[turbofan] Create initial map on-demand for F.prototype.

[turbofan] Create initial map on-demand for F.prototype.

When accessing the "prototype" property of a known JSFunction in
TurboFan, we can automatically create the initial map if it hasn't been
instantiated so far. This happens with hand-grown inheritance mechanisms
where the base classes might not be instantiated regularly at all, but
the base class constructors are only called via F.p.call from the
subclass constructors.

R=mstarzinger@chromium.org
BUG=v8:5267
Review-Url: https://codereview.chromium.org/2830633002
Cr-Commit-Position: refs/heads/master@{#44720}
Committed: https://chromium.googlesource.com/v8/v8/+/4da9be30c7a4b81c57d41af30bf0eb326bac833f

[Benedikt Meurer, 2017-04-19 10:10:54]

The CQ bit was checked by bmeurer@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2017-04-19 10:10:58]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-04-19 10:35:19]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2017-04-19 10:35:20]

Dry run: Try jobs failed on following builders:
  v8_mac_rel_ng on master.tryserver.v8 (JOB_FAILED,
http://build.chromium.org/p/tryserver.v8/builders/v8_mac_rel_ng/builds/21127)
  v8_mac_rel_ng_triggered on master.tryserver.v8 (JOB_FAILED,
http://build.chromium.org/p/tryserver.v8/builders/v8_mac_rel_ng_triggered/bui...)

[Michael Starzinger, 2017-04-19 10:38:58]

https://codereview.chromium.org/2830633002/diff/1/src/compiler/js-native-cont...
File src/compiler/js-native-context-specialization.cc (right):

https://codereview.chromium.org/2830633002/diff/1/src/compiler/js-native-cont...
src/compiler/js-native-context-specialization.cc:832:
JSFunction::EnsureHasInitialMap(function);
The function must be constructible. The following is a repro ...

function f() {
  print(parseInt.prototype);
}
f();
f();
%OptimizeFunctionOnNextCall(f);
f();

[Benedikt Meurer, 2017-04-19 10:40:51]

The CQ bit was checked by bmeurer@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2017-04-19 10:40:58]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[Benedikt Meurer, 2017-04-19 10:41:05]

On 2017/04/19 10:40:51, Benedikt Meurer wrote:
> The CQ bit was checked by mailto:bmeurer@chromium.org to run a CQ dry run

[Benedikt Meurer, 2017-04-19 10:41:17]

Fixed, thanks!

[Michael Starzinger, 2017-04-19 10:42:08]

LGTM.

[Benedikt Meurer, 2017-04-19 10:42:16]

The CQ bit was unchecked by bmeurer@chromium.org

[Benedikt Meurer, 2017-04-19 10:42:20]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2017-04-19 10:42:29]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-04-19 11:26:29]

CQ is committing da patch.

Bot data: {"patchset_id": 20001, "attempt_start_ts": 1492598540146850,
"parent_rev": "b161581947f6b37a181a45f182d20c269da8a54e", "commit_rev":
"4da9be30c7a4b81c57d41af30bf0eb326bac833f"}

[commit-bot: I haz the power, 2017-04-19 11:26:33]

Description was changed from

==========
[turbofan] Create initial map on-demand for F.prototype.

When accessing the "prototype" property of a known JSFunction in
TurboFan, we can automatically create the initial map if it hasn't been
instantiated so far. This happens with hand-grown inheritance mechanisms
where the base classes might not be instantiated regularly at all, but
the base class constructors are only called via F.p.call from the
subclass constructors.

R=mstarzinger@chromium.org
BUG=v8:5267
==========

to

==========
[turbofan] Create initial map on-demand for F.prototype.

When accessing the "prototype" property of a known JSFunction in
TurboFan, we can automatically create the initial map if it hasn't been
instantiated so far. This happens with hand-grown inheritance mechanisms
where the base classes might not be instantiated regularly at all, but
the base class constructors are only called via F.p.call from the
subclass constructors.

R=mstarzinger@chromium.org
BUG=v8:5267

Review-Url: https://codereview.chromium.org/2830633002
Cr-Commit-Position: refs/heads/master@{#44720}
Committed:
https://chromium.googlesource.com/v8/v8/+/4da9be30c7a4b81c57d41af30bf0eb326ba...
==========

[commit-bot: I haz the power, 2017-04-19 11:26:34]

Committed patchset #2 (id:20001) as
https://chromium.googlesource.com/v8/v8/+/4da9be30c7a4b81c57d41af30bf0eb326ba...