OLD | NEW |
1 // Copyright 2014 the V8 project authors. All rights reserved. | 1 // Copyright 2014 the V8 project authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "src/v8.h" | 5 #include "src/v8.h" |
6 | 6 |
7 #if V8_TARGET_ARCH_PPC | 7 #if V8_TARGET_ARCH_PPC |
8 | 8 |
9 #include "src/ic/call-optimization.h" | 9 #include "src/ic/call-optimization.h" |
10 #include "src/ic/handler-compiler.h" | 10 #include "src/ic/handler-compiler.h" |
(...skipping 409 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
420 !scratch2.is(scratch1)); | 420 !scratch2.is(scratch1)); |
421 | 421 |
422 // Keep track of the current object in register reg. | 422 // Keep track of the current object in register reg. |
423 Register reg = object_reg; | 423 Register reg = object_reg; |
424 int depth = 0; | 424 int depth = 0; |
425 | 425 |
426 Handle<JSObject> current = Handle<JSObject>::null(); | 426 Handle<JSObject> current = Handle<JSObject>::null(); |
427 if (receiver_map->IsJSGlobalObjectMap()) { | 427 if (receiver_map->IsJSGlobalObjectMap()) { |
428 current = isolate()->global_object(); | 428 current = isolate()->global_object(); |
429 } | 429 } |
| 430 // Check access rights to the global object. This has to happen after |
| 431 // the map check so that we know that the object is actually a global |
| 432 // object. |
| 433 // This allows us to install generated handlers for accesses to the |
| 434 // global proxy (as opposed to using slow ICs). See corresponding code |
| 435 // in LookupForRead(). |
| 436 if (receiver_map->IsJSGlobalProxyMap()) { |
| 437 __ CheckAccessGlobalProxy(reg, scratch2, miss); |
| 438 } |
| 439 |
430 Handle<JSObject> prototype = Handle<JSObject>::null(); | 440 Handle<JSObject> prototype = Handle<JSObject>::null(); |
431 Handle<Map> current_map = receiver_map; | 441 Handle<Map> current_map = receiver_map; |
432 Handle<Map> holder_map(holder()->map()); | 442 Handle<Map> holder_map(holder()->map()); |
433 // Traverse the prototype chain and check the maps in the prototype chain for | 443 // Traverse the prototype chain and check the maps in the prototype chain for |
434 // fast and global objects or do negative lookup for normal objects. | 444 // fast and global objects or do negative lookup for normal objects. |
435 while (!current_map.is_identical_to(holder_map)) { | 445 while (!current_map.is_identical_to(holder_map)) { |
436 ++depth; | 446 ++depth; |
437 | 447 |
438 // Only global objects and objects that do not require access | 448 // Only global objects and objects that do not require access |
439 // checks are allowed in stubs. | 449 // checks are allowed in stubs. |
(...skipping 14 matching lines...) Expand all Loading... |
454 | 464 |
455 GenerateDictionaryNegativeLookup(masm(), miss, reg, name, scratch1, | 465 GenerateDictionaryNegativeLookup(masm(), miss, reg, name, scratch1, |
456 scratch2); | 466 scratch2); |
457 | 467 |
458 __ LoadP(scratch1, FieldMemOperand(reg, HeapObject::kMapOffset)); | 468 __ LoadP(scratch1, FieldMemOperand(reg, HeapObject::kMapOffset)); |
459 reg = holder_reg; // From now on the object will be in holder_reg. | 469 reg = holder_reg; // From now on the object will be in holder_reg. |
460 __ LoadP(reg, FieldMemOperand(scratch1, Map::kPrototypeOffset)); | 470 __ LoadP(reg, FieldMemOperand(scratch1, Map::kPrototypeOffset)); |
461 } else { | 471 } else { |
462 Register map_reg = scratch1; | 472 Register map_reg = scratch1; |
463 __ LoadP(map_reg, FieldMemOperand(reg, HeapObject::kMapOffset)); | 473 __ LoadP(map_reg, FieldMemOperand(reg, HeapObject::kMapOffset)); |
464 if (depth != 1 || check == CHECK_ALL_MAPS) { | 474 |
| 475 if (current_map->IsJSGlobalObjectMap()) { |
| 476 GenerateCheckPropertyCell(masm(), Handle<JSGlobalObject>::cast(current), |
| 477 name, scratch2, miss); |
| 478 } else if (depth != 1 || check == CHECK_ALL_MAPS) { |
465 Handle<WeakCell> cell = Map::WeakCellForMap(current_map); | 479 Handle<WeakCell> cell = Map::WeakCellForMap(current_map); |
466 __ CmpWeakValue(map_reg, cell, scratch2); | 480 __ CmpWeakValue(map_reg, cell, scratch2); |
467 __ bne(miss); | 481 __ bne(miss); |
468 } | 482 } |
469 | 483 |
470 // Check access rights to the global object. This has to happen after | |
471 // the map check so that we know that the object is actually a global | |
472 // object. | |
473 // This allows us to install generated handlers for accesses to the | |
474 // global proxy (as opposed to using slow ICs). See corresponding code | |
475 // in LookupForRead(). | |
476 if (current_map->IsJSGlobalProxyMap()) { | |
477 __ CheckAccessGlobalProxy(reg, scratch2, miss); | |
478 } else if (current_map->IsJSGlobalObjectMap()) { | |
479 GenerateCheckPropertyCell(masm(), Handle<JSGlobalObject>::cast(current), | |
480 name, scratch2, miss); | |
481 } | |
482 | |
483 reg = holder_reg; // From now on the object will be in holder_reg. | 484 reg = holder_reg; // From now on the object will be in holder_reg. |
484 | 485 |
485 __ LoadP(reg, FieldMemOperand(map_reg, Map::kPrototypeOffset)); | 486 __ LoadP(reg, FieldMemOperand(map_reg, Map::kPrototypeOffset)); |
486 } | 487 } |
487 | 488 |
488 // Go to the next object in the prototype chain. | 489 // Go to the next object in the prototype chain. |
489 current = prototype; | 490 current = prototype; |
490 current_map = handle(current->map()); | 491 current_map = handle(current->map()); |
491 } | 492 } |
492 | 493 |
493 // Log the check depth. | 494 // Log the check depth. |
494 LOG(isolate(), IntEvent("check-maps-depth", depth + 1)); | 495 LOG(isolate(), IntEvent("check-maps-depth", depth + 1)); |
495 | 496 |
496 if (depth != 0 || check == CHECK_ALL_MAPS) { | 497 if (depth != 0 || check == CHECK_ALL_MAPS) { |
497 // Check the holder map. | 498 // Check the holder map. |
498 __ LoadP(scratch1, FieldMemOperand(reg, HeapObject::kMapOffset)); | 499 __ LoadP(scratch1, FieldMemOperand(reg, HeapObject::kMapOffset)); |
499 Handle<WeakCell> cell = Map::WeakCellForMap(current_map); | 500 Handle<WeakCell> cell = Map::WeakCellForMap(current_map); |
500 __ CmpWeakValue(scratch1, cell, scratch2); | 501 __ CmpWeakValue(scratch1, cell, scratch2); |
501 __ bne(miss); | 502 __ bne(miss); |
502 } | 503 } |
503 | 504 |
504 // Perform security check for access to the global object. | |
505 DCHECK(current_map->IsJSGlobalProxyMap() || | |
506 !current_map->is_access_check_needed()); | |
507 if (current_map->IsJSGlobalProxyMap()) { | |
508 __ CheckAccessGlobalProxy(reg, scratch1, miss); | |
509 } | |
510 | |
511 // Return the register containing the holder. | 505 // Return the register containing the holder. |
512 return reg; | 506 return reg; |
513 } | 507 } |
514 | 508 |
515 | 509 |
516 void NamedLoadHandlerCompiler::FrontendFooter(Handle<Name> name, Label* miss) { | 510 void NamedLoadHandlerCompiler::FrontendFooter(Handle<Name> name, Label* miss) { |
517 if (!miss->is_unused()) { | 511 if (!miss->is_unused()) { |
518 Label success; | 512 Label success; |
519 __ b(&success); | 513 __ b(&success); |
520 __ bind(miss); | 514 __ bind(miss); |
(...skipping 228 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
749 // Return the generated code. | 743 // Return the generated code. |
750 return GetCode(kind(), Code::NORMAL, name); | 744 return GetCode(kind(), Code::NORMAL, name); |
751 } | 745 } |
752 | 746 |
753 | 747 |
754 #undef __ | 748 #undef __ |
755 } | 749 } |
756 } // namespace v8::internal | 750 } // namespace v8::internal |
757 | 751 |
758 #endif // V8_TARGET_ARCH_ARM | 752 #endif // V8_TARGET_ARCH_ARM |
OLD | NEW |