Chromium Code Reviews

Side by Side Diff: src/compiler/js-typed-lowering.h

Issue 1447323005: Fix argument allocation dangling effect chains (Closed) Base URL: https://chromium.googlesource.com/v8/v8.git@master
Patch Set: Account for zero arguments Created 5 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments.
Jump to:
View unified diff |
« no previous file with comments | « no previous file | src/compiler/js-typed-lowering.cc » ('j') | src/compiler/js-typed-lowering.cc » ('J')
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2014 the V8 project authors. All rights reserved. 1 // Copyright 2014 the V8 project authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef V8_COMPILER_JS_TYPED_LOWERING_H_ 5 #ifndef V8_COMPILER_JS_TYPED_LOWERING_H_
6 #define V8_COMPILER_JS_TYPED_LOWERING_H_ 6 #define V8_COMPILER_JS_TYPED_LOWERING_H_
7 7
8 #include "src/base/flags.h" 8 #include "src/base/flags.h"
9 #include "src/compiler/graph-reducer.h" 9 #include "src/compiler/graph-reducer.h"
10 #include "src/compiler/opcodes.h" 10 #include "src/compiler/opcodes.h"
(...skipping 68 matching lines...)
79 Reduction ReduceJSForInDone(Node* node); 79 Reduction ReduceJSForInDone(Node* node);
80 Reduction ReduceJSForInNext(Node* node); 80 Reduction ReduceJSForInNext(Node* node);
81 Reduction ReduceJSForInPrepare(Node* node); 81 Reduction ReduceJSForInPrepare(Node* node);
82 Reduction ReduceJSForInStep(Node* node); 82 Reduction ReduceJSForInStep(Node* node);
83 Reduction ReduceNumberBinop(Node* node, const Operator* numberOp); 83 Reduction ReduceNumberBinop(Node* node, const Operator* numberOp);
84 Reduction ReduceInt32Binop(Node* node, const Operator* intOp); 84 Reduction ReduceInt32Binop(Node* node, const Operator* intOp);
85 Reduction ReduceUI32Shift(Node* node, Signedness left_signedness, 85 Reduction ReduceUI32Shift(Node* node, Signedness left_signedness,
86 const Operator* shift_op); 86 const Operator* shift_op);
87 87
88 Node* Word32Shl(Node* const lhs, int32_t const rhs); 88 Node* Word32Shl(Node* const lhs, int32_t const rhs);
89 Node* AllocateArguments(Node* effect, Node* control, Node* frame_state); 89 Node* AllocateArguments(Node** effect, Node* control, Node* frame_state);
90 Node* AllocateAliasedArguments(Node* effect, Node* control, Node* frame_state, 90 Node* AllocateAliasedArguments(Node** effect, Node* control,
91 Node* context, Handle<SharedFunctionInfo>, 91 Node* frame_state, Node* context,
92 Handle<SharedFunctionInfo>,
92 bool* has_aliased_arguments); 93 bool* has_aliased_arguments);
93 94
94 Factory* factory() const; 95 Factory* factory() const;
95 Graph* graph() const; 96 Graph* graph() const;
96 JSGraph* jsgraph() const { return jsgraph_; } 97 JSGraph* jsgraph() const { return jsgraph_; }
97 Isolate* isolate() const; 98 Isolate* isolate() const;
98 JSOperatorBuilder* javascript() const; 99 JSOperatorBuilder* javascript() const;
99 CommonOperatorBuilder* common() const; 100 CommonOperatorBuilder* common() const;
100 SimplifiedOperatorBuilder* simplified() const; 101 SimplifiedOperatorBuilder* simplified() const;
101 MachineOperatorBuilder* machine() const; 102 MachineOperatorBuilder* machine() const;
(...skipping 10 matching lines...)
112 Type* shifted_int32_ranges_[4]; 113 Type* shifted_int32_ranges_[4];
113 }; 114 };
114 115
115 DEFINE_OPERATORS_FOR_FLAGS(JSTypedLowering::Flags) 116 DEFINE_OPERATORS_FOR_FLAGS(JSTypedLowering::Flags)
116 117
117 } // namespace compiler 118 } // namespace compiler
118 } // namespace internal 119 } // namespace internal
119 } // namespace v8 120 } // namespace v8
120 121
121 #endif // V8_COMPILER_JS_TYPED_LOWERING_H_ 122 #endif // V8_COMPILER_JS_TYPED_LOWERING_H_
OLDNEW
« no previous file with comments | « no previous file | src/compiler/js-typed-lowering.cc » ('j') | src/compiler/js-typed-lowering.cc » ('J')

Powered by Google App Engine