[ic] Use validity cells to protect keyed element stores against object's prototype chain modificati…

src/ic/accessor-assembler-impl.h

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef V8_SRC_IC_ACCESSOR_ASSEMBLER_IMPL_H_
 #define V8_SRC_IC_ACCESSOR_ASSEMBLER_IMPL_H_
 
 #include "src/code-stub-assembler.h"
 
 namespace v8 {
@@ skipping 63 matching lines @@
   };
 
   struct StoreICParameters : public LoadICParameters {
     StoreICParameters(Node* context, Node* receiver, Node* name, Node* value,
                       Node* slot, Node* vector)
         : LoadICParameters(context, receiver, name, slot, vector),
           value(value) {}
     Node* value;
   };
 
-  void HandleStoreICHandlerCase(const StoreICParameters* p, Node* handler,
-                                Label* miss);
+  enum ElementSupport { kOnlyProperties, kSupportElements };
+  void HandleStoreICHandlerCase(
+      const StoreICParameters* p, Node* handler, Label* miss,
+      ElementSupport support_elements = kOnlyProperties);
 
  private:
-  enum ElementSupport { kOnlyProperties, kSupportElements };
-
   // Stub generation entry points.
 
   void LoadIC(const LoadICParameters* p);
   void LoadICProtoArray(const LoadICParameters* p, Node* handler,
                         bool throw_reference_error_if_nonexistent);
   void LoadGlobalIC(const LoadICParameters* p, TypeofMode typeof_mode);
   void KeyedLoadIC(const LoadICParameters* p);
   void KeyedLoadICGeneric(const LoadICParameters* p);
   void StoreIC(const StoreICParameters* p);
   void KeyedStoreIC(const StoreICParameters* p, LanguageMode language_mode);
@@ skipping 35 matching lines @@
                                   bool throw_reference_error_if_nonexistent);
 
   // LoadGlobalIC implementation.
 
   void HandleLoadGlobalICHandlerCase(const LoadICParameters* p, Node* handler,
                                      Label* miss,
                                      bool throw_reference_error_if_nonexistent);
 
   // StoreIC implementation.
 
+  void HandleStoreICElementHandlerCase(const StoreICParameters* p,
+                                       Node* handler, Label* miss);
+
   void HandleStoreICProtoHandler(const StoreICParameters* p, Node* handler,
                                  Label* miss);
   // If |transition| is nullptr then the normal field store is generated or
   // transitioning store otherwise.
   void HandleStoreICSmiHandlerCase(Node* handler_word, Node* holder,
                                    Node* value, Node* transition, Label* miss);
   // If |transition| is nullptr then the normal field store is generated or
   // transitioning store otherwise.
   void HandleStoreFieldAndReturn(Node* handler_word, Node* holder,
                                  Representation representation, Node* value,
@@ skipping 24 matching lines @@
   void TryProbeStubCacheTable(StubCache* stub_cache, StubCacheTable table_id,
                               Node* entry_offset, Node* name, Node* map,
                               Label* if_handler, Variable* var_handler,
                               Label* if_miss);
 };
 
 }  // namespace internal
 }  // namespace v8
 
 #endif  // V8_SRC_IC_ACCESSOR_ASSEMBLER_IMPL_H_