| OLD | NEW |
| 1 // Copyright 2014 the V8 project authors. All rights reserved. | 1 // Copyright 2014 the V8 project authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "src/lookup.h" | 5 #include "src/lookup.h" |
| 6 | 6 |
| 7 #include "src/bootstrapper.h" | 7 #include "src/bootstrapper.h" |
| 8 #include "src/deoptimizer.h" | 8 #include "src/deoptimizer.h" |
| 9 #include "src/elements.h" | 9 #include "src/elements.h" |
| 10 #include "src/isolate-inl.h" | 10 #include "src/isolate-inl.h" |
| (...skipping 104 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 115 | 115 |
| 116 | 116 |
| 117 Handle<Map> LookupIterator::GetReceiverMap() const { | 117 Handle<Map> LookupIterator::GetReceiverMap() const { |
| 118 if (receiver_->IsNumber()) return factory()->heap_number_map(); | 118 if (receiver_->IsNumber()) return factory()->heap_number_map(); |
| 119 return handle(Handle<HeapObject>::cast(receiver_)->map(), isolate_); | 119 return handle(Handle<HeapObject>::cast(receiver_)->map(), isolate_); |
| 120 } | 120 } |
| 121 | 121 |
| 122 | 122 |
| 123 Handle<JSObject> LookupIterator::GetStoreTarget() const { | 123 Handle<JSObject> LookupIterator::GetStoreTarget() const { |
| 124 if (receiver_->IsJSGlobalProxy()) { | 124 if (receiver_->IsJSGlobalProxy()) { |
| 125 PrototypeIterator iter(isolate(), Handle<JSGlobalProxy>::cast(receiver_)); | 125 Object* prototype = JSGlobalProxy::cast(*receiver_)->map()->prototype(); |
| 126 if (iter.IsAtEnd()) return Handle<JSGlobalProxy>::cast(receiver_); | 126 if (!prototype->IsNull()) { |
| 127 return PrototypeIterator::GetCurrent<JSGlobalObject>(iter); | 127 return handle(JSGlobalObject::cast(prototype), isolate_); |
| 128 } |
| 128 } | 129 } |
| 129 return Handle<JSObject>::cast(receiver_); | 130 return Handle<JSObject>::cast(receiver_); |
| 130 } | 131 } |
| 131 | 132 |
| 132 | 133 |
| 133 bool LookupIterator::HasAccess() const { | 134 bool LookupIterator::HasAccess() const { |
| 134 DCHECK_EQ(ACCESS_CHECK, state_); | 135 DCHECK_EQ(ACCESS_CHECK, state_); |
| 135 return isolate_->MayAccess(handle(isolate_->context()), | 136 return isolate_->MayAccess(handle(isolate_->context()), |
| 136 GetHolder<JSObject>()); | 137 GetHolder<JSObject>()); |
| 137 } | 138 } |
| (...skipping 87 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 225 ReloadPropertyInformation(); | 226 ReloadPropertyInformation(); |
| 226 WriteDataValue(value); | 227 WriteDataValue(value); |
| 227 | 228 |
| 228 #if VERIFY_HEAP | 229 #if VERIFY_HEAP |
| 229 if (FLAG_verify_heap) { | 230 if (FLAG_verify_heap) { |
| 230 holder->JSObjectVerify(); | 231 holder->JSObjectVerify(); |
| 231 } | 232 } |
| 232 #endif | 233 #endif |
| 233 } | 234 } |
| 234 | 235 |
| 235 | 236 // Can only be called when the receiver is a JSObject. JSProxy has to be handled |
| 237 // via a trap. Adding properties to primitive values is not observable. |
| 236 void LookupIterator::PrepareTransitionToDataProperty( | 238 void LookupIterator::PrepareTransitionToDataProperty( |
| 237 Handle<Object> value, PropertyAttributes attributes, | 239 Handle<JSObject> receiver, Handle<Object> value, |
| 238 Object::StoreFromKeyed store_mode) { | 240 PropertyAttributes attributes, Object::StoreFromKeyed store_mode) { |
| 241 DCHECK(receiver.is_identical_to(GetStoreTarget())); |
| 239 if (state_ == TRANSITION) return; | 242 if (state_ == TRANSITION) return; |
| 240 DCHECK(state_ != LookupIterator::ACCESSOR || | 243 DCHECK(state_ != LookupIterator::ACCESSOR || |
| 241 (GetAccessors()->IsAccessorInfo() && | 244 (GetAccessors()->IsAccessorInfo() && |
| 242 AccessorInfo::cast(*GetAccessors())->is_special_data_property())); | 245 AccessorInfo::cast(*GetAccessors())->is_special_data_property())); |
| 243 DCHECK_NE(INTEGER_INDEXED_EXOTIC, state_); | 246 DCHECK_NE(INTEGER_INDEXED_EXOTIC, state_); |
| 244 DCHECK(state_ == NOT_FOUND || !HolderIsReceiverOrHiddenPrototype()); | 247 DCHECK(state_ == NOT_FOUND || !HolderIsReceiverOrHiddenPrototype()); |
| 245 // Can only be called when the receiver is a JSObject. JSProxy has to be | |
| 246 // handled via a trap. Adding properties to primitive values is not | |
| 247 // observable. | |
| 248 Handle<JSObject> receiver = GetStoreTarget(); | |
| 249 | |
| 250 if (!isolate()->IsInternallyUsedPropertyName(name()) && | |
| 251 !receiver->map()->is_extensible()) { | |
| 252 return; | |
| 253 } | |
| 254 | 248 |
| 255 auto transition = Map::TransitionToDataProperty( | 249 auto transition = Map::TransitionToDataProperty( |
| 256 handle(receiver->map(), isolate_), name_, value, attributes, store_mode); | 250 handle(receiver->map(), isolate_), name_, value, attributes, store_mode); |
| 257 state_ = TRANSITION; | 251 state_ = TRANSITION; |
| 258 transition_ = transition; | 252 transition_ = transition; |
| 259 | 253 |
| 260 if (receiver->IsJSGlobalObject()) { | 254 if (receiver->IsJSGlobalObject()) { |
| 261 // Install a property cell. | 255 // Install a property cell. |
| 262 InternalizeName(); | 256 InternalizeName(); |
| 263 auto cell = JSGlobalObject::EnsurePropertyCell( | 257 auto cell = JSGlobalObject::EnsurePropertyCell( |
| 264 Handle<JSGlobalObject>::cast(receiver), name()); | 258 Handle<JSGlobalObject>::cast(receiver), name()); |
| 265 DCHECK(cell->value()->IsTheHole()); | 259 DCHECK(cell->value()->IsTheHole()); |
| 266 transition_ = cell; | 260 transition_ = cell; |
| 267 } else if (!transition->is_dictionary_map()) { | 261 } else if (!transition->is_dictionary_map()) { |
| 268 property_details_ = transition->GetLastDescriptorDetails(); | 262 property_details_ = transition->GetLastDescriptorDetails(); |
| 269 has_property_ = true; | 263 has_property_ = true; |
| 270 } | 264 } |
| 271 } | 265 } |
| 272 | 266 |
| 273 | 267 void LookupIterator::ApplyTransitionToDataProperty(Handle<JSObject> receiver) { |
| 274 void LookupIterator::ApplyTransitionToDataProperty() { | |
| 275 DCHECK_EQ(TRANSITION, state_); | 268 DCHECK_EQ(TRANSITION, state_); |
| 276 | 269 |
| 277 Handle<JSObject> receiver = GetStoreTarget(); | 270 DCHECK(receiver.is_identical_to(GetStoreTarget())); |
| 271 |
| 278 if (receiver->IsJSGlobalObject()) return; | 272 if (receiver->IsJSGlobalObject()) return; |
| 279 holder_ = receiver; | 273 holder_ = receiver; |
| 280 Handle<Map> transition = transition_map(); | 274 Handle<Map> transition = transition_map(); |
| 281 bool simple_transition = transition->GetBackPointer() == receiver->map(); | 275 bool simple_transition = transition->GetBackPointer() == receiver->map(); |
| 282 holder_map_ = transition; | 276 holder_map_ = transition; |
| 283 JSObject::MigrateToMap(receiver, holder_map_); | 277 JSObject::MigrateToMap(receiver, holder_map_); |
| 284 | 278 |
| 285 if (simple_transition) { | 279 if (simple_transition) { |
| 286 int number = transition->LastAdded(); | 280 int number = transition->LastAdded(); |
| 287 number_ = static_cast<uint32_t>(number); | 281 number_ = static_cast<uint32_t>(number); |
| (...skipping 405 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 693 // Fall through. | 687 // Fall through. |
| 694 default: | 688 default: |
| 695 return NOT_FOUND; | 689 return NOT_FOUND; |
| 696 } | 690 } |
| 697 UNREACHABLE(); | 691 UNREACHABLE(); |
| 698 return state_; | 692 return state_; |
| 699 } | 693 } |
| 700 | 694 |
| 701 } // namespace internal | 695 } // namespace internal |
| 702 } // namespace v8 | 696 } // namespace v8 |
| OLD | NEW |