void StackSpace::markFrameSlots(JSTracer *trc, StackFrame *fp, Value *slotsEnd, jsbytecode *pc) { Value *slotsBegin = fp->slots(); if (!fp->isScriptFrame()) { JS_ASSERT(fp->isDummyFrame()); gc::MarkValueRootRange(trc, slotsBegin, slotsEnd, "vm_stack"); return; } /* If it's a scripted frame, we should have a pc. */ JS_ASSERT(pc); JSScript *script = fp->script(); if (!script->hasAnalysis() || !script->analysis()->ranLifetimes()) { gc::MarkValueRootRange(trc, slotsBegin, slotsEnd, "vm_stack"); return; } /* * If the JIT ran a lifetime analysis, then it may have left garbage in the * slots considered not live. We need to avoid marking them. Additionally, * in case the analysis information is thrown out later, we overwrite these * dead slots with valid values so that future GCs won't crash. Analysis * results are thrown away during the sweeping phase, so we always have at * least one GC to do this. */ analyze::AutoEnterAnalysis aea(script->compartment()); analyze::ScriptAnalysis *analysis = script->analysis(); uint32_t offset = pc - script->code; Value *fixedEnd = slotsBegin + script->nfixed; for (Value *vp = slotsBegin; vp < fixedEnd; vp++) { uint32_t slot = analyze::LocalSlot(script, vp - slotsBegin); /* * Will this slot be synced by the JIT? If not, replace with a dummy * value with the same type tag. */ if (!analysis->trackSlot(slot) || analysis->liveness(slot).live(offset)) gc::MarkValueRoot(trc, vp, "vm_stack"); else if (vp->isObject()) *vp = ObjectValue(fp->scopeChain()->global()); else if (vp->isString()) *vp = StringValue(trc->runtime->atomState.nullAtom); } gc::MarkValueRootRange(trc, fixedEnd, slotsEnd, "vm_stack"); }
bool TypeInferenceOracle::canEnterInlinedFunction(JSFunction *target) { JSScript *script = target->script(); if (!script->hasAnalysis() || !script->analysis()->ranInference()) return false; if (!script->analysis()->inlineable()) return false; if (script->analysis()->usesScopeChain()) return false; if (target->getType(cx)->unknownProperties()) return false; // TI calls ObjectStateChange to trigger invalidation of the caller. HeapTypeSet::WatchObjectStateChange(cx, target->getType(cx)); return true; }
void StackSpace::markFrameValues(JSTracer *trc, StackFrame *fp, Value *slotsEnd, jsbytecode *pc) { Value *slotsBegin = fp->slots(); if (!fp->isScriptFrame()) { JS_ASSERT(fp->isDummyFrame()); gc::MarkValueRootRange(trc, slotsBegin, slotsEnd, "vm_stack"); return; } /* If it's a scripted frame, we should have a pc. */ JS_ASSERT(pc); JSScript *script = fp->script(); if (!script->hasAnalysis() || !script->analysis()->ranLifetimes()) { gc::MarkValueRootRange(trc, slotsBegin, slotsEnd, "vm_stack"); return; } /* * If the JIT ran a lifetime analysis, then it may have left garbage in the * slots considered not live. We need to avoid marking them. Additionally, * in case the analysis information is thrown out later, we overwrite these * dead slots with valid values so that future GCs won't crash. Analysis * results are thrown away during the sweeping phase, so we always have at * least one GC to do this. */ analyze::AutoEnterAnalysis aea(script->compartment()); analyze::ScriptAnalysis *analysis = script->analysis(); uint32_t offset = pc - script->code; Value *fixedEnd = slotsBegin + script->nfixed; for (Value *vp = slotsBegin; vp < fixedEnd; vp++) { uint32_t slot = analyze::LocalSlot(script, vp - slotsBegin); /* * Will this slot be synced by the JIT? If not, replace with a dummy * value with the same type tag. */ if (!analysis->trackSlot(slot) || analysis->liveness(slot).live(offset)) { gc::MarkValueRoot(trc, vp, "vm_stack"); } else if (vp->isDouble()) { *vp = DoubleValue(0.0); } else { /* * It's possible that *vp may not be a valid Value. For example, it * may be tagged as a NullValue but the low bits may be nonzero so * that isNull() returns false. This can cause problems later on * when marking the value. Extracting the type in this way and then * overwriting the value circumvents the problem. */ JSValueType type = vp->extractNonDoubleType(); if (type == JSVAL_TYPE_INT32) *vp = Int32Value(0); else if (type == JSVAL_TYPE_UNDEFINED) *vp = UndefinedValue(); else if (type == JSVAL_TYPE_BOOLEAN) *vp = BooleanValue(false); else if (type == JSVAL_TYPE_STRING) *vp = StringValue(trc->runtime->atomState.nullAtom); else if (type == JSVAL_TYPE_NULL) *vp = NullValue(); else if (type == JSVAL_TYPE_OBJECT) *vp = ObjectValue(fp->scopeChain()->global()); } } gc::MarkValueRootRange(trc, fixedEnd, slotsEnd, "vm_stack"); }