| // Copyright 2014 the V8 project authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #include "src/compiler/js-context-specialization.h" |
| |
| #include "src/compiler/common-operator.h" |
| #include "src/compiler/js-graph.h" |
| #include "src/compiler/js-heap-broker.h" |
| #include "src/compiler/js-operator.h" |
| #include "src/compiler/linkage.h" |
| #include "src/compiler/node-matchers.h" |
| #include "src/compiler/node-properties.h" |
| #include "src/objects/contexts-inl.h" |
| |
| namespace v8 { |
| namespace internal { |
| namespace compiler { |
| |
| Reduction JSContextSpecialization::Reduce(Node* node) { |
| switch (node->opcode()) { |
| case IrOpcode::kParameter: |
| return ReduceParameter(node); |
| case IrOpcode::kJSLoadContext: |
| return ReduceJSLoadContext(node); |
| case IrOpcode::kJSStoreContext: |
| return ReduceJSStoreContext(node); |
| case IrOpcode::kJSGetImportMeta: |
| return ReduceJSGetImportMeta(node); |
| default: |
| break; |
| } |
| return NoChange(); |
| } |
| |
| Reduction JSContextSpecialization::ReduceParameter(Node* node) { |
| DCHECK_EQ(IrOpcode::kParameter, node->opcode()); |
| int const index = ParameterIndexOf(node->op()); |
| if (index == Linkage::kJSCallClosureParamIndex) { |
| // Constant-fold the function parameter {node}. |
| Handle<JSFunction> function; |
| if (closure().ToHandle(&function)) { |
| Node* value = jsgraph()->Constant(JSFunctionRef(broker_, function)); |
| return Replace(value); |
| } |
| } |
| return NoChange(); |
| } |
| |
| Reduction JSContextSpecialization::SimplifyJSLoadContext(Node* node, |
| Node* new_context, |
| size_t new_depth) { |
| DCHECK_EQ(IrOpcode::kJSLoadContext, node->opcode()); |
| const ContextAccess& access = ContextAccessOf(node->op()); |
| DCHECK_LE(new_depth, access.depth()); |
| |
| if (new_depth == access.depth() && |
| new_context == NodeProperties::GetContextInput(node)) { |
| return NoChange(); |
| } |
| |
| const Operator* op = jsgraph_->javascript()->LoadContext( |
| new_depth, access.index(), access.immutable()); |
| NodeProperties::ReplaceContextInput(node, new_context); |
| NodeProperties::ChangeOp(node, op); |
| return Changed(node); |
| } |
| |
| Reduction JSContextSpecialization::SimplifyJSStoreContext(Node* node, |
| Node* new_context, |
| size_t new_depth) { |
| DCHECK_EQ(IrOpcode::kJSStoreContext, node->opcode()); |
| const ContextAccess& access = ContextAccessOf(node->op()); |
| DCHECK_LE(new_depth, access.depth()); |
| |
| if (new_depth == access.depth() && |
| new_context == NodeProperties::GetContextInput(node)) { |
| return NoChange(); |
| } |
| |
| const Operator* op = |
| jsgraph_->javascript()->StoreContext(new_depth, access.index()); |
| NodeProperties::ReplaceContextInput(node, new_context); |
| NodeProperties::ChangeOp(node, op); |
| return Changed(node); |
| } |
| |
| namespace { |
| |
| bool IsContextParameter(Node* node) { |
| DCHECK_EQ(IrOpcode::kParameter, node->opcode()); |
| Node* const start = NodeProperties::GetValueInput(node, 0); |
| DCHECK_EQ(IrOpcode::kStart, start->opcode()); |
| int const index = ParameterIndexOf(node->op()); |
| // The context is always the last parameter to a JavaScript function, and |
| // {Parameter} indices start at -1, so value outputs of {Start} look like |
| // this: closure, receiver, param0, ..., paramN, context. |
| return index == start->op()->ValueOutputCount() - 2; |
| } |
| |
| // Given a context {node} and the {distance} from that context to the target |
| // context (which we want to read from or store to), try to return a |
| // specialization context. If successful, update {distance} to whatever |
| // distance remains from the specialization context. |
| base::Optional<ContextRef> GetSpecializationContext( |
| JSHeapBroker* broker, Node* node, size_t* distance, |
| Maybe<OuterContext> maybe_outer) { |
| switch (node->opcode()) { |
| case IrOpcode::kHeapConstant: { |
| HeapObjectRef object(broker, HeapConstantOf(node->op())); |
| if (object.IsContext()) return object.AsContext(); |
| break; |
| } |
| case IrOpcode::kParameter: { |
| OuterContext outer; |
| if (maybe_outer.To(&outer) && IsContextParameter(node) && |
| *distance >= outer.distance) { |
| *distance -= outer.distance; |
| return ContextRef(broker, outer.context); |
| } |
| break; |
| } |
| default: |
| break; |
| } |
| return base::Optional<ContextRef>(); |
| } |
| |
| } // anonymous namespace |
| |
| Reduction JSContextSpecialization::ReduceJSLoadContext(Node* node) { |
| DCHECK_EQ(IrOpcode::kJSLoadContext, node->opcode()); |
| |
| const ContextAccess& access = ContextAccessOf(node->op()); |
| size_t depth = access.depth(); |
| |
| // First walk up the context chain in the graph as far as possible. |
| Node* context = NodeProperties::GetOuterContext(node, &depth); |
| |
| base::Optional<ContextRef> maybe_concrete = |
| GetSpecializationContext(broker(), context, &depth, outer()); |
| if (!maybe_concrete.has_value()) { |
| // We do not have a concrete context object, so we can only partially reduce |
| // the load by folding-in the outer context node. |
| return SimplifyJSLoadContext(node, context, depth); |
| } |
| |
| // Now walk up the concrete context chain for the remaining depth. |
| ContextRef concrete = maybe_concrete.value(); |
| concrete = concrete.previous(&depth); |
| if (depth > 0) { |
| TRACE_BROKER_MISSING(broker(), "previous value for context " << concrete); |
| return SimplifyJSLoadContext(node, jsgraph()->Constant(concrete), depth); |
| } |
| |
| if (!access.immutable()) { |
| // We found the requested context object but since the context slot is |
| // mutable we can only partially reduce the load. |
| return SimplifyJSLoadContext(node, jsgraph()->Constant(concrete), depth); |
| } |
| |
| // This will hold the final value, if we can figure it out. |
| base::Optional<ObjectRef> maybe_value; |
| maybe_value = concrete.get(static_cast<int>(access.index())); |
| |
| if (!maybe_value.has_value()) { |
| TRACE_BROKER_MISSING(broker(), "slot value " << access.index() |
| << " for context " |
| << concrete); |
| return SimplifyJSLoadContext(node, jsgraph()->Constant(concrete), depth); |
| } |
| |
| if (!maybe_value->IsSmi()) { |
| // Even though the context slot is immutable, the context might have escaped |
| // before the function to which it belongs has initialized the slot. |
| // We must be conservative and check if the value in the slot is currently |
| // the hole or undefined. Only if it is neither of these, can we be sure |
| // that it won't change anymore. |
| OddballType oddball_type = maybe_value->AsHeapObject().map().oddball_type(); |
| if (oddball_type == OddballType::kUndefined || |
| oddball_type == OddballType::kHole) { |
| return SimplifyJSLoadContext(node, jsgraph()->Constant(concrete), depth); |
| } |
| } |
| |
| // Success. The context load can be replaced with the constant. |
| Node* constant = jsgraph_->Constant(*maybe_value); |
| ReplaceWithValue(node, constant); |
| return Replace(constant); |
| } |
| |
| |
| Reduction JSContextSpecialization::ReduceJSStoreContext(Node* node) { |
| DCHECK_EQ(IrOpcode::kJSStoreContext, node->opcode()); |
| |
| const ContextAccess& access = ContextAccessOf(node->op()); |
| size_t depth = access.depth(); |
| |
| // First walk up the context chain in the graph until we reduce the depth to 0 |
| // or hit a node that does not have a CreateXYZContext operator. |
| Node* context = NodeProperties::GetOuterContext(node, &depth); |
| |
| base::Optional<ContextRef> maybe_concrete = |
| GetSpecializationContext(broker(), context, &depth, outer()); |
| if (!maybe_concrete.has_value()) { |
| // We do not have a concrete context object, so we can only partially reduce |
| // the load by folding-in the outer context node. |
| return SimplifyJSStoreContext(node, context, depth); |
| } |
| |
| // Now walk up the concrete context chain for the remaining depth. |
| ContextRef concrete = maybe_concrete.value(); |
| concrete = concrete.previous(&depth); |
| if (depth > 0) { |
| TRACE_BROKER_MISSING(broker(), "previous value for context " << concrete); |
| return SimplifyJSStoreContext(node, jsgraph()->Constant(concrete), depth); |
| } |
| |
| return SimplifyJSStoreContext(node, jsgraph()->Constant(concrete), depth); |
| } |
| |
| base::Optional<ContextRef> GetModuleContext(JSHeapBroker* broker, Node* node, |
| Maybe<OuterContext> maybe_context) { |
| size_t depth = std::numeric_limits<size_t>::max(); |
| Node* context = NodeProperties::GetOuterContext(node, &depth); |
| |
| auto find_context = [](ContextRef c) { |
| while (c.map().instance_type() != MODULE_CONTEXT_TYPE) { |
| size_t depth = 1; |
| c = c.previous(&depth); |
| CHECK_EQ(depth, 0); |
| } |
| return c; |
| }; |
| |
| switch (context->opcode()) { |
| case IrOpcode::kHeapConstant: { |
| HeapObjectRef object(broker, HeapConstantOf(context->op())); |
| if (object.IsContext()) { |
| return find_context(object.AsContext()); |
| } |
| break; |
| } |
| case IrOpcode::kParameter: { |
| OuterContext outer; |
| if (maybe_context.To(&outer) && IsContextParameter(context)) { |
| return find_context(ContextRef(broker, outer.context)); |
| } |
| break; |
| } |
| default: |
| break; |
| } |
| |
| return base::Optional<ContextRef>(); |
| } |
| |
| Reduction JSContextSpecialization::ReduceJSGetImportMeta(Node* node) { |
| base::Optional<ContextRef> maybe_context = |
| GetModuleContext(broker(), node, outer()); |
| if (!maybe_context.has_value()) return NoChange(); |
| |
| ContextRef context = maybe_context.value(); |
| SourceTextModuleRef module = |
| context.get(Context::EXTENSION_INDEX).value().AsSourceTextModule(); |
| ObjectRef import_meta = module.import_meta(); |
| if (import_meta.IsJSObject()) { |
| Node* import_meta_const = jsgraph()->Constant(import_meta); |
| ReplaceWithValue(node, import_meta_const); |
| return Changed(import_meta_const); |
| } else { |
| DCHECK(import_meta.IsTheHole()); |
| // The import.meta object has not yet been created. Let JSGenericLowering |
| // replace the operator with a runtime call. |
| return NoChange(); |
| } |
| } |
| |
| Isolate* JSContextSpecialization::isolate() const { |
| return jsgraph()->isolate(); |
| } |
| |
| } // namespace compiler |
| } // namespace internal |
| } // namespace v8 |