Put the type feedback vector in the unoptimized JavaScript frame.

src/arm64/full-codegen-arm64.cc

 // Copyright 2013 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/v8.h"
 
 #if V8_TARGET_ARCH_ARM64
 
 #include "src/code-factory.h"
 #include "src/code-stubs.h"
@@ skipping 131 matching lines @@
   // The MANUAL indicates that the scope shouldn't actually generate code
   // to set up the frame because we do it manually below.
   FrameScope frame_scope(masm_, StackFrame::MANUAL);
 
   // This call emits the following sequence in a way that can be patched for
   // code ageing support:
   //  Push(lr, fp, cp, x1);
   //  Add(fp, jssp, 2 * kPointerSize);
   info->set_prologue_offset(masm_->pc_offset());
   __ Prologue(info->IsCodePreAgingActive());
+  __ Push(FeedbackVector());
   info->AddNoFrameRange(0, masm_->pc_offset());
 
   // Reserve space on the stack for locals.
   { Comment cmnt(masm_, "[ Allocate locals");
     int locals_count = info->scope()->num_stack_slots();
     // Generators allocate locals, if any, in context slots.
     DCHECK(!IsGeneratorFunction(info->function()->kind()) || locals_count == 0);
 
     if (locals_count > 0) {
       if (locals_count >= 128) {
@@ skipping 4782 matching lines @@
 
       __ Bind(&suspend);
       VisitForAccumulatorValue(expr->generator_object());
       DCHECK((continuation.pos() > 0) && Smi::IsValid(continuation.pos()));
       __ Mov(x1, Smi::FromInt(continuation.pos()));
       __ Str(x1, FieldMemOperand(x0, JSGeneratorObject::kContinuationOffset));
       __ Str(cp, FieldMemOperand(x0, JSGeneratorObject::kContextOffset));
       __ Mov(x1, cp);
       __ RecordWriteField(x0, JSGeneratorObject::kContextOffset, x1, x2,
                           kLRHasBeenSaved, kDontSaveFPRegs);
-      __ Add(x1, fp, StandardFrameConstants::kExpressionsOffset);
+      __ Add(x1, fp, JavaScriptFrameConstants::kLocal0Offset);
       __ Cmp(__ StackPointer(), x1);
       __ B(eq, &post_runtime);
       __ Push(x0);  // generator object
       __ CallRuntime(Runtime::kSuspendJSGeneratorObject, 1);
       __ Ldr(cp, MemOperand(fp, StandardFrameConstants::kContextOffset));
       __ Bind(&post_runtime);
       __ Pop(result_register());
       EmitReturnSequence();
 
       __ Bind(&resume);
@@ skipping 171 matching lines @@
   // the generator was suspended.
   Label resume_frame, done;
   __ Bl(&resume_frame);
   __ B(&done);
 
   __ Bind(&resume_frame);
   __ Push(lr,           // Return address.
           fp,           // Caller's frame pointer.
           cp,           // Callee's context.
           function);    // Callee's JS Function.
-  __ Add(fp, __ StackPointer(), kPointerSize * 2);
+
+  // Callee's type feedback vector.
+  __ Ldr(x10, FieldMemOperand(function, JSFunction::kSharedFunctionInfoOffset));
+  __ Ldr(x10, FieldMemOperand(x10, SharedFunctionInfo::kFeedbackVectorOffset));
+  __ Push(x10);
+
+  __ Add(fp, __ StackPointer(),
+         JavaScriptFrameConstants::kUnoptimizedFixedFrameSizeFromFp);
 
   // Load and untag the operand stack size.
   __ Ldr(x10, FieldMemOperand(generator_object,
                               JSGeneratorObject::kOperandStackOffset));
   __ Ldr(operand_stack_size,
          UntagSmiFieldMemOperand(x10, FixedArray::kLengthOffset));
 
   // If we are sending a value and there is no operand stack, we can jump back
   // in directly.
   if (resume_mode == JSGeneratorObject::NEXT) {
@@ skipping 323 matching lines @@
   return previous_;
 }
 
 
 #undef __
 
 
 } }  // namespace v8::internal
 
 #endif  // V8_TARGET_ARCH_ARM64