Add mistagging-readbarrier to weak cell

src/ia32/lithium-codegen-ia32.cc

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/v8.h"
 
 #if V8_TARGET_ARCH_IA32
 
 #include "src/base/bits.h"
 #include "src/code-factory.h"
@@ skipping 2944 matching lines @@
 
   __ bind(&skip_assignment);
 }
 
 
 void LCodeGen::DoLoadNamedField(LLoadNamedField* instr) {
   HObjectAccess access = instr->hydrogen()->access();
   int offset = access.offset();
 
   if (access.IsExternalMemory()) {
+    DCHECK(!access.read_barrier());
     Register result = ToRegister(instr->result());
     MemOperand operand = instr->object()->IsConstantOperand()
         ? MemOperand::StaticVariable(ToExternalReference(
                 LConstantOperand::cast(instr->object())))
         : MemOperand(ToRegister(instr->object()), offset);
     __ Load(result, operand, access.representation());
     return;
   }
 
   Register object = ToRegister(instr->object());
   if (instr->hydrogen()->representation().IsDouble()) {
+    DCHECK(!access.read_barrier());
     XMMRegister result = ToDoubleRegister(instr->result());
     __ movsd(result, FieldOperand(object, offset));
     return;
   }
 
   Register result = ToRegister(instr->result());
   if (!access.IsInobject()) {
+    DCHECK(!access.read_barrier());
     __ mov(result, FieldOperand(object, JSObject::kPropertiesOffset));
     object = result;
   }
+  if (access.read_barrier()) {
+    DCHECK(!result.is(object));
+    DCHECK(instr->hydrogen()->representation().IsTagged());
+    __ Load(result, FieldOperand(object, offset), access.representation());
+    Label done;
+    DCHECK_NE(kReadBarrierTag, 0);
+    __ test(result, Immediate(kReadBarrierMask));
+    __ j(zero, &done);
+    __ test(result, Immediate(kSmiTagMask));
+    DCHECK_EQ(kSmiTag, 0);
+    __ j(zero, &done);
+    __ and_(result, Immediate(~kReadBarrierTag));
+    __ mov(FieldOperand(object, offset), result);
+    __ bind(&done);
+    return;
+  }
   __ Load(result, FieldOperand(object, offset), access.representation());
 }
 
 
 void LCodeGen::EmitPushTaggedOperand(LOperand* operand) {
   DCHECK(!operand->IsDoubleRegister());
   if (operand->IsConstantOperand()) {
     Handle<Object> object = ToHandle(LConstantOperand::cast(operand));
     AllowDeferredHandleDereference smi_check;
     if (object->IsSmi()) {
@@ skipping 2753 matching lines @@
   CallRuntime(Runtime::kPushBlockContext, 2, instr);
   RecordSafepoint(Safepoint::kNoLazyDeopt);
 }
 
 
 #undef __
 
 } }  // namespace v8::internal
 
 #endif  // V8_TARGET_ARCH_IA32