// Copyright 2014 the V8 project authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include "src/v8.h" #include "src/bootstrapper.h" #include "src/deoptimizer.h" #include "src/lookup.h" #include "src/lookup-inl.h" namespace v8 { namespace internal { void LookupIterator::Next() { DCHECK_NE(JSPROXY, state_); DCHECK_NE(TRANSITION, state_); DisallowHeapAllocation no_gc; has_property_ = false; JSReceiver* holder = *holder_; Map* map = *holder_map_; // Perform lookup on current holder. state_ = LookupInHolder(map, holder); if (IsFound()) return; // Continue lookup if lookup on current holder failed. do { JSReceiver* maybe_holder = NextHolder(map); if (maybe_holder == NULL) break; holder = maybe_holder; map = holder->map(); state_ = LookupInHolder(map, holder); } while (!IsFound()); if (holder != *holder_) { holder_ = handle(holder, isolate_); holder_map_ = handle(map, isolate_); } } Handle LookupIterator::GetRoot() const { if (receiver_->IsJSReceiver()) return Handle::cast(receiver_); Handle root = handle(receiver_->GetRootMap(isolate_)->prototype(), isolate_); CHECK(!root->IsNull()); return Handle::cast(root); } Handle LookupIterator::GetReceiverMap() const { if (receiver_->IsNumber()) return isolate_->factory()->heap_number_map(); return handle(Handle::cast(receiver_)->map(), isolate_); } Handle LookupIterator::GetStoreTarget() const { if (receiver_->IsJSGlobalProxy()) { PrototypeIterator iter(isolate(), receiver_); if (iter.IsAtEnd()) return Handle::cast(receiver_); return Handle::cast(PrototypeIterator::GetCurrent(iter)); } return Handle::cast(receiver_); } bool LookupIterator::IsBootstrapping() const { return isolate_->bootstrapper()->IsActive(); } bool LookupIterator::HasAccess(v8::AccessType access_type) const { DCHECK_EQ(ACCESS_CHECK, state_); return isolate_->MayNamedAccess(GetHolder(), name_, access_type); } void LookupIterator::ReloadPropertyInformation() { state_ = BEFORE_PROPERTY; state_ = LookupInHolder(*holder_map_, *holder_); DCHECK(IsFound() || holder_map_->is_dictionary_map()); } void LookupIterator::PrepareForDataProperty(Handle value) { DCHECK(state_ == DATA || state_ == ACCESSOR); DCHECK(HolderIsReceiverOrHiddenPrototype()); if (holder_map_->is_dictionary_map()) return; holder_map_ = Map::PrepareForDataProperty(holder_map_, descriptor_number(), value); JSObject::MigrateToMap(GetHolder(), holder_map_); ReloadPropertyInformation(); } void LookupIterator::ReconfigureDataProperty(Handle value, PropertyAttributes attributes) { DCHECK(state_ == DATA || state_ == ACCESSOR); DCHECK(HolderIsReceiverOrHiddenPrototype()); Handle holder = GetHolder(); if (holder_map_->is_dictionary_map()) { PropertyDetails details(attributes, v8::internal::DATA, 0); JSObject::SetNormalizedProperty(holder, name(), value, details); } else { holder_map_ = Map::ReconfigureExistingProperty( holder_map_, descriptor_number(), i::kData, attributes); holder_map_ = Map::PrepareForDataProperty(holder_map_, descriptor_number(), value); JSObject::MigrateToMap(holder, holder_map_); } ReloadPropertyInformation(); } void LookupIterator::PrepareTransitionToDataProperty( Handle value, PropertyAttributes attributes, Object::StoreFromKeyed store_mode) { if (state_ == TRANSITION) return; DCHECK(state_ != LookupIterator::ACCESSOR); DCHECK(state_ == NOT_FOUND || !HolderIsReceiverOrHiddenPrototype()); DCHECK(!IsSpecialNumericIndex()); // Can only be called when the receiver is a JSObject. JSProxy has to be // handled via a trap. Adding properties to primitive values is not // observable. Handle receiver = GetStoreTarget(); if (!isolate()->IsInternallyUsedPropertyName(name()) && !receiver->map()->is_extensible()) { return; } auto transition = Map::TransitionToDataProperty( handle(receiver->map(), isolate_), name_, value, attributes, store_mode); state_ = TRANSITION; transition_ = transition; if (receiver->IsGlobalObject()) { // Install a property cell. InternalizeName(); auto cell = GlobalObject::EnsurePropertyCell( Handle::cast(receiver), name()); DCHECK(cell->value()->IsTheHole()); transition_ = cell; } else if (transition->GetBackPointer()->IsMap()) { property_details_ = transition->GetLastDescriptorDetails(); has_property_ = true; } } void LookupIterator::ApplyTransitionToDataProperty() { DCHECK_EQ(TRANSITION, state_); Handle receiver = GetStoreTarget(); if (receiver->IsGlobalObject()) return; holder_ = receiver; holder_map_ = transition_map(); JSObject::MigrateToMap(receiver, holder_map_); ReloadPropertyInformation(); } void LookupIterator::TransitionToAccessorProperty( AccessorComponent component, Handle accessor, PropertyAttributes attributes) { DCHECK(!accessor->IsNull()); // Can only be called when the receiver is a JSObject. JSProxy has to be // handled via a trap. Adding properties to primitive values is not // observable. Handle receiver = GetStoreTarget(); holder_ = receiver; holder_map_ = Map::TransitionToAccessorProperty(handle(receiver->map(), isolate_), name_, component, accessor, attributes); JSObject::MigrateToMap(receiver, holder_map_); ReloadPropertyInformation(); if (!holder_map_->is_dictionary_map()) return; // We have to deoptimize since accesses to data properties may have been // inlined without a corresponding map-check. if (holder_map_->IsGlobalObjectMap()) { Deoptimizer::DeoptimizeGlobalObject(*receiver); } // Install the accessor into the dictionary-mode object. PropertyDetails details(attributes, ACCESSOR_CONSTANT, 0); Handle pair; if (state() == ACCESSOR && GetAccessors()->IsAccessorPair()) { pair = Handle::cast(GetAccessors()); // If the component and attributes are identical, nothing has to be done. if (pair->get(component) == *accessor) { if (property_details().attributes() == attributes) return; } else { pair = AccessorPair::Copy(pair); pair->set(component, *accessor); } } else { pair = isolate()->factory()->NewAccessorPair(); pair->set(component, *accessor); } JSObject::SetNormalizedProperty(receiver, name_, pair, details); JSObject::ReoptimizeIfPrototype(receiver); holder_map_ = handle(receiver->map(), isolate_); ReloadPropertyInformation(); } bool LookupIterator::HolderIsReceiverOrHiddenPrototype() const { DCHECK(has_property_ || state_ == INTERCEPTOR || state_ == JSPROXY); // Optimization that only works if configuration_ is not mutable. if (!check_prototype_chain()) return true; DisallowHeapAllocation no_gc; if (!receiver_->IsJSReceiver()) return false; Object* current = *receiver_; JSReceiver* holder = *holder_; // JSProxy do not occur as hidden prototypes. if (current->IsJSProxy()) { return JSReceiver::cast(current) == holder; } PrototypeIterator iter(isolate(), current, PrototypeIterator::START_AT_RECEIVER); do { if (JSReceiver::cast(iter.GetCurrent()) == holder) return true; DCHECK(!current->IsJSProxy()); iter.Advance(); } while (!iter.IsAtEnd(PrototypeIterator::END_AT_NON_HIDDEN)); return false; } Handle LookupIterator::FetchValue() const { Object* result = NULL; Handle holder = GetHolder(); if (holder_map_->is_dictionary_map()) { result = holder->property_dictionary()->ValueAt(number_); if (holder_map_->IsGlobalObjectMap()) { result = PropertyCell::cast(result)->value(); } } else if (property_details_.type() == v8::internal::DATA) { FieldIndex field_index = FieldIndex::ForDescriptor(*holder_map_, number_); return JSObject::FastPropertyAt(holder, property_details_.representation(), field_index); } else { result = holder_map_->instance_descriptors()->GetValue(number_); } return handle(result, isolate_); } int LookupIterator::GetAccessorIndex() const { DCHECK(has_property_); DCHECK(!holder_map_->is_dictionary_map()); DCHECK_EQ(v8::internal::ACCESSOR_CONSTANT, property_details_.type()); return descriptor_number(); } int LookupIterator::GetConstantIndex() const { DCHECK(has_property_); DCHECK(!holder_map_->is_dictionary_map()); DCHECK_EQ(v8::internal::DATA_CONSTANT, property_details_.type()); return descriptor_number(); } FieldIndex LookupIterator::GetFieldIndex() const { DCHECK(has_property_); DCHECK(!holder_map_->is_dictionary_map()); DCHECK_EQ(v8::internal::DATA, property_details_.type()); int index = holder_map_->instance_descriptors()->GetFieldIndex(descriptor_number()); bool is_double = representation().IsDouble(); return FieldIndex::ForPropertyIndex(*holder_map_, index, is_double); } Handle LookupIterator::GetFieldType() const { DCHECK(has_property_); DCHECK(!holder_map_->is_dictionary_map()); DCHECK_EQ(v8::internal::DATA, property_details_.type()); return handle( holder_map_->instance_descriptors()->GetFieldType(descriptor_number()), isolate_); } Handle LookupIterator::GetPropertyCell() const { Handle holder = GetHolder(); Handle global = Handle::cast(holder); Object* value = global->property_dictionary()->ValueAt(dictionary_entry()); return Handle(PropertyCell::cast(value)); } Handle LookupIterator::GetAccessors() const { DCHECK_EQ(ACCESSOR, state_); return FetchValue(); } Handle LookupIterator::GetDataValue() const { DCHECK_EQ(DATA, state_); Handle value = FetchValue(); return value; } Handle LookupIterator::WriteDataValue(Handle value) { DCHECK_EQ(DATA, state_); Handle holder = GetHolder(); if (holder_map_->is_dictionary_map()) { NameDictionary* property_dictionary = holder->property_dictionary(); if (holder->IsGlobalObject()) { Handle cell( PropertyCell::cast(property_dictionary->ValueAt(dictionary_entry()))); value = PropertyCell::SetValueInferType(cell, value); } else { property_dictionary->ValueAtPut(dictionary_entry(), *value); } } else if (property_details_.type() == v8::internal::DATA) { holder->WriteToField(descriptor_number(), *value); } else { DCHECK_EQ(v8::internal::DATA_CONSTANT, property_details_.type()); } return value; } bool LookupIterator::IsSpecialNumericIndex() const { if (GetStoreTarget()->IsJSTypedArray() && name()->IsString()) { Handle name_string = Handle::cast(name()); if (name_string->length() > 0) { double d = StringToDouble(isolate()->unicode_cache(), name_string, NO_FLAGS); if (!std::isnan(d)) { if (String::Equals(isolate()->factory()->minus_zero_string(), name_string)) return true; Factory* factory = isolate()->factory(); Handle num = factory->NewNumber(d); Handle roundtrip_string = factory->NumberToString(num); if (String::Equals(name_string, roundtrip_string)) return true; } } } return false; } void LookupIterator::InternalizeName() { if (name_->IsUniqueName()) return; name_ = factory()->InternalizeString(Handle::cast(name_)); } } } // namespace v8::internal