| /* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 4 -*- |
| * vim: set ts=8 sts=4 et sw=4 tw=99: |
| * This Source Code Form is subject to the terms of the Mozilla Public |
| * License, v. 2.0. If a copy of the MPL was not distributed with this |
| * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ |
| |
| #include "jit/BaselineJIT.h" |
| #include "jit/BaselineIC.h" |
| #include "jit/BaselineHelpers.h" |
| #include "jit/BaselineCompiler.h" |
| #include "jit/IonLinker.h" |
| |
| using namespace js; |
| using namespace js::jit; |
| |
| namespace js { |
| namespace jit { |
| |
| // ICCompare_Int32 |
| |
| bool |
| ICCompare_Int32::Compiler::generateStubCode(MacroAssembler &masm) |
| { |
| // Guard that R0 is an integer and R1 is an integer. |
| Label failure; |
| masm.branchTestInt32(Assembler::NotEqual, R0, &failure); |
| masm.branchTestInt32(Assembler::NotEqual, R1, &failure); |
| |
| // Directly compare the int32 payload of R0 and R1. |
| Assembler::Condition cond = JSOpToCondition(op, /* signed = */true); |
| masm.cmpl(R0.valueReg(), R1.valueReg()); |
| masm.setCC(cond, ScratchReg); |
| masm.movzxbl(ScratchReg, ScratchReg); |
| |
| // Box the result and return |
| masm.boxValue(JSVAL_TYPE_BOOLEAN, ScratchReg, R0.valueReg()); |
| EmitReturnFromIC(masm); |
| |
| // Failure case - jump to next stub |
| masm.bind(&failure); |
| EmitStubGuardFailure(masm); |
| |
| return true; |
| } |
| |
| // ICBinaryArith_Int32 |
| |
| bool |
| ICBinaryArith_Int32::Compiler::generateStubCode(MacroAssembler &masm) |
| { |
| // Guard that R0 is an integer and R1 is an integer. |
| Label failure; |
| masm.branchTestInt32(Assembler::NotEqual, R0, &failure); |
| masm.branchTestInt32(Assembler::NotEqual, R1, &failure); |
| |
| Label revertRegister, maybeNegZero; |
| switch(op_) { |
| case JSOP_ADD: |
| masm.unboxInt32(R0, ExtractTemp0); |
| // Just jump to failure on overflow. R0 and R1 are preserved, so we can just jump to |
| // the next stub. |
| masm.addl(R1.valueReg(), ExtractTemp0); |
| masm.j(Assembler::Overflow, &failure); |
| |
| // Box the result |
| masm.boxValue(JSVAL_TYPE_INT32, ExtractTemp0, R0.valueReg()); |
| break; |
| case JSOP_SUB: |
| masm.unboxInt32(R0, ExtractTemp0); |
| masm.subl(R1.valueReg(), ExtractTemp0); |
| masm.j(Assembler::Overflow, &failure); |
| masm.boxValue(JSVAL_TYPE_INT32, ExtractTemp0, R0.valueReg()); |
| break; |
| case JSOP_MUL: |
| masm.unboxInt32(R0, ExtractTemp0); |
| masm.imull(R1.valueReg(), ExtractTemp0); |
| masm.j(Assembler::Overflow, &failure); |
| |
| masm.branchTest32(Assembler::Zero, ExtractTemp0, ExtractTemp0, &maybeNegZero); |
| |
| masm.boxValue(JSVAL_TYPE_INT32, ExtractTemp0, R0.valueReg()); |
| break; |
| case JSOP_DIV: |
| JS_ASSERT(R2.scratchReg() == rax); |
| JS_ASSERT(R0.valueReg() != rdx); |
| JS_ASSERT(R1.valueReg() != rdx); |
| masm.unboxInt32(R0, eax); |
| masm.unboxInt32(R1, ExtractTemp0); |
| |
| // Prevent division by 0. |
| masm.branchTest32(Assembler::Zero, ExtractTemp0, ExtractTemp0, &failure); |
| |
| // Prevent negative 0 and -2147483648 / -1. |
| masm.branchTest32(Assembler::Zero, eax, Imm32(0x7fffffff), &failure); |
| |
| // Sign extend eax into edx to make (edx:eax), since idiv is 64-bit. |
| masm.cdq(); |
| masm.idiv(ExtractTemp0); |
| |
| // A remainder implies a double result. |
| masm.branchTest32(Assembler::NonZero, edx, edx, &failure); |
| |
| masm.boxValue(JSVAL_TYPE_INT32, eax, R0.valueReg()); |
| break; |
| case JSOP_MOD: |
| { |
| JS_ASSERT(R2.scratchReg() == rax); |
| JS_ASSERT(R0.valueReg() != rdx); |
| JS_ASSERT(R1.valueReg() != rdx); |
| masm.unboxInt32(R0, eax); |
| masm.unboxInt32(R1, ExtractTemp0); |
| |
| // x % 0 always results in NaN. |
| masm.branchTest32(Assembler::Zero, ExtractTemp0, ExtractTemp0, &failure); |
| |
| // Prevent negative 0 and -2147483648 % -1. |
| masm.branchTest32(Assembler::Zero, eax, Imm32(0x7fffffff), &failure); |
| |
| // Sign extend eax into edx to make (edx:eax), since idiv is 64-bit. |
| masm.cdq(); |
| masm.idiv(ExtractTemp0); |
| |
| // Fail when we would need a negative remainder. |
| Label done; |
| masm.branchTest32(Assembler::NonZero, edx, edx, &done); |
| masm.orl(ExtractTemp0, eax); |
| masm.branchTest32(Assembler::Signed, eax, eax, &failure); |
| |
| masm.bind(&done); |
| masm.boxValue(JSVAL_TYPE_INT32, edx, R0.valueReg()); |
| break; |
| } |
| case JSOP_BITOR: |
| // We can overide R0, because the instruction is unfailable. |
| // Because the tag bits are the same, we don't need to retag. |
| masm.orq(R1.valueReg(), R0.valueReg()); |
| break; |
| case JSOP_BITXOR: |
| masm.xorl(R1.valueReg(), R0.valueReg()); |
| masm.tagValue(JSVAL_TYPE_INT32, R0.valueReg(), R0); |
| break; |
| case JSOP_BITAND: |
| masm.andq(R1.valueReg(), R0.valueReg()); |
| break; |
| case JSOP_LSH: |
| masm.unboxInt32(R0, ExtractTemp0); |
| masm.unboxInt32(R1, ecx); // Unboxing R1 to ecx, clobbers R0. |
| masm.shll_cl(ExtractTemp0); |
| masm.boxValue(JSVAL_TYPE_INT32, ExtractTemp0, R0.valueReg()); |
| break; |
| case JSOP_RSH: |
| masm.unboxInt32(R0, ExtractTemp0); |
| masm.unboxInt32(R1, ecx); |
| masm.sarl_cl(ExtractTemp0); |
| masm.boxValue(JSVAL_TYPE_INT32, ExtractTemp0, R0.valueReg()); |
| break; |
| case JSOP_URSH: |
| if (!allowDouble_) |
| masm.movq(R0.valueReg(), ScratchReg); |
| |
| masm.unboxInt32(R0, ExtractTemp0); |
| masm.unboxInt32(R1, ecx); // This clobbers R0 |
| |
| masm.shrl_cl(ExtractTemp0); |
| masm.testl(ExtractTemp0, ExtractTemp0); |
| if (allowDouble_) { |
| Label toUint; |
| masm.j(Assembler::Signed, &toUint); |
| |
| // Box and return. |
| masm.boxValue(JSVAL_TYPE_INT32, ExtractTemp0, R0.valueReg()); |
| EmitReturnFromIC(masm); |
| |
| masm.bind(&toUint); |
| masm.convertUInt32ToDouble(ExtractTemp0, ScratchFloatReg); |
| masm.boxDouble(ScratchFloatReg, R0); |
| } else { |
| masm.j(Assembler::Signed, &revertRegister); |
| masm.boxValue(JSVAL_TYPE_INT32, ExtractTemp0, R0.valueReg()); |
| } |
| break; |
| default: |
| JS_NOT_REACHED("Unhandled op in BinaryArith_Int32"); |
| return false; |
| } |
| |
| // Return from stub. |
| EmitReturnFromIC(masm); |
| |
| if (op_ == JSOP_MUL) { |
| masm.bind(&maybeNegZero); |
| |
| // Result is -0 if exactly one of lhs or rhs is negative. |
| masm.movl(R0.valueReg(), ScratchReg); |
| masm.orl(R1.valueReg(), ScratchReg); |
| masm.j(Assembler::Signed, &failure); |
| |
| // Result is +0. |
| masm.moveValue(Int32Value(0), R0); |
| EmitReturnFromIC(masm); |
| } |
| |
| // Revert the content of R0 in the fallible >>> case. |
| if (op_ == JSOP_URSH && !allowDouble_) { |
| masm.bind(&revertRegister); |
| // Restore tag and payload. |
| masm.movq(ScratchReg, R0.valueReg()); |
| // Fall through to failure. |
| } |
| // Failure case - jump to next stub |
| masm.bind(&failure); |
| EmitStubGuardFailure(masm); |
| |
| return true; |
| } |
| |
| bool |
| ICUnaryArith_Int32::Compiler::generateStubCode(MacroAssembler &masm) |
| { |
| Label failure; |
| masm.branchTestInt32(Assembler::NotEqual, R0, &failure); |
| |
| switch (op) { |
| case JSOP_BITNOT: |
| masm.notl(R0.valueReg()); |
| break; |
| case JSOP_NEG: |
| // Guard against 0 and MIN_INT, both result in a double. |
| masm.branchTest32(Assembler::Zero, R0.valueReg(), Imm32(0x7fffffff), &failure); |
| masm.negl(R0.valueReg()); |
| break; |
| default: |
| JS_NOT_REACHED("Unexpected op"); |
| return false; |
| } |
| |
| masm.tagValue(JSVAL_TYPE_INT32, R0.valueReg(), R0); |
| |
| EmitReturnFromIC(masm); |
| |
| masm.bind(&failure); |
| EmitStubGuardFailure(masm); |
| return true; |
| } |
| |
| } // namespace jit |
| } // namespace js |
