bool BaselineInspector::megamorphicGetterSetterFunction(jsbytecode* pc, bool isGetter, JSFunction** getterOrSetter) { if (!hasBaselineScript()) return false; *getterOrSetter = nullptr; const ICEntry& entry = icEntryFromPC(pc); for (ICStub* stub = entry.firstStub(); stub; stub = stub->next()) { if (stub->isCacheIR_Monitored()) { MOZ_ASSERT(isGetter); JSFunction* getter = GetMegamorphicGetterSetterFunction(stub, stub->toCacheIR_Monitored()->stubInfo(), isGetter); if (!getter || (*getterOrSetter && *getterOrSetter != getter)) return false; *getterOrSetter = getter; continue; } if (stub->isCacheIR_Updated()) { MOZ_ASSERT(!isGetter); JSFunction* setter = GetMegamorphicGetterSetterFunction(stub, stub->toCacheIR_Updated()->stubInfo(), isGetter); if (!setter || (*getterOrSetter && *getterOrSetter != setter)) return false; *getterOrSetter = setter; continue; } if (stub->isGetProp_Fallback()) { if (stub->toGetProp_Fallback()->hadUnoptimizableAccess()) return false; if (stub->toGetProp_Fallback()->state().mode() != ICState::Mode::Megamorphic) return false; continue; } if (stub->isSetProp_Fallback()) { if (stub->toSetProp_Fallback()->hadUnoptimizableAccess()) return false; if (stub->toSetProp_Fallback()->state().mode() != ICState::Mode::Megamorphic) return false; continue; } return false; } if (!*getterOrSetter) return false; return true; }
bool BaselineInspector::maybeInfoForPropertyOp(jsbytecode* pc, ReceiverVector& receivers, ObjectGroupVector& convertUnboxedGroups) { // Return a list of the receivers seen by the baseline IC for the current // op. Empty lists indicate no receivers are known, or there was an // uncacheable access. convertUnboxedGroups is used for unboxed object // groups which have been seen, but have had instances converted to native // objects and should be eagerly converted by Ion. MOZ_ASSERT(receivers.empty()); MOZ_ASSERT(convertUnboxedGroups.empty()); if (!hasBaselineScript()) return true; MOZ_ASSERT(isValidPC(pc)); const ICEntry& entry = icEntryFromPC(pc); ICStub* stub = entry.firstStub(); while (stub->next()) { ReceiverGuard receiver; if (stub->isCacheIR_Monitored()) { if (!GetCacheIRReceiverForNativeReadSlot(stub->toCacheIR_Monitored(), &receiver) && !GetCacheIRReceiverForUnboxedProperty(stub->toCacheIR_Monitored(), &receiver)) { receivers.clear(); return true; } } else if (stub->isCacheIR_Updated()) { if (!GetCacheIRReceiverForNativeSetSlot(stub->toCacheIR_Updated(), &receiver) && !GetCacheIRReceiverForUnboxedProperty(stub->toCacheIR_Updated(), &receiver)) { receivers.clear(); return true; } } else { receivers.clear(); return true; } if (!AddReceiver(receiver, receivers, convertUnboxedGroups)) return false; stub = stub->next(); } if (stub->isGetProp_Fallback()) { if (stub->toGetProp_Fallback()->hadUnoptimizableAccess()) receivers.clear(); } else { if (stub->toSetProp_Fallback()->hadUnoptimizableAccess()) receivers.clear(); } // Don't inline if there are more than 5 receivers. if (receivers.length() > 5) receivers.clear(); return true; }
RawShape BaselineInspector::maybeMonomorphicShapeForPropertyOp(jsbytecode *pc) { if (!hasBaselineScript()) return NULL; JS_ASSERT(isValidPC(pc)); const ICEntry &entry = icEntryFromPC(pc); ICStub *stub = entry.firstStub(); ICStub *next = stub->next(); if (!next || !next->isFallback()) return NULL; if (stub->isGetProp_Native()) { JS_ASSERT(next->isGetProp_Fallback()); if (next->toGetProp_Fallback()->hadUnoptimizableAccess()) return NULL; return stub->toGetProp_Native()->shape(); } if (stub->isSetProp_Native()) { JS_ASSERT(next->isSetProp_Fallback()); if (next->toSetProp_Fallback()->hadUnoptimizableAccess()) return NULL; return stub->toSetProp_Native()->shape(); } return NULL; }
JSObject * BaselineInspector::commonSetPropFunction(jsbytecode *pc, Shape **lastProperty, JSFunction **commonSetter) { if (!hasBaselineScript()) return nullptr; const ICEntry &entry = icEntryFromPC(pc); JSObject *holder = nullptr; Shape *holderShape = nullptr; JSFunction *setter = nullptr; for (ICStub *stub = entry.firstStub(); stub; stub = stub->next()) { if (stub->isSetProp_CallScripted() || stub->isSetProp_CallNative()) { ICSetPropCallSetter *nstub = static_cast<ICSetPropCallSetter *>(stub); if (!holder) { holder = nstub->holder(); holderShape = nstub->holderShape(); setter = nstub->setter(); } else if (nstub->holderShape() != holderShape) { return nullptr; } else { MOZ_ASSERT(setter == nstub->setter()); } } else if (stub->isSetProp_Fallback() && stub->toSetProp_Fallback()->hadUnoptimizableAccess()) { // We have an unoptimizable access, so don't try to optimize. return nullptr; } } *lastProperty = holderShape; *commonSetter = setter; return holder; }
bool BaselineInspector::maybeShapesForPropertyOp(jsbytecode *pc, Vector<Shape *> &shapes) { // Return a list of shapes seen by the baseline IC for the current op. // An empty list indicates no shapes are known, or there was an uncacheable // access. JS_ASSERT(shapes.empty()); if (!hasBaselineScript()) return true; JS_ASSERT(isValidPC(pc)); const ICEntry &entry = icEntryFromPC(pc); ICStub *stub = entry.firstStub(); while (stub->next()) { Shape *shape; if (stub->isGetProp_Native()) { shape = stub->toGetProp_Native()->shape(); } else if (stub->isSetProp_Native()) { shape = stub->toSetProp_Native()->shape(); } else { shapes.clear(); return true; } // Don't add the same shape twice (this can happen if there are multiple // SetProp_Native stubs with different TypeObject's). bool found = false; for (size_t i = 0; i < shapes.length(); i++) { if (shapes[i] == shape) { found = true; break; } } if (!found && !shapes.append(shape)) return false; stub = stub->next(); } if (stub->isGetProp_Fallback()) { if (stub->toGetProp_Fallback()->hadUnoptimizableAccess()) shapes.clear(); } else { if (stub->toSetProp_Fallback()->hadUnoptimizableAccess()) shapes.clear(); } // Don't inline if there are more than 5 shapes. if (shapes.length() > 5) shapes.clear(); return true; }
bool BaselineInspector::commonSetPropFunction(jsbytecode* pc, JSObject** holder, Shape** holderShape, JSFunction** commonSetter, bool* isOwnProperty, ReceiverVector& receivers, ObjectGroupVector& convertUnboxedGroups) { if (!hasBaselineScript()) return false; MOZ_ASSERT(receivers.empty()); MOZ_ASSERT(convertUnboxedGroups.empty()); *holder = nullptr; const ICEntry& entry = icEntryFromPC(pc); for (ICStub* stub = entry.firstStub(); stub; stub = stub->next()) { if (stub->isSetProp_CallScripted() || stub->isSetProp_CallNative()) { ICSetPropCallSetter* nstub = static_cast<ICSetPropCallSetter*>(stub); bool isOwn = nstub->isOwnSetter(); if (!isOwn && !AddReceiver(nstub->receiverGuard(), receivers, convertUnboxedGroups)) return false; if (!*holder) { *holder = nstub->holder(); *holderShape = nstub->holderShape(); *commonSetter = nstub->setter(); *isOwnProperty = isOwn; } else if (nstub->holderShape() != *holderShape || isOwn != *isOwnProperty) { return false; } else { MOZ_ASSERT(*commonSetter == nstub->setter()); } } else if (!stub->isSetProp_Fallback() || stub->toSetProp_Fallback()->hadUnoptimizableAccess()) { // We have an unoptimizable access, so don't try to optimize. return false; } } if (!*holder) return false; return true; }
bool BaselineInspector::commonSetPropFunction(jsbytecode* pc, JSObject** holder, Shape** holderShape, JSFunction** commonSetter, bool* isOwnProperty, ReceiverVector& receivers, ObjectGroupVector& convertUnboxedGroups) { if (!hasBaselineScript()) return false; MOZ_ASSERT(receivers.empty()); MOZ_ASSERT(convertUnboxedGroups.empty()); *commonSetter = nullptr; const ICEntry& entry = icEntryFromPC(pc); for (ICStub* stub = entry.firstStub(); stub; stub = stub->next()) { if (stub->isCacheIR_Updated()) { if (!AddCacheIRSetPropFunction(stub->toCacheIR_Updated(), holder, holderShape, commonSetter, isOwnProperty, receivers, convertUnboxedGroups)) { return false; } } else if (!stub->isSetProp_Fallback() || stub->toSetProp_Fallback()->hadUnoptimizableAccess()) { // We have an unoptimizable access, so don't try to optimize. return false; } } if (!*commonSetter) return false; MOZ_ASSERT(*isOwnProperty == !*holder); return true; }
bool BaselineInspector::maybeInfoForPropertyOp(jsbytecode *pc, ShapeVector &nativeShapes, ObjectGroupVector &unboxedGroups, ObjectGroupVector &convertUnboxedGroups) { // Return lists of native shapes and unboxed objects seen by the baseline // IC for the current op. Empty lists indicate no shapes/types are known, // or there was an uncacheable access. convertUnboxedGroups is used for // unboxed object groups which have been seen, but have had instances // converted to native objects and should be eagerly converted by Ion. MOZ_ASSERT(nativeShapes.empty()); MOZ_ASSERT(unboxedGroups.empty()); MOZ_ASSERT(convertUnboxedGroups.empty()); if (!hasBaselineScript()) return true; MOZ_ASSERT(isValidPC(pc)); const ICEntry &entry = icEntryFromPC(pc); ICStub *stub = entry.firstStub(); while (stub->next()) { Shape *shape = nullptr; ObjectGroup *group = nullptr; if (stub->isGetProp_Native()) { shape = stub->toGetProp_Native()->shape(); } else if (stub->isSetProp_Native()) { shape = stub->toSetProp_Native()->shape(); } else if (stub->isGetProp_Unboxed()) { group = stub->toGetProp_Unboxed()->group(); } else if (stub->isSetProp_Unboxed()) { group = stub->toSetProp_Unboxed()->group(); } else { nativeShapes.clear(); unboxedGroups.clear(); return true; } if (group && group->unboxedLayout().nativeGroup()) { if (!VectorAppendNoDuplicate(convertUnboxedGroups, group)) return false; shape = group->unboxedLayout().nativeShape(); group = nullptr; } if (shape) { if (!VectorAppendNoDuplicate(nativeShapes, shape)) return false; } else { if (!VectorAppendNoDuplicate(unboxedGroups, group)) return false; } stub = stub->next(); } if (stub->isGetProp_Fallback()) { if (stub->toGetProp_Fallback()->hadUnoptimizableAccess()) { nativeShapes.clear(); unboxedGroups.clear(); } } else { if (stub->toSetProp_Fallback()->hadUnoptimizableAccess()) { nativeShapes.clear(); unboxedGroups.clear(); } } // Don't inline if there are more than 5 shapes/groups. if (nativeShapes.length() + unboxedGroups.length() > 5) { nativeShapes.clear(); unboxedGroups.clear(); } return true; }