ic.h 12 KB
Newer Older
1
// Copyright 2012 the V8 project authors. All rights reserved.
2 3
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
4

5 6
#ifndef V8_IC_IC_H_
#define V8_IC_IC_H_
7

8 9
#include <vector>

10
#include "src/common/message-template.h"
11
#include "src/execution/isolate.h"
12
#include "src/heap/factory.h"
13
#include "src/ic/stub-cache.h"
14
#include "src/objects/feedback-vector.h"
15
#include "src/objects/map.h"
16
#include "src/objects/maybe-object.h"
17
#include "src/objects/smi.h"
18

19 20
namespace v8 {
namespace internal {
21

22 23
enum class NamedPropertyType : bool { kNotOwn, kOwn };

24
//
verwaest@chromium.org's avatar
verwaest@chromium.org committed
25
// IC is the base class for LoadIC, StoreIC, KeyedLoadIC, and KeyedStoreIC.
26 27 28 29
//
class IC {
 public:
  // Alias the inline cache state type to make the IC code more readable.
30
  using State = InlineCacheState;
31 32 33

  // Construct the IC structure with the given number of extra
  // JavaScript frames on the stack.
34 35
  IC(Isolate* isolate, Handle<FeedbackVector> vector, FeedbackSlot slot,
     FeedbackSlotKind kind);
36
  virtual ~IC() = default;
37

38
  State state() const { return state_; }
39

40 41 42
  // Compute the current IC state based on the target stub, lookup_start_object
  // and name.
  void UpdateState(Handle<Object> lookup_start_object, Handle<Object> name);
43

44 45 46
  bool RecomputeHandlerForName(Handle<Object> name);
  void MarkRecomputeHandler(Handle<Object> name) {
    DCHECK(RecomputeHandlerForName(name));
47
    old_state_ = state_;
48
    state_ = InlineCacheState::RECOMPUTE_HANDLER;
49
  }
50

51
  bool IsAnyHas() const { return IsKeyedHasIC(); }
52 53
  bool IsAnyLoad() const {
    return IsLoadIC() || IsLoadGlobalIC() || IsKeyedLoadIC();
54
  }
55
  bool IsAnyStore() const {
56
    return IsStoreIC() || IsStoreOwnIC() || IsStoreGlobalIC() ||
57 58
           IsKeyedStoreIC() || IsStoreInArrayLiteralICKind(kind()) ||
           IsDefineOwnIC();
59
  }
60
  bool IsAnyStoreOwn() const { return IsStoreOwnIC() || IsDefineOwnIC(); }
61

62
  static inline bool IsHandler(MaybeObject object);
63

64
  // Nofity the IC system that a feedback has changed.
65
  static void OnFeedbackChanged(Isolate* isolate, FeedbackVector vector,
66
                                FeedbackSlot slot, const char* reason);
67

68
  void OnFeedbackChanged(const char* reason);
69

70
 protected:
71
  void set_slow_stub_reason(const char* reason) { slow_stub_reason_ = reason; }
72 73
  void set_accessor(Handle<Object> accessor) { accessor_ = accessor; }
  MaybeHandle<Object> accessor() const { return accessor_; }
74

75
  Isolate* isolate() const { return isolate_; }
76

77
  bool is_vector_set() { return vector_set_; }
Clemens Hammacher's avatar
Clemens Hammacher committed
78
  inline bool vector_needs_update();
79

80 81
  inline Handle<Object> CodeHandler(Builtin builtin);

82
  // Configure for most states.
83
  bool ConfigureVectorState(IC::State new_state, Handle<Object> key);
84
  // Configure the vector for MONOMORPHIC.
85
  void ConfigureVectorState(Handle<Name> name, Handle<Map> map,
86
                            Handle<Object> handler);
87 88
  void ConfigureVectorState(Handle<Name> name, Handle<Map> map,
                            const MaybeObjectHandle& handler);
89
  // Configure the vector for POLYMORPHIC.
90
  void ConfigureVectorState(Handle<Name> name, MapHandles const& maps,
91
                            MaybeObjectHandles* handlers);
92 93
  void ConfigureVectorState(
      Handle<Name> name, std::vector<MapAndHandler> const& maps_and_handlers);
94

95
  char TransitionMarkFromState(IC::State state);
96
  void TraceIC(const char* type, Handle<Object> name);
97 98
  void TraceIC(const char* type, Handle<Object> name, State old_state,
               State new_state);
99

100 101
  MaybeHandle<Object> TypeError(MessageTemplate, Handle<Object> object,
                                Handle<Object> key);
102
  MaybeHandle<Object> ReferenceError(Handle<Name> name);
103

104
  void UpdateMonomorphicIC(const MaybeObjectHandle& handler, Handle<Name> name);
105
  bool UpdateMegaDOMIC(const MaybeObjectHandle& handler, Handle<Name> name);
106
  bool UpdatePolymorphicIC(Handle<Name> name, const MaybeObjectHandle& handler);
107
  void UpdateMegamorphicCache(Handle<Map> map, Handle<Name> name,
108
                              const MaybeObjectHandle& handler);
109

110 111
  StubCache* stub_cache();

112
  void CopyICToMegamorphicCache(Handle<Name> name);
113
  bool IsTransitionOfMonomorphicTarget(Map source_map, Map target_map);
114 115
  void SetCache(Handle<Name> name, Handle<Object> handler);
  void SetCache(Handle<Name> name, const MaybeObjectHandle& handler);
116
  FeedbackSlotKind kind() const { return kind_; }
117
  bool IsGlobalIC() const { return IsLoadGlobalIC() || IsStoreGlobalIC(); }
118 119 120
  bool IsLoadIC() const { return IsLoadICKind(kind_); }
  bool IsLoadGlobalIC() const { return IsLoadGlobalICKind(kind_); }
  bool IsKeyedLoadIC() const { return IsKeyedLoadICKind(kind_); }
121
  bool IsStoreGlobalIC() const { return IsStoreGlobalICKind(kind_); }
122
  bool IsStoreIC() const { return IsStoreICKind(kind_); }
123
  bool IsStoreOwnIC() const { return IsStoreOwnICKind(kind_); }
124
  bool IsDefineOwnIC() const { return IsDefineOwnICKind(kind_); }
125 126 127
  bool IsStoreInArrayLiteralIC() const {
    return IsStoreInArrayLiteralICKind(kind_);
  }
128
  bool IsKeyedStoreIC() const { return IsKeyedStoreICKind(kind_); }
129
  bool IsKeyedHasIC() const { return IsKeyedHasICKind(kind_); }
130
  bool IsKeyedDefineOwnIC() const { return IsKeyedDefineOwnICKind(kind_); }
131
  bool is_keyed() const {
132 133
    return IsKeyedLoadIC() || IsKeyedStoreIC() || IsStoreInArrayLiteralIC() ||
           IsKeyedHasIC() || IsKeyedDefineOwnIC();
134
  }
135
  bool is_any_store_own() const { return IsStoreOwnIC() || IsDefineOwnIC(); }
136
  bool ShouldRecomputeHandler(Handle<String> name);
137

138 139
  Handle<Map> lookup_start_object_map() { return lookup_start_object_map_; }
  inline void update_lookup_start_object_map(Handle<Object> object);
140

141
  void TargetMaps(MapHandles* list) {
142
    FindTargetMaps();
143 144
    for (Handle<Map> map : target_maps_) {
      list->push_back(map);
145 146 147
    }
  }

148
  Map FirstTargetMap() {
149
    FindTargetMaps();
150
    return !target_maps_.empty() ? *target_maps_[0] : Map();
151 152
  }

153 154
  const FeedbackNexus* nexus() const { return &nexus_; }
  FeedbackNexus* nexus() { return &nexus_; }
155

156
 private:
157 158 159
  void FindTargetMaps() {
    if (target_maps_set_) return;
    target_maps_set_ = true;
verwaest's avatar
verwaest committed
160
    nexus()->ExtractMaps(&target_maps_);
161 162
  }

163
  Isolate* isolate_;
164

165
  bool vector_set_;
166
  State old_state_;  // For saving if we marked as prototype failure.
167
  State state_;
168
  FeedbackSlotKind kind_;
169
  Handle<Map> lookup_start_object_map_;
170
  MaybeHandle<Object> accessor_;
171
  MapHandles target_maps_;
172
  bool target_maps_set_;
173

174 175
  const char* slow_stub_reason_;

176
  FeedbackNexus nexus_;
177

178
  DISALLOW_IMPLICIT_CONSTRUCTORS(IC);
179 180
};

181
class LoadIC : public IC {
182
 public:
183 184 185
  LoadIC(Isolate* isolate, Handle<FeedbackVector> vector, FeedbackSlot slot,
         FeedbackSlotKind kind)
      : IC(isolate, vector, slot, kind) {
186
    DCHECK(IsAnyLoad() || IsAnyHas());
187 188
  }

189
  static bool ShouldThrowReferenceError(FeedbackSlotKind kind) {
190
    return kind == FeedbackSlotKind::kLoadGlobalNotInsideTypeof;
191 192
  }

193
  bool ShouldThrowReferenceError() const {
194
    return ShouldThrowReferenceError(kind());
195 196
  }

197 198 199 200
  // If receiver is empty, use object as the receiver.
  V8_WARN_UNUSED_RESULT MaybeHandle<Object> Load(
      Handle<Object> object, Handle<Name> name, bool update_feedback = true,
      Handle<Object> receiver = Handle<Object>());
201

202
 protected:
203 204
  // Update the inline cache and the global stub cache based on the
  // lookup result.
205
  void UpdateCaches(LookupIterator* lookup);
206

207
 private:
208
  Handle<Object> ComputeHandler(LookupIterator* lookup);
209

210
  friend class IC;
211
  friend class NamedLoadHandlerCompiler;
212 213
};

214 215
class LoadGlobalIC : public LoadIC {
 public:
216
  LoadGlobalIC(Isolate* isolate, Handle<FeedbackVector> vector,
217 218
               FeedbackSlot slot, FeedbackSlotKind kind)
      : LoadIC(isolate, vector, slot, kind) {}
219

220 221
  V8_WARN_UNUSED_RESULT MaybeHandle<Object> Load(Handle<Name> name,
                                                 bool update_feedback = true);
222
};
223

224
class KeyedLoadIC : public LoadIC {
danno@chromium.org's avatar
danno@chromium.org committed
225
 public:
226
  KeyedLoadIC(Isolate* isolate, Handle<FeedbackVector> vector,
227 228
              FeedbackSlot slot, FeedbackSlotKind kind)
      : LoadIC(isolate, vector, slot, kind) {}
229

230 231
  V8_WARN_UNUSED_RESULT MaybeHandle<Object> Load(Handle<Object> object,
                                                 Handle<Object> key);
232

233
 protected:
234 235 236
  V8_WARN_UNUSED_RESULT MaybeHandle<Object> RuntimeLoad(Handle<Object> object,
                                                        Handle<Object> key);

237
  // receiver is HeapObject because it could be a String or a JSObject
238 239
  void UpdateLoadElement(Handle<HeapObject> receiver,
                         KeyedAccessLoadMode load_mode);
240

241
 private:
242
  friend class IC;
243

244 245
  Handle<Object> LoadElementHandler(Handle<Map> receiver_map,
                                    KeyedAccessLoadMode load_mode);
246

247
  void LoadElementPolymorphicHandlers(MapHandles* receiver_maps,
248
                                      MaybeObjectHandles* handlers,
249
                                      KeyedAccessLoadMode load_mode);
250 251 252 253 254

  // Returns true if the receiver_map has a kElement or kIndexedString
  // handler in the nexus currently but didn't yet allow out of bounds
  // accesses.
  bool CanChangeToAllowOutOfBounds(Handle<Map> receiver_map);
255 256
};

257
class StoreIC : public IC {
258
 public:
259
  StoreIC(Isolate* isolate, Handle<FeedbackVector> vector, FeedbackSlot slot,
260 261
          FeedbackSlotKind kind)
      : IC(isolate, vector, slot, kind) {
262
    DCHECK(IsAnyStore());
263
  }
264

265
  V8_WARN_UNUSED_RESULT MaybeHandle<Object> Store(
266
      Handle<Object> object, Handle<Name> name, Handle<Object> value,
267
      StoreOrigin store_origin = StoreOrigin::kNamed);
268

269
  bool LookupForWrite(LookupIterator* it, Handle<Object> value,
270
                      StoreOrigin store_origin);
271

272
 protected:
273
  // Stub accessors.
274 275
  // Update the inline cache and the global stub cache based on the
  // lookup result.
276
  void UpdateCaches(LookupIterator* lookup, Handle<Object> value,
277
                    StoreOrigin store_origin);
278

279
 private:
280
  MaybeObjectHandle ComputeHandler(LookupIterator* lookup);
281

282 283 284
  friend class IC;
};

285 286
class StoreGlobalIC : public StoreIC {
 public:
287
  StoreGlobalIC(Isolate* isolate, Handle<FeedbackVector> vector,
288 289
                FeedbackSlot slot, FeedbackSlotKind kind)
      : StoreIC(isolate, vector, slot, kind) {}
290

291 292
  V8_WARN_UNUSED_RESULT MaybeHandle<Object> Store(Handle<Name> name,
                                                  Handle<Object> value);
293
};
294

295
enum KeyedStoreCheckMap { kDontCheckMap, kCheckMap };
296

297
enum KeyedStoreIncrementLength { kDontIncrementLength, kIncrementLength };
298

299 300 301 302 303 304
enum class TransitionMode {
  kNoTransition,
  kTransitionToDouble,
  kTransitionToObject
};

305
class KeyedStoreIC : public StoreIC {
306
 public:
307
  KeyedAccessStoreMode GetKeyedAccessStoreMode() {
308
    return nexus()->GetKeyedAccessStoreMode();
309 310
  }

311
  KeyedStoreIC(Isolate* isolate, Handle<FeedbackVector> vector,
312 313
               FeedbackSlot slot, FeedbackSlotKind kind)
      : StoreIC(isolate, vector, slot, kind) {}
314

315 316 317
  V8_WARN_UNUSED_RESULT MaybeHandle<Object> Store(Handle<Object> object,
                                                  Handle<Object> name,
                                                  Handle<Object> value);
318

danno@chromium.org's avatar
danno@chromium.org committed
319
 protected:
320
  void UpdateStoreElement(Handle<Map> receiver_map,
321
                          KeyedAccessStoreMode store_mode,
322
                          Handle<Map> new_receiver_map);
323

324
 private:
325
  Handle<Map> ComputeTransitionedMap(Handle<Map> map,
326
                                     TransitionMode transition_mode);
327

328 329 330
  Handle<Object> StoreElementHandler(
      Handle<Map> receiver_map, KeyedAccessStoreMode store_mode,
      MaybeHandle<Object> prev_validity_cell = MaybeHandle<Object>());
331

332 333 334
  void StoreElementPolymorphicHandlers(
      std::vector<MapAndHandler>* receiver_maps_and_handlers,
      KeyedAccessStoreMode store_mode);
335

336 337 338
  friend class IC;
};

339 340 341 342
class StoreInArrayLiteralIC : public KeyedStoreIC {
 public:
  StoreInArrayLiteralIC(Isolate* isolate, Handle<FeedbackVector> vector,
                        FeedbackSlot slot)
343
      : KeyedStoreIC(isolate, vector, slot,
344
                     FeedbackSlotKind::kStoreInArrayLiteral) {
345 346 347
    DCHECK(IsStoreInArrayLiteralICKind(kind()));
  }

348 349
  MaybeHandle<Object> Store(Handle<JSArray> array, Handle<Object> index,
                            Handle<Object> value);
350 351
};

352 353
}  // namespace internal
}  // namespace v8
354

355
#endif  // V8_IC_IC_H_