MIPS: Port '[x86] Also deal with holey arrays in the Apply builtin.'

src/builtins/mips64/builtins-mips64.cc

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #if V8_TARGET_ARCH_MIPS64
 
 #include "src/codegen.h"
 #include "src/debug/debug.h"
 #include "src/deoptimizer.h"
 #include "src/full-codegen/full-codegen.h"
@@ skipping 2126 matching lines @@
 
   Register arguments_list = a0;
   Register target = a1;
   Register new_target = a3;
 
   Register args = a0;
   Register len = a2;
 
   // Create the list of arguments from the array-like argumentsList.
   {
-    Label create_arguments, create_array, create_runtime, done_create;
+    Label create_arguments, create_array, create_holey_array, create_runtime,
+        done_create;
     __ JumpIfSmi(arguments_list, &create_runtime);
 
     // Load the map of argumentsList into a2.
     Register arguments_list_map = a2;
     __ ld(arguments_list_map,
           FieldMemOperand(arguments_list, HeapObject::kMapOffset));
 
     // Load native context into a4.
     Register native_context = a4;
     __ ld(native_context, NativeContextMemOperand());
@@ skipping 27 matching lines @@
     __ bind(&create_arguments);
     __ lw(len, UntagSmiFieldMemOperand(arguments_list,
                                        JSArgumentsObject::kLengthOffset));
     __ ld(a4, FieldMemOperand(arguments_list, JSObject::kElementsOffset));
     __ lw(at, UntagSmiFieldMemOperand(a4, FixedArray::kLengthOffset));
     __ Branch(&create_runtime, ne, len, Operand(at));
     __ mov(args, a4);
 
     __ Branch(&done_create);
 
+    // For holey JSArrays we need to check that the array prototype chain
+    // protector is intact and our prototype is the Array.prototype actually.
+    __ bind(&create_holey_array);
+    __ ld(a2, FieldMemOperand(a2, Map::kPrototypeOffset));
+    __ ld(at, ContextMemOperand(t0, Context::INITIAL_ARRAY_PROTOTYPE_INDEX));
+    __ Branch(&create_runtime, ne, a2, Operand(at));
+    __ LoadRoot(t0, Heap::kArrayProtectorRootIndex);
+    __ lw(a2, UntagSmiFieldMemOperand(t0, PropertyCell::kValueOffset));
+    __ Branch(&create_runtime, ne, a2,
+              Operand(Smi::FromInt(Isolate::kProtectorValid)));
+    __ lw(a2, UntagSmiFieldMemOperand(a0, JSArray::kLengthOffset));
+    __ ld(a0, FieldMemOperand(a0, JSArray::kElementsOffset));
+    __ Branch(&done_create);
+
     // Try to create the list from a JSArray object.
     __ bind(&create_array);
     __ ld(a2, FieldMemOperand(a2, Map::kBitField2Offset));
     __ DecodeField<Map::ElementsKindBits>(a2);
     STATIC_ASSERT(FAST_SMI_ELEMENTS == 0);
     STATIC_ASSERT(FAST_ELEMENTS == 2);
+    STATIC_ASSERT(FAST_HOLEY_ELEMENTS == 3);
+    __ Branch(&create_holey_array, eq, a2, Operand(FAST_HOLEY_SMI_ELEMENTS));
+    __ Branch(&create_holey_array, eq, a2, Operand(FAST_HOLEY_ELEMENTS));
     __ andi(a2, a2, uint16_t(~FAST_ELEMENTS));  // works if enum ElementsKind
     // has less than 2^16 elements
     __ Branch(&create_runtime, ne, a2, Operand(int64_t(0)));
     __ lw(a2, UntagSmiFieldMemOperand(arguments_list, JSArray::kLengthOffset));
     __ ld(a0, FieldMemOperand(arguments_list, JSArray::kElementsOffset));
 
     __ bind(&done_create);
   }
 
   // Check for stack overflow.
@@ skipping 15 matching lines @@
   // ----------- S t a t e -------------
   //  -- a1    : target
   //  -- a0    : args (a FixedArray built from argumentsList)
   //  -- a2    : len (number of elements to push from args)
   //  -- a3    : new.target (checked to be constructor or undefined)
   //  -- sp[0] : thisArgument
   // -----------------------------------
 
   // Push arguments onto the stack (thisArgument is already on the stack).
   {
-    Label done, loop;
+    Label done, push, loop;
     Register src = a4;
     Register scratch = len;
 
     __ daddiu(src, args, FixedArray::kHeaderSize - kHeapObjectTag);
     __ Branch(&done, eq, len, Operand(zero_reg), i::USE_DELAY_SLOT);
     __ mov(a0, len);  // The 'len' argument for Call() or Construct().
     __ dsll(scratch, len, kPointerSizeLog2);
     __ Dsubu(scratch, sp, Operand(scratch));
+    __ LoadRoot(t1, Heap::kTheHoleValueRootIndex);
     __ bind(&loop);
     __ ld(a5, MemOperand(src));
+    __ Branch(&push, ne, a5, Operand(t1));
+    __ LoadRoot(a5, Heap::kUndefinedValueRootIndex);
+    __ bind(&push);
     __ daddiu(src, src, kPointerSize);
     __ Push(a5);
     __ Branch(&loop, ne, scratch, Operand(sp));
     __ bind(&done);
   }
 
   // ----------- S t a t e -------------
   //  -- a0             : argument count (len)
   //  -- a1             : target
   //  -- a3             : new.target (checked to be constructor or undefinded)
@@ skipping 713 matching lines @@
     __ break_(0xCC);
   }
 }
 
 #undef __
 
 }  // namespace internal
 }  // namespace v8
 
 #endif  // V8_TARGET_ARCH_MIPS64