Recognize List constructor and turn it into CreateArray ...

runtime/vm/stub_code_mips.cc

 // Copyright (c) 2013, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 
 #include "vm/globals.h"
 #if defined(TARGET_ARCH_MIPS)
 
 #include "vm/assembler.h"
 #include "vm/code_generator.h"
 #include "vm/compiler.h"
@@ skipping 682 matching lines @@
     // Compute the size to be allocated, it is based on the array length
     // and is computed as:
     // RoundedAllocationSize((array_length * kwordSize) + sizeof(RawArray)).
     // Assert that length is a Smi.
     __ andi(CMPRES1, A1, Immediate(kSmiTagMask));
     if (FLAG_use_slow_path) {
       __ b(&slow_case);
     } else {
       __ bne(CMPRES1, ZR, &slow_case);
     }
+    __ bltz(A1, &slow_case);
+    // Check for maximum allowed length.
+    const intptr_t max_len =
+        reinterpret_cast<int32_t>(Smi::New(Array::kMaxElements));
+    __ BranchUnsignedGreater(A1, max_len, &slow_case);
+
     __ lw(T0, FieldAddress(CTX, Context::isolate_offset()));
     __ lw(T0, Address(T0, Isolate::heap_offset()));
     __ lw(T0, Address(T0, Heap::new_space_offset()));
 
     // Calculate and align allocation size.
     // Load new object start and calculate next object start.
     // A0: array element type.
     // A1: Array length as Smi.
     // T0: Points to new space object.
     __ lw(V0, Address(T0, Scavenger::top_offset()));
     intptr_t fixed_size = sizeof(RawArray) + kObjectAlignment - 1;
     __ LoadImmediate(T3, fixed_size);
     __ sll(TMP, A1, 1);  // A1 is Smi.
     __ addu(T3, T3, TMP);
     ASSERT(kSmiTagShift == 1);
     __ LoadImmediate(TMP, ~(kObjectAlignment - 1));
     __ and_(T3, T3, TMP);
-    __ addu(T2, T3, V0);
+
+    __ AdduDetectOverflow(T2, T3, V0, CMPRES1);
+    __ bltz(CMPRES1, &slow_case);  // CMPRES1 < 0 on overflow.
 
     // Check if the allocation fits into the remaining space.
     // V0: potential new object start.
     // A0: array element type.
     // A1: array length as Smi.
     // T0: points to new space object.
     // T2: potential next object start.
     // T3: array size.
     __ lw(CMPRES1, Address(T0, Scavenger::end_offset()));
     __ BranchUnsignedGreaterEqual(T2, CMPRES1, &slow_case);
@@ skipping 1364 matching lines @@
   const Register right = T0;
   __ lw(left, Address(SP, 1 * kWordSize));
   __ lw(right, Address(SP, 0 * kWordSize));
   GenerateIdenticalWithNumberCheckStub(assembler, left, right, temp1, temp2);
   __ Ret();
 }
 
 }  // namespace dart
 
 #endif  // defined TARGET_ARCH_MIPS