| Index: src/ic/mips64/handler-compiler-mips64.cc
|
| diff --git a/src/ic/mips64/handler-compiler-mips64.cc b/src/ic/mips64/handler-compiler-mips64.cc
|
| index 81a9b3f65cecae4b0224a9924b555663ad0f42f9..d2eb2d1d8676b929d62941f5af7bb322bbd224b9 100644
|
| --- a/src/ic/mips64/handler-compiler-mips64.cc
|
| +++ b/src/ic/mips64/handler-compiler-mips64.cc
|
| @@ -423,28 +423,25 @@ Register PropertyHandlerCompiler::CheckPrototypes(
|
| DCHECK(!scratch2.is(object_reg) && !scratch2.is(holder_reg) &&
|
| !scratch2.is(scratch1));
|
|
|
| - if (FLAG_eliminate_prototype_chain_checks) {
|
| - Handle<Cell> validity_cell =
|
| - Map::GetOrCreatePrototypeChainValidityCell(receiver_map, isolate());
|
| - if (!validity_cell.is_null()) {
|
| - DCHECK_EQ(Smi::FromInt(Map::kPrototypeChainValid),
|
| - validity_cell->value());
|
| - __ li(scratch1, Operand(validity_cell));
|
| - __ ld(scratch1, FieldMemOperand(scratch1, Cell::kValueOffset));
|
| - __ Branch(miss, ne, scratch1,
|
| - Operand(Smi::FromInt(Map::kPrototypeChainValid)));
|
| - }
|
| + Handle<Cell> validity_cell =
|
| + Map::GetOrCreatePrototypeChainValidityCell(receiver_map, isolate());
|
| + if (!validity_cell.is_null()) {
|
| + DCHECK_EQ(Smi::FromInt(Map::kPrototypeChainValid), validity_cell->value());
|
| + __ li(scratch1, Operand(validity_cell));
|
| + __ ld(scratch1, FieldMemOperand(scratch1, Cell::kValueOffset));
|
| + __ Branch(miss, ne, scratch1,
|
| + Operand(Smi::FromInt(Map::kPrototypeChainValid)));
|
| + }
|
|
|
| - // The prototype chain of primitives (and their JSValue wrappers) depends
|
| - // on the native context, which can't be guarded by validity cells.
|
| - // |object_reg| holds the native context specific prototype in this case;
|
| - // we need to check its map.
|
| - if (check == CHECK_ALL_MAPS) {
|
| - __ ld(scratch1, FieldMemOperand(object_reg, HeapObject::kMapOffset));
|
| - Handle<WeakCell> cell = Map::WeakCellForMap(receiver_map);
|
| - __ GetWeakValue(scratch2, cell);
|
| - __ Branch(miss, ne, scratch1, Operand(scratch2));
|
| - }
|
| + // The prototype chain of primitives (and their JSValue wrappers) depends
|
| + // on the native context, which can't be guarded by validity cells.
|
| + // |object_reg| holds the native context specific prototype in this case;
|
| + // we need to check its map.
|
| + if (check == CHECK_ALL_MAPS) {
|
| + __ ld(scratch1, FieldMemOperand(object_reg, HeapObject::kMapOffset));
|
| + Handle<WeakCell> cell = Map::WeakCellForMap(receiver_map);
|
| + __ GetWeakValue(scratch2, cell);
|
| + __ Branch(miss, ne, scratch1, Operand(scratch2));
|
| }
|
|
|
| // Keep track of the current object in register reg.
|
| @@ -480,8 +477,10 @@ Register PropertyHandlerCompiler::CheckPrototypes(
|
| !current_map->is_access_check_needed());
|
|
|
| prototype = handle(JSObject::cast(current_map->prototype()));
|
| - if (current_map->is_dictionary_map() &&
|
| - !current_map->IsJSGlobalObjectMap()) {
|
| + if (current_map->IsJSGlobalObjectMap()) {
|
| + GenerateCheckPropertyCell(masm(), Handle<JSGlobalObject>::cast(current),
|
| + name, scratch2, miss);
|
| + } else if (current_map->is_dictionary_map()) {
|
| DCHECK(!current_map->IsJSGlobalProxyMap()); // Proxy maps are fast.
|
| if (!name->IsUniqueName()) {
|
| DCHECK(name->IsString());
|
| @@ -491,33 +490,12 @@ Register PropertyHandlerCompiler::CheckPrototypes(
|
| current->property_dictionary()->FindEntry(name) ==
|
| NameDictionary::kNotFound);
|
|
|
| - if (FLAG_eliminate_prototype_chain_checks && depth > 1) {
|
| + if (depth > 1) {
|
| // TODO(jkummerow): Cache and re-use weak cell.
|
| __ LoadWeakValue(reg, isolate()->factory()->NewWeakCell(current), miss);
|
| }
|
| GenerateDictionaryNegativeLookup(masm(), miss, reg, name, scratch1,
|
| scratch2);
|
| - if (!FLAG_eliminate_prototype_chain_checks) {
|
| - __ ld(scratch1, FieldMemOperand(reg, HeapObject::kMapOffset));
|
| - __ ld(holder_reg, FieldMemOperand(scratch1, Map::kPrototypeOffset));
|
| - }
|
| - } else {
|
| - Register map_reg = scratch1;
|
| - if (!FLAG_eliminate_prototype_chain_checks) {
|
| - __ ld(map_reg, FieldMemOperand(reg, HeapObject::kMapOffset));
|
| - }
|
| - if (current_map->IsJSGlobalObjectMap()) {
|
| - GenerateCheckPropertyCell(masm(), Handle<JSGlobalObject>::cast(current),
|
| - name, scratch2, miss);
|
| - } else if (!FLAG_eliminate_prototype_chain_checks &&
|
| - (depth != 1 || check == CHECK_ALL_MAPS)) {
|
| - Handle<WeakCell> cell = Map::WeakCellForMap(current_map);
|
| - __ GetWeakValue(scratch2, cell);
|
| - __ Branch(miss, ne, scratch2, Operand(map_reg));
|
| - }
|
| - if (!FLAG_eliminate_prototype_chain_checks) {
|
| - __ ld(holder_reg, FieldMemOperand(map_reg, Map::kPrototypeOffset));
|
| - }
|
| }
|
|
|
| reg = holder_reg; // From now on the object will be in holder_reg.
|
| @@ -531,17 +509,8 @@ Register PropertyHandlerCompiler::CheckPrototypes(
|
| // Log the check depth.
|
| LOG(isolate(), IntEvent("check-maps-depth", depth + 1));
|
|
|
| - if (!FLAG_eliminate_prototype_chain_checks &&
|
| - (depth != 0 || check == CHECK_ALL_MAPS)) {
|
| - // Check the holder map.
|
| - __ ld(scratch1, FieldMemOperand(reg, HeapObject::kMapOffset));
|
| - Handle<WeakCell> cell = Map::WeakCellForMap(current_map);
|
| - __ GetWeakValue(scratch2, cell);
|
| - __ Branch(miss, ne, scratch2, Operand(scratch1));
|
| - }
|
| -
|
| bool return_holder = return_what == RETURN_HOLDER;
|
| - if (FLAG_eliminate_prototype_chain_checks && return_holder && depth != 0) {
|
| + if (return_holder && depth != 0) {
|
| __ LoadWeakValue(reg, isolate()->factory()->NewWeakCell(current), miss);
|
| }
|
|
|
|
|