | |
| 11173 if_same.If<HCompareNumericAndBranch>(right, fixed_right, Token::EQ); | |
| 11174 if_same.Then(); | |
| 11175 if_same.ElseDeopt(Deoptimizer::kUnexpectedRHSOfBinaryOperation); | |
| 11176 right = fixed_right; | |
| 11177 } | |
| 11178 instr = AddUncasted<HMod>(left, right, strength); | |
| 11179 break; | |
| 11180 } | |
| 11181 case Token::DIV: | |
| 11182 instr = AddUncasted<HDiv>(left, right, strength); | |
| 11183 break; | |
| 11184 case Token::BIT_XOR: | |
| 11185 case Token::BIT_AND: | |
| 11186 instr = AddUncasted<HBitwise>(op, left, right, strength); | |
| 11187 break; | |
| 11188 case Token::BIT_OR: { | |
| 11189 HValue *operand, *shift_amount; | |
| 11190 if (left_type->Is(Type::Signed32()) && | |
| 11191 right_type->Is(Type::Signed32()) && | |
| 11192 MatchRotateRight(left, right, &operand, &shift_amount)) { | |
| 11193 instr = AddUncasted<HRor>(operand, shift_amount, strength); | |
| 11194 } else { | |
| 11195 instr = AddUncasted<HBitwise>(op, left, right, strength); | |
| 11196 } | |
| 11197 break; | |
| 11198 } | |
| 11199 case Token::SAR: | |
| 11200 instr = AddUncasted<HSar>(left, right, strength); | |
| 11201 break; | |
| 11202 case Token::SHR: | |
| 11203 instr = AddUncasted<HShr>(left, right, strength); | |
| 11204 if (instr->IsShr() && CanBeZero(right)) { | |
| 11205 graph()->RecordUint32Instruction(instr); | |
| 11206 } | |
| 11207 break; | |
| 11208 case Token::SHL: | |
| 11209 instr = AddUncasted<HShl>(left, right, strength); | |
| 11210 break; | |
| 11211 default: | |
| 11212 UNREACHABLE(); | |
| 11213 } | |
| 11214 } | |
| 11215 | |
| 11216 if (instr->IsBinaryOperation()) { | |
| 11217 HBinaryOperation* binop = HBinaryOperation::cast(instr); | |
| 11218 binop->set_observed_input_representation(1, left_rep); | |
| 11219 binop->set_observed_input_representation(2, right_rep); | |
| 11220 binop->initialize_output_representation(result_rep); | |
| 11221 if (graph()->info()->IsStub()) { | |
| 11222 // Stub should not call into stub. | |
| 11223 instr->SetFlag(HValue::kCannotBeTagged); | |
| 11224 // And should truncate on HForceRepresentation already. | |
| 11225 if (left->IsForceRepresentation()) { | |
| 11226 left->CopyFlag(HValue::kTruncatingToSmi, instr); | |
| 11227 left->CopyFlag(HValue::kTruncatingToInt32, instr); | |
| 11228 } | |
| 11229 if (right->IsForceRepresentation()) { | |
| 11230 right->CopyFlag(HValue::kTruncatingToSmi, instr); | |
| 11231 right->CopyFlag(HValue::kTruncatingToInt32, instr); | |
| 11232 } | |
| 11233 } | |
| 11234 } | |
| 11235 return instr; | |
| 11236 } | |
| 11237 | |
| 11238 | |
| 11239 // Check for the form (%_ClassOf(foo) === 'BarClass'). | |
| 11240 static bool IsClassOfTest(CompareOperation* expr) { | |
| 11241 if (expr->op() != Token::EQ_STRICT) return false; | |
| 11242 CallRuntime* call = expr->left()->AsCallRuntime(); | |
| 11243 if (call == NULL) return false; | |
| 11244 Literal* literal = expr->right()->AsLiteral(); | |
| 11245 if (literal == NULL) return false; | |
| 11246 if (!literal->value()->IsString()) return false; | |
| 11247 if (!call->is_jsruntime() && | |
| 11248 call->function()->function_id != Runtime::kInlineClassOf) { | |
| 11249 return false; | |
| 11250 } | |
| 11251 DCHECK(call->arguments()->length() == 1); | |
| 11252 return true; | |
| 11253 } | |
| 11254 | |
| 11255 | |
| 11256 void HOptimizedGraphBuilder::VisitBinaryOperation(BinaryOperation* expr) { | |
| 11257 DCHECK(!HasStackOverflow()); | |
| 11258 DCHECK(current_block() != NULL); | |
| 11259 DCHECK(current_block()->HasPredecessor()); | |
| 11260 switch (expr->op()) { | |
| 11261 case Token::COMMA: | |
| 11262 return VisitComma(expr); | |
| 11263 case Token::OR: | |
| 11264 case Token::AND: | |
| 11265 return VisitLogicalExpression(expr); | |
| 11266 default: | |
| 11267 return VisitArithmeticExpression(expr); | |
| 11268 } | |
| 11269 } | |
| 11270 | |
| 11271 | |
| 11272 void HOptimizedGraphBuilder::VisitComma(BinaryOperation* expr) { | |
| 11273 CHECK_ALIVE(VisitForEffect(expr->left())); | |
| 11274 // Visit the right subexpression in the same AST context as the entire | |
| 11275 // expression. | |
| 11276 Visit(expr->right()); | |
| 11277 } | |
| 11278 | |
| 11279 | |
| 11280 void HOptimizedGraphBuilder::VisitLogicalExpression(BinaryOperation* expr) { | |
| 11281 bool is_logical_and = expr->op() == Token::AND; | |
| 11282 if (ast_context()->IsTest()) { | |
| 11283 TestContext* context = TestContext::cast(ast_context()); | |
| 11284 // Translate left subexpression. | |
| 11285 HBasicBlock* eval_right = graph()->CreateBasicBlock(); | |
| 11286 if (is_logical_and) { | |
| 11287 CHECK_BAILOUT(VisitForControl(expr->left(), | |
| 11288 eval_right, | |
| 11289 context->if_false())); | |
| 11290 } else { | |
| 11291 CHECK_BAILOUT(VisitForControl(expr->left(), | |
| 11292 context->if_true(), | |
| 11293 eval_right)); | |
| 11294 } | |
| 11295 | |
| 11296 // Translate right subexpression by visiting it in the same AST | |
| 11297 // context as the entire expression. | |
| 11298 if (eval_right->HasPredecessor()) { | |
| 11299 eval_right->SetJoinId(expr->RightId()); | |
| 11300 set_current_block(eval_right); | |
| 11301 Visit(expr->right()); | |
| 11302 } | |
| 11303 | |
| 11304 } else if (ast_context()->IsValue()) { | |
| 11305 CHECK_ALIVE(VisitForValue(expr->left())); | |
| 11306 DCHECK(current_block() != NULL); | |
| 11307 HValue* left_value = Top(); | |
| 11308 | |
| 11309 // Short-circuit left values that always evaluate to the same boolean value. | |
| 11310 if (expr->left()->ToBooleanIsTrue() || expr->left()->ToBooleanIsFalse()) { | |
| 11311 // l (evals true) && r -> r | |
| 11312 // l (evals true) || r -> l | |
| 11313 // l (evals false) && r -> l | |
| 11314 // l (evals false) || r -> r | |
| 11315 if (is_logical_and == expr->left()->ToBooleanIsTrue()) { | |
| 11316 Drop(1); | |
| 11317 CHECK_ALIVE(VisitForValue(expr->right())); | |
| 11318 } | |
| 11319 return ast_context()->ReturnValue(Pop()); | |
| 11320 } | |
| 11321 | |
| 11322 // We need an extra block to maintain edge-split form. | |
| 11323 HBasicBlock* empty_block = graph()->CreateBasicBlock(); | |
| 11324 HBasicBlock* eval_right = graph()->CreateBasicBlock(); | |
| 11325 ToBooleanStub::Types expected(expr->left()->to_boolean_types()); | |
| 11326 HBranch* test = is_logical_and | |
| 11327 ? New<HBranch>(left_value, expected, eval_right, empty_block) | |
| 11328 : New<HBranch>(left_value, expected, empty_block, eval_right); | |
| 11329 FinishCurrentBlock(test); | |
| 11330 | |
| 11331 set_current_block(eval_right); | |
| 11332 Drop(1); // Value of the left subexpression. | |
| 11333 CHECK_BAILOUT(VisitForValue(expr->right())); | |
| 11334 | |
| 11335 HBasicBlock* join_block = | |
| 11336 CreateJoin(empty_block, current_block(), expr->id()); | |
| 11337 set_current_block(join_block); | |
| 11338 return ast_context()->ReturnValue(Pop()); | |
| 11339 | |
| 11340 } else { | |
| 11341 DCHECK(ast_context()->IsEffect()); | |
| 11342 // In an effect context, we don't need the value of the left subexpression, | |
| 11343 // only its control flow and side effects. We need an extra block to | |
| 11344 // maintain edge-split form. | |
| 11345 HBasicBlock* empty_block = graph()->CreateBasicBlock(); | |
| 11346 HBasicBlock* right_block = graph()->CreateBasicBlock(); | |
| 11347 if (is_logical_and) { | |
| 11348 CHECK_BAILOUT(VisitForControl(expr->left(), right_block, empty_block)); | |
| 11349 } else { | |
| 11350 CHECK_BAILOUT(VisitForControl(expr->left(), empty_block, right_block)); | |
| 11351 } | |
| 11352 | |
| 11353 // TODO(kmillikin): Find a way to fix this. It's ugly that there are | |
| 11354 // actually two empty blocks (one here and one inserted by | |
| 11355 // TestContext::BuildBranch, and that they both have an HSimulate though the | |
| 11356 // second one is not a merge node, and that we really have no good AST ID to | |
| 11357 // put on that first HSimulate. | |
| 11358 | |
| 11359 if (empty_block->HasPredecessor()) { | |
| 11360 empty_block->SetJoinId(expr->id()); | |
| 11361 } else { | |
| 11362 empty_block = NULL; | |
| 11363 } | |
| 11364 | |
| 11365 if (right_block->HasPredecessor()) { | |
| 11366 right_block->SetJoinId(expr->RightId()); | |
| 11367 set_current_block(right_block); | |
| 11368 CHECK_BAILOUT(VisitForEffect(expr->right())); | |
| 11369 right_block = current_block(); | |
| 11370 } else { | |
| 11371 right_block = NULL; | |
| 11372 } | |
| 11373 | |
| 11374 HBasicBlock* join_block = | |
| 11375 CreateJoin(empty_block, right_block, expr->id()); | |
| 11376 set_current_block(join_block); | |
| 11377 // We did not materialize any value in the predecessor environments, | |
| 11378 // so there is no need to handle it here. | |
| 11379 } | |
| 11380 } | |
| 11381 | |
| 11382 | |
| 11383 void HOptimizedGraphBuilder::VisitArithmeticExpression(BinaryOperation* expr) { | |
| 11384 CHECK_ALIVE(VisitForValue(expr->left())); | |
| 11385 CHECK_ALIVE(VisitForValue(expr->right())); | |
| 11386 SetSourcePosition(expr->position()); | |
| 11387 HValue* right = Pop(); | |
| 11388 HValue* left = Pop(); | |
| 11389 HValue* result = | |
| 11390 BuildBinaryOperation(expr, left, right, | |
| 11391 ast_context()->IsEffect() ? NO_PUSH_BEFORE_SIMULATE | |
| 11392 : PUSH_BEFORE_SIMULATE); | |
| 11393 if (top_info()->is_tracking_positions() && result->IsBinaryOperation()) { | |
| 11394 HBinaryOperation::cast(result)->SetOperandPositions( | |
| 11395 zone(), | |
| 11396 ScriptPositionToSourcePosition(expr->left()->position()), | |
| 11397 ScriptPositionToSourcePosition(expr->right()->position())); | |
| 11398 } | |
| 11399 return ast_context()->ReturnValue(result); | |
| 11400 } | |
| 11401 | |
| 11402 | |
| 11403 void HOptimizedGraphBuilder::HandleLiteralCompareTypeof(CompareOperation* expr, | |
| 11404 Expression* sub_expr, | |
| 11405 Handle<String> check) { | |
| 11406 CHECK_ALIVE(VisitForTypeOf(sub_expr)); | |
| 11407 SetSourcePosition(expr->position()); | |
| 11408 HValue* value = Pop(); | |
| 11409 HTypeofIsAndBranch* instr = New<HTypeofIsAndBranch>(value, check); | |
| 11410 return ast_context()->ReturnControl(instr, expr->id()); | |
| 11411 } | |
| 11412 | |
| 11413 | |
| 11414 static bool IsLiteralCompareBool(Isolate* isolate, | |
| 11415 HValue* left, | |
| 11416 Token::Value op, | |
| 11417 HValue* right) { | |
| 11418 return op == Token::EQ_STRICT && | |
| 11419 ((left->IsConstant() && | |
| 11420 HConstant::cast(left)->handle(isolate)->IsBoolean()) || | |
| 11421 (right->IsConstant() && | |
| 11422 HConstant::cast(right)->handle(isolate)->IsBoolean())); | |
| 11423 } | |
| 11424 | |
| 11425 | |
| 11426 void HOptimizedGraphBuilder::VisitCompareOperation(CompareOperation* expr) { | |
| 11427 DCHECK(!HasStackOverflow()); | |
| 11428 DCHECK(current_block() != NULL); | |
| 11429 DCHECK(current_block()->HasPredecessor()); | |
| 11430 | |
| 11431 if (!top_info()->is_tracking_positions()) SetSourcePosition(expr->position()); | |
| 11432 | |
| 11433 // Check for a few fast cases. The AST visiting behavior must be in sync | |
| 11434 // with the full codegen: We don't push both left and right values onto | |
| 11435 // the expression stack when one side is a special-case literal. | |
| 11436 Expression* sub_expr = NULL; | |
| 11437 Handle<String> check; | |
| 11438 if (expr->IsLiteralCompareTypeof(&sub_expr, &check)) { | |
| 11439 return HandleLiteralCompareTypeof(expr, sub_expr, check); | |
| 11440 } | |
| 11441 if (expr->IsLiteralCompareUndefined(&sub_expr, isolate())) { | |
| 11442 return HandleLiteralCompareNil(expr, sub_expr, kUndefinedValue); | |
| 11443 } | |
| 11444 if (expr->IsLiteralCompareNull(&sub_expr)) { | |
| 11445 return HandleLiteralCompareNil(expr, sub_expr, kNullValue); | |
| 11446 } | |
| 11447 | |
| 11448 if (IsClassOfTest(expr)) { | |
| 11449 CallRuntime* call = expr->left()->AsCallRuntime(); | |
| 11450 DCHECK(call->arguments()->length() == 1); | |
| 11451 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 11452 HValue* value = Pop(); | |
| 11453 Literal* literal = expr->right()->AsLiteral(); | |
| 11454 Handle<String> rhs = Handle<String>::cast(literal->value()); | |
| 11455 HClassOfTestAndBranch* instr = New<HClassOfTestAndBranch>(value, rhs); | |
| 11456 return ast_context()->ReturnControl(instr, expr->id()); | |
| 11457 } | |
| 11458 | |
| 11459 Type* left_type = expr->left()->bounds().lower; | |
| 11460 Type* right_type = expr->right()->bounds().lower; | |
| 11461 Type* combined_type = expr->combined_type(); | |
| 11462 | |
| 11463 CHECK_ALIVE(VisitForValue(expr->left())); | |
| 11464 CHECK_ALIVE(VisitForValue(expr->right())); | |
| 11465 | |
| 11466 HValue* right = Pop(); | |
| 11467 HValue* left = Pop(); | |
| 11468 Token::Value op = expr->op(); | |
| 11469 | |
| 11470 if (IsLiteralCompareBool(isolate(), left, op, right)) { | |
| 11471 HCompareObjectEqAndBranch* result = | |
| 11472 New<HCompareObjectEqAndBranch>(left, right); | |
| 11473 return ast_context()->ReturnControl(result, expr->id()); | |
| 11474 } | |
| 11475 | |
| 11476 if (op == Token::INSTANCEOF) { | |
| 11477 // Check to see if the rhs of the instanceof is a known function. | |
| 11478 if (right->IsConstant() && | |
| 11479 HConstant::cast(right)->handle(isolate())->IsJSFunction()) { | |
| 11480 Handle<JSFunction> constructor = | |
| 11481 Handle<JSFunction>::cast(HConstant::cast(right)->handle(isolate())); | |
| 11482 if (!constructor->map()->has_non_instance_prototype()) { | |
| 11483 JSFunction::EnsureHasInitialMap(constructor); | |
| 11484 DCHECK(constructor->has_initial_map()); | |
| 11485 Handle<Map> initial_map(constructor->initial_map(), isolate()); | |
| 11486 top_info()->dependencies()->AssumeInitialMapCantChange(initial_map); | |
| 11487 HInstruction* prototype = | |
| 11488 Add<HConstant>(handle(initial_map->prototype(), isolate())); | |
| 11489 HHasInPrototypeChainAndBranch* result = | |
| 11490 New<HHasInPrototypeChainAndBranch>(left, prototype); | |
| 11491 return ast_context()->ReturnControl(result, expr->id()); | |
| 11492 } | |
| 11493 } | |
| 11494 | |
| 11495 HInstanceOf* result = New<HInstanceOf>(left, right); | |
| 11496 return ast_context()->ReturnInstruction(result, expr->id()); | |
| 11497 | |
| 11498 } else if (op == Token::IN) { | |
| 11499 Add<HPushArguments>(left, right); | |
| 11500 HInstruction* result = | |
| 11501 New<HCallRuntime>(Runtime::FunctionForId(Runtime::kHasProperty), 2); | |
| 11502 return ast_context()->ReturnInstruction(result, expr->id()); | |
| 11503 } | |
| 11504 | |
| 11505 PushBeforeSimulateBehavior push_behavior = | |
| 11506 ast_context()->IsEffect() ? NO_PUSH_BEFORE_SIMULATE | |
| 11507 : PUSH_BEFORE_SIMULATE; | |
| 11508 HControlInstruction* compare = BuildCompareInstruction( | |
| 11509 op, left, right, left_type, right_type, combined_type, | |
| 11510 ScriptPositionToSourcePosition(expr->left()->position()), | |
| 11511 ScriptPositionToSourcePosition(expr->right()->position()), | |
| 11512 push_behavior, expr->id()); | |
| 11513 if (compare == NULL) return; // Bailed out. | |
| 11514 return ast_context()->ReturnControl(compare, expr->id()); | |
| 11515 } | |
| 11516 | |
| 11517 | |
| 11518 HControlInstruction* HOptimizedGraphBuilder::BuildCompareInstruction( | |
| 11519 Token::Value op, HValue* left, HValue* right, Type* left_type, | |
| 11520 Type* right_type, Type* combined_type, SourcePosition left_position, | |
| 11521 SourcePosition right_position, PushBeforeSimulateBehavior push_sim_result, | |
| 11522 BailoutId bailout_id) { | |
| 11523 // Cases handled below depend on collected type feedback. They should | |
| 11524 // soft deoptimize when there is no type feedback. | |
| 11525 if (!combined_type->IsInhabited()) { | |
| 11526 Add<HDeoptimize>( | |
| 11527 Deoptimizer::kInsufficientTypeFeedbackForCombinedTypeOfBinaryOperation, | |
| 11528 Deoptimizer::SOFT); | |
| 11529 combined_type = left_type = right_type = Type::Any(zone()); | |
| 11530 } | |
| 11531 | |
| 11532 Representation left_rep = RepresentationFor(left_type); | |
| 11533 Representation right_rep = RepresentationFor(right_type); | |
| 11534 Representation combined_rep = RepresentationFor(combined_type); | |
| 11535 | |
| 11536 if (combined_type->Is(Type::Receiver())) { | |
| 11537 if (Token::IsEqualityOp(op)) { | |
| 11538 // HCompareObjectEqAndBranch can only deal with object, so | |
| 11539 // exclude numbers. | |
| 11540 if ((left->IsConstant() && | |
| 11541 HConstant::cast(left)->HasNumberValue()) || | |
| 11542 (right->IsConstant() && | |
| 11543 HConstant::cast(right)->HasNumberValue())) { | |
| 11544 Add<HDeoptimize>(Deoptimizer::kTypeMismatchBetweenFeedbackAndConstant, | |
| 11545 Deoptimizer::SOFT); | |
| 11546 // The caller expects a branch instruction, so make it happy. | |
| 11547 return New<HBranch>(graph()->GetConstantTrue()); | |
| 11548 } | |
| 11549 // Can we get away with map check and not instance type check? | |
| 11550 HValue* operand_to_check = | |
| 11551 left->block()->block_id() < right->block()->block_id() ? left : right; | |
| 11552 if (combined_type->IsClass()) { | |
| 11553 Handle<Map> map = combined_type->AsClass()->Map(); | |
| 11554 AddCheckMap(operand_to_check, map); | |
| 11555 HCompareObjectEqAndBranch* result = | |
| 11556 New<HCompareObjectEqAndBranch>(left, right); | |
| 11557 if (top_info()->is_tracking_positions()) { | |
| 11558 result->set_operand_position(zone(), 0, left_position); | |
| 11559 result->set_operand_position(zone(), 1, right_position); | |
| 11560 } | |
| 11561 return result; | |
| 11562 } else { | |
| 11563 BuildCheckHeapObject(operand_to_check); | |
| 11564 Add<HCheckInstanceType>(operand_to_check, | |
| 11565 HCheckInstanceType::IS_SPEC_OBJECT); | |
| 11566 HCompareObjectEqAndBranch* result = | |
| 11567 New<HCompareObjectEqAndBranch>(left, right); | |
| 11568 return result; | |
| 11569 } | |
| 11570 } else { | |
| 11571 if (combined_type->IsClass()) { | |
| 11572 // TODO(bmeurer): This is an optimized version of an x < y, x > y, | |
| 11573 // x <= y or x >= y, where both x and y are spec objects with the | |
| 11574 // same map. The CompareIC collects this map for us. So if we know | |
| 11575 // that there's no @@toPrimitive on the map (including the prototype | |
| 11576 // chain), and both valueOf and toString are the default initial | |
| 11577 // implementations (on the %ObjectPrototype%), then we can reduce | |
| 11578 // the comparison to map checks on x and y, because the comparison | |
| 11579 // will turn into a comparison of "[object CLASS]" to itself (the | |
| 11580 // default outcome of toString, since valueOf returns a spec object). | |
| 11581 // This is pretty much adhoc, so in TurboFan we could do a lot better | |
| 11582 // and inline the interesting parts of ToPrimitive (actually we could | |
| 11583 // even do that in Crankshaft but we don't want to waste too much | |
| 11584 // time on this now). | |
| 11585 DCHECK(Token::IsOrderedRelationalCompareOp(op)); | |
| 11586 Handle<Map> map = combined_type->AsClass()->Map(); | |
| 11587 PropertyAccessInfo value_of(this, LOAD, map, | |
| 11588 isolate()->factory()->valueOf_string()); | |
| 11589 PropertyAccessInfo to_primitive( | |
| 11590 this, LOAD, map, isolate()->factory()->to_primitive_symbol()); | |
| 11591 PropertyAccessInfo to_string(this, LOAD, map, | |
| 11592 isolate()->factory()->toString_string()); | |
| 11593 PropertyAccessInfo to_string_tag( | |
| 11594 this, LOAD, map, isolate()->factory()->to_string_tag_symbol()); | |
| 11595 if (to_primitive.CanAccessMonomorphic() && !to_primitive.IsFound() && | |
| 11596 to_string_tag.CanAccessMonomorphic() && | |
| 11597 (!to_string_tag.IsFound() || to_string_tag.IsData() || | |
| 11598 to_string_tag.IsDataConstant()) && | |
| 11599 value_of.CanAccessMonomorphic() && value_of.IsDataConstant() && | |
| 11600 value_of.constant().is_identical_to(isolate()->object_value_of()) && | |
| 11601 to_string.CanAccessMonomorphic() && to_string.IsDataConstant() && | |
| 11602 to_string.constant().is_identical_to( | |
| 11603 isolate()->object_to_string())) { | |
| 11604 // We depend on the prototype chain to stay the same, because we | |
| 11605 // also need to deoptimize when someone installs @@toPrimitive | |
| 11606 // or @@toStringTag somewhere in the prototype chain. | |
| 11607 BuildCheckPrototypeMaps(handle(JSObject::cast(map->prototype())), | |
| 11608 Handle<JSObject>::null()); | |
| 11609 AddCheckMap(left, map); | |
| 11610 AddCheckMap(right, map); | |
| 11611 // The caller expects a branch instruction, so make it happy. | |
| 11612 return New<HBranch>( | |
| 11613 graph()->GetConstantBool(op == Token::LTE || op == Token::GTE)); | |
| 11614 } | |
| 11615 } | |
| 11616 Bailout(kUnsupportedNonPrimitiveCompare); | |
| 11617 return NULL; | |
| 11618 } | |
| 11619 } else if (combined_type->Is(Type::InternalizedString()) && | |
| 11620 Token::IsEqualityOp(op)) { | |
| 11621 // If we have a constant argument, it should be consistent with the type | |
| 11622 // feedback (otherwise we fail assertions in HCompareObjectEqAndBranch). | |
| 11623 if ((left->IsConstant() && | |
| 11624 !HConstant::cast(left)->HasInternalizedStringValue()) || | |
| 11625 (right->IsConstant() && | |
| 11626 !HConstant::cast(right)->HasInternalizedStringValue())) { | |
| 11627 Add<HDeoptimize>(Deoptimizer::kTypeMismatchBetweenFeedbackAndConstant, | |
| 11628 Deoptimizer::SOFT); | |
| 11629 // The caller expects a branch instruction, so make it happy. | |
| 11630 return New<HBranch>(graph()->GetConstantTrue()); | |
| 11631 } | |
| 11632 BuildCheckHeapObject(left); | |
| 11633 Add<HCheckInstanceType>(left, HCheckInstanceType::IS_INTERNALIZED_STRING); | |
| 11634 BuildCheckHeapObject(right); | |
| 11635 Add<HCheckInstanceType>(right, HCheckInstanceType::IS_INTERNALIZED_STRING); | |
| 11636 HCompareObjectEqAndBranch* result = | |
| 11637 New<HCompareObjectEqAndBranch>(left, right); | |
| 11638 return result; | |
| 11639 } else if (combined_type->Is(Type::String())) { | |
| 11640 BuildCheckHeapObject(left); | |
| 11641 Add<HCheckInstanceType>(left, HCheckInstanceType::IS_STRING); | |
| 11642 BuildCheckHeapObject(right); | |
| 11643 Add<HCheckInstanceType>(right, HCheckInstanceType::IS_STRING); | |
| 11644 HStringCompareAndBranch* result = | |
| 11645 New<HStringCompareAndBranch>(left, right, op); | |
| 11646 return result; | |
| 11647 } else if (combined_type->Is(Type::Boolean())) { | |
| 11648 AddCheckMap(left, isolate()->factory()->boolean_map()); | |
| 11649 AddCheckMap(right, isolate()->factory()->boolean_map()); | |
| 11650 if (Token::IsEqualityOp(op)) { | |
| 11651 HCompareObjectEqAndBranch* result = | |
| 11652 New<HCompareObjectEqAndBranch>(left, right); | |
| 11653 return result; | |
| 11654 } | |
| 11655 left = Add<HLoadNamedField>( | |
| 11656 left, nullptr, | |
| 11657 HObjectAccess::ForOddballToNumber(Representation::Smi())); | |
| 11658 right = Add<HLoadNamedField>( | |
| 11659 right, nullptr, | |
| 11660 HObjectAccess::ForOddballToNumber(Representation::Smi())); | |
| 11661 HCompareNumericAndBranch* result = | |
| 11662 New<HCompareNumericAndBranch>(left, right, op); | |
| 11663 return result; | |
| 11664 } else { | |
| 11665 if (combined_rep.IsTagged() || combined_rep.IsNone()) { | |
| 11666 HCompareGeneric* result = Add<HCompareGeneric>( | |
| 11667 left, right, op, strength(function_language_mode())); | |
| 11668 result->set_observed_input_representation(1, left_rep); | |
| 11669 result->set_observed_input_representation(2, right_rep); | |
| 11670 if (result->HasObservableSideEffects()) { | |
| 11671 if (push_sim_result == PUSH_BEFORE_SIMULATE) { | |
| 11672 Push(result); | |
| 11673 AddSimulate(bailout_id, REMOVABLE_SIMULATE); | |
| 11674 Drop(1); | |
| 11675 } else { | |
| 11676 AddSimulate(bailout_id, REMOVABLE_SIMULATE); | |
| 11677 } | |
| 11678 } | |
| 11679 // TODO(jkummerow): Can we make this more efficient? | |
| 11680 HBranch* branch = New<HBranch>(result); | |
| 11681 return branch; | |
| 11682 } else { | |
| 11683 HCompareNumericAndBranch* result = New<HCompareNumericAndBranch>( | |
| 11684 left, right, op, strength(function_language_mode())); | |
| 11685 result->set_observed_input_representation(left_rep, right_rep); | |
| 11686 if (top_info()->is_tracking_positions()) { | |
| 11687 result->SetOperandPositions(zone(), left_position, right_position); | |
| 11688 } | |
| 11689 return result; | |
| 11690 } | |
| 11691 } | |
| 11692 } | |
| 11693 | |
| 11694 | |
| 11695 void HOptimizedGraphBuilder::HandleLiteralCompareNil(CompareOperation* expr, | |
| 11696 Expression* sub_expr, | |
| 11697 NilValue nil) { | |
| 11698 DCHECK(!HasStackOverflow()); | |
| 11699 DCHECK(current_block() != NULL); | |
| 11700 DCHECK(current_block()->HasPredecessor()); | |
| 11701 DCHECK(expr->op() == Token::EQ || expr->op() == Token::EQ_STRICT); | |
| 11702 if (!top_info()->is_tracking_positions()) SetSourcePosition(expr->position()); | |
| 11703 CHECK_ALIVE(VisitForValue(sub_expr)); | |
| 11704 HValue* value = Pop(); | |
| 11705 if (expr->op() == Token::EQ_STRICT) { | |
| 11706 HConstant* nil_constant = nil == kNullValue | |
| 11707 ? graph()->GetConstantNull() | |
| 11708 : graph()->GetConstantUndefined(); | |
| 11709 HCompareObjectEqAndBranch* instr = | |
| 11710 New<HCompareObjectEqAndBranch>(value, nil_constant); | |
| 11711 return ast_context()->ReturnControl(instr, expr->id()); | |
| 11712 } else { | |
| 11713 DCHECK_EQ(Token::EQ, expr->op()); | |
| 11714 Type* type = expr->combined_type()->Is(Type::None()) | |
| 11715 ? Type::Any(zone()) : expr->combined_type(); | |
| 11716 HIfContinuation continuation; | |
| 11717 BuildCompareNil(value, type, &continuation); | |
| 11718 return ast_context()->ReturnContinuation(&continuation, expr->id()); | |
| 11719 } | |
| 11720 } | |
| 11721 | |
| 11722 | |
| 11723 void HOptimizedGraphBuilder::VisitSpread(Spread* expr) { UNREACHABLE(); } | |
| 11724 | |
| 11725 | |
| 11726 void HOptimizedGraphBuilder::VisitEmptyParentheses(EmptyParentheses* expr) { | |
| 11727 UNREACHABLE(); | |
| 11728 } | |
| 11729 | |
| 11730 | |
| 11731 HInstruction* HOptimizedGraphBuilder::BuildThisFunction() { | |
| 11732 // If we share optimized code between different closures, the | |
| 11733 // this-function is not a constant, except inside an inlined body. | |
| 11734 if (function_state()->outer() != NULL) { | |
| 11735 return New<HConstant>( | |
| 11736 function_state()->compilation_info()->closure()); | |
| 11737 } else { | |
| 11738 return New<HThisFunction>(); | |
| 11739 } | |
| 11740 } | |
| 11741 | |
| 11742 | |
| 11743 HInstruction* HOptimizedGraphBuilder::BuildFastLiteral( | |
| 11744 Handle<JSObject> boilerplate_object, | |
| 11745 AllocationSiteUsageContext* site_context) { | |
| 11746 NoObservableSideEffectsScope no_effects(this); | |
| 11747 Handle<Map> initial_map(boilerplate_object->map()); | |
| 11748 InstanceType instance_type = initial_map->instance_type(); | |
| 11749 DCHECK(instance_type == JS_ARRAY_TYPE || instance_type == JS_OBJECT_TYPE); | |
| 11750 | |
| 11751 HType type = instance_type == JS_ARRAY_TYPE | |
| 11752 ? HType::JSArray() : HType::JSObject(); | |
| 11753 HValue* object_size_constant = Add<HConstant>(initial_map->instance_size()); | |
| 11754 | |
| 11755 PretenureFlag pretenure_flag = NOT_TENURED; | |
| 11756 Handle<AllocationSite> top_site(*site_context->top(), isolate()); | |
| 11757 if (FLAG_allocation_site_pretenuring) { | |
| 11758 pretenure_flag = top_site->GetPretenureMode(); | |
| 11759 } | |
| 11760 | |
| 11761 Handle<AllocationSite> current_site(*site_context->current(), isolate()); | |
| 11762 if (*top_site == *current_site) { | |
| 11763 // We install a dependency for pretenuring only on the outermost literal. | |
| 11764 top_info()->dependencies()->AssumeTenuringDecision(top_site); | |
| 11765 } | |
| 11766 top_info()->dependencies()->AssumeTransitionStable(current_site); | |
| 11767 | |
| 11768 HInstruction* object = Add<HAllocate>( | |
| 11769 object_size_constant, type, pretenure_flag, instance_type, top_site); | |
| 11770 | |
| 11771 // If allocation folding reaches Page::kMaxRegularHeapObjectSize the | |
| 11772 // elements array may not get folded into the object. Hence, we set the | |
| 11773 // elements pointer to empty fixed array and let store elimination remove | |
| 11774 // this store in the folding case. | |
| 11775 HConstant* empty_fixed_array = Add<HConstant>( | |
| 11776 isolate()->factory()->empty_fixed_array()); | |
| 11777 Add<HStoreNamedField>(object, HObjectAccess::ForElementsPointer(), | |
| 11778 empty_fixed_array); | |
| 11779 | |
| 11780 BuildEmitObjectHeader(boilerplate_object, object); | |
| 11781 | |
| 11782 // Similarly to the elements pointer, there is no guarantee that all | |
| 11783 // property allocations can get folded, so pre-initialize all in-object | |
| 11784 // properties to a safe value. | |
| 11785 BuildInitializeInobjectProperties(object, initial_map); | |
| 11786 | |
| 11787 Handle<FixedArrayBase> elements(boilerplate_object->elements()); | |
| 11788 int elements_size = (elements->length() > 0 && | |
| 11789 elements->map() != isolate()->heap()->fixed_cow_array_map()) ? | |
| 11790 elements->Size() : 0; | |
| 11791 | |
| 11792 if (pretenure_flag == TENURED && | |
| 11793 elements->map() == isolate()->heap()->fixed_cow_array_map() && | |
| 11794 isolate()->heap()->InNewSpace(*elements)) { | |
| 11795 // If we would like to pretenure a fixed cow array, we must ensure that the | |
| 11796 // array is already in old space, otherwise we'll create too many old-to- | |
| 11797 // new-space pointers (overflowing the store buffer). | |
| 11798 elements = Handle<FixedArrayBase>( | |
| 11799 isolate()->factory()->CopyAndTenureFixedCOWArray( | |
| 11800 Handle<FixedArray>::cast(elements))); | |
| 11801 boilerplate_object->set_elements(*elements); | |
| 11802 } | |
| 11803 | |
| 11804 HInstruction* object_elements = NULL; | |
| 11805 if (elements_size > 0) { | |
| 11806 HValue* object_elements_size = Add<HConstant>(elements_size); | |
| 11807 InstanceType instance_type = boilerplate_object->HasFastDoubleElements() | |
| 11808 ? FIXED_DOUBLE_ARRAY_TYPE : FIXED_ARRAY_TYPE; | |
| 11809 object_elements = Add<HAllocate>(object_elements_size, HType::HeapObject(), | |
| 11810 pretenure_flag, instance_type, top_site); | |
| 11811 BuildEmitElements(boilerplate_object, elements, object_elements, | |
| 11812 site_context); | |
| 11813 Add<HStoreNamedField>(object, HObjectAccess::ForElementsPointer(), | |
| 11814 object_elements); | |
| 11815 } else { | |
| 11816 Handle<Object> elements_field = | |
| 11817 Handle<Object>(boilerplate_object->elements(), isolate()); | |
| 11818 HInstruction* object_elements_cow = Add<HConstant>(elements_field); | |
| 11819 Add<HStoreNamedField>(object, HObjectAccess::ForElementsPointer(), | |
| 11820 object_elements_cow); | |
| 11821 } | |
| 11822 | |
| 11823 // Copy in-object properties. | |
| 11824 if (initial_map->NumberOfFields() != 0 || | |
| 11825 initial_map->unused_property_fields() > 0) { | |
| 11826 BuildEmitInObjectProperties(boilerplate_object, object, site_context, | |
| 11827 pretenure_flag); | |
| 11828 } | |
| 11829 return object; | |
| 11830 } | |
| 11831 | |
| 11832 | |
| 11833 void HOptimizedGraphBuilder::BuildEmitObjectHeader( | |
| 11834 Handle<JSObject> boilerplate_object, | |
| 11835 HInstruction* object) { | |
| 11836 DCHECK(boilerplate_object->properties()->length() == 0); | |
| 11837 | |
| 11838 Handle<Map> boilerplate_object_map(boilerplate_object->map()); | |
| 11839 AddStoreMapConstant(object, boilerplate_object_map); | |
| 11840 | |
| 11841 Handle<Object> properties_field = | |
| 11842 Handle<Object>(boilerplate_object->properties(), isolate()); | |
| 11843 DCHECK(*properties_field == isolate()->heap()->empty_fixed_array()); | |
| 11844 HInstruction* properties = Add<HConstant>(properties_field); | |
| 11845 HObjectAccess access = HObjectAccess::ForPropertiesPointer(); | |
| 11846 Add<HStoreNamedField>(object, access, properties); | |
| 11847 | |
| 11848 if (boilerplate_object->IsJSArray()) { | |
| 11849 Handle<JSArray> boilerplate_array = | |
| 11850 Handle<JSArray>::cast(boilerplate_object); | |
| 11851 Handle<Object> length_field = | |
| 11852 Handle<Object>(boilerplate_array->length(), isolate()); | |
| 11853 HInstruction* length = Add<HConstant>(length_field); | |
| 11854 | |
| 11855 DCHECK(boilerplate_array->length()->IsSmi()); | |
| 11856 Add<HStoreNamedField>(object, HObjectAccess::ForArrayLength( | |
| 11857 boilerplate_array->GetElementsKind()), length); | |
| 11858 } | |
| 11859 } | |
| 11860 | |
| 11861 | |
| 11862 void HOptimizedGraphBuilder::BuildEmitInObjectProperties( | |
| 11863 Handle<JSObject> boilerplate_object, | |
| 11864 HInstruction* object, | |
| 11865 AllocationSiteUsageContext* site_context, | |
| 11866 PretenureFlag pretenure_flag) { | |
| 11867 Handle<Map> boilerplate_map(boilerplate_object->map()); | |
| 11868 Handle<DescriptorArray> descriptors(boilerplate_map->instance_descriptors()); | |
| 11869 int limit = boilerplate_map->NumberOfOwnDescriptors(); | |
| 11870 | |
| 11871 int copied_fields = 0; | |
| 11872 for (int i = 0; i < limit; i++) { | |
| 11873 PropertyDetails details = descriptors->GetDetails(i); | |
| 11874 if (details.type() != DATA) continue; | |
| 11875 copied_fields++; | |
| 11876 FieldIndex field_index = FieldIndex::ForDescriptor(*boilerplate_map, i); | |
| 11877 | |
| 11878 | |
| 11879 int property_offset = field_index.offset(); | |
| 11880 Handle<Name> name(descriptors->GetKey(i)); | |
| 11881 | |
| 11882 // The access for the store depends on the type of the boilerplate. | |
| 11883 HObjectAccess access = boilerplate_object->IsJSArray() ? | |
| 11884 HObjectAccess::ForJSArrayOffset(property_offset) : | |
| 11885 HObjectAccess::ForMapAndOffset(boilerplate_map, property_offset); | |
| 11886 | |
| 11887 if (boilerplate_object->IsUnboxedDoubleField(field_index)) { | |
| 11888 CHECK(!boilerplate_object->IsJSArray()); | |
| 11889 double value = boilerplate_object->RawFastDoublePropertyAt(field_index); | |
| 11890 access = access.WithRepresentation(Representation::Double()); | |
| 11891 Add<HStoreNamedField>(object, access, Add<HConstant>(value)); | |
| 11892 continue; | |
| 11893 } | |
| 11894 Handle<Object> value(boilerplate_object->RawFastPropertyAt(field_index), | |
| 11895 isolate()); | |
| 11896 | |
| 11897 if (value->IsJSObject()) { | |
| 11898 Handle<JSObject> value_object = Handle<JSObject>::cast(value); | |
| 11899 Handle<AllocationSite> current_site = site_context->EnterNewScope(); | |
| 11900 HInstruction* result = | |
| 11901 BuildFastLiteral(value_object, site_context); | |
| 11902 site_context->ExitScope(current_site, value_object); | |
| 11903 Add<HStoreNamedField>(object, access, result); | |
| 11904 } else { | |
| 11905 Representation representation = details.representation(); | |
| 11906 HInstruction* value_instruction; | |
| 11907 | |
| 11908 if (representation.IsDouble()) { | |
| 11909 // Allocate a HeapNumber box and store the value into it. | |
| 11910 HValue* heap_number_constant = Add<HConstant>(HeapNumber::kSize); | |
| 11911 HInstruction* double_box = | |
| 11912 Add<HAllocate>(heap_number_constant, HType::HeapObject(), | |
| 11913 pretenure_flag, MUTABLE_HEAP_NUMBER_TYPE); | |
| 11914 AddStoreMapConstant(double_box, | |
| 11915 isolate()->factory()->mutable_heap_number_map()); | |
| 11916 // Unwrap the mutable heap number from the boilerplate. | |
| 11917 HValue* double_value = | |
| 11918 Add<HConstant>(Handle<HeapNumber>::cast(value)->value()); | |
| 11919 Add<HStoreNamedField>( | |
| 11920 double_box, HObjectAccess::ForHeapNumberValue(), double_value); | |
| 11921 value_instruction = double_box; | |
| 11922 } else if (representation.IsSmi()) { | |
| 11923 value_instruction = value->IsUninitialized() | |
| 11924 ? graph()->GetConstant0() | |
| 11925 : Add<HConstant>(value); | |
| 11926 // Ensure that value is stored as smi. | |
| 11927 access = access.WithRepresentation(representation); | |
| 11928 } else { | |
| 11929 value_instruction = Add<HConstant>(value); | |
| 11930 } | |
| 11931 | |
| 11932 Add<HStoreNamedField>(object, access, value_instruction); | |
| 11933 } | |
| 11934 } | |
| 11935 | |
| 11936 int inobject_properties = boilerplate_object->map()->GetInObjectProperties(); | |
| 11937 HInstruction* value_instruction = | |
| 11938 Add<HConstant>(isolate()->factory()->one_pointer_filler_map()); | |
| 11939 for (int i = copied_fields; i < inobject_properties; i++) { | |
| 11940 DCHECK(boilerplate_object->IsJSObject()); | |
| 11941 int property_offset = boilerplate_object->GetInObjectPropertyOffset(i); | |
| 11942 HObjectAccess access = | |
| 11943 HObjectAccess::ForMapAndOffset(boilerplate_map, property_offset); | |
| 11944 Add<HStoreNamedField>(object, access, value_instruction); | |
| 11945 } | |
| 11946 } | |
| 11947 | |
| 11948 | |
| 11949 void HOptimizedGraphBuilder::BuildEmitElements( | |
| 11950 Handle<JSObject> boilerplate_object, | |
| 11951 Handle<FixedArrayBase> elements, | |
| 11952 HValue* object_elements, | |
| 11953 AllocationSiteUsageContext* site_context) { | |
| 11954 ElementsKind kind = boilerplate_object->map()->elements_kind(); | |
| 11955 int elements_length = elements->length(); | |
| 11956 HValue* object_elements_length = Add<HConstant>(elements_length); | |
| 11957 BuildInitializeElementsHeader(object_elements, kind, object_elements_length); | |
| 11958 | |
| 11959 // Copy elements backing store content. | |
| 11960 if (elements->IsFixedDoubleArray()) { | |
| 11961 BuildEmitFixedDoubleArray(elements, kind, object_elements); | |
| 11962 } else if (elements->IsFixedArray()) { | |
| 11963 BuildEmitFixedArray(elements, kind, object_elements, | |
| 11964 site_context); | |
| 11965 } else { | |
| 11966 UNREACHABLE(); | |
| 11967 } | |
| 11968 } | |
| 11969 | |
| 11970 | |
| 11971 void HOptimizedGraphBuilder::BuildEmitFixedDoubleArray( | |
| 11972 Handle<FixedArrayBase> elements, | |
| 11973 ElementsKind kind, | |
| 11974 HValue* object_elements) { | |
| 11975 HInstruction* boilerplate_elements = Add<HConstant>(elements); | |
| 11976 int elements_length = elements->length(); | |
| 11977 for (int i = 0; i < elements_length; i++) { | |
| 11978 HValue* key_constant = Add<HConstant>(i); | |
| 11979 HInstruction* value_instruction = Add<HLoadKeyed>( | |
| 11980 boilerplate_elements, key_constant, nullptr, kind, ALLOW_RETURN_HOLE); | |
| 11981 HInstruction* store = Add<HStoreKeyed>(object_elements, key_constant, | |
| 11982 value_instruction, kind); | |
| 11983 store->SetFlag(HValue::kAllowUndefinedAsNaN); | |
| 11984 } | |
| 11985 } | |
| 11986 | |
| 11987 | |
| 11988 void HOptimizedGraphBuilder::BuildEmitFixedArray( | |
| 11989 Handle<FixedArrayBase> elements, | |
| 11990 ElementsKind kind, | |
| 11991 HValue* object_elements, | |
| 11992 AllocationSiteUsageContext* site_context) { | |
| 11993 HInstruction* boilerplate_elements = Add<HConstant>(elements); | |
| 11994 int elements_length = elements->length(); | |
| 11995 Handle<FixedArray> fast_elements = Handle<FixedArray>::cast(elements); | |
| 11996 for (int i = 0; i < elements_length; i++) { | |
| 11997 Handle<Object> value(fast_elements->get(i), isolate()); | |
| 11998 HValue* key_constant = Add<HConstant>(i); | |
| 11999 if (value->IsJSObject()) { | |
| 12000 Handle<JSObject> value_object = Handle<JSObject>::cast(value); | |
| 12001 Handle<AllocationSite> current_site = site_context->EnterNewScope(); | |
| 12002 HInstruction* result = | |
| 12003 BuildFastLiteral(value_object, site_context); | |
| 12004 site_context->ExitScope(current_site, value_object); | |
| 12005 Add<HStoreKeyed>(object_elements, key_constant, result, kind); | |
| 12006 } else { | |
| 12007 ElementsKind copy_kind = | |
| 12008 kind == FAST_HOLEY_SMI_ELEMENTS ? FAST_HOLEY_ELEMENTS : kind; | |
| 12009 HInstruction* value_instruction = | |
| 12010 Add<HLoadKeyed>(boilerplate_elements, key_constant, nullptr, | |
| 12011 copy_kind, ALLOW_RETURN_HOLE); | |
| 12012 Add<HStoreKeyed>(object_elements, key_constant, value_instruction, | |
| 12013 copy_kind); | |
| 12014 } | |
| 12015 } | |
| 12016 } | |
| 12017 | |
| 12018 | |
| 12019 void HOptimizedGraphBuilder::VisitThisFunction(ThisFunction* expr) { | |
| 12020 DCHECK(!HasStackOverflow()); | |
| 12021 DCHECK(current_block() != NULL); | |
| 12022 DCHECK(current_block()->HasPredecessor()); | |
| 12023 HInstruction* instr = BuildThisFunction(); | |
| 12024 return ast_context()->ReturnInstruction(instr, expr->id()); | |
| 12025 } | |
| 12026 | |
| 12027 | |
| 12028 void HOptimizedGraphBuilder::VisitSuperPropertyReference( | |
| 12029 SuperPropertyReference* expr) { | |
| 12030 DCHECK(!HasStackOverflow()); | |
| 12031 DCHECK(current_block() != NULL); | |
| 12032 DCHECK(current_block()->HasPredecessor()); | |
| 12033 return Bailout(kSuperReference); | |
| 12034 } | |
| 12035 | |
| 12036 | |
| 12037 void HOptimizedGraphBuilder::VisitSuperCallReference(SuperCallReference* expr) { | |
| 12038 DCHECK(!HasStackOverflow()); | |
| 12039 DCHECK(current_block() != NULL); | |
| 12040 DCHECK(current_block()->HasPredecessor()); | |
| 12041 return Bailout(kSuperReference); | |
| 12042 } | |
| 12043 | |
| 12044 | |
| 12045 void HOptimizedGraphBuilder::VisitDeclarations( | |
| 12046 ZoneList<Declaration*>* declarations) { | |
| 12047 DCHECK(globals_.is_empty()); | |
| 12048 AstVisitor::VisitDeclarations(declarations); | |
| 12049 if (!globals_.is_empty()) { | |
| 12050 Handle<FixedArray> array = | |
| 12051 isolate()->factory()->NewFixedArray(globals_.length(), TENURED); | |
| 12052 for (int i = 0; i < globals_.length(); ++i) array->set(i, *globals_.at(i)); | |
| 12053 int flags = | |
| 12054 DeclareGlobalsEvalFlag::encode(current_info()->is_eval()) | | |
| 12055 DeclareGlobalsNativeFlag::encode(current_info()->is_native()) | | |
| 12056 DeclareGlobalsLanguageMode::encode(current_info()->language_mode()); | |
| 12057 Add<HDeclareGlobals>(array, flags); | |
| 12058 globals_.Rewind(0); | |
| 12059 } | |
| 12060 } | |
| 12061 | |
| 12062 | |
| 12063 void HOptimizedGraphBuilder::VisitVariableDeclaration( | |
| 12064 VariableDeclaration* declaration) { | |
| 12065 VariableProxy* proxy = declaration->proxy(); | |
| 12066 VariableMode mode = declaration->mode(); | |
| 12067 Variable* variable = proxy->var(); | |
| 12068 bool hole_init = mode == LET || mode == CONST || mode == CONST_LEGACY; | |
| 12069 switch (variable->location()) { | |
| 12070 case VariableLocation::GLOBAL: | |
| 12071 case VariableLocation::UNALLOCATED: | |
| 12072 globals_.Add(variable->name(), zone()); | |
| 12073 globals_.Add(variable->binding_needs_init() | |
| 12074 ? isolate()->factory()->the_hole_value() | |
| 12075 : isolate()->factory()->undefined_value(), zone()); | |
| 12076 return; | |
| 12077 case VariableLocation::PARAMETER: | |
| 12078 case VariableLocation::LOCAL: | |
| 12079 if (hole_init) { | |
| 12080 HValue* value = graph()->GetConstantHole(); | |
| 12081 environment()->Bind(variable, value); | |
| 12082 } | |
| 12083 break; | |
| 12084 case VariableLocation::CONTEXT: | |
| 12085 if (hole_init) { | |
| 12086 HValue* value = graph()->GetConstantHole(); | |
| 12087 HValue* context = environment()->context(); | |
| 12088 HStoreContextSlot* store = Add<HStoreContextSlot>( | |
| 12089 context, variable->index(), HStoreContextSlot::kNoCheck, value); | |
| 12090 if (store->HasObservableSideEffects()) { | |
| 12091 Add<HSimulate>(proxy->id(), REMOVABLE_SIMULATE); | |
| 12092 } | |
| 12093 } | |
| 12094 break; | |
| 12095 case VariableLocation::LOOKUP: | |
| 12096 return Bailout(kUnsupportedLookupSlotInDeclaration); | |
| 12097 } | |
| 12098 } | |
| 12099 | |
| 12100 | |
| 12101 void HOptimizedGraphBuilder::VisitFunctionDeclaration( | |
| 12102 FunctionDeclaration* declaration) { | |
| 12103 VariableProxy* proxy = declaration->proxy(); | |
| 12104 Variable* variable = proxy->var(); | |
| 12105 switch (variable->location()) { | |
| 12106 case VariableLocation::GLOBAL: | |
| 12107 case VariableLocation::UNALLOCATED: { | |
| 12108 globals_.Add(variable->name(), zone()); | |
| 12109 Handle<SharedFunctionInfo> function = Compiler::GetSharedFunctionInfo( | |
| 12110 declaration->fun(), current_info()->script(), top_info()); | |
| 12111 // Check for stack-overflow exception. | |
| 12112 if (function.is_null()) return SetStackOverflow(); | |
| 12113 globals_.Add(function, zone()); | |
| 12114 return; | |
| 12115 } | |
| 12116 case VariableLocation::PARAMETER: | |
| 12117 case VariableLocation::LOCAL: { | |
| 12118 CHECK_ALIVE(VisitForValue(declaration->fun())); | |
| 12119 HValue* value = Pop(); | |
| 12120 BindIfLive(variable, value); | |
| 12121 break; | |
| 12122 } | |
| 12123 case VariableLocation::CONTEXT: { | |
| 12124 CHECK_ALIVE(VisitForValue(declaration->fun())); | |
| 12125 HValue* value = Pop(); | |
| 12126 HValue* context = environment()->context(); | |
| 12127 HStoreContextSlot* store = Add<HStoreContextSlot>( | |
| 12128 context, variable->index(), HStoreContextSlot::kNoCheck, value); | |
| 12129 if (store->HasObservableSideEffects()) { | |
| 12130 Add<HSimulate>(proxy->id(), REMOVABLE_SIMULATE); | |
| 12131 } | |
| 12132 break; | |
| 12133 } | |
| 12134 case VariableLocation::LOOKUP: | |
| 12135 return Bailout(kUnsupportedLookupSlotInDeclaration); | |
| 12136 } | |
| 12137 } | |
| 12138 | |
| 12139 | |
| 12140 void HOptimizedGraphBuilder::VisitImportDeclaration( | |
| 12141 ImportDeclaration* declaration) { | |
| 12142 UNREACHABLE(); | |
| 12143 } | |
| 12144 | |
| 12145 | |
| 12146 void HOptimizedGraphBuilder::VisitExportDeclaration( | |
| 12147 ExportDeclaration* declaration) { | |
| 12148 UNREACHABLE(); | |
| 12149 } | |
| 12150 | |
| 12151 | |
| 12152 // Generators for inline runtime functions. | |
| 12153 // Support for types. | |
| 12154 void HOptimizedGraphBuilder::GenerateIsSmi(CallRuntime* call) { | |
| 12155 DCHECK(call->arguments()->length() == 1); | |
| 12156 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12157 HValue* value = Pop(); | |
| 12158 HIsSmiAndBranch* result = New<HIsSmiAndBranch>(value); | |
| 12159 return ast_context()->ReturnControl(result, call->id()); | |
| 12160 } | |
| 12161 | |
| 12162 | |
| 12163 void HOptimizedGraphBuilder::GenerateIsSpecObject(CallRuntime* call) { | |
| 12164 DCHECK(call->arguments()->length() == 1); | |
| 12165 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12166 HValue* value = Pop(); | |
| 12167 HHasInstanceTypeAndBranch* result = | |
| 12168 New<HHasInstanceTypeAndBranch>(value, | |
| 12169 FIRST_SPEC_OBJECT_TYPE, | |
| 12170 LAST_SPEC_OBJECT_TYPE); | |
| 12171 return ast_context()->ReturnControl(result, call->id()); | |
| 12172 } | |
| 12173 | |
| 12174 | |
| 12175 void HOptimizedGraphBuilder::GenerateIsFunction(CallRuntime* call) { | |
| 12176 DCHECK(call->arguments()->length() == 1); | |
| 12177 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12178 HValue* value = Pop(); | |
| 12179 HHasInstanceTypeAndBranch* result = | |
| 12180 New<HHasInstanceTypeAndBranch>(value, JS_FUNCTION_TYPE); | |
| 12181 return ast_context()->ReturnControl(result, call->id()); | |
| 12182 } | |
| 12183 | |
| 12184 | |
| 12185 void HOptimizedGraphBuilder::GenerateIsMinusZero(CallRuntime* call) { | |
| 12186 DCHECK(call->arguments()->length() == 1); | |
| 12187 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12188 HValue* value = Pop(); | |
| 12189 HCompareMinusZeroAndBranch* result = New<HCompareMinusZeroAndBranch>(value); | |
| 12190 return ast_context()->ReturnControl(result, call->id()); | |
| 12191 } | |
| 12192 | |
| 12193 | |
| 12194 void HOptimizedGraphBuilder::GenerateHasCachedArrayIndex(CallRuntime* call) { | |
| 12195 DCHECK(call->arguments()->length() == 1); | |
| 12196 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12197 HValue* value = Pop(); | |
| 12198 HHasCachedArrayIndexAndBranch* result = | |
| 12199 New<HHasCachedArrayIndexAndBranch>(value); | |
| 12200 return ast_context()->ReturnControl(result, call->id()); | |
| 12201 } | |
| 12202 | |
| 12203 | |
| 12204 void HOptimizedGraphBuilder::GenerateIsArray(CallRuntime* call) { | |
| 12205 DCHECK(call->arguments()->length() == 1); | |
| 12206 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12207 HValue* value = Pop(); | |
| 12208 HHasInstanceTypeAndBranch* result = | |
| 12209 New<HHasInstanceTypeAndBranch>(value, JS_ARRAY_TYPE); | |
| 12210 return ast_context()->ReturnControl(result, call->id()); | |
| 12211 } | |
| 12212 | |
| 12213 | |
| 12214 void HOptimizedGraphBuilder::GenerateIsTypedArray(CallRuntime* call) { | |
| 12215 DCHECK(call->arguments()->length() == 1); | |
| 12216 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12217 HValue* value = Pop(); | |
| 12218 HHasInstanceTypeAndBranch* result = | |
| 12219 New<HHasInstanceTypeAndBranch>(value, JS_TYPED_ARRAY_TYPE); | |
| 12220 return ast_context()->ReturnControl(result, call->id()); | |
| 12221 } | |
| 12222 | |
| 12223 | |
| 12224 void HOptimizedGraphBuilder::GenerateIsRegExp(CallRuntime* call) { | |
| 12225 DCHECK(call->arguments()->length() == 1); | |
| 12226 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12227 HValue* value = Pop(); | |
| 12228 HHasInstanceTypeAndBranch* result = | |
| 12229 New<HHasInstanceTypeAndBranch>(value, JS_REGEXP_TYPE); | |
| 12230 return ast_context()->ReturnControl(result, call->id()); | |
| 12231 } | |
| 12232 | |
| 12233 | |
| 12234 void HOptimizedGraphBuilder::GenerateToInteger(CallRuntime* call) { | |
| 12235 DCHECK_EQ(1, call->arguments()->length()); | |
| 12236 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12237 HValue* input = Pop(); | |
| 12238 if (input->type().IsSmi()) { | |
| 12239 return ast_context()->ReturnValue(input); | |
| 12240 } else { | |
| 12241 IfBuilder if_inputissmi(this); | |
| 12242 if_inputissmi.If<HIsSmiAndBranch>(input); | |
| 12243 if_inputissmi.Then(); | |
| 12244 { | |
| 12245 // Return the input value. | |
| 12246 Push(input); | |
| 12247 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12248 } | |
| 12249 if_inputissmi.Else(); | |
| 12250 { | |
| 12251 Add<HPushArguments>(input); | |
| 12252 Push(Add<HCallRuntime>(Runtime::FunctionForId(Runtime::kToInteger), 1)); | |
| 12253 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12254 } | |
| 12255 if_inputissmi.End(); | |
| 12256 return ast_context()->ReturnValue(Pop()); | |
| 12257 } | |
| 12258 } | |
| 12259 | |
| 12260 | |
| 12261 void HOptimizedGraphBuilder::GenerateToObject(CallRuntime* call) { | |
| 12262 DCHECK_EQ(1, call->arguments()->length()); | |
| 12263 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12264 HValue* value = Pop(); | |
| 12265 HValue* result = BuildToObject(value); | |
| 12266 return ast_context()->ReturnValue(result); | |
| 12267 } | |
| 12268 | |
| 12269 | |
| 12270 void HOptimizedGraphBuilder::GenerateToString(CallRuntime* call) { | |
| 12271 DCHECK_EQ(1, call->arguments()->length()); | |
| 12272 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12273 Callable callable = CodeFactory::ToString(isolate()); | |
| 12274 HValue* input = Pop(); | |
| 12275 if (input->type().IsString()) { | |
| 12276 return ast_context()->ReturnValue(input); | |
| 12277 } else { | |
| 12278 HValue* stub = Add<HConstant>(callable.code()); | |
| 12279 HValue* values[] = {context(), input}; | |
| 12280 HInstruction* result = | |
| 12281 New<HCallWithDescriptor>(stub, 0, callable.descriptor(), | |
| 12282 Vector<HValue*>(values, arraysize(values))); | |
| 12283 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12284 } | |
| 12285 } | |
| 12286 | |
| 12287 | |
| 12288 void HOptimizedGraphBuilder::GenerateToLength(CallRuntime* call) { | |
| 12289 DCHECK_EQ(1, call->arguments()->length()); | |
| 12290 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12291 Callable callable = CodeFactory::ToLength(isolate()); | |
| 12292 HValue* input = Pop(); | |
| 12293 HValue* stub = Add<HConstant>(callable.code()); | |
| 12294 HValue* values[] = {context(), input}; | |
| 12295 HInstruction* result = | |
| 12296 New<HCallWithDescriptor>(stub, 0, callable.descriptor(), | |
| 12297 Vector<HValue*>(values, arraysize(values))); | |
| 12298 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12299 } | |
| 12300 | |
| 12301 | |
| 12302 void HOptimizedGraphBuilder::GenerateToNumber(CallRuntime* call) { | |
| 12303 DCHECK_EQ(1, call->arguments()->length()); | |
| 12304 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12305 Callable callable = CodeFactory::ToNumber(isolate()); | |
| 12306 HValue* input = Pop(); | |
| 12307 if (input->type().IsTaggedNumber()) { | |
| 12308 return ast_context()->ReturnValue(input); | |
| 12309 } else { | |
| 12310 HValue* stub = Add<HConstant>(callable.code()); | |
| 12311 HValue* values[] = {context(), input}; | |
| 12312 HInstruction* result = | |
| 12313 New<HCallWithDescriptor>(stub, 0, callable.descriptor(), | |
| 12314 Vector<HValue*>(values, arraysize(values))); | |
| 12315 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12316 } | |
| 12317 } | |
| 12318 | |
| 12319 | |
| 12320 void HOptimizedGraphBuilder::GenerateIsJSProxy(CallRuntime* call) { | |
| 12321 DCHECK(call->arguments()->length() == 1); | |
| 12322 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12323 HValue* value = Pop(); | |
| 12324 HIfContinuation continuation; | |
| 12325 IfBuilder if_proxy(this); | |
| 12326 | |
| 12327 HValue* smicheck = if_proxy.IfNot<HIsSmiAndBranch>(value); | |
| 12328 if_proxy.And(); | |
| 12329 HValue* map = Add<HLoadNamedField>(value, smicheck, HObjectAccess::ForMap()); | |
| 12330 HValue* instance_type = | |
| 12331 Add<HLoadNamedField>(map, nullptr, HObjectAccess::ForMapInstanceType()); | |
| 12332 if_proxy.If<HCompareNumericAndBranch>( | |
| 12333 instance_type, Add<HConstant>(FIRST_JS_PROXY_TYPE), Token::GTE); | |
| 12334 if_proxy.And(); | |
| 12335 if_proxy.If<HCompareNumericAndBranch>( | |
| 12336 instance_type, Add<HConstant>(LAST_JS_PROXY_TYPE), Token::LTE); | |
| 12337 | |
| 12338 if_proxy.CaptureContinuation(&continuation); | |
| 12339 return ast_context()->ReturnContinuation(&continuation, call->id()); | |
| 12340 } | |
| 12341 | |
| 12342 | |
| 12343 void HOptimizedGraphBuilder::GenerateHasFastPackedElements(CallRuntime* call) { | |
| 12344 DCHECK(call->arguments()->length() == 1); | |
| 12345 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12346 HValue* object = Pop(); | |
| 12347 HIfContinuation continuation(graph()->CreateBasicBlock(), | |
| 12348 graph()->CreateBasicBlock()); | |
| 12349 IfBuilder if_not_smi(this); | |
| 12350 if_not_smi.IfNot<HIsSmiAndBranch>(object); | |
| 12351 if_not_smi.Then(); | |
| 12352 { | |
| 12353 NoObservableSideEffectsScope no_effects(this); | |
| 12354 | |
| 12355 IfBuilder if_fast_packed(this); | |
| 12356 HValue* elements_kind = BuildGetElementsKind(object); | |
| 12357 if_fast_packed.If<HCompareNumericAndBranch>( | |
| 12358 elements_kind, Add<HConstant>(FAST_SMI_ELEMENTS), Token::EQ); | |
| 12359 if_fast_packed.Or(); | |
| 12360 if_fast_packed.If<HCompareNumericAndBranch>( | |
| 12361 elements_kind, Add<HConstant>(FAST_ELEMENTS), Token::EQ); | |
| 12362 if_fast_packed.Or(); | |
| 12363 if_fast_packed.If<HCompareNumericAndBranch>( | |
| 12364 elements_kind, Add<HConstant>(FAST_DOUBLE_ELEMENTS), Token::EQ); | |
| 12365 if_fast_packed.JoinContinuation(&continuation); | |
| 12366 } | |
| 12367 if_not_smi.JoinContinuation(&continuation); | |
| 12368 return ast_context()->ReturnContinuation(&continuation, call->id()); | |
| 12369 } | |
| 12370 | |
| 12371 | |
| 12372 // Support for construct call checks. | |
| 12373 void HOptimizedGraphBuilder::GenerateIsConstructCall(CallRuntime* call) { | |
| 12374 DCHECK(call->arguments()->length() == 0); | |
| 12375 if (function_state()->outer() != NULL) { | |
| 12376 // We are generating graph for inlined function. | |
| 12377 HValue* value = function_state()->inlining_kind() == CONSTRUCT_CALL_RETURN | |
| 12378 ? graph()->GetConstantTrue() | |
| 12379 : graph()->GetConstantFalse(); | |
| 12380 return ast_context()->ReturnValue(value); | |
| 12381 } else { | |
| 12382 return ast_context()->ReturnControl(New<HIsConstructCallAndBranch>(), | |
| 12383 call->id()); | |
| 12384 } | |
| 12385 } | |
| 12386 | |
| 12387 | |
| 12388 // Support for arguments.length and arguments[?]. | |
| 12389 void HOptimizedGraphBuilder::GenerateArgumentsLength(CallRuntime* call) { | |
| 12390 DCHECK(call->arguments()->length() == 0); | |
| 12391 HInstruction* result = NULL; | |
| 12392 if (function_state()->outer() == NULL) { | |
| 12393 HInstruction* elements = Add<HArgumentsElements>(false); | |
| 12394 result = New<HArgumentsLength>(elements); | |
| 12395 } else { | |
| 12396 // Number of arguments without receiver. | |
| 12397 int argument_count = environment()-> | |
| 12398 arguments_environment()->parameter_count() - 1; | |
| 12399 result = New<HConstant>(argument_count); | |
| 12400 } | |
| 12401 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12402 } | |
| 12403 | |
| 12404 | |
| 12405 void HOptimizedGraphBuilder::GenerateArguments(CallRuntime* call) { | |
| 12406 DCHECK(call->arguments()->length() == 1); | |
| 12407 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12408 HValue* index = Pop(); | |
| 12409 HInstruction* result = NULL; | |
| 12410 if (function_state()->outer() == NULL) { | |
| 12411 HInstruction* elements = Add<HArgumentsElements>(false); | |
| 12412 HInstruction* length = Add<HArgumentsLength>(elements); | |
| 12413 HInstruction* checked_index = Add<HBoundsCheck>(index, length); | |
| 12414 result = New<HAccessArgumentsAt>(elements, length, checked_index); | |
| 12415 } else { | |
| 12416 EnsureArgumentsArePushedForAccess(); | |
| 12417 | |
| 12418 // Number of arguments without receiver. | |
| 12419 HInstruction* elements = function_state()->arguments_elements(); | |
| 12420 int argument_count = environment()-> | |
| 12421 arguments_environment()->parameter_count() - 1; | |
| 12422 HInstruction* length = Add<HConstant>(argument_count); | |
| 12423 HInstruction* checked_key = Add<HBoundsCheck>(index, length); | |
| 12424 result = New<HAccessArgumentsAt>(elements, length, checked_key); | |
| 12425 } | |
| 12426 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12427 } | |
| 12428 | |
| 12429 | |
| 12430 void HOptimizedGraphBuilder::GenerateValueOf(CallRuntime* call) { | |
| 12431 DCHECK(call->arguments()->length() == 1); | |
| 12432 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12433 HValue* object = Pop(); | |
| 12434 | |
| 12435 IfBuilder if_objectisvalue(this); | |
| 12436 HValue* objectisvalue = if_objectisvalue.If<HHasInstanceTypeAndBranch>( | |
| 12437 object, JS_VALUE_TYPE); | |
| 12438 if_objectisvalue.Then(); | |
| 12439 { | |
| 12440 // Return the actual value. | |
| 12441 Push(Add<HLoadNamedField>( | |
| 12442 object, objectisvalue, | |
| 12443 HObjectAccess::ForObservableJSObjectOffset( | |
| 12444 JSValue::kValueOffset))); | |
| 12445 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12446 } | |
| 12447 if_objectisvalue.Else(); | |
| 12448 { | |
| 12449 // If the object is not a value return the object. | |
| 12450 Push(object); | |
| 12451 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12452 } | |
| 12453 if_objectisvalue.End(); | |
| 12454 return ast_context()->ReturnValue(Pop()); | |
| 12455 } | |
| 12456 | |
| 12457 | |
| 12458 void HOptimizedGraphBuilder::GenerateJSValueGetValue(CallRuntime* call) { | |
| 12459 DCHECK(call->arguments()->length() == 1); | |
| 12460 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12461 HValue* value = Pop(); | |
| 12462 HInstruction* result = Add<HLoadNamedField>( | |
| 12463 value, nullptr, | |
| 12464 HObjectAccess::ForObservableJSObjectOffset(JSValue::kValueOffset)); | |
| 12465 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12466 } | |
| 12467 | |
| 12468 | |
| 12469 void HOptimizedGraphBuilder::GenerateIsDate(CallRuntime* call) { | |
| 12470 DCHECK_EQ(1, call->arguments()->length()); | |
| 12471 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12472 HValue* value = Pop(); | |
| 12473 HHasInstanceTypeAndBranch* result = | |
| 12474 New<HHasInstanceTypeAndBranch>(value, JS_DATE_TYPE); | |
| 12475 return ast_context()->ReturnControl(result, call->id()); | |
| 12476 } | |
| 12477 | |
| 12478 | |
| 12479 void HOptimizedGraphBuilder::GenerateThrowNotDateError(CallRuntime* call) { | |
| 12480 DCHECK_EQ(0, call->arguments()->length()); | |
| 12481 Add<HDeoptimize>(Deoptimizer::kNotADateObject, Deoptimizer::EAGER); | |
| 12482 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12483 return ast_context()->ReturnValue(graph()->GetConstantUndefined()); | |
| 12484 } | |
| 12485 | |
| 12486 | |
| 12487 void HOptimizedGraphBuilder::GenerateDateField(CallRuntime* call) { | |
| 12488 DCHECK(call->arguments()->length() == 2); | |
| 12489 DCHECK_NOT_NULL(call->arguments()->at(1)->AsLiteral()); | |
| 12490 Smi* index = Smi::cast(*(call->arguments()->at(1)->AsLiteral()->value())); | |
| 12491 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12492 HValue* date = Pop(); | |
| 12493 HDateField* result = New<HDateField>(date, index); | |
| 12494 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12495 } | |
| 12496 | |
| 12497 | |
| 12498 void HOptimizedGraphBuilder::GenerateOneByteSeqStringSetChar( | |
| 12499 CallRuntime* call) { | |
| 12500 DCHECK(call->arguments()->length() == 3); | |
| 12501 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12502 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12503 CHECK_ALIVE(VisitForValue(call->arguments()->at(2))); | |
| 12504 HValue* string = Pop(); | |
| 12505 HValue* value = Pop(); | |
| 12506 HValue* index = Pop(); | |
| 12507 Add<HSeqStringSetChar>(String::ONE_BYTE_ENCODING, string, | |
| 12508 index, value); | |
| 12509 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12510 return ast_context()->ReturnValue(graph()->GetConstantUndefined()); | |
| 12511 } | |
| 12512 | |
| 12513 | |
| 12514 void HOptimizedGraphBuilder::GenerateTwoByteSeqStringSetChar( | |
| 12515 CallRuntime* call) { | |
| 12516 DCHECK(call->arguments()->length() == 3); | |
| 12517 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12518 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12519 CHECK_ALIVE(VisitForValue(call->arguments()->at(2))); | |
| 12520 HValue* string = Pop(); | |
| 12521 HValue* value = Pop(); | |
| 12522 HValue* index = Pop(); | |
| 12523 Add<HSeqStringSetChar>(String::TWO_BYTE_ENCODING, string, | |
| 12524 index, value); | |
| 12525 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12526 return ast_context()->ReturnValue(graph()->GetConstantUndefined()); | |
| 12527 } | |
| 12528 | |
| 12529 | |
| 12530 void HOptimizedGraphBuilder::GenerateSetValueOf(CallRuntime* call) { | |
| 12531 DCHECK(call->arguments()->length() == 2); | |
| 12532 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12533 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12534 HValue* value = Pop(); | |
| 12535 HValue* object = Pop(); | |
| 12536 | |
| 12537 // Check if object is a JSValue. | |
| 12538 IfBuilder if_objectisvalue(this); | |
| 12539 if_objectisvalue.If<HHasInstanceTypeAndBranch>(object, JS_VALUE_TYPE); | |
| 12540 if_objectisvalue.Then(); | |
| 12541 { | |
| 12542 // Create in-object property store to kValueOffset. | |
| 12543 Add<HStoreNamedField>(object, | |
| 12544 HObjectAccess::ForObservableJSObjectOffset(JSValue::kValueOffset), | |
| 12545 value); | |
| 12546 if (!ast_context()->IsEffect()) { | |
| 12547 Push(value); | |
| 12548 } | |
| 12549 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12550 } | |
| 12551 if_objectisvalue.Else(); | |
| 12552 { | |
| 12553 // Nothing to do in this case. | |
| 12554 if (!ast_context()->IsEffect()) { | |
| 12555 Push(value); | |
| 12556 } | |
| 12557 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12558 } | |
| 12559 if_objectisvalue.End(); | |
| 12560 if (!ast_context()->IsEffect()) { | |
| 12561 Drop(1); | |
| 12562 } | |
| 12563 return ast_context()->ReturnValue(value); | |
| 12564 } | |
| 12565 | |
| 12566 | |
| 12567 // Fast support for charCodeAt(n). | |
| 12568 void HOptimizedGraphBuilder::GenerateStringCharCodeAt(CallRuntime* call) { | |
| 12569 DCHECK(call->arguments()->length() == 2); | |
| 12570 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12571 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12572 HValue* index = Pop(); | |
| 12573 HValue* string = Pop(); | |
| 12574 HInstruction* result = BuildStringCharCodeAt(string, index); | |
| 12575 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12576 } | |
| 12577 | |
| 12578 | |
| 12579 // Fast support for string.charAt(n) and string[n]. | |
| 12580 void HOptimizedGraphBuilder::GenerateStringCharFromCode(CallRuntime* call) { | |
| 12581 DCHECK(call->arguments()->length() == 1); | |
| 12582 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12583 HValue* char_code = Pop(); | |
| 12584 HInstruction* result = NewUncasted<HStringCharFromCode>(char_code); | |
| 12585 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12586 } | |
| 12587 | |
| 12588 | |
| 12589 // Fast support for string.charAt(n) and string[n]. | |
| 12590 void HOptimizedGraphBuilder::GenerateStringCharAt(CallRuntime* call) { | |
| 12591 DCHECK(call->arguments()->length() == 2); | |
| 12592 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12593 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12594 HValue* index = Pop(); | |
| 12595 HValue* string = Pop(); | |
| 12596 HInstruction* char_code = BuildStringCharCodeAt(string, index); | |
| 12597 AddInstruction(char_code); | |
| 12598 HInstruction* result = NewUncasted<HStringCharFromCode>(char_code); | |
| 12599 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12600 } | |
| 12601 | |
| 12602 | |
| 12603 // Fast support for object equality testing. | |
| 12604 void HOptimizedGraphBuilder::GenerateObjectEquals(CallRuntime* call) { | |
| 12605 DCHECK(call->arguments()->length() == 2); | |
| 12606 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12607 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12608 HValue* right = Pop(); | |
| 12609 HValue* left = Pop(); | |
| 12610 HCompareObjectEqAndBranch* result = | |
| 12611 New<HCompareObjectEqAndBranch>(left, right); | |
| 12612 return ast_context()->ReturnControl(result, call->id()); | |
| 12613 } | |
| 12614 | |
| 12615 | |
| 12616 // Fast support for StringAdd. | |
| 12617 void HOptimizedGraphBuilder::GenerateStringAdd(CallRuntime* call) { | |
| 12618 DCHECK_EQ(2, call->arguments()->length()); | |
| 12619 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12620 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12621 HValue* right = Pop(); | |
| 12622 HValue* left = Pop(); | |
| 12623 HInstruction* result = NewUncasted<HStringAdd>(left, right); | |
| 12624 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12625 } | |
| 12626 | |
| 12627 | |
| 12628 // Fast support for SubString. | |
| 12629 void HOptimizedGraphBuilder::GenerateSubString(CallRuntime* call) { | |
| 12630 DCHECK_EQ(3, call->arguments()->length()); | |
| 12631 CHECK_ALIVE(VisitExpressions(call->arguments())); | |
| 12632 PushArgumentsFromEnvironment(call->arguments()->length()); | |
| 12633 HCallStub* result = New<HCallStub>(CodeStub::SubString, 3); | |
| 12634 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12635 } | |
| 12636 | |
| 12637 | |
| 12638 void HOptimizedGraphBuilder::GenerateStringGetLength(CallRuntime* call) { | |
| 12639 DCHECK(call->arguments()->length() == 1); | |
| 12640 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12641 HValue* string = Pop(); | |
| 12642 HInstruction* result = BuildLoadStringLength(string); | |
| 12643 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12644 } | |
| 12645 | |
| 12646 | |
| 12647 // Support for direct calls from JavaScript to native RegExp code. | |
| 12648 void HOptimizedGraphBuilder::GenerateRegExpExec(CallRuntime* call) { | |
| 12649 DCHECK_EQ(4, call->arguments()->length()); | |
| 12650 CHECK_ALIVE(VisitExpressions(call->arguments())); | |
| 12651 PushArgumentsFromEnvironment(call->arguments()->length()); | |
| 12652 HCallStub* result = New<HCallStub>(CodeStub::RegExpExec, 4); | |
| 12653 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12654 } | |
| 12655 | |
| 12656 | |
| 12657 void HOptimizedGraphBuilder::GenerateDoubleLo(CallRuntime* call) { | |
| 12658 DCHECK_EQ(1, call->arguments()->length()); | |
| 12659 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12660 HValue* value = Pop(); | |
| 12661 HInstruction* result = NewUncasted<HDoubleBits>(value, HDoubleBits::LOW); | |
| 12662 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12663 } | |
| 12664 | |
| 12665 | |
| 12666 void HOptimizedGraphBuilder::GenerateDoubleHi(CallRuntime* call) { | |
| 12667 DCHECK_EQ(1, call->arguments()->length()); | |
| 12668 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12669 HValue* value = Pop(); | |
| 12670 HInstruction* result = NewUncasted<HDoubleBits>(value, HDoubleBits::HIGH); | |
| 12671 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12672 } | |
| 12673 | |
| 12674 | |
| 12675 void HOptimizedGraphBuilder::GenerateConstructDouble(CallRuntime* call) { | |
| 12676 DCHECK_EQ(2, call->arguments()->length()); | |
| 12677 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12678 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12679 HValue* lo = Pop(); | |
| 12680 HValue* hi = Pop(); | |
| 12681 HInstruction* result = NewUncasted<HConstructDouble>(hi, lo); | |
| 12682 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12683 } | |
| 12684 | |
| 12685 | |
| 12686 // Construct a RegExp exec result with two in-object properties. | |
| 12687 void HOptimizedGraphBuilder::GenerateRegExpConstructResult(CallRuntime* call) { | |
| 12688 DCHECK_EQ(3, call->arguments()->length()); | |
| 12689 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12690 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12691 CHECK_ALIVE(VisitForValue(call->arguments()->at(2))); | |
| 12692 HValue* input = Pop(); | |
| 12693 HValue* index = Pop(); | |
| 12694 HValue* length = Pop(); | |
| 12695 HValue* result = BuildRegExpConstructResult(length, index, input); | |
| 12696 return ast_context()->ReturnValue(result); | |
| 12697 } | |
| 12698 | |
| 12699 | |
| 12700 // Fast support for number to string. | |
| 12701 void HOptimizedGraphBuilder::GenerateNumberToString(CallRuntime* call) { | |
| 12702 DCHECK_EQ(1, call->arguments()->length()); | |
| 12703 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12704 HValue* number = Pop(); | |
| 12705 HValue* result = BuildNumberToString(number, Type::Any(zone())); | |
| 12706 return ast_context()->ReturnValue(result); | |
| 12707 } | |
| 12708 | |
| 12709 | |
| 12710 // Fast support for calls. | |
| 12711 void HOptimizedGraphBuilder::GenerateCall(CallRuntime* call) { | |
| 12712 DCHECK_LE(2, call->arguments()->length()); | |
| 12713 CHECK_ALIVE(VisitExpressions(call->arguments())); | |
| 12714 CallTrampolineDescriptor descriptor(isolate()); | |
| 12715 PushArgumentsFromEnvironment(call->arguments()->length() - 1); | |
| 12716 HValue* trampoline = Add<HConstant>(isolate()->builtins()->Call()); | |
| 12717 HValue* target = Pop(); | |
| 12718 HValue* values[] = {context(), target, | |
| 12719 Add<HConstant>(call->arguments()->length() - 2)}; | |
| 12720 HInstruction* result = New<HCallWithDescriptor>( | |
| 12721 trampoline, call->arguments()->length() - 1, descriptor, | |
| 12722 Vector<HValue*>(values, arraysize(values))); | |
| 12723 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12724 } | |
| 12725 | |
| 12726 | |
| 12727 // Fast call for custom callbacks. | |
| 12728 void HOptimizedGraphBuilder::GenerateCallFunction(CallRuntime* call) { | |
| 12729 // 1 ~ The function to call is not itself an argument to the call. | |
| 12730 int arg_count = call->arguments()->length() - 1; | |
| 12731 DCHECK(arg_count >= 1); // There's always at least a receiver. | |
| 12732 | |
| 12733 CHECK_ALIVE(VisitExpressions(call->arguments())); | |
| 12734 // The function is the last argument | |
| 12735 HValue* function = Pop(); | |
| 12736 // Push the arguments to the stack | |
| 12737 PushArgumentsFromEnvironment(arg_count); | |
| 12738 | |
| 12739 IfBuilder if_is_jsfunction(this); | |
| 12740 if_is_jsfunction.If<HHasInstanceTypeAndBranch>(function, JS_FUNCTION_TYPE); | |
| 12741 | |
| 12742 if_is_jsfunction.Then(); | |
| 12743 { | |
| 12744 HInstruction* invoke_result = | |
| 12745 Add<HInvokeFunction>(function, arg_count); | |
| 12746 if (!ast_context()->IsEffect()) { | |
| 12747 Push(invoke_result); | |
| 12748 } | |
| 12749 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12750 } | |
| 12751 | |
| 12752 if_is_jsfunction.Else(); | |
| 12753 { | |
| 12754 HInstruction* call_result = | |
| 12755 Add<HCallFunction>(function, arg_count); | |
| 12756 if (!ast_context()->IsEffect()) { | |
| 12757 Push(call_result); | |
| 12758 } | |
| 12759 Add<HSimulate>(call->id(), FIXED_SIMULATE); | |
| 12760 } | |
| 12761 if_is_jsfunction.End(); | |
| 12762 | |
| 12763 if (ast_context()->IsEffect()) { | |
| 12764 // EffectContext::ReturnValue ignores the value, so we can just pass | |
| 12765 // 'undefined' (as we do not have the call result anymore). | |
| 12766 return ast_context()->ReturnValue(graph()->GetConstantUndefined()); | |
| 12767 } else { | |
| 12768 return ast_context()->ReturnValue(Pop()); | |
| 12769 } | |
| 12770 } | |
| 12771 | |
| 12772 | |
| 12773 // Fast call to math functions. | |
| 12774 void HOptimizedGraphBuilder::GenerateMathPow(CallRuntime* call) { | |
| 12775 DCHECK_EQ(2, call->arguments()->length()); | |
| 12776 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12777 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12778 HValue* right = Pop(); | |
| 12779 HValue* left = Pop(); | |
| 12780 HInstruction* result = NewUncasted<HPower>(left, right); | |
| 12781 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12782 } | |
| 12783 | |
| 12784 | |
| 12785 void HOptimizedGraphBuilder::GenerateMathClz32(CallRuntime* call) { | |
| 12786 DCHECK(call->arguments()->length() == 1); | |
| 12787 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12788 HValue* value = Pop(); | |
| 12789 HInstruction* result = NewUncasted<HUnaryMathOperation>(value, kMathClz32); | |
| 12790 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12791 } | |
| 12792 | |
| 12793 | |
| 12794 void HOptimizedGraphBuilder::GenerateMathFloor(CallRuntime* call) { | |
| 12795 DCHECK(call->arguments()->length() == 1); | |
| 12796 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12797 HValue* value = Pop(); | |
| 12798 HInstruction* result = NewUncasted<HUnaryMathOperation>(value, kMathFloor); | |
| 12799 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12800 } | |
| 12801 | |
| 12802 | |
| 12803 void HOptimizedGraphBuilder::GenerateMathLogRT(CallRuntime* call) { | |
| 12804 DCHECK(call->arguments()->length() == 1); | |
| 12805 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12806 HValue* value = Pop(); | |
| 12807 HInstruction* result = NewUncasted<HUnaryMathOperation>(value, kMathLog); | |
| 12808 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12809 } | |
| 12810 | |
| 12811 | |
| 12812 void HOptimizedGraphBuilder::GenerateMathSqrt(CallRuntime* call) { | |
| 12813 DCHECK(call->arguments()->length() == 1); | |
| 12814 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12815 HValue* value = Pop(); | |
| 12816 HInstruction* result = NewUncasted<HUnaryMathOperation>(value, kMathSqrt); | |
| 12817 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12818 } | |
| 12819 | |
| 12820 | |
| 12821 void HOptimizedGraphBuilder::GenerateLikely(CallRuntime* call) { | |
| 12822 DCHECK(call->arguments()->length() == 1); | |
| 12823 Visit(call->arguments()->at(0)); | |
| 12824 } | |
| 12825 | |
| 12826 | |
| 12827 void HOptimizedGraphBuilder::GenerateUnlikely(CallRuntime* call) { | |
| 12828 return GenerateLikely(call); | |
| 12829 } | |
| 12830 | |
| 12831 | |
| 12832 void HOptimizedGraphBuilder::GenerateHasInPrototypeChain(CallRuntime* call) { | |
| 12833 DCHECK_EQ(2, call->arguments()->length()); | |
| 12834 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12835 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12836 HValue* prototype = Pop(); | |
| 12837 HValue* object = Pop(); | |
| 12838 HHasInPrototypeChainAndBranch* result = | |
| 12839 New<HHasInPrototypeChainAndBranch>(object, prototype); | |
| 12840 return ast_context()->ReturnControl(result, call->id()); | |
| 12841 } | |
| 12842 | |
| 12843 | |
| 12844 void HOptimizedGraphBuilder::GenerateFixedArrayGet(CallRuntime* call) { | |
| 12845 DCHECK(call->arguments()->length() == 2); | |
| 12846 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12847 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12848 HValue* index = Pop(); | |
| 12849 HValue* object = Pop(); | |
| 12850 HInstruction* result = New<HLoadKeyed>( | |
| 12851 object, index, nullptr, FAST_HOLEY_ELEMENTS, ALLOW_RETURN_HOLE); | |
| 12852 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12853 } | |
| 12854 | |
| 12855 | |
| 12856 void HOptimizedGraphBuilder::GenerateFixedArraySet(CallRuntime* call) { | |
| 12857 DCHECK(call->arguments()->length() == 3); | |
| 12858 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12859 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12860 CHECK_ALIVE(VisitForValue(call->arguments()->at(2))); | |
| 12861 HValue* value = Pop(); | |
| 12862 HValue* index = Pop(); | |
| 12863 HValue* object = Pop(); | |
| 12864 NoObservableSideEffectsScope no_effects(this); | |
| 12865 Add<HStoreKeyed>(object, index, value, FAST_HOLEY_ELEMENTS); | |
| 12866 return ast_context()->ReturnValue(graph()->GetConstantUndefined()); | |
| 12867 } | |
| 12868 | |
| 12869 | |
| 12870 void HOptimizedGraphBuilder::GenerateTheHole(CallRuntime* call) { | |
| 12871 DCHECK(call->arguments()->length() == 0); | |
| 12872 return ast_context()->ReturnValue(graph()->GetConstantHole()); | |
| 12873 } | |
| 12874 | |
| 12875 | |
| 12876 void HOptimizedGraphBuilder::GenerateCreateIterResultObject(CallRuntime* call) { | |
| 12877 DCHECK_EQ(2, call->arguments()->length()); | |
| 12878 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12879 CHECK_ALIVE(VisitForValue(call->arguments()->at(1))); | |
| 12880 HValue* done = Pop(); | |
| 12881 HValue* value = Pop(); | |
| 12882 HValue* result = BuildCreateIterResultObject(value, done); | |
| 12883 return ast_context()->ReturnValue(result); | |
| 12884 } | |
| 12885 | |
| 12886 | |
| 12887 void HOptimizedGraphBuilder::GenerateJSCollectionGetTable(CallRuntime* call) { | |
| 12888 DCHECK(call->arguments()->length() == 1); | |
| 12889 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12890 HValue* receiver = Pop(); | |
| 12891 HInstruction* result = New<HLoadNamedField>( | |
| 12892 receiver, nullptr, HObjectAccess::ForJSCollectionTable()); | |
| 12893 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12894 } | |
| 12895 | |
| 12896 | |
| 12897 void HOptimizedGraphBuilder::GenerateStringGetRawHashField(CallRuntime* call) { | |
| 12898 DCHECK(call->arguments()->length() == 1); | |
| 12899 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12900 HValue* object = Pop(); | |
| 12901 HInstruction* result = New<HLoadNamedField>( | |
| 12902 object, nullptr, HObjectAccess::ForStringHashField()); | |
| 12903 return ast_context()->ReturnInstruction(result, call->id()); | |
| 12904 } | |
| 12905 | |
| 12906 | |
| 12907 template <typename CollectionType> | |
| 12908 HValue* HOptimizedGraphBuilder::BuildAllocateOrderedHashTable() { | |
| 12909 static const int kCapacity = CollectionType::kMinCapacity; | |
| 12910 static const int kBucketCount = kCapacity / CollectionType::kLoadFactor; | |
| 12911 static const int kFixedArrayLength = CollectionType::kHashTableStartIndex + | |
| 12912 kBucketCount + | |
| 12913 (kCapacity * CollectionType::kEntrySize); | |
| 12914 static const int kSizeInBytes = | |
| 12915 FixedArray::kHeaderSize + (kFixedArrayLength * kPointerSize); | |
| 12916 | |
| 12917 // Allocate the table and add the proper map. | |
| 12918 HValue* table = | |
| 12919 Add<HAllocate>(Add<HConstant>(kSizeInBytes), HType::HeapObject(), | |
| 12920 NOT_TENURED, FIXED_ARRAY_TYPE); | |
| 12921 AddStoreMapConstant(table, isolate()->factory()->ordered_hash_table_map()); | |
| 12922 | |
| 12923 // Initialize the FixedArray... | |
| 12924 HValue* length = Add<HConstant>(kFixedArrayLength); | |
| 12925 Add<HStoreNamedField>(table, HObjectAccess::ForFixedArrayLength(), length); | |
| 12926 | |
| 12927 // ...and the OrderedHashTable fields. | |
| 12928 Add<HStoreNamedField>( | |
| 12929 table, | |
| 12930 HObjectAccess::ForOrderedHashTableNumberOfBuckets<CollectionType>(), | |
| 12931 Add<HConstant>(kBucketCount)); | |
| 12932 Add<HStoreNamedField>( | |
| 12933 table, | |
| 12934 HObjectAccess::ForOrderedHashTableNumberOfElements<CollectionType>(), | |
| 12935 graph()->GetConstant0()); | |
| 12936 Add<HStoreNamedField>( | |
| 12937 table, HObjectAccess::ForOrderedHashTableNumberOfDeletedElements< | |
| 12938 CollectionType>(), | |
| 12939 graph()->GetConstant0()); | |
| 12940 | |
| 12941 // Fill the buckets with kNotFound. | |
| 12942 HValue* not_found = Add<HConstant>(CollectionType::kNotFound); | |
| 12943 for (int i = 0; i < kBucketCount; ++i) { | |
| 12944 Add<HStoreNamedField>( | |
| 12945 table, HObjectAccess::ForOrderedHashTableBucket<CollectionType>(i), | |
| 12946 not_found); | |
| 12947 } | |
| 12948 | |
| 12949 // Fill the data table with undefined. | |
| 12950 HValue* undefined = graph()->GetConstantUndefined(); | |
| 12951 for (int i = 0; i < (kCapacity * CollectionType::kEntrySize); ++i) { | |
| 12952 Add<HStoreNamedField>(table, | |
| 12953 HObjectAccess::ForOrderedHashTableDataTableIndex< | |
| 12954 CollectionType, kBucketCount>(i), | |
| 12955 undefined); | |
| 12956 } | |
| 12957 | |
| 12958 return table; | |
| 12959 } | |
| 12960 | |
| 12961 | |
| 12962 void HOptimizedGraphBuilder::GenerateSetInitialize(CallRuntime* call) { | |
| 12963 DCHECK(call->arguments()->length() == 1); | |
| 12964 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12965 HValue* receiver = Pop(); | |
| 12966 | |
| 12967 NoObservableSideEffectsScope no_effects(this); | |
| 12968 HValue* table = BuildAllocateOrderedHashTable<OrderedHashSet>(); | |
| 12969 Add<HStoreNamedField>(receiver, HObjectAccess::ForJSCollectionTable(), table); | |
| 12970 return ast_context()->ReturnValue(receiver); | |
| 12971 } | |
| 12972 | |
| 12973 | |
| 12974 void HOptimizedGraphBuilder::GenerateMapInitialize(CallRuntime* call) { | |
| 12975 DCHECK(call->arguments()->length() == 1); | |
| 12976 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 12977 HValue* receiver = Pop(); | |
| 12978 | |
| 12979 NoObservableSideEffectsScope no_effects(this); | |
| 12980 HValue* table = BuildAllocateOrderedHashTable<OrderedHashMap>(); | |
| 12981 Add<HStoreNamedField>(receiver, HObjectAccess::ForJSCollectionTable(), table); | |
| 12982 return ast_context()->ReturnValue(receiver); | |
| 12983 } | |
| 12984 | |
| 12985 | |
| 12986 template <typename CollectionType> | |
| 12987 void HOptimizedGraphBuilder::BuildOrderedHashTableClear(HValue* receiver) { | |
| 12988 HValue* old_table = Add<HLoadNamedField>( | |
| 12989 receiver, nullptr, HObjectAccess::ForJSCollectionTable()); | |
| 12990 HValue* new_table = BuildAllocateOrderedHashTable<CollectionType>(); | |
| 12991 Add<HStoreNamedField>( | |
| 12992 old_table, HObjectAccess::ForOrderedHashTableNextTable<CollectionType>(), | |
| 12993 new_table); | |
| 12994 Add<HStoreNamedField>( | |
| 12995 old_table, HObjectAccess::ForOrderedHashTableNumberOfDeletedElements< | |
| 12996 CollectionType>(), | |
| 12997 Add<HConstant>(CollectionType::kClearedTableSentinel)); | |
| 12998 Add<HStoreNamedField>(receiver, HObjectAccess::ForJSCollectionTable(), | |
| 12999 new_table); | |
| 13000 } | |
| 13001 | |
| 13002 | |
| 13003 void HOptimizedGraphBuilder::GenerateSetClear(CallRuntime* call) { | |
| 13004 DCHECK(call->arguments()->length() == 1); | |
| 13005 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 13006 HValue* receiver = Pop(); | |
| 13007 | |
| 13008 NoObservableSideEffectsScope no_effects(this); | |
| 13009 BuildOrderedHashTableClear<OrderedHashSet>(receiver); | |
| 13010 return ast_context()->ReturnValue(graph()->GetConstantUndefined()); | |
| 13011 } | |
| 13012 | |
| 13013 | |
| 13014 void HOptimizedGraphBuilder::GenerateMapClear(CallRuntime* call) { | |
| 13015 DCHECK(call->arguments()->length() == 1); | |
| 13016 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 13017 HValue* receiver = Pop(); | |
| 13018 | |
| 13019 NoObservableSideEffectsScope no_effects(this); | |
| 13020 BuildOrderedHashTableClear<OrderedHashMap>(receiver); | |
| 13021 return ast_context()->ReturnValue(graph()->GetConstantUndefined()); | |
| 13022 } | |
| 13023 | |
| 13024 | |
| 13025 void HOptimizedGraphBuilder::GenerateGetCachedArrayIndex(CallRuntime* call) { | |
| 13026 DCHECK(call->arguments()->length() == 1); | |
| 13027 CHECK_ALIVE(VisitForValue(call->arguments()->at(0))); | |
| 13028 HValue* value = Pop(); | |
| 13029 HGetCachedArrayIndex* result = New<HGetCachedArrayIndex>(value); | |
| 13030 return ast_context()->ReturnInstruction(result, call->id()); | |
| 13031 } | |
| 13032 | |
| 13033 | |
| 13034 void HOptimizedGraphBuilder::GenerateFastOneByteArrayJoin(CallRuntime* call) { | |
| 13035 // Simply returning undefined here would be semantically correct and even | |
| 13036 // avoid the bailout. Nevertheless, some ancient benchmarks like SunSpider's | |
| 13037 // string-fasta would tank, because fullcode contains an optimized version. | |
| 13038 // Obviously the fullcode => Crankshaft => bailout => fullcode dance is | |
| 13039 // faster... *sigh* | |
| 13040 return Bailout(kInlinedRuntimeFunctionFastOneByteArrayJoin); | |
| 13041 } | |
| 13042 | |
| 13043 | |
| 13044 void HOptimizedGraphBuilder::GenerateDebugBreakInOptimizedCode( | |
| 13045 CallRuntime* call) { | |
| 13046 Add<HDebugBreak>(); | |
| 13047 return ast_context()->ReturnValue(graph()->GetConstant0()); | |
| 13048 } | |
| 13049 | |
| 13050 | |
| 13051 void HOptimizedGraphBuilder::GenerateDebugIsActive(CallRuntime* call) { | |
| 13052 DCHECK(call->arguments()->length() == 0); | |
| 13053 HValue* ref = | |
| 13054 Add<HConstant>(ExternalReference::debug_is_active_address(isolate())); | |
| 13055 HValue* value = | |
| 13056 Add<HLoadNamedField>(ref, nullptr, HObjectAccess::ForExternalUInteger8()); | |
| 13057 return ast_context()->ReturnValue(value); | |
| 13058 } | |
| 13059 | |
| 13060 | |
| 13061 #undef CHECK_BAILOUT | |
| 13062 #undef CHECK_ALIVE | |
| 13063 | |
| 13064 | |
| 13065 HEnvironment::HEnvironment(HEnvironment* outer, | |
| 13066 Scope* scope, | |
| 13067 Handle<JSFunction> closure, | |
| 13068 Zone* zone) | |
| 13069 : closure_(closure), | |
| 13070 values_(0, zone), | |
| 13071 frame_type_(JS_FUNCTION), | |
| 13072 parameter_count_(0), | |
| 13073 specials_count_(1), | |
| 13074 local_count_(0), | |
| 13075 outer_(outer), | |
| 13076 entry_(NULL), | |
| 13077 pop_count_(0), | |
| 13078 push_count_(0), | |
| 13079 ast_id_(BailoutId::None()), | |
| 13080 zone_(zone) { | |
| 13081 Scope* declaration_scope = scope->DeclarationScope(); | |
| 13082 Initialize(declaration_scope->num_parameters() + 1, | |
| 13083 declaration_scope->num_stack_slots(), 0); | |
| 13084 } | |
| 13085 | |
| 13086 | |
| 13087 HEnvironment::HEnvironment(Zone* zone, int parameter_count) | |
| 13088 : values_(0, zone), | |
| 13089 frame_type_(STUB), | |
| 13090 parameter_count_(parameter_count), | |
| 13091 specials_count_(1), | |
| 13092 local_count_(0), | |
| 13093 outer_(NULL), | |
| 13094 entry_(NULL), | |
| 13095 pop_count_(0), | |
| 13096 push_count_(0), | |
| 13097 ast_id_(BailoutId::None()), | |
| 13098 zone_(zone) { | |
| 13099 Initialize(parameter_count, 0, 0); | |
| 13100 } | |
| 13101 | |
| 13102 | |
| 13103 HEnvironment::HEnvironment(const HEnvironment* other, Zone* zone) | |
| 13104 : values_(0, zone), | |
| 13105 frame_type_(JS_FUNCTION), | |
| 13106 parameter_count_(0), | |
| 13107 specials_count_(0), | |
| 13108 local_count_(0), | |
| 13109 outer_(NULL), | |
| 13110 entry_(NULL), | |
| 13111 pop_count_(0), | |
| 13112 push_count_(0), | |
| 13113 ast_id_(other->ast_id()), | |
| 13114 zone_(zone) { | |
| 13115 Initialize(other); | |
| 13116 } | |
| 13117 | |
| 13118 | |
| 13119 HEnvironment::HEnvironment(HEnvironment* outer, | |
| 13120 Handle<JSFunction> closure, | |
| 13121 FrameType frame_type, | |
| 13122 int arguments, | |
| 13123 Zone* zone) | |
| 13124 : closure_(closure), | |
| 13125 values_(arguments, zone), | |
| 13126 frame_type_(frame_type), | |
| 13127 parameter_count_(arguments), | |
| 13128 specials_count_(0), | |
| 13129 local_count_(0), | |
| 13130 outer_(outer), | |
| 13131 entry_(NULL), | |
| 13132 pop_count_(0), | |
| 13133 push_count_(0), | |
| 13134 ast_id_(BailoutId::None()), | |
| 13135 zone_(zone) { | |
| 13136 } | |
| 13137 | |
| 13138 | |
| 13139 void HEnvironment::Initialize(int parameter_count, | |
| 13140 int local_count, | |
| 13141 int stack_height) { | |
| 13142 parameter_count_ = parameter_count; | |
| 13143 local_count_ = local_count; | |
| 13144 | |
| 13145 // Avoid reallocating the temporaries' backing store on the first Push. | |
| 13146 int total = parameter_count + specials_count_ + local_count + stack_height; | |
| 13147 values_.Initialize(total + 4, zone()); | |
| 13148 for (int i = 0; i < total; ++i) values_.Add(NULL, zone()); | |
| 13149 } | |
| 13150 | |
| 13151 | |
| 13152 void HEnvironment::Initialize(const HEnvironment* other) { | |
| 13153 closure_ = other->closure(); | |
| 13154 values_.AddAll(other->values_, zone()); | |
| 13155 assigned_variables_.Union(other->assigned_variables_, zone()); | |
| 13156 frame_type_ = other->frame_type_; | |
| 13157 parameter_count_ = other->parameter_count_; | |
| 13158 local_count_ = other->local_count_; | |
| 13159 if (other->outer_ != NULL) outer_ = other->outer_->Copy(); // Deep copy. | |
| 13160 entry_ = other->entry_; | |
| 13161 pop_count_ = other->pop_count_; | |
| 13162 push_count_ = other->push_count_; | |
| 13163 specials_count_ = other->specials_count_; | |
| 13164 ast_id_ = other->ast_id_; | |
| 13165 } | |
| 13166 | |
| 13167 | |
| 13168 void HEnvironment::AddIncomingEdge(HBasicBlock* block, HEnvironment* other) { | |
| 13169 DCHECK(!block->IsLoopHeader()); | |
| 13170 DCHECK(values_.length() == other->values_.length()); | |
| 13171 | |
| 13172 int length = values_.length(); | |
| 13173 for (int i = 0; i < length; ++i) { | |
| 13174 HValue* value = values_[i]; | |
| 13175 if (value != NULL && value->IsPhi() && value->block() == block) { | |
| 13176 // There is already a phi for the i'th value. | |
| 13177 HPhi* phi = HPhi::cast(value); | |
| 13178 // Assert index is correct and that we haven't missed an incoming edge. | |
| 13179 DCHECK(phi->merged_index() == i || !phi->HasMergedIndex()); | |
| 13180 DCHECK(phi->OperandCount() == block->predecessors()->length()); | |
| 13181 phi->AddInput(other->values_[i]); | |
| 13182 } else if (values_[i] != other->values_[i]) { | |
| 13183 // There is a fresh value on the incoming edge, a phi is needed. | |
| 13184 DCHECK(values_[i] != NULL && other->values_[i] != NULL); | |
| 13185 HPhi* phi = block->AddNewPhi(i); | |
| 13186 HValue* old_value = values_[i]; | |
| 13187 for (int j = 0; j < block->predecessors()->length(); j++) { | |
| 13188 phi->AddInput(old_value); | |
| 13189 } | |
| 13190 phi->AddInput(other->values_[i]); | |
| 13191 this->values_[i] = phi; | |
| 13192 } | |
| 13193 } | |
| 13194 } | |
| 13195 | |
| 13196 | |
| 13197 void HEnvironment::Bind(int index, HValue* value) { | |
| 13198 DCHECK(value != NULL); | |
| 13199 assigned_variables_.Add(index, zone()); | |
| 13200 values_[index] = value; | |
| 13201 } | |
| 13202 | |
| 13203 | |
| 13204 bool HEnvironment::HasExpressionAt(int index) const { | |
| 13205 return index >= parameter_count_ + specials_count_ + local_count_; | |
| 13206 } | |
| 13207 | |
| 13208 | |
| 13209 bool HEnvironment::ExpressionStackIsEmpty() const { | |
| 13210 DCHECK(length() >= first_expression_index()); | |
| 13211 return length() == first_expression_index(); | |
| 13212 } | |
| 13213 | |
| 13214 | |
| 13215 void HEnvironment::SetExpressionStackAt(int index_from_top, HValue* value) { | |
| 13216 int count = index_from_top + 1; | |
| 13217 int index = values_.length() - count; | |
| 13218 DCHECK(HasExpressionAt(index)); | |
| 13219 // The push count must include at least the element in question or else | |
| 13220 // the new value will not be included in this environment's history. | |
| 13221 if (push_count_ < count) { | |
| 13222 // This is the same effect as popping then re-pushing 'count' elements. | |
| 13223 pop_count_ += (count - push_count_); | |
| 13224 push_count_ = count; | |
| 13225 } | |
| 13226 values_[index] = value; | |
| 13227 } | |
| 13228 | |
| 13229 | |
| 13230 HValue* HEnvironment::RemoveExpressionStackAt(int index_from_top) { | |
| 13231 int count = index_from_top + 1; | |
| 13232 int index = values_.length() - count; | |
| 13233 DCHECK(HasExpressionAt(index)); | |
| 13234 // Simulate popping 'count' elements and then | |
| 13235 // pushing 'count - 1' elements back. | |
| 13236 pop_count_ += Max(count - push_count_, 0); | |
| 13237 push_count_ = Max(push_count_ - count, 0) + (count - 1); | |
| 13238 return values_.Remove(index); | |
| 13239 } | |
| 13240 | |
| 13241 | |
| 13242 void HEnvironment::Drop(int count) { | |
| 13243 for (int i = 0; i < count; ++i) { | |
| 13244 Pop(); | |
| 13245 } | |
| 13246 } | |
| 13247 | |
| 13248 | |
| 13249 void HEnvironment::Print() const { | |
| 13250 OFStream os(stdout); | |
| 13251 os << *this << "\n"; | |
| 13252 } | |
| 13253 | |
| 13254 | |
| 13255 HEnvironment* HEnvironment::Copy() const { | |
| 13256 return new(zone()) HEnvironment(this, zone()); | |
| 13257 } | |
| 13258 | |
| 13259 | |
| 13260 HEnvironment* HEnvironment::CopyWithoutHistory() const { | |
| 13261 HEnvironment* result = Copy(); | |
| 13262 result->ClearHistory(); | |
| 13263 return result; | |
| 13264 } | |
| 13265 | |
| 13266 | |
| 13267 HEnvironment* HEnvironment::CopyAsLoopHeader(HBasicBlock* loop_header) const { | |
| 13268 HEnvironment* new_env = Copy(); | |
| 13269 for (int i = 0; i < values_.length(); ++i) { | |
| 13270 HPhi* phi = loop_header->AddNewPhi(i); | |
| 13271 phi->AddInput(values_[i]); | |
| 13272 new_env->values_[i] = phi; | |
| 13273 } | |
| 13274 new_env->ClearHistory(); | |
| 13275 return new_env; | |
| 13276 } | |
| 13277 | |
| 13278 | |
| 13279 HEnvironment* HEnvironment::CreateStubEnvironment(HEnvironment* outer, | |
| 13280 Handle<JSFunction> target, | |
| 13281 FrameType frame_type, | |
| 13282 int arguments) const { | |
| 13283 HEnvironment* new_env = | |
| 13284 new(zone()) HEnvironment(outer, target, frame_type, | |
| 13285 arguments + 1, zone()); | |
| 13286 for (int i = 0; i <= arguments; ++i) { // Include receiver. | |
| 13287 new_env->Push(ExpressionStackAt(arguments - i)); | |
| 13288 } | |
| 13289 new_env->ClearHistory(); | |
| 13290 return new_env; | |
| 13291 } | |
| 13292 | |
| 13293 | |
| 13294 HEnvironment* HEnvironment::CopyForInlining( | |
| 13295 Handle<JSFunction> target, | |
| 13296 int arguments, | |
| 13297 FunctionLiteral* function, | |
| 13298 HConstant* undefined, | |
| 13299 InliningKind inlining_kind) const { | |
| 13300 DCHECK(frame_type() == JS_FUNCTION); | |
| 13301 | |
| 13302 // Outer environment is a copy of this one without the arguments. | |
| 13303 int arity = function->scope()->num_parameters(); | |
| 13304 | |
| 13305 HEnvironment* outer = Copy(); | |
| 13306 outer->Drop(arguments + 1); // Including receiver. | |
| 13307 outer->ClearHistory(); | |
| 13308 | |
| 13309 if (inlining_kind == CONSTRUCT_CALL_RETURN) { | |
| 13310 // Create artificial constructor stub environment. The receiver should | |
| 13311 // actually be the constructor function, but we pass the newly allocated | |
| 13312 // object instead, DoComputeConstructStubFrame() relies on that. | |
| 13313 outer = CreateStubEnvironment(outer, target, JS_CONSTRUCT, arguments); | |
| 13314 } else if (inlining_kind == GETTER_CALL_RETURN) { | |
| 13315 // We need an additional StackFrame::INTERNAL frame for restoring the | |
| 13316 // correct context. | |
| 13317 outer = CreateStubEnvironment(outer, target, JS_GETTER, arguments); | |
| 13318 } else if (inlining_kind == SETTER_CALL_RETURN) { | |
| 13319 // We need an additional StackFrame::INTERNAL frame for temporarily saving | |
| 13320 // the argument of the setter, see StoreStubCompiler::CompileStoreViaSetter. | |
| 13321 outer = CreateStubEnvironment(outer, target, JS_SETTER, arguments); | |
| 13322 } | |
| 13323 | |
| 13324 if (arity != arguments) { | |
| 13325 // Create artificial arguments adaptation environment. | |
| 13326 outer = CreateStubEnvironment(outer, target, ARGUMENTS_ADAPTOR, arguments); | |
| 13327 } | |
| 13328 | |
| 13329 HEnvironment* inner = | |
| 13330 new(zone()) HEnvironment(outer, function->scope(), target, zone()); | |
| 13331 // Get the argument values from the original environment. | |
| 13332 for (int i = 0; i <= arity; ++i) { // Include receiver. | |
| 13333 HValue* push = (i <= arguments) ? | |
| 13334 ExpressionStackAt(arguments - i) : undefined; | |
| 13335 inner->SetValueAt(i, push); | |
| 13336 } | |
| 13337 inner->SetValueAt(arity + 1, context()); | |
| 13338 for (int i = arity + 2; i < inner->length(); ++i) { | |
| 13339 inner->SetValueAt(i, undefined); | |
| 13340 } | |
| 13341 | |
| 13342 inner->set_ast_id(BailoutId::FunctionEntry()); | |
| 13343 return inner; | |
| 13344 } | |
| 13345 | |
| 13346 | |
| 13347 std::ostream& operator<<(std::ostream& os, const HEnvironment& env) { | |
| 13348 for (int i = 0; i < env.length(); i++) { | |
| 13349 if (i == 0) os << "parameters\n"; | |
| 13350 if (i == env.parameter_count()) os << "specials\n"; | |
| 13351 if (i == env.parameter_count() + env.specials_count()) os << "locals\n"; | |
| 13352 if (i == env.parameter_count() + env.specials_count() + env.local_count()) { | |
| 13353 os << "expressions\n"; | |
| 13354 } | |
| 13355 HValue* val = env.values()->at(i); | |
| 13356 os << i << ": "; | |
| 13357 if (val != NULL) { | |
| 13358 os << val; | |
| 13359 } else { | |
| 13360 os << "NULL"; | |
| 13361 } | |
| 13362 os << "\n"; | |
| 13363 } | |
| 13364 return os << "\n"; | |
| 13365 } | |
| 13366 | |
| 13367 | |
| 13368 void HTracer::TraceCompilation(CompilationInfo* info) { | |
| 13369 Tag tag(this, "compilation"); | |
| 13370 base::SmartArrayPointer<char> name = info->GetDebugName(); | |
| 13371 if (info->IsOptimizing()) { | |
| 13372 PrintStringProperty("name", name.get()); | |
| 13373 PrintIndent(); | |
| 13374 trace_.Add("method \"%s:%d\"\n", name.get(), info->optimization_id()); | |
| 13375 } else { | |
| 13376 PrintStringProperty("name", name.get()); | |
| 13377 PrintStringProperty("method", "stub"); | |
| 13378 } | |
| 13379 PrintLongProperty("date", | |
| 13380 static_cast<int64_t>(base::OS::TimeCurrentMillis())); | |
| 13381 } | |
| 13382 | |
| 13383 | |
| 13384 void HTracer::TraceLithium(const char* name, LChunk* chunk) { | |
| 13385 DCHECK(!chunk->isolate()->concurrent_recompilation_enabled()); | |
| 13386 AllowHandleDereference allow_deref; | |
| 13387 AllowDeferredHandleDereference allow_deferred_deref; | |
| 13388 Trace(name, chunk->graph(), chunk); | |
| 13389 } | |
| 13390 | |
| 13391 | |
| 13392 void HTracer::TraceHydrogen(const char* name, HGraph* graph) { | |
| 13393 DCHECK(!graph->isolate()->concurrent_recompilation_enabled()); | |
| 13394 AllowHandleDereference allow_deref; | |
| 13395 AllowDeferredHandleDereference allow_deferred_deref; | |
| 13396 Trace(name, graph, NULL); | |
| 13397 } | |
| 13398 | |
| 13399 | |
| 13400 void HTracer::Trace(const char* name, HGraph* graph, LChunk* chunk) { | |
| 13401 Tag tag(this, "cfg"); | |
| 13402 PrintStringProperty("name", name); | |
| 13403 const ZoneList<HBasicBlock*>* blocks = graph->blocks(); | |
| 13404 for (int i = 0; i < blocks->length(); i++) { | |
| 13405 HBasicBlock* current = blocks->at(i); | |
| 13406 Tag block_tag(this, "block"); | |
| 13407 PrintBlockProperty("name", current->block_id()); | |
| 13408 PrintIntProperty("from_bci", -1); | |
| 13409 PrintIntProperty("to_bci", -1); | |
| 13410 | |
| 13411 if (!current->predecessors()->is_empty()) { | |
| 13412 PrintIndent(); | |
| 13413 trace_.Add("predecessors"); | |
| 13414 for (int j = 0; j < current->predecessors()->length(); ++j) { | |
| 13415 trace_.Add(" \"B%d\"", current->predecessors()->at(j)->block_id()); | |
| 13416 } | |
| 13417 trace_.Add("\n"); | |
| 13418 } else { | |
| 13419 PrintEmptyProperty("predecessors"); | |
| 13420 } | |
| 13421 | |
| 13422 if (current->end()->SuccessorCount() == 0) { | |
| 13423 PrintEmptyProperty("successors"); | |
| 13424 } else { | |
| 13425 PrintIndent(); | |
| 13426 trace_.Add("successors"); | |
| 13427 for (HSuccessorIterator it(current->end()); !it.Done(); it.Advance()) { | |
| 13428 trace_.Add(" \"B%d\"", it.Current()->block_id()); | |
| 13429 } | |
| 13430 trace_.Add("\n"); | |
| 13431 } | |
| 13432 | |
| 13433 PrintEmptyProperty("xhandlers"); | |
| 13434 | |
| 13435 { | |
| 13436 PrintIndent(); | |
| 13437 trace_.Add("flags"); | |
| 13438 if (current->IsLoopSuccessorDominator()) { | |
| 13439 trace_.Add(" \"dom-loop-succ\""); | |
| 13440 } | |
| 13441 if (current->IsUnreachable()) { | |
| 13442 trace_.Add(" \"dead\""); | |
| 13443 } | |
| 13444 if (current->is_osr_entry()) { | |
| 13445 trace_.Add(" \"osr\""); | |
| 13446 } | |
| 13447 trace_.Add("\n"); | |
| 13448 } | |
| 13449 | |
| 13450 if (current->dominator() != NULL) { | |
| 13451 PrintBlockProperty("dominator", current->dominator()->block_id()); | |
| 13452 } | |
| 13453 | |
| 13454 PrintIntProperty("loop_depth", current->LoopNestingDepth()); | |
| 13455 | |
| 13456 if (chunk != NULL) { | |
| 13457 int first_index = current->first_instruction_index(); | |
| 13458 int last_index = current->last_instruction_index(); | |
| 13459 PrintIntProperty( | |
| 13460 "first_lir_id", | |
| 13461 LifetimePosition::FromInstructionIndex(first_index).Value()); | |
| 13462 PrintIntProperty( | |
| 13463 "last_lir_id", | |
| 13464 LifetimePosition::FromInstructionIndex(last_index).Value()); | |
| 13465 } | |
| 13466 | |
| 13467 { | |
| 13468 Tag states_tag(this, "states"); | |
| 13469 Tag locals_tag(this, "locals"); | |
| 13470 int total = current->phis()->length(); | |
| 13471 PrintIntProperty("size", current->phis()->length()); | |
| 13472 PrintStringProperty("method", "None"); | |
| 13473 for (int j = 0; j < total; ++j) { | |
| 13474 HPhi* phi = current->phis()->at(j); | |
| 13475 PrintIndent(); | |
| 13476 std::ostringstream os; | |
| 13477 os << phi->merged_index() << " " << NameOf(phi) << " " << *phi << "\n"; | |
| 13478 trace_.Add(os.str().c_str()); | |
| 13479 } | |
| 13480 } | |
| 13481 | |
| 13482 { | |
| 13483 Tag HIR_tag(this, "HIR"); | |
| 13484 for (HInstructionIterator it(current); !it.Done(); it.Advance()) { | |
| 13485 HInstruction* instruction = it.Current(); | |
| 13486 int uses = instruction->UseCount(); | |
| 13487 PrintIndent(); | |
| 13488 std::ostringstream os; | |
| 13489 os << "0 " << uses << " " << NameOf(instruction) << " " << *instruction; | |
| 13490 if (graph->info()->is_tracking_positions() && | |
| 13491 instruction->has_position() && instruction->position().raw() != 0) { | |
| 13492 const SourcePosition pos = instruction->position(); | |
| 13493 os << " pos:"; | |
| 13494 if (pos.inlining_id() != 0) os << pos.inlining_id() << "_"; | |
| 13495 os << pos.position(); | |
| 13496 } | |
| 13497 os << " <|@\n"; | |
| 13498 trace_.Add(os.str().c_str()); | |
| 13499 } | |
| 13500 } | |
| 13501 | |
| 13502 | |
| 13503 if (chunk != NULL) { | |
| 13504 Tag LIR_tag(this, "LIR"); | |
| 13505 int first_index = current->first_instruction_index(); | |
| 13506 int last_index = current->last_instruction_index(); | |
| 13507 if (first_index != -1 && last_index != -1) { | |
| 13508 const ZoneList<LInstruction*>* instructions = chunk->instructions(); | |
| 13509 for (int i = first_index; i <= last_index; ++i) { | |
| 13510 LInstruction* linstr = instructions->at(i); | |
| 13511 if (linstr != NULL) { | |
| 13512 PrintIndent(); | |
| 13513 trace_.Add("%d ", | |
| 13514 LifetimePosition::FromInstructionIndex(i).Value()); | |
| 13515 linstr->PrintTo(&trace_); | |
| 13516 std::ostringstream os; | |
| 13517 os << " [hir:" << NameOf(linstr->hydrogen_value()) << "] <|@\n"; | |
| 13518 trace_.Add(os.str().c_str()); | |
| 13519 } | |
| 13520 } | |
| 13521 } | |
| 13522 } | |
| 13523 } | |
| 13524 } | |
| 13525 | |
| 13526 | |
| 13527 void HTracer::TraceLiveRanges(const char* name, LAllocator* allocator) { | |
| 13528 Tag tag(this, "intervals"); | |
| 13529 PrintStringProperty("name", name); | |
| 13530 | |
| 13531 const Vector<LiveRange*>* fixed_d = allocator->fixed_double_live_ranges(); | |
| 13532 for (int i = 0; i < fixed_d->length(); ++i) { | |
| 13533 TraceLiveRange(fixed_d->at(i), "fixed", allocator->zone()); | |
| 13534 } | |
| 13535 | |
| 13536 const Vector<LiveRange*>* fixed = allocator->fixed_live_ranges(); | |
| 13537 for (int i = 0; i < fixed->length(); ++i) { | |
| 13538 TraceLiveRange(fixed->at(i), "fixed", allocator->zone()); | |
| 13539 } | |
| 13540 | |
| 13541 const ZoneList<LiveRange*>* live_ranges = allocator->live_ranges(); | |
| 13542 for (int i = 0; i < live_ranges->length(); ++i) { | |
| 13543 TraceLiveRange(live_ranges->at(i), "object", allocator->zone()); | |
| 13544 } | |
| 13545 } | |
| 13546 | |
| 13547 | |
| 13548 void HTracer::TraceLiveRange(LiveRange* range, const char* type, | |
| 13549 Zone* zone) { | |
| 13550 if (range != NULL && !range->IsEmpty()) { | |
| 13551 PrintIndent(); | |
| 13552 trace_.Add("%d %s", range->id(), type); | |
| 13553 if (range->HasRegisterAssigned()) { | |
| 13554 LOperand* op = range->CreateAssignedOperand(zone); | |
| 13555 int assigned_reg = op->index(); | |
| 13556 if (op->IsDoubleRegister()) { | |
| 13557 trace_.Add(" \"%s\"", | |
| 13558 DoubleRegister::from_code(assigned_reg).ToString()); | |
| 13559 } else { | |
| 13560 DCHECK(op->IsRegister()); | |
| 13561 trace_.Add(" \"%s\"", Register::from_code(assigned_reg).ToString()); | |
| 13562 } | |
| 13563 } else if (range->IsSpilled()) { | |
| 13564 LOperand* op = range->TopLevel()->GetSpillOperand(); | |
| 13565 if (op->IsDoubleStackSlot()) { | |
| 13566 trace_.Add(" \"double_stack:%d\"", op->index()); | |
| 13567 } else { | |
| 13568 DCHECK(op->IsStackSlot()); | |
| 13569 trace_.Add(" \"stack:%d\"", op->index()); | |
| 13570 } | |
| 13571 } | |
| 13572 int parent_index = -1; | |
| 13573 if (range->IsChild()) { | |
| 13574 parent_index = range->parent()->id(); | |
| 13575 } else { | |
| 13576 parent_index = range->id(); | |
| 13577 } | |
| 13578 LOperand* op = range->FirstHint(); | |
| 13579 int hint_index = -1; | |
| 13580 if (op != NULL && op->IsUnallocated()) { | |
| 13581 hint_index = LUnallocated::cast(op)->virtual_register(); | |
| 13582 } | |
| 13583 trace_.Add(" %d %d", parent_index, hint_index); | |
| 13584 UseInterval* cur_interval = range->first_interval(); | |
| 13585 while (cur_interval != NULL && range->Covers(cur_interval->start())) { | |
| 13586 trace_.Add(" [%d, %d[", | |
| 13587 cur_interval->start().Value(), | |
| 13588 cur_interval->end().Value()); | |
| 13589 cur_interval = cur_interval->next(); | |
| 13590 } | |
| 13591 | |
| 13592 UsePosition* current_pos = range->first_pos(); | |
| 13593 while (current_pos != NULL) { | |
| 13594 if (current_pos->RegisterIsBeneficial() || FLAG_trace_all_uses) { | |
| 13595 trace_.Add(" %d M", current_pos->pos().Value()); | |
| 13596 } | |
| 13597 current_pos = current_pos->next(); | |
| 13598 } | |
| 13599 | |
| 13600 trace_.Add(" \"\"\n"); | |
| 13601 } | |
| 13602 } | |
| 13603 | |
| 13604 | |
| 13605 void HTracer::FlushToFile() { | |
| 13606 AppendChars(filename_.start(), trace_.ToCString().get(), trace_.length(), | |
| 13607 false); | |
| 13608 trace_.Reset(); | |
| 13609 } | |
| 13610 | |
| 13611 | |
| 13612 void HStatistics::Initialize(CompilationInfo* info) { | |
| 13613 if (!info->has_shared_info()) return; | |
| 13614 source_size_ += info->shared_info()->SourceSize(); | |
| 13615 } | |
| 13616 | |
| 13617 | |
| 13618 void HStatistics::Print() { | |
| 13619 PrintF( | |
| 13620 "\n" | |
| 13621 "----------------------------------------" | |
| 13622 "----------------------------------------\n" | |
| 13623 "--- Hydrogen timing results:\n" | |
| 13624 "----------------------------------------" | |
| 13625 "----------------------------------------\n"); | |
| 13626 base::TimeDelta sum; | |
| 13627 for (int i = 0; i < times_.length(); ++i) { | |
| 13628 sum += times_[i]; | |
| 13629 } | |
| 13630 | |
| 13631 for (int i = 0; i < names_.length(); ++i) { | |
| 13632 PrintF("%33s", names_[i]); | |
| 13633 double ms = times_[i].InMillisecondsF(); | |
| 13634 double percent = times_[i].PercentOf(sum); | |
| 13635 PrintF(" %8.3f ms / %4.1f %% ", ms, percent); | |
| 13636 | |
| 13637 size_t size = sizes_[i]; | |
| 13638 double size_percent = static_cast<double>(size) * 100 / total_size_; | |
| 13639 PrintF(" %9zu bytes / %4.1f %%\n", size, size_percent); | |
| 13640 } | |
| 13641 | |
| 13642 PrintF( | |
| 13643 "----------------------------------------" | |
| 13644 "----------------------------------------\n"); | |
| 13645 base::TimeDelta total = create_graph_ + optimize_graph_ + generate_code_; | |
| 13646 PrintF("%33s %8.3f ms / %4.1f %% \n", "Create graph", | |
| 13647 create_graph_.InMillisecondsF(), create_graph_.PercentOf(total)); | |
| 13648 PrintF("%33s %8.3f ms / %4.1f %% \n", "Optimize graph", | |
| 13649 optimize_graph_.InMillisecondsF(), optimize_graph_.PercentOf(total)); | |
| 13650 PrintF("%33s %8.3f ms / %4.1f %% \n", "Generate and install code", | |
| 13651 generate_code_.InMillisecondsF(), generate_code_.PercentOf(total)); | |
| 13652 PrintF( | |
| 13653 "----------------------------------------" | |
| 13654 "----------------------------------------\n"); | |
| 13655 PrintF("%33s %8.3f ms %9zu bytes\n", "Total", | |
| 13656 total.InMillisecondsF(), total_size_); | |
| 13657 PrintF("%33s (%.1f times slower than full code gen)\n", "", | |
| 13658 total.TimesOf(full_code_gen_)); | |
| 13659 | |
| 13660 double source_size_in_kb = static_cast<double>(source_size_) / 1024; | |
| 13661 double normalized_time = source_size_in_kb > 0 | |
| 13662 ? total.InMillisecondsF() / source_size_in_kb | |
| 13663 : 0; | |
| 13664 double normalized_size_in_kb = | |
| 13665 source_size_in_kb > 0 | |
| 13666 ? static_cast<double>(total_size_) / 1024 / source_size_in_kb | |
| 13667 : 0; | |
| 13668 PrintF("%33s %8.3f ms %7.3f kB allocated\n", | |
| 13669 "Average per kB source", normalized_time, normalized_size_in_kb); | |
| 13670 } | |
| 13671 | |
| 13672 | |
| 13673 void HStatistics::SaveTiming(const char* name, base::TimeDelta time, | |
| 13674 size_t size) { | |
| 13675 total_size_ += size; | |
| 13676 for (int i = 0; i < names_.length(); ++i) { | |
| 13677 if (strcmp(names_[i], name) == 0) { | |
| 13678 times_[i] += time; | |
| 13679 sizes_[i] += size; | |
| 13680 return; | |
| 13681 } | |
| 13682 } | |
| 13683 names_.Add(name); | |
| 13684 times_.Add(time); | |
| 13685 sizes_.Add(size); | |
| 13686 } | |
| 13687 | |
| 13688 | |
| 13689 HPhase::~HPhase() { | |
| 13690 if (ShouldProduceTraceOutput()) { | |
| 13691 isolate()->GetHTracer()->TraceHydrogen(name(), graph_); | |
| 13692 } | |
| 13693 | |
| 13694 #ifdef DEBUG | |
| 13695 graph_->Verify(false); // No full verify. | |
| 13696 #endif | |
| 13697 } | |
| 13698 | |
| 13699 } // namespace internal | |
| 13700 } // namespace v8 | |
| OLD | NEW |