| // Copyright 2015 the V8 project authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #ifndef V8_OBJECTS_H_ |
| #define V8_OBJECTS_H_ |
| |
| #include <iosfwd> |
| #include <memory> |
| |
| #include "src/assert-scope.h" |
| #include "src/bailout-reason.h" |
| #include "src/base/bits.h" |
| #include "src/base/flags.h" |
| #include "src/builtins/builtins-definitions.h" |
| #include "src/checks.h" |
| #include "src/elements-kind.h" |
| #include "src/field-index.h" |
| #include "src/flags.h" |
| #include "src/interpreter/bytecode-register.h" |
| #include "src/messages.h" |
| #include "src/property-details.h" |
| #include "src/unicode-decoder.h" |
| #include "src/unicode.h" |
| |
| #if V8_TARGET_ARCH_ARM |
| #include "src/arm/constants-arm.h" // NOLINT |
| #elif V8_TARGET_ARCH_ARM64 |
| #include "src/arm64/constants-arm64.h" // NOLINT |
| #elif V8_TARGET_ARCH_MIPS |
| #include "src/mips/constants-mips.h" // NOLINT |
| #elif V8_TARGET_ARCH_MIPS64 |
| #include "src/mips64/constants-mips64.h" // NOLINT |
| #elif V8_TARGET_ARCH_PPC |
| #include "src/ppc/constants-ppc.h" // NOLINT |
| #elif V8_TARGET_ARCH_S390 |
| #include "src/s390/constants-s390.h" // NOLINT |
| #endif |
| |
| // Has to be the last include (doesn't have include guards): |
| #include "src/objects/object-macros.h" |
| |
| // |
| // Most object types in the V8 JavaScript are described in this file. |
| // |
| // Inheritance hierarchy: |
| // - Object |
| // - Smi (immediate small integer) |
| // - HeapObject (superclass for everything allocated in the heap) |
| // - JSReceiver (suitable for property access) |
| // - JSObject |
| // - JSArray |
| // - JSArrayBuffer |
| // - JSArrayBufferView |
| // - JSTypedArray |
| // - JSDataView |
| // - JSBoundFunction |
| // - JSCollection |
| // - JSSet |
| // - JSMap |
| // - JSStringIterator |
| // - JSSetIterator |
| // - JSMapIterator |
| // - JSWeakCollection |
| // - JSWeakMap |
| // - JSWeakSet |
| // - JSRegExp |
| // - JSFunction |
| // - JSGeneratorObject |
| // - JSGlobalObject |
| // - JSGlobalProxy |
| // - JSValue |
| // - JSDate |
| // - JSMessageObject |
| // - JSModuleNamespace |
| // - WasmInstanceObject |
| // - WasmMemoryObject |
| // - WasmModuleObject |
| // - WasmTableObject |
| // - JSProxy |
| // - FixedArrayBase |
| // - ByteArray |
| // - BytecodeArray |
| // - FixedArray |
| // - DescriptorArray |
| // - FrameArray |
| // - HashTable |
| // - Dictionary |
| // - StringTable |
| // - StringSet |
| // - CompilationCacheTable |
| // - MapCache |
| // - OrderedHashTable |
| // - OrderedHashSet |
| // - OrderedHashMap |
| // - Context |
| // - FeedbackMetadata |
| // - TemplateList |
| // - TransitionArray |
| // - ScopeInfo |
| // - ModuleInfo |
| // - ScriptContextTable |
| // - WeakFixedArray |
| // - WasmSharedModuleData |
| // - WasmCompiledModule |
| // - FixedDoubleArray |
| // - Name |
| // - String |
| // - SeqString |
| // - SeqOneByteString |
| // - SeqTwoByteString |
| // - SlicedString |
| // - ConsString |
| // - ThinString |
| // - ExternalString |
| // - ExternalOneByteString |
| // - ExternalTwoByteString |
| // - InternalizedString |
| // - SeqInternalizedString |
| // - SeqOneByteInternalizedString |
| // - SeqTwoByteInternalizedString |
| // - ConsInternalizedString |
| // - ExternalInternalizedString |
| // - ExternalOneByteInternalizedString |
| // - ExternalTwoByteInternalizedString |
| // - Symbol |
| // - HeapNumber |
| // - BigInt |
| // - Cell |
| // - PropertyCell |
| // - PropertyArray |
| // - Code |
| // - AbstractCode, a wrapper around Code or BytecodeArray |
| // - Map |
| // - Oddball |
| // - Foreign |
| // - SmallOrderedHashTable |
| // - SmallOrderedHashMap |
| // - SmallOrderedHashSet |
| // - SharedFunctionInfo |
| // - Struct |
| // - AccessorInfo |
| // - PromiseResolveThenableJobInfo |
| // - PromiseReactionJobInfo |
| // - PromiseCapability |
| // - AccessorPair |
| // - AccessCheckInfo |
| // - InterceptorInfo |
| // - CallHandlerInfo |
| // - EnumCache |
| // - TemplateInfo |
| // - FunctionTemplateInfo |
| // - ObjectTemplateInfo |
| // - Script |
| // - DebugInfo |
| // - BreakPoint |
| // - BreakPointInfo |
| // - StackFrameInfo |
| // - SourcePositionTableWithFrameCache |
| // - CodeCache |
| // - PrototypeInfo |
| // - Module |
| // - ModuleInfoEntry |
| // - PreParsedScopeData |
| // - WeakCell |
| // - FeedbackVector |
| // |
| // Formats of Object*: |
| // Smi: [31 bit signed int] 0 |
| // HeapObject: [32 bit direct pointer] (4 byte aligned) | 01 |
| |
| namespace v8 { |
| namespace internal { |
| |
| struct InliningPosition; |
| class PropertyDescriptorObject; |
| |
| enum KeyedAccessLoadMode { |
| STANDARD_LOAD, |
| LOAD_IGNORE_OUT_OF_BOUNDS, |
| }; |
| |
| enum KeyedAccessStoreMode { |
| STANDARD_STORE, |
| STORE_TRANSITION_TO_OBJECT, |
| STORE_TRANSITION_TO_DOUBLE, |
| STORE_AND_GROW_NO_TRANSITION, |
| STORE_AND_GROW_TRANSITION_TO_OBJECT, |
| STORE_AND_GROW_TRANSITION_TO_DOUBLE, |
| STORE_NO_TRANSITION_IGNORE_OUT_OF_BOUNDS, |
| STORE_NO_TRANSITION_HANDLE_COW |
| }; |
| |
| enum MutableMode { |
| MUTABLE, |
| IMMUTABLE |
| }; |
| |
| |
| static inline bool IsTransitionStoreMode(KeyedAccessStoreMode store_mode) { |
| return store_mode == STORE_TRANSITION_TO_OBJECT || |
| store_mode == STORE_TRANSITION_TO_DOUBLE || |
| store_mode == STORE_AND_GROW_TRANSITION_TO_OBJECT || |
| store_mode == STORE_AND_GROW_TRANSITION_TO_DOUBLE; |
| } |
| |
| |
| static inline KeyedAccessStoreMode GetNonTransitioningStoreMode( |
| KeyedAccessStoreMode store_mode) { |
| if (store_mode >= STORE_NO_TRANSITION_IGNORE_OUT_OF_BOUNDS) { |
| return store_mode; |
| } |
| if (store_mode >= STORE_AND_GROW_NO_TRANSITION) { |
| return STORE_AND_GROW_NO_TRANSITION; |
| } |
| return STANDARD_STORE; |
| } |
| |
| |
| static inline bool IsGrowStoreMode(KeyedAccessStoreMode store_mode) { |
| return store_mode >= STORE_AND_GROW_NO_TRANSITION && |
| store_mode <= STORE_AND_GROW_TRANSITION_TO_DOUBLE; |
| } |
| |
| |
| enum IcCheckType { ELEMENT, PROPERTY }; |
| |
| |
| // SKIP_WRITE_BARRIER skips the write barrier. |
| // UPDATE_WEAK_WRITE_BARRIER skips the marking part of the write barrier and |
| // only performs the generational part. |
| // UPDATE_WRITE_BARRIER is doing the full barrier, marking and generational. |
| enum WriteBarrierMode { |
| SKIP_WRITE_BARRIER, |
| UPDATE_WEAK_WRITE_BARRIER, |
| UPDATE_WRITE_BARRIER |
| }; |
| |
| |
| // PropertyNormalizationMode is used to specify whether to keep |
| // inobject properties when normalizing properties of a JSObject. |
| enum PropertyNormalizationMode { |
| CLEAR_INOBJECT_PROPERTIES, |
| KEEP_INOBJECT_PROPERTIES |
| }; |
| |
| |
| // Indicates whether transitions can be added to a source map or not. |
| enum TransitionFlag { |
| INSERT_TRANSITION, |
| OMIT_TRANSITION |
| }; |
| |
| |
| // Indicates whether the transition is simple: the target map of the transition |
| // either extends the current map with a new property, or it modifies the |
| // property that was added last to the current map. |
| enum SimpleTransitionFlag { |
| SIMPLE_PROPERTY_TRANSITION, |
| PROPERTY_TRANSITION, |
| SPECIAL_TRANSITION |
| }; |
| |
| // Indicates whether we are only interested in the descriptors of a particular |
| // map, or in all descriptors in the descriptor array. |
| enum DescriptorFlag { |
| ALL_DESCRIPTORS, |
| OWN_DESCRIPTORS |
| }; |
| |
| // Instance size sentinel for objects of variable size. |
| const int kVariableSizeSentinel = 0; |
| |
| // We may store the unsigned bit field as signed Smi value and do not |
| // use the sign bit. |
| const int kStubMajorKeyBits = 8; |
| const int kStubMinorKeyBits = kSmiValueSize - kStubMajorKeyBits - 1; |
| |
| // All Maps have a field instance_type containing a InstanceType. |
| // It describes the type of the instances. |
| // |
| // As an example, a JavaScript object is a heap object and its map |
| // instance_type is JS_OBJECT_TYPE. |
| // |
| // The names of the string instance types are intended to systematically |
| // mirror their encoding in the instance_type field of the map. The default |
| // encoding is considered TWO_BYTE. It is not mentioned in the name. ONE_BYTE |
| // encoding is mentioned explicitly in the name. Likewise, the default |
| // representation is considered sequential. It is not mentioned in the |
| // name. The other representations (e.g. CONS, EXTERNAL) are explicitly |
| // mentioned. Finally, the string is either a STRING_TYPE (if it is a normal |
| // string) or a INTERNALIZED_STRING_TYPE (if it is a internalized string). |
| // |
| // NOTE: The following things are some that depend on the string types having |
| // instance_types that are less than those of all other types: |
| // HeapObject::Size, HeapObject::IterateBody, the typeof operator, and |
| // Object::IsString. |
| // |
| // NOTE: Everything following JS_VALUE_TYPE is considered a |
| // JSObject for GC purposes. The first four entries here have typeof |
| // 'object', whereas JS_FUNCTION_TYPE has typeof 'function'. |
| #define INSTANCE_TYPE_LIST(V) \ |
| V(INTERNALIZED_STRING_TYPE) \ |
| V(EXTERNAL_INTERNALIZED_STRING_TYPE) \ |
| V(ONE_BYTE_INTERNALIZED_STRING_TYPE) \ |
| V(EXTERNAL_ONE_BYTE_INTERNALIZED_STRING_TYPE) \ |
| V(EXTERNAL_INTERNALIZED_STRING_WITH_ONE_BYTE_DATA_TYPE) \ |
| V(SHORT_EXTERNAL_INTERNALIZED_STRING_TYPE) \ |
| V(SHORT_EXTERNAL_ONE_BYTE_INTERNALIZED_STRING_TYPE) \ |
| V(SHORT_EXTERNAL_INTERNALIZED_STRING_WITH_ONE_BYTE_DATA_TYPE) \ |
| V(STRING_TYPE) \ |
| V(CONS_STRING_TYPE) \ |
| V(EXTERNAL_STRING_TYPE) \ |
| V(SLICED_STRING_TYPE) \ |
| V(THIN_STRING_TYPE) \ |
| V(ONE_BYTE_STRING_TYPE) \ |
| V(CONS_ONE_BYTE_STRING_TYPE) \ |
| V(EXTERNAL_ONE_BYTE_STRING_TYPE) \ |
| V(SLICED_ONE_BYTE_STRING_TYPE) \ |
| V(THIN_ONE_BYTE_STRING_TYPE) \ |
| V(EXTERNAL_STRING_WITH_ONE_BYTE_DATA_TYPE) \ |
| V(SHORT_EXTERNAL_STRING_TYPE) \ |
| V(SHORT_EXTERNAL_ONE_BYTE_STRING_TYPE) \ |
| V(SHORT_EXTERNAL_STRING_WITH_ONE_BYTE_DATA_TYPE) \ |
| \ |
| V(SYMBOL_TYPE) \ |
| V(HEAP_NUMBER_TYPE) \ |
| V(BIGINT_TYPE) \ |
| V(ODDBALL_TYPE) \ |
| \ |
| V(MAP_TYPE) \ |
| V(CODE_TYPE) \ |
| V(MUTABLE_HEAP_NUMBER_TYPE) \ |
| V(FOREIGN_TYPE) \ |
| V(BYTE_ARRAY_TYPE) \ |
| V(BYTECODE_ARRAY_TYPE) \ |
| V(FREE_SPACE_TYPE) \ |
| \ |
| V(FIXED_INT8_ARRAY_TYPE) \ |
| V(FIXED_UINT8_ARRAY_TYPE) \ |
| V(FIXED_INT16_ARRAY_TYPE) \ |
| V(FIXED_UINT16_ARRAY_TYPE) \ |
| V(FIXED_INT32_ARRAY_TYPE) \ |
| V(FIXED_UINT32_ARRAY_TYPE) \ |
| V(FIXED_FLOAT32_ARRAY_TYPE) \ |
| V(FIXED_FLOAT64_ARRAY_TYPE) \ |
| V(FIXED_UINT8_CLAMPED_ARRAY_TYPE) \ |
| \ |
| V(FIXED_DOUBLE_ARRAY_TYPE) \ |
| V(FILLER_TYPE) \ |
| \ |
| V(ACCESS_CHECK_INFO_TYPE) \ |
| V(ACCESSOR_INFO_TYPE) \ |
| V(ACCESSOR_PAIR_TYPE) \ |
| V(ALIASED_ARGUMENTS_ENTRY_TYPE) \ |
| V(ALLOCATION_MEMENTO_TYPE) \ |
| V(ALLOCATION_SITE_TYPE) \ |
| V(ASYNC_GENERATOR_REQUEST_TYPE) \ |
| V(CONTEXT_EXTENSION_TYPE) \ |
| V(DEBUG_INFO_TYPE) \ |
| V(FUNCTION_TEMPLATE_INFO_TYPE) \ |
| V(INTERCEPTOR_INFO_TYPE) \ |
| V(MODULE_INFO_ENTRY_TYPE) \ |
| V(MODULE_TYPE) \ |
| V(OBJECT_TEMPLATE_INFO_TYPE) \ |
| V(PROMISE_REACTION_JOB_INFO_TYPE) \ |
| V(PROMISE_RESOLVE_THENABLE_JOB_INFO_TYPE) \ |
| V(PROTOTYPE_INFO_TYPE) \ |
| V(SCRIPT_TYPE) \ |
| V(STACK_FRAME_INFO_TYPE) \ |
| V(TUPLE2_TYPE) \ |
| V(TUPLE3_TYPE) \ |
| \ |
| V(FIXED_ARRAY_TYPE) \ |
| V(DESCRIPTOR_ARRAY_TYPE) \ |
| V(HASH_TABLE_TYPE) \ |
| V(TRANSITION_ARRAY_TYPE) \ |
| \ |
| V(CELL_TYPE) \ |
| V(CODE_DATA_CONTAINER_TYPE) \ |
| V(FEEDBACK_VECTOR_TYPE) \ |
| V(LOAD_HANDLER_TYPE) \ |
| V(PROPERTY_ARRAY_TYPE) \ |
| V(PROPERTY_CELL_TYPE) \ |
| V(SHARED_FUNCTION_INFO_TYPE) \ |
| V(SMALL_ORDERED_HASH_MAP_TYPE) \ |
| V(SMALL_ORDERED_HASH_SET_TYPE) \ |
| V(STORE_HANDLER_TYPE) \ |
| V(WEAK_CELL_TYPE) \ |
| \ |
| V(JS_PROXY_TYPE) \ |
| V(JS_GLOBAL_OBJECT_TYPE) \ |
| V(JS_GLOBAL_PROXY_TYPE) \ |
| V(JS_MODULE_NAMESPACE_TYPE) \ |
| V(JS_SPECIAL_API_OBJECT_TYPE) \ |
| V(JS_VALUE_TYPE) \ |
| V(JS_API_OBJECT_TYPE) \ |
| V(JS_OBJECT_TYPE) \ |
| \ |
| V(JS_ARGUMENTS_TYPE) \ |
| V(JS_ARRAY_BUFFER_TYPE) \ |
| V(JS_ARRAY_TYPE) \ |
| V(JS_ASYNC_FROM_SYNC_ITERATOR_TYPE) \ |
| V(JS_ASYNC_GENERATOR_OBJECT_TYPE) \ |
| V(JS_CONTEXT_EXTENSION_OBJECT_TYPE) \ |
| V(JS_DATE_TYPE) \ |
| V(JS_ERROR_TYPE) \ |
| V(JS_GENERATOR_OBJECT_TYPE) \ |
| V(JS_MAP_TYPE) \ |
| V(JS_MAP_KEY_ITERATOR_TYPE) \ |
| V(JS_MAP_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_MAP_VALUE_ITERATOR_TYPE) \ |
| V(JS_MESSAGE_OBJECT_TYPE) \ |
| V(JS_PROMISE_TYPE) \ |
| V(JS_REGEXP_TYPE) \ |
| V(JS_SET_TYPE) \ |
| V(JS_SET_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_SET_VALUE_ITERATOR_TYPE) \ |
| V(JS_STRING_ITERATOR_TYPE) \ |
| V(JS_WEAK_MAP_TYPE) \ |
| V(JS_WEAK_SET_TYPE) \ |
| \ |
| V(JS_TYPED_ARRAY_TYPE) \ |
| V(JS_DATA_VIEW_TYPE) \ |
| \ |
| ARRAY_ITERATOR_TYPE_LIST(V) \ |
| \ |
| V(WASM_INSTANCE_TYPE) \ |
| V(WASM_MEMORY_TYPE) \ |
| V(WASM_MODULE_TYPE) \ |
| V(WASM_TABLE_TYPE) \ |
| V(JS_BOUND_FUNCTION_TYPE) \ |
| V(JS_FUNCTION_TYPE) |
| |
| // Since string types are not consecutive, this macro is used to |
| // iterate over them. |
| #define STRING_TYPE_LIST(V) \ |
| V(STRING_TYPE, kVariableSizeSentinel, string, String) \ |
| V(ONE_BYTE_STRING_TYPE, kVariableSizeSentinel, one_byte_string, \ |
| OneByteString) \ |
| V(CONS_STRING_TYPE, ConsString::kSize, cons_string, ConsString) \ |
| V(CONS_ONE_BYTE_STRING_TYPE, ConsString::kSize, cons_one_byte_string, \ |
| ConsOneByteString) \ |
| V(SLICED_STRING_TYPE, SlicedString::kSize, sliced_string, SlicedString) \ |
| V(SLICED_ONE_BYTE_STRING_TYPE, SlicedString::kSize, sliced_one_byte_string, \ |
| SlicedOneByteString) \ |
| V(EXTERNAL_STRING_TYPE, ExternalTwoByteString::kSize, external_string, \ |
| ExternalString) \ |
| V(EXTERNAL_ONE_BYTE_STRING_TYPE, ExternalOneByteString::kSize, \ |
| external_one_byte_string, ExternalOneByteString) \ |
| V(EXTERNAL_STRING_WITH_ONE_BYTE_DATA_TYPE, ExternalTwoByteString::kSize, \ |
| external_string_with_one_byte_data, ExternalStringWithOneByteData) \ |
| V(SHORT_EXTERNAL_STRING_TYPE, ExternalTwoByteString::kShortSize, \ |
| short_external_string, ShortExternalString) \ |
| V(SHORT_EXTERNAL_ONE_BYTE_STRING_TYPE, ExternalOneByteString::kShortSize, \ |
| short_external_one_byte_string, ShortExternalOneByteString) \ |
| V(SHORT_EXTERNAL_STRING_WITH_ONE_BYTE_DATA_TYPE, \ |
| ExternalTwoByteString::kShortSize, \ |
| short_external_string_with_one_byte_data, \ |
| ShortExternalStringWithOneByteData) \ |
| \ |
| V(INTERNALIZED_STRING_TYPE, kVariableSizeSentinel, internalized_string, \ |
| InternalizedString) \ |
| V(ONE_BYTE_INTERNALIZED_STRING_TYPE, kVariableSizeSentinel, \ |
| one_byte_internalized_string, OneByteInternalizedString) \ |
| V(EXTERNAL_INTERNALIZED_STRING_TYPE, ExternalTwoByteString::kSize, \ |
| external_internalized_string, ExternalInternalizedString) \ |
| V(EXTERNAL_ONE_BYTE_INTERNALIZED_STRING_TYPE, ExternalOneByteString::kSize, \ |
| external_one_byte_internalized_string, ExternalOneByteInternalizedString) \ |
| V(EXTERNAL_INTERNALIZED_STRING_WITH_ONE_BYTE_DATA_TYPE, \ |
| ExternalTwoByteString::kSize, \ |
| external_internalized_string_with_one_byte_data, \ |
| ExternalInternalizedStringWithOneByteData) \ |
| V(SHORT_EXTERNAL_INTERNALIZED_STRING_TYPE, \ |
| ExternalTwoByteString::kShortSize, short_external_internalized_string, \ |
| ShortExternalInternalizedString) \ |
| V(SHORT_EXTERNAL_ONE_BYTE_INTERNALIZED_STRING_TYPE, \ |
| ExternalOneByteString::kShortSize, \ |
| short_external_one_byte_internalized_string, \ |
| ShortExternalOneByteInternalizedString) \ |
| V(SHORT_EXTERNAL_INTERNALIZED_STRING_WITH_ONE_BYTE_DATA_TYPE, \ |
| ExternalTwoByteString::kShortSize, \ |
| short_external_internalized_string_with_one_byte_data, \ |
| ShortExternalInternalizedStringWithOneByteData) \ |
| V(THIN_STRING_TYPE, ThinString::kSize, thin_string, ThinString) \ |
| V(THIN_ONE_BYTE_STRING_TYPE, ThinString::kSize, thin_one_byte_string, \ |
| ThinOneByteString) |
| |
| #define ARRAY_ITERATOR_TYPE_LIST(V) \ |
| V(JS_TYPED_ARRAY_KEY_ITERATOR_TYPE) \ |
| V(JS_FAST_ARRAY_KEY_ITERATOR_TYPE) \ |
| V(JS_GENERIC_ARRAY_KEY_ITERATOR_TYPE) \ |
| \ |
| V(JS_UINT8_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_INT8_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_UINT16_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_INT16_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_UINT32_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_INT32_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FLOAT32_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FLOAT64_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_UINT8_CLAMPED_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| \ |
| V(JS_FAST_SMI_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FAST_HOLEY_SMI_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FAST_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FAST_HOLEY_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FAST_DOUBLE_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FAST_HOLEY_DOUBLE_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| V(JS_GENERIC_ARRAY_KEY_VALUE_ITERATOR_TYPE) \ |
| \ |
| V(JS_UINT8_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_INT8_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_UINT16_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_INT16_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_UINT32_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_INT32_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FLOAT32_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FLOAT64_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_UINT8_CLAMPED_ARRAY_VALUE_ITERATOR_TYPE) \ |
| \ |
| V(JS_FAST_SMI_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FAST_HOLEY_SMI_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FAST_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FAST_HOLEY_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FAST_DOUBLE_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_FAST_HOLEY_DOUBLE_ARRAY_VALUE_ITERATOR_TYPE) \ |
| V(JS_GENERIC_ARRAY_VALUE_ITERATOR_TYPE) |
| |
| // A struct is a simple object a set of object-valued fields. Including an |
| // object type in this causes the compiler to generate most of the boilerplate |
| // code for the class including allocation and garbage collection routines, |
| // casts and predicates. All you need to define is the class, methods and |
| // object verification routines. Easy, no? |
| // |
| // Note that for subtle reasons related to the ordering or numerical values of |
| // type tags, elements in this list have to be added to the INSTANCE_TYPE_LIST |
| // manually. |
| #define STRUCT_LIST(V) \ |
| V(ACCESS_CHECK_INFO, AccessCheckInfo, access_check_info) \ |
| V(ACCESSOR_INFO, AccessorInfo, accessor_info) \ |
| V(ACCESSOR_PAIR, AccessorPair, accessor_pair) \ |
| V(ALIASED_ARGUMENTS_ENTRY, AliasedArgumentsEntry, aliased_arguments_entry) \ |
| V(ALLOCATION_MEMENTO, AllocationMemento, allocation_memento) \ |
| V(ALLOCATION_SITE, AllocationSite, allocation_site) \ |
| V(ASYNC_GENERATOR_REQUEST, AsyncGeneratorRequest, async_generator_request) \ |
| V(CONTEXT_EXTENSION, ContextExtension, context_extension) \ |
| V(DEBUG_INFO, DebugInfo, debug_info) \ |
| V(FUNCTION_TEMPLATE_INFO, FunctionTemplateInfo, function_template_info) \ |
| V(INTERCEPTOR_INFO, InterceptorInfo, interceptor_info) \ |
| V(MODULE_INFO_ENTRY, ModuleInfoEntry, module_info_entry) \ |
| V(MODULE, Module, module) \ |
| V(OBJECT_TEMPLATE_INFO, ObjectTemplateInfo, object_template_info) \ |
| V(PROMISE_REACTION_JOB_INFO, PromiseReactionJobInfo, \ |
| promise_reaction_job_info) \ |
| V(PROMISE_RESOLVE_THENABLE_JOB_INFO, PromiseResolveThenableJobInfo, \ |
| promise_resolve_thenable_job_info) \ |
| V(PROTOTYPE_INFO, PrototypeInfo, prototype_info) \ |
| V(SCRIPT, Script, script) \ |
| V(STACK_FRAME_INFO, StackFrameInfo, stack_frame_info) \ |
| V(TUPLE2, Tuple2, tuple2) \ |
| V(TUPLE3, Tuple3, tuple3) |
| |
| #define DATA_HANDLER_LIST(V) \ |
| V(LOAD_HANDLER, LoadHandler, 1, load_handler1) \ |
| V(LOAD_HANDLER, LoadHandler, 2, load_handler2) \ |
| V(LOAD_HANDLER, LoadHandler, 3, load_handler3) \ |
| V(STORE_HANDLER, StoreHandler, 0, store_handler0) \ |
| V(STORE_HANDLER, StoreHandler, 1, store_handler1) \ |
| V(STORE_HANDLER, StoreHandler, 2, store_handler2) \ |
| V(STORE_HANDLER, StoreHandler, 3, store_handler3) |
| |
| // We use the full 16 bits of the instance_type field to encode heap object |
| // instance types. All the high-order bits (bit 7-15) are cleared if the object |
| // is a string, and contain set bits if it is not a string. |
| const uint32_t kIsNotStringMask = 0xff80; |
| const uint32_t kStringTag = 0x0; |
| |
| // Bit 6 indicates that the object is an internalized string (if set) or not. |
| // Bit 7 has to be clear as well. |
| const uint32_t kIsNotInternalizedMask = 0x40; |
| const uint32_t kNotInternalizedTag = 0x40; |
| const uint32_t kInternalizedTag = 0x0; |
| |
| // If bit 7 is clear then bit 3 indicates whether the string consists of |
| // two-byte characters or one-byte characters. |
| const uint32_t kStringEncodingMask = 0x8; |
| const uint32_t kTwoByteStringTag = 0x0; |
| const uint32_t kOneByteStringTag = 0x8; |
| |
| // If bit 7 is clear, the low-order 3 bits indicate the representation |
| // of the string. |
| const uint32_t kStringRepresentationMask = 0x07; |
| enum StringRepresentationTag { |
| kSeqStringTag = 0x0, |
| kConsStringTag = 0x1, |
| kExternalStringTag = 0x2, |
| kSlicedStringTag = 0x3, |
| kThinStringTag = 0x5 |
| }; |
| const uint32_t kIsIndirectStringMask = 0x1; |
| const uint32_t kIsIndirectStringTag = 0x1; |
| STATIC_ASSERT((kSeqStringTag & kIsIndirectStringMask) == 0); // NOLINT |
| STATIC_ASSERT((kExternalStringTag & kIsIndirectStringMask) == 0); // NOLINT |
| STATIC_ASSERT((kConsStringTag & |
| kIsIndirectStringMask) == kIsIndirectStringTag); // NOLINT |
| STATIC_ASSERT((kSlicedStringTag & |
| kIsIndirectStringMask) == kIsIndirectStringTag); // NOLINT |
| STATIC_ASSERT((kThinStringTag & kIsIndirectStringMask) == kIsIndirectStringTag); |
| |
| // If bit 7 is clear, then bit 4 indicates whether this two-byte |
| // string actually contains one byte data. |
| const uint32_t kOneByteDataHintMask = 0x10; |
| const uint32_t kOneByteDataHintTag = 0x10; |
| |
| // If bit 7 is clear and string representation indicates an external string, |
| // then bit 5 indicates whether the data pointer is cached. |
| const uint32_t kShortExternalStringMask = 0x20; |
| const uint32_t kShortExternalStringTag = 0x20; |
| |
| // A ConsString with an empty string as the right side is a candidate |
| // for being shortcut by the garbage collector. We don't allocate any |
| // non-flat internalized strings, so we do not shortcut them thereby |
| // avoiding turning internalized strings into strings. The bit-masks |
| // below contain the internalized bit as additional safety. |
| // See heap.cc, mark-compact.cc and objects-visiting.cc. |
| const uint32_t kShortcutTypeMask = |
| kIsNotStringMask | |
| kIsNotInternalizedMask | |
| kStringRepresentationMask; |
| const uint32_t kShortcutTypeTag = kConsStringTag | kNotInternalizedTag; |
| |
| static inline bool IsShortcutCandidate(int type) { |
| return ((type & kShortcutTypeMask) == kShortcutTypeTag); |
| } |
| |
| enum InstanceType : uint16_t { |
| // String types. |
| INTERNALIZED_STRING_TYPE = kTwoByteStringTag | kSeqStringTag | |
| kInternalizedTag, // FIRST_PRIMITIVE_TYPE |
| ONE_BYTE_INTERNALIZED_STRING_TYPE = |
| kOneByteStringTag | kSeqStringTag | kInternalizedTag, |
| EXTERNAL_INTERNALIZED_STRING_TYPE = |
| kTwoByteStringTag | kExternalStringTag | kInternalizedTag, |
| EXTERNAL_ONE_BYTE_INTERNALIZED_STRING_TYPE = |
| kOneByteStringTag | kExternalStringTag | kInternalizedTag, |
| EXTERNAL_INTERNALIZED_STRING_WITH_ONE_BYTE_DATA_TYPE = |
| EXTERNAL_INTERNALIZED_STRING_TYPE | kOneByteDataHintTag | |
| kInternalizedTag, |
| SHORT_EXTERNAL_INTERNALIZED_STRING_TYPE = EXTERNAL_INTERNALIZED_STRING_TYPE | |
| kShortExternalStringTag | |
| kInternalizedTag, |
| SHORT_EXTERNAL_ONE_BYTE_INTERNALIZED_STRING_TYPE = |
| EXTERNAL_ONE_BYTE_INTERNALIZED_STRING_TYPE | kShortExternalStringTag | |
| kInternalizedTag, |
| SHORT_EXTERNAL_INTERNALIZED_STRING_WITH_ONE_BYTE_DATA_TYPE = |
| EXTERNAL_INTERNALIZED_STRING_WITH_ONE_BYTE_DATA_TYPE | |
| kShortExternalStringTag | kInternalizedTag, |
| STRING_TYPE = INTERNALIZED_STRING_TYPE | kNotInternalizedTag, |
| ONE_BYTE_STRING_TYPE = |
| ONE_BYTE_INTERNALIZED_STRING_TYPE | kNotInternalizedTag, |
| CONS_STRING_TYPE = kTwoByteStringTag | kConsStringTag | kNotInternalizedTag, |
| CONS_ONE_BYTE_STRING_TYPE = |
| kOneByteStringTag | kConsStringTag | kNotInternalizedTag, |
| SLICED_STRING_TYPE = |
| kTwoByteStringTag | kSlicedStringTag | kNotInternalizedTag, |
| SLICED_ONE_BYTE_STRING_TYPE = |
| kOneByteStringTag | kSlicedStringTag | kNotInternalizedTag, |
| EXTERNAL_STRING_TYPE = |
| EXTERNAL_INTERNALIZED_STRING_TYPE | kNotInternalizedTag, |
| EXTERNAL_ONE_BYTE_STRING_TYPE = |
| EXTERNAL_ONE_BYTE_INTERNALIZED_STRING_TYPE | kNotInternalizedTag, |
| EXTERNAL_STRING_WITH_ONE_BYTE_DATA_TYPE = |
| EXTERNAL_INTERNALIZED_STRING_WITH_ONE_BYTE_DATA_TYPE | |
| kNotInternalizedTag, |
| SHORT_EXTERNAL_STRING_TYPE = |
| SHORT_EXTERNAL_INTERNALIZED_STRING_TYPE | kNotInternalizedTag, |
| SHORT_EXTERNAL_ONE_BYTE_STRING_TYPE = |
| SHORT_EXTERNAL_ONE_BYTE_INTERNALIZED_STRING_TYPE | kNotInternalizedTag, |
| SHORT_EXTERNAL_STRING_WITH_ONE_BYTE_DATA_TYPE = |
| SHORT_EXTERNAL_INTERNALIZED_STRING_WITH_ONE_BYTE_DATA_TYPE | |
| kNotInternalizedTag, |
| THIN_STRING_TYPE = kTwoByteStringTag | kThinStringTag | kNotInternalizedTag, |
| THIN_ONE_BYTE_STRING_TYPE = |
| kOneByteStringTag | kThinStringTag | kNotInternalizedTag, |
| |
| // Non-string names |
| SYMBOL_TYPE = |
| 1 + (kIsNotInternalizedMask | kShortExternalStringMask | |
| kOneByteDataHintMask | kStringEncodingMask | |
| kStringRepresentationMask), // FIRST_NONSTRING_TYPE, LAST_NAME_TYPE |
| |
| // Other primitives (cannot contain non-map-word pointers to heap objects). |
| HEAP_NUMBER_TYPE, |
| BIGINT_TYPE, |
| ODDBALL_TYPE, // LAST_PRIMITIVE_TYPE |
| |
| // Objects allocated in their own spaces (never in new space). |
| MAP_TYPE, |
| CODE_TYPE, |
| |
| // "Data", objects that cannot contain non-map-word pointers to heap |
| // objects. |
| MUTABLE_HEAP_NUMBER_TYPE, |
| FOREIGN_TYPE, |
| BYTE_ARRAY_TYPE, |
| BYTECODE_ARRAY_TYPE, |
| FREE_SPACE_TYPE, |
| FIXED_INT8_ARRAY_TYPE, // FIRST_FIXED_TYPED_ARRAY_TYPE |
| FIXED_UINT8_ARRAY_TYPE, |
| FIXED_INT16_ARRAY_TYPE, |
| FIXED_UINT16_ARRAY_TYPE, |
| FIXED_INT32_ARRAY_TYPE, |
| FIXED_UINT32_ARRAY_TYPE, |
| FIXED_FLOAT32_ARRAY_TYPE, |
| FIXED_FLOAT64_ARRAY_TYPE, |
| FIXED_UINT8_CLAMPED_ARRAY_TYPE, // LAST_FIXED_TYPED_ARRAY_TYPE |
| FIXED_DOUBLE_ARRAY_TYPE, |
| FILLER_TYPE, // LAST_DATA_TYPE |
| |
| // Structs. |
| ACCESS_CHECK_INFO_TYPE, |
| ACCESSOR_INFO_TYPE, |
| ACCESSOR_PAIR_TYPE, |
| ALIASED_ARGUMENTS_ENTRY_TYPE, |
| ALLOCATION_MEMENTO_TYPE, |
| ALLOCATION_SITE_TYPE, |
| ASYNC_GENERATOR_REQUEST_TYPE, |
| CONTEXT_EXTENSION_TYPE, |
| DEBUG_INFO_TYPE, |
| FUNCTION_TEMPLATE_INFO_TYPE, |
| INTERCEPTOR_INFO_TYPE, |
| MODULE_INFO_ENTRY_TYPE, |
| MODULE_TYPE, |
| OBJECT_TEMPLATE_INFO_TYPE, |
| PROMISE_REACTION_JOB_INFO_TYPE, |
| PROMISE_RESOLVE_THENABLE_JOB_INFO_TYPE, |
| PROTOTYPE_INFO_TYPE, |
| SCRIPT_TYPE, |
| STACK_FRAME_INFO_TYPE, |
| TUPLE2_TYPE, |
| TUPLE3_TYPE, |
| |
| // FixedArrays. |
| FIXED_ARRAY_TYPE, // FIRST_FIXED_ARRAY_TYPE |
| DESCRIPTOR_ARRAY_TYPE, |
| HASH_TABLE_TYPE, |
| TRANSITION_ARRAY_TYPE, // LAST_FIXED_ARRAY_TYPE |
| |
| // Misc. |
| CELL_TYPE, |
| CODE_DATA_CONTAINER_TYPE, |
| FEEDBACK_VECTOR_TYPE, |
| LOAD_HANDLER_TYPE, |
| PROPERTY_ARRAY_TYPE, |
| PROPERTY_CELL_TYPE, |
| SHARED_FUNCTION_INFO_TYPE, |
| SMALL_ORDERED_HASH_MAP_TYPE, |
| SMALL_ORDERED_HASH_SET_TYPE, |
| STORE_HANDLER_TYPE, |
| WEAK_CELL_TYPE, |
| |
| // All the following types are subtypes of JSReceiver, which corresponds to |
| // objects in the JS sense. The first and the last type in this range are |
| // the two forms of function. This organization enables using the same |
| // compares for checking the JS_RECEIVER and the NONCALLABLE_JS_OBJECT range. |
| // Some of the following instance types are exposed in v8.h, so to not |
| // unnecessarily change the ABI when we introduce new instance types in the |
| // future, we leave some space between instance types. |
| JS_PROXY_TYPE = 0x0400, // FIRST_JS_RECEIVER_TYPE |
| JS_GLOBAL_OBJECT_TYPE, // FIRST_JS_OBJECT_TYPE |
| JS_GLOBAL_PROXY_TYPE, |
| JS_MODULE_NAMESPACE_TYPE, |
| // Like JS_API_OBJECT_TYPE, but requires access checks and/or has |
| // interceptors. |
| JS_SPECIAL_API_OBJECT_TYPE = 0x0410, // LAST_SPECIAL_RECEIVER_TYPE |
| JS_VALUE_TYPE, // LAST_CUSTOM_ELEMENTS_RECEIVER |
| // Like JS_OBJECT_TYPE, but created from API function. |
| JS_API_OBJECT_TYPE = 0x0420, |
| JS_OBJECT_TYPE, |
| JS_ARGUMENTS_TYPE, |
| JS_ARRAY_BUFFER_TYPE, |
| JS_ARRAY_TYPE, |
| JS_ASYNC_FROM_SYNC_ITERATOR_TYPE, |
| JS_ASYNC_GENERATOR_OBJECT_TYPE, |
| JS_CONTEXT_EXTENSION_OBJECT_TYPE, |
| JS_DATE_TYPE, |
| JS_ERROR_TYPE, |
| JS_GENERATOR_OBJECT_TYPE, |
| JS_MAP_TYPE, |
| JS_MAP_KEY_ITERATOR_TYPE, |
| JS_MAP_KEY_VALUE_ITERATOR_TYPE, |
| JS_MAP_VALUE_ITERATOR_TYPE, |
| JS_MESSAGE_OBJECT_TYPE, |
| JS_PROMISE_TYPE, |
| JS_REGEXP_TYPE, |
| JS_SET_TYPE, |
| JS_SET_KEY_VALUE_ITERATOR_TYPE, |
| JS_SET_VALUE_ITERATOR_TYPE, |
| JS_STRING_ITERATOR_TYPE, |
| JS_WEAK_MAP_TYPE, |
| JS_WEAK_SET_TYPE, |
| |
| JS_TYPED_ARRAY_TYPE, |
| JS_DATA_VIEW_TYPE, |
| |
| #define ARRAY_ITERATOR_TYPE(type) type, |
| ARRAY_ITERATOR_TYPE_LIST(ARRAY_ITERATOR_TYPE) |
| #undef ARRAY_ITERATOR_TYPE |
| |
| WASM_INSTANCE_TYPE, |
| WASM_MEMORY_TYPE, |
| WASM_MODULE_TYPE, |
| WASM_TABLE_TYPE, |
| JS_BOUND_FUNCTION_TYPE, |
| JS_FUNCTION_TYPE, // LAST_JS_OBJECT_TYPE, LAST_JS_RECEIVER_TYPE |
| |
| // Pseudo-types |
| FIRST_TYPE = 0x0, |
| LAST_TYPE = JS_FUNCTION_TYPE, |
| FIRST_NAME_TYPE = FIRST_TYPE, |
| LAST_NAME_TYPE = SYMBOL_TYPE, |
| FIRST_UNIQUE_NAME_TYPE = INTERNALIZED_STRING_TYPE, |
| LAST_UNIQUE_NAME_TYPE = SYMBOL_TYPE, |
| FIRST_NONSTRING_TYPE = SYMBOL_TYPE, |
| FIRST_PRIMITIVE_TYPE = FIRST_NAME_TYPE, |
| LAST_PRIMITIVE_TYPE = ODDBALL_TYPE, |
| FIRST_FUNCTION_TYPE = JS_BOUND_FUNCTION_TYPE, |
| LAST_FUNCTION_TYPE = JS_FUNCTION_TYPE, |
| // Boundaries for testing if given HeapObject is a subclass of FixedArray. |
| FIRST_FIXED_ARRAY_TYPE = FIXED_ARRAY_TYPE, |
| LAST_FIXED_ARRAY_TYPE = TRANSITION_ARRAY_TYPE, |
| // Boundaries for testing for a fixed typed array. |
| FIRST_FIXED_TYPED_ARRAY_TYPE = FIXED_INT8_ARRAY_TYPE, |
| LAST_FIXED_TYPED_ARRAY_TYPE = FIXED_UINT8_CLAMPED_ARRAY_TYPE, |
| // Boundary for promotion to old space. |
| LAST_DATA_TYPE = FILLER_TYPE, |
| // Boundary for objects represented as JSReceiver (i.e. JSObject or JSProxy). |
| // Note that there is no range for JSObject or JSProxy, since their subtypes |
| // are not continuous in this enum! The enum ranges instead reflect the |
| // external class names, where proxies are treated as either ordinary objects, |
| // or functions. |
| FIRST_JS_RECEIVER_TYPE = JS_PROXY_TYPE, |
| LAST_JS_RECEIVER_TYPE = LAST_TYPE, |
| // Boundaries for testing the types represented as JSObject |
| FIRST_JS_OBJECT_TYPE = JS_GLOBAL_OBJECT_TYPE, |
| LAST_JS_OBJECT_TYPE = LAST_TYPE, |
| // Boundary for testing JSReceivers that need special property lookup handling |
| LAST_SPECIAL_RECEIVER_TYPE = JS_SPECIAL_API_OBJECT_TYPE, |
| // Boundary case for testing JSReceivers that may have elements while having |
| // an empty fixed array as elements backing store. This is true for string |
| // wrappers. |
| LAST_CUSTOM_ELEMENTS_RECEIVER = JS_VALUE_TYPE, |
| |
| FIRST_ARRAY_KEY_ITERATOR_TYPE = JS_TYPED_ARRAY_KEY_ITERATOR_TYPE, |
| LAST_ARRAY_KEY_ITERATOR_TYPE = JS_GENERIC_ARRAY_KEY_ITERATOR_TYPE, |
| |
| FIRST_ARRAY_KEY_VALUE_ITERATOR_TYPE = JS_UINT8_ARRAY_KEY_VALUE_ITERATOR_TYPE, |
| LAST_ARRAY_KEY_VALUE_ITERATOR_TYPE = JS_GENERIC_ARRAY_KEY_VALUE_ITERATOR_TYPE, |
| |
| FIRST_ARRAY_VALUE_ITERATOR_TYPE = JS_UINT8_ARRAY_VALUE_ITERATOR_TYPE, |
| LAST_ARRAY_VALUE_ITERATOR_TYPE = JS_GENERIC_ARRAY_VALUE_ITERATOR_TYPE, |
| |
| FIRST_ARRAY_ITERATOR_TYPE = FIRST_ARRAY_KEY_ITERATOR_TYPE, |
| LAST_ARRAY_ITERATOR_TYPE = LAST_ARRAY_VALUE_ITERATOR_TYPE, |
| |
| FIRST_SET_ITERATOR_TYPE = JS_SET_KEY_VALUE_ITERATOR_TYPE, |
| LAST_SET_ITERATOR_TYPE = JS_SET_VALUE_ITERATOR_TYPE, |
| |
| FIRST_MAP_ITERATOR_TYPE = JS_MAP_KEY_ITERATOR_TYPE, |
| LAST_MAP_ITERATOR_TYPE = JS_MAP_VALUE_ITERATOR_TYPE, |
| }; |
| |
| STATIC_ASSERT((FIRST_NONSTRING_TYPE & kIsNotStringMask) != kStringTag); |
| STATIC_ASSERT(JS_OBJECT_TYPE == Internals::kJSObjectType); |
| STATIC_ASSERT(JS_API_OBJECT_TYPE == Internals::kJSApiObjectType); |
| STATIC_ASSERT(JS_SPECIAL_API_OBJECT_TYPE == Internals::kJSSpecialApiObjectType); |
| STATIC_ASSERT(FIRST_NONSTRING_TYPE == Internals::kFirstNonstringType); |
| STATIC_ASSERT(ODDBALL_TYPE == Internals::kOddballType); |
| STATIC_ASSERT(FOREIGN_TYPE == Internals::kForeignType); |
| |
| V8_EXPORT_PRIVATE std::ostream& operator<<(std::ostream& os, |
| InstanceType instance_type); |
| |
| // Result of an abstract relational comparison of x and y, implemented according |
| // to ES6 section 7.2.11 Abstract Relational Comparison. |
| enum class ComparisonResult { |
| kLessThan, // x < y |
| kEqual, // x = y |
| kGreaterThan, // x > y |
| kUndefined // at least one of x or y was undefined or NaN |
| }; |
| |
| // (Returns false whenever {result} is kUndefined.) |
| bool ComparisonResultToBool(Operation op, ComparisonResult result); |
| |
| class AbstractCode; |
| class AccessorPair; |
| class AllocationSite; |
| class ByteArray; |
| class Cell; |
| class ConsString; |
| class DependentCode; |
| class ElementsAccessor; |
| class EnumCache; |
| class FixedArrayBase; |
| class PropertyArray; |
| class FunctionLiteral; |
| class JSGlobalObject; |
| class KeyAccumulator; |
| class LayoutDescriptor; |
| class LookupIterator; |
| class FieldType; |
| class Module; |
| class ModuleInfoEntry; |
| class ObjectHashTable; |
| class ObjectVisitor; |
| class PropertyCell; |
| class PropertyDescriptor; |
| class RootVisitor; |
| class SafepointEntry; |
| class SharedFunctionInfo; |
| class StringStream; |
| class FeedbackMetadata; |
| class FeedbackVector; |
| class WeakCell; |
| class TransitionArray; |
| class TemplateList; |
| class TemplateMap; |
| template <typename T> |
| class ZoneForwardList; |
| |
| // A template-ized version of the IsXXX functions. |
| template <class C> inline bool Is(Object* obj); |
| |
| #ifdef OBJECT_PRINT |
| #define DECL_PRINTER(Name) void Name##Print(std::ostream& os); // NOLINT |
| #else |
| #define DECL_PRINTER(Name) |
| #endif |
| |
| #define OBJECT_TYPE_LIST(V) \ |
| V(Smi) \ |
| V(LayoutDescriptor) \ |
| V(HeapObject) \ |
| V(Primitive) \ |
| V(Number) \ |
| V(Numeric) |
| |
| #define HEAP_OBJECT_ORDINARY_TYPE_LIST(V) \ |
| V(AbstractCode) \ |
| V(AccessCheckNeeded) \ |
| V(ArrayList) \ |
| V(BigInt) \ |
| V(BoilerplateDescription) \ |
| V(Boolean) \ |
| V(BreakPoint) \ |
| V(BreakPointInfo) \ |
| V(ByteArray) \ |
| V(BytecodeArray) \ |
| V(Callable) \ |
| V(CallHandlerInfo) \ |
| V(Cell) \ |
| V(ClassBoilerplate) \ |
| V(Code) \ |
| V(CodeDataContainer) \ |
| V(CompilationCacheTable) \ |
| V(ConsString) \ |
| V(ConstantElementsPair) \ |
| V(Constructor) \ |
| V(Context) \ |
| V(CoverageInfo) \ |
| V(DataHandler) \ |
| V(DeoptimizationData) \ |
| V(DependentCode) \ |
| V(DescriptorArray) \ |
| V(EnumCache) \ |
| V(External) \ |
| V(ExternalOneByteString) \ |
| V(ExternalString) \ |
| V(ExternalTwoByteString) \ |
| V(FeedbackMetadata) \ |
| V(FeedbackVector) \ |
| V(Filler) \ |
| V(FixedArray) \ |
| V(FixedArrayBase) \ |
| V(FixedArrayExact) \ |
| V(FixedDoubleArray) \ |
| V(FixedFloat32Array) \ |
| V(FixedFloat64Array) \ |
| V(FixedInt16Array) \ |
| V(FixedInt32Array) \ |
| V(FixedInt8Array) \ |
| V(FixedTypedArrayBase) \ |
| V(FixedUint16Array) \ |
| V(FixedUint32Array) \ |
| V(FixedUint8Array) \ |
| V(FixedUint8ClampedArray) \ |
| V(Foreign) \ |
| V(FrameArray) \ |
| V(FreeSpace) \ |
| V(Function) \ |
| V(GlobalDictionary) \ |
| V(HandlerTable) \ |
| V(HeapNumber) \ |
| V(InternalizedString) \ |
| V(JSArgumentsObject) \ |
| V(JSArray) \ |
| V(JSArrayBuffer) \ |
| V(JSArrayBufferView) \ |
| V(JSArrayIterator) \ |
| V(JSAsyncFromSyncIterator) \ |
| V(JSAsyncGeneratorObject) \ |
| V(JSBoundFunction) \ |
| V(JSCollection) \ |
| V(JSContextExtensionObject) \ |
| V(JSDataView) \ |
| V(JSDate) \ |
| V(JSError) \ |
| V(JSFunction) \ |
| V(JSGeneratorObject) \ |
| V(JSGlobalObject) \ |
| V(JSGlobalProxy) \ |
| V(JSMap) \ |
| V(JSMapIterator) \ |
| V(JSMessageObject) \ |
| V(JSModuleNamespace) \ |
| V(JSObject) \ |
| V(JSPromise) \ |
| V(JSProxy) \ |
| V(JSReceiver) \ |
| V(JSRegExp) \ |
| V(JSSet) \ |
| V(JSSetIterator) \ |
| V(JSSloppyArgumentsObject) \ |
| V(JSStringIterator) \ |
| V(JSTypedArray) \ |
| V(JSValue) \ |
| V(JSWeakCollection) \ |
| V(JSWeakMap) \ |
| V(JSWeakSet) \ |
| V(LoadHandler) \ |
| V(Map) \ |
| V(MapCache) \ |
| V(ModuleInfo) \ |
| V(MutableHeapNumber) \ |
| V(Name) \ |
| V(NameDictionary) \ |
| V(NativeContext) \ |
| V(NormalizedMapCache) \ |
| V(ObjectHashSet) \ |
| V(ObjectHashTable) \ |
| V(Oddball) \ |
| V(OrderedHashMap) \ |
| V(OrderedHashSet) \ |
| V(PreParsedScopeData) \ |
| V(PromiseCapability) \ |
| V(PropertyArray) \ |
| V(PropertyCell) \ |
| V(PropertyDescriptorObject) \ |
| V(RegExpMatchInfo) \ |
| V(ScopeInfo) \ |
| V(ScriptContextTable) \ |
| V(NumberDictionary) \ |
| V(SeqOneByteString) \ |
| V(SeqString) \ |
| V(SeqTwoByteString) \ |
| V(SharedFunctionInfo) \ |
| V(SlicedString) \ |
| V(SloppyArgumentsElements) \ |
| V(SmallOrderedHashMap) \ |
| V(SmallOrderedHashSet) \ |
| V(SourcePositionTableWithFrameCache) \ |
| V(StoreHandler) \ |
| V(String) \ |
| V(StringSet) \ |
| V(StringTable) \ |
| V(StringWrapper) \ |
| V(Struct) \ |
| V(Symbol) \ |
| V(TemplateInfo) \ |
| V(TemplateList) \ |
| V(TemplateMap) \ |
| V(TemplateObjectDescription) \ |
| V(ThinString) \ |
| V(TransitionArray) \ |
| V(Undetectable) \ |
| V(UniqueName) \ |
| V(WasmInstanceObject) \ |
| V(WasmMemoryObject) \ |
| V(WasmModuleObject) \ |
| V(WasmTableObject) \ |
| V(WeakCell) \ |
| V(WeakFixedArray) \ |
| V(WeakHashTable) |
| |
| #define HEAP_OBJECT_TEMPLATE_TYPE_LIST(V) \ |
| V(Dictionary) \ |
| V(HashTable) |
| |
| #define HEAP_OBJECT_TYPE_LIST(V) \ |
| HEAP_OBJECT_ORDINARY_TYPE_LIST(V) \ |
| HEAP_OBJECT_TEMPLATE_TYPE_LIST(V) |
| |
| #define ODDBALL_LIST(V) \ |
| V(Undefined, undefined_value) \ |
| V(Null, null_value) \ |
| V(TheHole, the_hole_value) \ |
| V(Exception, exception) \ |
| V(Uninitialized, uninitialized_value) \ |
| V(True, true_value) \ |
| V(False, false_value) \ |
| V(ArgumentsMarker, arguments_marker) \ |
| V(OptimizedOut, optimized_out) \ |
| V(StaleRegister, stale_register) |
| |
| // The element types selection for CreateListFromArrayLike. |
| enum class ElementTypes { kAll, kStringAndSymbol }; |
| |
| // Object is the abstract superclass for all classes in the |
| // object hierarchy. |
| // Object does not use any virtual functions to avoid the |
| // allocation of the C++ vtable. |
| // Since both Smi and HeapObject are subclasses of Object no |
| // data members can be present in Object. |
| class Object { |
| public: |
| // Type testing. |
| bool IsObject() const { return true; } |
| |
| #define IS_TYPE_FUNCTION_DECL(Type) INLINE(bool Is##Type() const); |
| OBJECT_TYPE_LIST(IS_TYPE_FUNCTION_DECL) |
| HEAP_OBJECT_TYPE_LIST(IS_TYPE_FUNCTION_DECL) |
| #undef IS_TYPE_FUNCTION_DECL |
| |
| #define IS_TYPE_FUNCTION_DECL(Type, Value) \ |
| INLINE(bool Is##Type(Isolate* isolate) const); |
| ODDBALL_LIST(IS_TYPE_FUNCTION_DECL) |
| #undef IS_TYPE_FUNCTION_DECL |
| |
| INLINE(bool IsNullOrUndefined(Isolate* isolate) const); |
| |
| // A non-keyed store is of the form a.x = foo or a["x"] = foo whereas |
| // a keyed store is of the form a[expression] = foo. |
| enum StoreFromKeyed { |
| MAY_BE_STORE_FROM_KEYED, |
| CERTAINLY_NOT_STORE_FROM_KEYED |
| }; |
| |
| enum class Conversion { kToNumber, kToNumeric }; |
| |
| #define RETURN_FAILURE(isolate, should_throw, call) \ |
| do { \ |
| if ((should_throw) == kDontThrow) { \ |
| return Just(false); \ |
| } else { \ |
| isolate->Throw(*isolate->factory()->call); \ |
| return Nothing<bool>(); \ |
| } \ |
| } while (false) |
| |
| #define MAYBE_RETURN(call, value) \ |
| do { \ |
| if ((call).IsNothing()) return value; \ |
| } while (false) |
| |
| #define MAYBE_RETURN_NULL(call) MAYBE_RETURN(call, MaybeHandle<Object>()) |
| |
| #define DECL_STRUCT_PREDICATE(NAME, Name, name) INLINE(bool Is##Name() const); |
| STRUCT_LIST(DECL_STRUCT_PREDICATE) |
| #undef DECL_STRUCT_PREDICATE |
| |
| // ES6, #sec-isarray. NOT to be confused with %_IsArray. |
| INLINE(MUST_USE_RESULT static Maybe<bool> IsArray(Handle<Object> object)); |
| |
| INLINE(bool IsSmallOrderedHashTable() const); |
| |
| // Extract the number. |
| inline double Number() const; |
| INLINE(bool IsNaN() const); |
| INLINE(bool IsMinusZero() const); |
| V8_EXPORT_PRIVATE bool ToInt32(int32_t* value); |
| inline bool ToUint32(uint32_t* value) const; |
| |
| inline Representation OptimalRepresentation(); |
| |
| inline ElementsKind OptimalElementsKind(); |
| |
| inline bool FitsRepresentation(Representation representation); |
| |
| // Checks whether two valid primitive encodings of a property name resolve to |
| // the same logical property. E.g., the smi 1, the string "1" and the double |
| // 1 all refer to the same property, so this helper will return true. |
| inline bool KeyEquals(Object* other); |
| |
| inline bool FilterKey(PropertyFilter filter); |
| |
| Handle<FieldType> OptimalType(Isolate* isolate, |
| Representation representation); |
| |
| inline static Handle<Object> NewStorageFor(Isolate* isolate, |
| Handle<Object> object, |
| Representation representation); |
| |
| inline static Handle<Object> WrapForRead(Isolate* isolate, |
| Handle<Object> object, |
| Representation representation); |
| |
| // Returns true if the object is of the correct type to be used as a |
| // implementation of a JSObject's elements. |
| inline bool HasValidElements(); |
| |
| inline bool HasSpecificClassOf(String* name); |
| |
| bool BooleanValue(); // ECMA-262 9.2. |
| |
| // ES6 section 7.2.11 Abstract Relational Comparison |
| MUST_USE_RESULT static Maybe<ComparisonResult> Compare(Handle<Object> x, |
| Handle<Object> y); |
| |
| // ES6 section 7.2.12 Abstract Equality Comparison |
| MUST_USE_RESULT static Maybe<bool> Equals(Handle<Object> x, Handle<Object> y); |
| |
| // ES6 section 7.2.13 Strict Equality Comparison |
| bool StrictEquals(Object* that); |
| |
| // ES6 section 7.1.13 ToObject |
| // Convert to a JSObject if needed. |
| // native_context is used when creating wrapper object. |
| // |
| // Passing a non-null method_name allows us to give a more informative |
| // error message for those cases where ToObject is being called on |
| // the receiver of a built-in method. |
| MUST_USE_RESULT static inline MaybeHandle<JSReceiver> ToObject( |
| Isolate* isolate, Handle<Object> object, |
| const char* method_name = nullptr); |
| MUST_USE_RESULT static MaybeHandle<JSReceiver> ToObject( |
| Isolate* isolate, Handle<Object> object, Handle<Context> native_context, |
| const char* method_name = nullptr); |
| |
| // ES6 section 9.2.1.2, OrdinaryCallBindThis for sloppy callee. |
| MUST_USE_RESULT static MaybeHandle<JSReceiver> ConvertReceiver( |
| Isolate* isolate, Handle<Object> object); |
| |
| // ES6 section 7.1.14 ToPropertyKey |
| MUST_USE_RESULT static inline MaybeHandle<Name> ToName(Isolate* isolate, |
| Handle<Object> input); |
| |
| // ES6 section 7.1.1 ToPrimitive |
| MUST_USE_RESULT static inline MaybeHandle<Object> ToPrimitive( |
| Handle<Object> input, ToPrimitiveHint hint = ToPrimitiveHint::kDefault); |
| |
| // ES6 section 7.1.3 ToNumber |
| MUST_USE_RESULT static inline MaybeHandle<Object> ToNumber( |
| Handle<Object> input); |
| |
| MUST_USE_RESULT static inline MaybeHandle<Object> ToNumeric( |
| Handle<Object> input); |
| |
| // ES6 section 7.1.4 ToInteger |
| MUST_USE_RESULT static inline MaybeHandle<Object> ToInteger( |
| Isolate* isolate, Handle<Object> input); |
| |
| // ES6 section 7.1.5 ToInt32 |
| MUST_USE_RESULT static inline MaybeHandle<Object> ToInt32( |
| Isolate* isolate, Handle<Object> input); |
| |
| // ES6 section 7.1.6 ToUint32 |
| MUST_USE_RESULT inline static MaybeHandle<Object> ToUint32( |
| Isolate* isolate, Handle<Object> input); |
| |
| // ES6 section 7.1.12 ToString |
| MUST_USE_RESULT static inline MaybeHandle<String> ToString( |
| Isolate* isolate, Handle<Object> input); |
| |
| static Handle<String> NoSideEffectsToString(Isolate* isolate, |
| Handle<Object> input); |
| |
| // ES6 section 7.1.14 ToPropertyKey |
| MUST_USE_RESULT static inline MaybeHandle<Object> ToPropertyKey( |
| Isolate* isolate, Handle<Object> value); |
| |
| // ES6 section 7.1.15 ToLength |
| MUST_USE_RESULT static inline MaybeHandle<Object> ToLength( |
| Isolate* isolate, Handle<Object> input); |
| |
| // ES6 section 7.1.17 ToIndex |
| MUST_USE_RESULT static inline MaybeHandle<Object> ToIndex( |
| Isolate* isolate, Handle<Object> input, |
| MessageTemplate::Template error_index); |
| |
| // ES6 section 7.3.9 GetMethod |
| MUST_USE_RESULT static MaybeHandle<Object> GetMethod( |
| Handle<JSReceiver> receiver, Handle<Name> name); |
| |
| // ES6 section 7.3.17 CreateListFromArrayLike |
| MUST_USE_RESULT static MaybeHandle<FixedArray> CreateListFromArrayLike( |
| Isolate* isolate, Handle<Object> object, ElementTypes element_types); |
| |
| // Get length property and apply ToLength. |
| MUST_USE_RESULT static MaybeHandle<Object> GetLengthFromArrayLike( |
| Isolate* isolate, Handle<Object> object); |
| |
| // ES6 section 12.5.6 The typeof Operator |
| static Handle<String> TypeOf(Isolate* isolate, Handle<Object> object); |
| |
| // ES6 section 12.6 Multiplicative Operators |
| MUST_USE_RESULT static MaybeHandle<Object> Multiply(Isolate* isolate, |
| Handle<Object> lhs, |
| Handle<Object> rhs); |
| MUST_USE_RESULT static MaybeHandle<Object> Divide(Isolate* isolate, |
| Handle<Object> lhs, |
| Handle<Object> rhs); |
| MUST_USE_RESULT static MaybeHandle<Object> Modulus(Isolate* isolate, |
| Handle<Object> lhs, |
| Handle<Object> rhs); |
| |
| // ES6 section 12.7 Additive Operators |
| MUST_USE_RESULT static MaybeHandle<Object> Add(Isolate* isolate, |
| Handle<Object> lhs, |
| Handle<Object> rhs); |
| MUST_USE_RESULT static MaybeHandle<Object> Subtract(Isolate* isolate, |
| Handle<Object> lhs, |
| Handle<Object> rhs); |
| |
| // ES6 section 12.8 Bitwise Shift Operators |
| MUST_USE_RESULT static MaybeHandle<Object> ShiftLeft(Isolate* isolate, |
| Handle<Object> lhs, |
| Handle<Object> rhs); |
| MUST_USE_RESULT static MaybeHandle<Object> ShiftRight(Isolate* isolate, |
| Handle<Object> lhs, |
| Handle<Object> rhs); |
| MUST_USE_RESULT static MaybeHandle<Object> ShiftRightLogical( |
| Isolate* isolate, Handle<Object> lhs, Handle<Object> rhs); |
| |
| // ES6 section 12.9 Relational Operators |
| MUST_USE_RESULT static inline Maybe<bool> GreaterThan(Handle<Object> x, |
| Handle<Object> y); |
| MUST_USE_RESULT static inline Maybe<bool> GreaterThanOrEqual( |
| Handle<Object> x, Handle<Object> y); |
| MUST_USE_RESULT static inline Maybe<bool> LessThan(Handle<Object> x, |
| Handle<Object> y); |
| MUST_USE_RESULT static inline Maybe<bool> LessThanOrEqual(Handle<Object> x, |
| Handle<Object> y); |
| |
| // ES6 section 12.11 Binary Bitwise Operators |
| MUST_USE_RESULT static MaybeHandle<Object> BitwiseAnd(Isolate* isolate, |
| Handle<Object> lhs, |
| Handle<Object> rhs); |
| MUST_USE_RESULT static MaybeHandle<Object> BitwiseOr(Isolate* isolate, |
| Handle<Object> lhs, |
| Handle<Object> rhs); |
| MUST_USE_RESULT static MaybeHandle<Object> BitwiseXor(Isolate* isolate, |
| Handle<Object> lhs, |
| Handle<Object> rhs); |
| |
| // ES6 section 7.3.19 OrdinaryHasInstance (C, O). |
| MUST_USE_RESULT static MaybeHandle<Object> OrdinaryHasInstance( |
| Isolate* isolate, Handle<Object> callable, Handle<Object> object); |
| |
| // ES6 section 12.10.4 Runtime Semantics: InstanceofOperator(O, C) |
| MUST_USE_RESULT static MaybeHandle<Object> InstanceOf( |
| Isolate* isolate, Handle<Object> object, Handle<Object> callable); |
| |
| V8_EXPORT_PRIVATE MUST_USE_RESULT static MaybeHandle<Object> GetProperty( |
| LookupIterator* it); |
| |
| // ES6 [[Set]] (when passed kDontThrow) |
| // Invariants for this and related functions (unless stated otherwise): |
| // 1) When the result is Nothing, an exception is pending. |
| // 2) When passed kThrowOnError, the result is never Just(false). |
| // In some cases, an exception is thrown regardless of the ShouldThrow |
| // argument. These cases are either in accordance with the spec or not |
| // covered by it (eg., concerning API callbacks). |
| MUST_USE_RESULT static Maybe<bool> SetProperty(LookupIterator* it, |
| Handle<Object> value, |
| LanguageMode language_mode, |
| StoreFromKeyed store_mode); |
| MUST_USE_RESULT static MaybeHandle<Object> SetProperty( |
| Handle<Object> object, Handle<Name> name, Handle<Object> value, |
| LanguageMode language_mode, |
| StoreFromKeyed store_mode = MAY_BE_STORE_FROM_KEYED); |
| MUST_USE_RESULT static inline MaybeHandle<Object> SetPropertyOrElement( |
| Handle<Object> object, Handle<Name> name, Handle<Object> value, |
| LanguageMode language_mode, |
| StoreFromKeyed store_mode = MAY_BE_STORE_FROM_KEYED); |
| |
| MUST_USE_RESULT static Maybe<bool> SetSuperProperty( |
| LookupIterator* it, Handle<Object> value, LanguageMode language_mode, |
| StoreFromKeyed store_mode); |
| |
| MUST_USE_RESULT static Maybe<bool> CannotCreateProperty( |
| Isolate* isolate, Handle<Object> receiver, Handle<Object> name, |
| Handle<Object> value, ShouldThrow should_throw); |
| MUST_USE_RESULT static Maybe<bool> WriteToReadOnlyProperty( |
| LookupIterator* it, Handle<Object> value, ShouldThrow should_throw); |
| MUST_USE_RESULT static Maybe<bool> WriteToReadOnlyProperty( |
| Isolate* isolate, Handle<Object> receiver, Handle<Object> name, |
| Handle<Object> value, ShouldThrow should_throw); |
| MUST_USE_RESULT static Maybe<bool> RedefineIncompatibleProperty( |
| Isolate* isolate, Handle<Object> name, Handle<Object> value, |
| ShouldThrow should_throw); |
| MUST_USE_RESULT static Maybe<bool> SetDataProperty(LookupIterator* it, |
| Handle<Object> value); |
| MUST_USE_RESULT static Maybe<bool> AddDataProperty( |
| LookupIterator* it, Handle<Object> value, PropertyAttributes attributes, |
| ShouldThrow should_throw, StoreFromKeyed store_mode); |
| MUST_USE_RESULT static inline MaybeHandle<Object> GetPropertyOrElement( |
| Handle<Object> object, Handle<Name> name); |
| MUST_USE_RESULT static inline MaybeHandle<Object> GetPropertyOrElement( |
| Handle<Object> receiver, Handle<Name> name, Handle<JSReceiver> holder); |
| MUST_USE_RESULT static inline MaybeHandle<Object> GetProperty( |
| Handle<Object> object, Handle<Name> name); |
| |
| MUST_USE_RESULT static MaybeHandle<Object> GetPropertyWithAccessor( |
| LookupIterator* it); |
| MUST_USE_RESULT static Maybe<bool> SetPropertyWithAccessor( |
| LookupIterator* it, Handle<Object> value, ShouldThrow should_throw); |
| |
| MUST_USE_RESULT static MaybeHandle<Object> GetPropertyWithDefinedGetter( |
| Handle<Object> receiver, |
| Handle<JSReceiver> getter); |
| MUST_USE_RESULT static Maybe<bool> SetPropertyWithDefinedSetter( |
| Handle<Object> receiver, Handle<JSReceiver> setter, Handle<Object> value, |
| ShouldThrow should_throw); |
| |
| MUST_USE_RESULT static inline MaybeHandle<Object> GetElement( |
| Isolate* isolate, Handle<Object> object, uint32_t index); |
| |
| MUST_USE_RESULT static inline MaybeHandle<Object> SetElement( |
| Isolate* isolate, Handle<Object> object, uint32_t index, |
| Handle<Object> value, LanguageMode language_mode); |
| |
| // Returns the permanent hash code associated with this object. May return |
| // undefined if not yet created. |
| Object* GetHash(); |
| |
| // Returns the permanent hash code associated with this object depending on |
| // the actual object type. May create and store a hash code if needed and none |
| // exists. |
| Smi* GetOrCreateHash(Isolate* isolate); |
| static Smi* GetOrCreateHash(Isolate* isolate, Object* key); |
| |
| // Checks whether this object has the same value as the given one. This |
| // function is implemented according to ES5, section 9.12 and can be used |
| // to implement the Harmony "egal" function. |
| V8_EXPORT_PRIVATE bool SameValue(Object* other); |
| |
| // Checks whether this object has the same value as the given one. |
| // +0 and -0 are treated equal. Everything else is the same as SameValue. |
| // This function is implemented according to ES6, section 7.2.4 and is used |
| // by ES6 Map and Set. |
| bool SameValueZero(Object* other); |
| |
| // ES6 section 9.4.2.3 ArraySpeciesCreate (part of it) |
| MUST_USE_RESULT static MaybeHandle<Object> ArraySpeciesConstructor( |
| Isolate* isolate, Handle<Object> original_array); |
| |
| // ES6 section 7.3.20 SpeciesConstructor ( O, defaultConstructor ) |
| MUST_USE_RESULT static MaybeHandle<Object> SpeciesConstructor( |
| Isolate* isolate, Handle<JSReceiver> recv, |
| Handle<JSFunction> default_ctor); |
| |
| // Tries to convert an object to an array length. Returns true and sets the |
| // output parameter if it succeeds. |
| inline bool ToArrayLength(uint32_t* index) const; |
| |
| // Tries to convert an object to an array index. Returns true and sets the |
| // output parameter if it succeeds. Equivalent to ToArrayLength, but does not |
| // allow kMaxUInt32. |
| inline bool ToArrayIndex(uint32_t* index) const; |
| |
| // Returns true if the result of iterating over the object is the same |
| // (including observable effects) as simply accessing the properties between 0 |
| // and length. |
| bool IterationHasObservableEffects(); |
| |
| DECL_VERIFIER(Object) |
| #ifdef VERIFY_HEAP |
| // Verify a pointer is a valid object pointer. |
| static void VerifyPointer(Object* p); |
| #endif |
| |
| inline void VerifyApiCallResultType(); |
| |
| // Prints this object without details. |
| void ShortPrint(FILE* out = stdout); |
| |
| // Prints this object without details to a message accumulator. |
| void ShortPrint(StringStream* accumulator); |
| |
| void ShortPrint(std::ostream& os); // NOLINT |
| |
| DECL_CAST(Object) |
| |
| // Layout description. |
| static const int kHeaderSize = 0; // Object does not take up any space. |
| |
| #ifdef OBJECT_PRINT |
| // For our gdb macros, we should perhaps change these in the future. |
| void Print(); |
| |
| // Prints this object with details. |
| void Print(std::ostream& os); // NOLINT |
| #else |
| void Print() { ShortPrint(); } |
| void Print(std::ostream& os) { ShortPrint(os); } // NOLINT |
| #endif |
| |
| private: |
| friend class LookupIterator; |
| friend class StringStream; |
| |
| // Return the map of the root of object's prototype chain. |
| Map* GetPrototypeChainRootMap(Isolate* isolate) const; |
| |
| // Helper for SetProperty and SetSuperProperty. |
| // Return value is only meaningful if [found] is set to true on return. |
| MUST_USE_RESULT static Maybe<bool> SetPropertyInternal( |
| LookupIterator* it, Handle<Object> value, LanguageMode language_mode, |
| StoreFromKeyed store_mode, bool* found); |
| |
| MUST_USE_RESULT static MaybeHandle<Name> ConvertToName(Isolate* isolate, |
| Handle<Object> input); |
| MUST_USE_RESULT static MaybeHandle<Object> ConvertToPropertyKey( |
| Isolate* isolate, Handle<Object> value); |
| MUST_USE_RESULT static MaybeHandle<String> ConvertToString( |
| Isolate* isolate, Handle<Object> input); |
| MUST_USE_RESULT static MaybeHandle<Object> ConvertToNumberOrNumeric( |
| Isolate* isolate, Handle<Object> input, Conversion mode); |
| MUST_USE_RESULT static MaybeHandle<Object> ConvertToInteger( |
| Isolate* isolate, Handle<Object> input); |
| MUST_USE_RESULT static MaybeHandle<Object> ConvertToInt32( |
| Isolate* isolate, Handle<Object> input); |
| MUST_USE_RESULT static MaybeHandle<Object> ConvertToUint32( |
| Isolate* isolate, Handle<Object> input); |
| MUST_USE_RESULT static MaybeHandle<Object> ConvertToLength( |
| Isolate* isolate, Handle<Object> input); |
| MUST_USE_RESULT static MaybeHandle<Object> ConvertToIndex( |
| Isolate* isolate, Handle<Object> input, |
| MessageTemplate::Template error_index); |
| |
| DISALLOW_IMPLICIT_CONSTRUCTORS(Object); |
| }; |
| |
| |
| // In objects.h to be usable without objects-inl.h inclusion. |
| bool Object::IsSmi() const { return HAS_SMI_TAG(this); } |
| bool Object::IsHeapObject() const { |
| DCHECK_EQ(!IsSmi(), Internals::HasHeapObjectTag(this)); |
| return !IsSmi(); |
| } |
| |
| struct Brief { |
| explicit Brief(const Object* const v) : value(v) {} |
| const Object* value; |
| }; |
| |
| V8_EXPORT_PRIVATE std::ostream& operator<<(std::ostream& os, const Brief& v); |
| |
| // Smi represents integer Numbers that can be stored in 31 bits. |
| // Smis are immediate which means they are NOT allocated in the heap. |
| // The this pointer has the following format: [31 bit signed int] 0 |
| // For long smis it has the following format: |
| // [32 bit signed int] [31 bits zero padding] 0 |
| // Smi stands for small integer. |
| class Smi: public Object { |
| public: |
| // Returns the integer value. |
| inline int value() const { return Internals::SmiValue(this); } |
| inline Smi* ToUint32Smi() { |
| if (value() <= 0) return Smi::kZero; |
| return Smi::FromInt(static_cast<uint32_t>(value())); |
| } |
| |
| // Convert a Smi object to an int. |
| static inline int ToInt(const Object* object); |
| |
| // Convert a value to a Smi object. |
| static inline Smi* FromInt(int value) { |
| DCHECK(Smi::IsValid(value)); |
| return reinterpret_cast<Smi*>(Internals::IntToSmi(value)); |
| } |
| |
| static inline Smi* FromIntptr(intptr_t value) { |
| DCHECK(Smi::IsValid(value)); |
| int smi_shift_bits = kSmiTagSize + kSmiShiftSize; |
| return reinterpret_cast<Smi*>((value << smi_shift_bits) | kSmiTag); |
| } |
| |
| template <typename E, |
| typename = typename std::enable_if<std::is_enum<E>::value>::type> |
| static inline Smi* FromEnum(E value) { |
| STATIC_ASSERT(sizeof(E) <= sizeof(int)); |
| return FromInt(static_cast<int>(value)); |
| } |
| |
| // Returns whether value can be represented in a Smi. |
| static inline bool IsValid(intptr_t value) { |
| bool result = Internals::IsValidSmi(value); |
| DCHECK_EQ(result, value >= kMinValue && value <= kMaxValue); |
| return result; |
| } |
| |
| DECL_CAST(Smi) |
| |
| // Dispatched behavior. |
| V8_EXPORT_PRIVATE void SmiPrint(std::ostream& os) const; // NOLINT |
| DECL_VERIFIER(Smi) |
| |
| static constexpr Smi* const kZero = nullptr; |
| static const int kMinValue = |
| (static_cast<unsigned int>(-1)) << (kSmiValueSize - 1); |
| static const int kMaxValue = -(kMinValue + 1); |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(Smi); |
| }; |
| |
| |
| // Heap objects typically have a map pointer in their first word. However, |
| // during GC other data (e.g. mark bits, forwarding addresses) is sometimes |
| // encoded in the first word. The class MapWord is an abstraction of the |
| // value in a heap object's first word. |
| class MapWord BASE_EMBEDDED { |
| public: |
| // Normal state: the map word contains a map pointer. |
| |
| // Create a map word from a map pointer. |
| static inline MapWord FromMap(const Map* map); |
| |
| // View this map word as a map pointer. |
| inline Map* ToMap() const; |
| |
| // Scavenge collection: the map word of live objects in the from space |
| // contains a forwarding address (a heap object pointer in the to space). |
| |
| // True if this map word is a forwarding address for a scavenge |
| // collection. Only valid during a scavenge collection (specifically, |
| // when all map words are heap object pointers, i.e. not during a full GC). |
| inline bool IsForwardingAddress() const; |
| |
| // Create a map word from a forwarding address. |
| static inline MapWord FromForwardingAddress(HeapObject* object); |
| |
| // View this map word as a forwarding address. |
| inline HeapObject* ToForwardingAddress(); |
| |
| static inline MapWord FromRawValue(uintptr_t value) { |
| return MapWord(value); |
| } |
| |
| inline uintptr_t ToRawValue() { |
| return value_; |
| } |
| |
| private: |
| // HeapObject calls the private constructor and directly reads the value. |
| friend class HeapObject; |
| |
| explicit MapWord(uintptr_t value) : value_(value) {} |
| |
| uintptr_t value_; |
| }; |
| |
| |
| // HeapObject is the superclass for all classes describing heap allocated |
| // objects. |
| class HeapObject: public Object { |
| public: |
| // [map]: Contains a map which contains the object's reflective |
| // information. |
| inline Map* map() const; |
| inline void set_map(Map* value); |
| |
| inline HeapObject** map_slot(); |
| |
| // The no-write-barrier version. This is OK if the object is white and in |
| // new space, or if the value is an immortal immutable object, like the maps |
| // of primitive (non-JS) objects like strings, heap numbers etc. |
| inline void set_map_no_write_barrier(Map* value); |
| |
| // Get the map using acquire load. |
| inline Map* synchronized_map() const; |
| inline MapWord synchronized_map_word() const; |
| |
| // Set the map using release store |
| inline void synchronized_set_map(Map* value); |
| inline void synchronized_set_map_word(MapWord map_word); |
| |
| // Initialize the map immediately after the object is allocated. |
| // Do not use this outside Heap. |
| inline void set_map_after_allocation( |
| Map* value, WriteBarrierMode mode = UPDATE_WRITE_BARRIER); |
| |
| // During garbage collection, the map word of a heap object does not |
| // necessarily contain a map pointer. |
| inline MapWord map_word() const; |
| inline void set_map_word(MapWord map_word); |
| |
| // The Heap the object was allocated in. Used also to access Isolate. |
| inline Heap* GetHeap() const; |
| |
| // Convenience method to get current isolate. |
| inline Isolate* GetIsolate() const; |
| |
| #define IS_TYPE_FUNCTION_DECL(Type) INLINE(bool Is##Type() const); |
| HEAP_OBJECT_TYPE_LIST(IS_TYPE_FUNCTION_DECL) |
| #undef IS_TYPE_FUNCTION_DECL |
| |
| #define IS_TYPE_FUNCTION_DECL(Type, Value) \ |
| INLINE(bool Is##Type(Isolate* isolate) const); |
| ODDBALL_LIST(IS_TYPE_FUNCTION_DECL) |
| #undef IS_TYPE_FUNCTION_DECL |
| |
| INLINE(bool IsNullOrUndefined(Isolate* isolate) const); |
| |
| #define DECL_STRUCT_PREDICATE(NAME, Name, name) INLINE(bool Is##Name() const); |
| STRUCT_LIST(DECL_STRUCT_PREDICATE) |
| #undef DECL_STRUCT_PREDICATE |
| |
| // Converts an address to a HeapObject pointer. |
| static inline HeapObject* FromAddress(Address address) { |
| DCHECK_TAG_ALIGNED(address); |
| return reinterpret_cast<HeapObject*>(address + kHeapObjectTag); |
| } |
| |
| // Returns the address of this HeapObject. |
| inline Address address() const { |
| return reinterpret_cast<Address>(const_cast<HeapObject*>(this)) - |
| kHeapObjectTag; |
| } |
| |
| // Iterates over pointers contained in the object (including the Map). |
| // If it's not performance critical iteration use the non-templatized |
| // version. |
| void Iterate(ObjectVisitor* v); |
| |
| template <typename ObjectVisitor> |
| inline void IterateFast(ObjectVisitor* v); |
| |
| // Iterates over all pointers contained in the object except the |
| // first map pointer. The object type is given in the first |
| // parameter. This function does not access the map pointer in the |
| // object, and so is safe to call while the map pointer is modified. |
| // If it's not performance critical iteration use the non-templatized |
| // version. |
| void IterateBody(ObjectVisitor* v); |
| void IterateBody(InstanceType type, int object_size, ObjectVisitor* v); |
| |
| template <typename ObjectVisitor> |
| inline void IterateBodyFast(ObjectVisitor* v); |
| |
| template <typename ObjectVisitor> |
| inline void IterateBodyFast(InstanceType type, int object_size, |
| ObjectVisitor* v); |
| |
| // Returns true if the object contains a tagged value at given offset. |
| // It is used for invalid slots filtering. If the offset points outside |
| // of the object or to the map word, the result is UNDEFINED (!!!). |
| bool IsValidSlot(int offset); |
| |
| // Returns the heap object's size in bytes |
| inline int Size() const; |
| |
| // Given a heap object's map pointer, returns the heap size in bytes |
| // Useful when the map pointer field is used for other purposes. |
| // GC internal. |
| inline int SizeFromMap(Map* map) const; |
| |
| // Returns the field at offset in obj, as a read/write Object* reference. |
| // Does no checking, and is safe to use during GC, while maps are invalid. |
| // Does not invoke write barrier, so should only be assigned to |
| // during marking GC. |
| static inline Object** RawField(HeapObject* obj, int offset); |
| |
| DECL_CAST(HeapObject) |
| |
| // Return the write barrier mode for this. Callers of this function |
| // must be able to present a reference to an DisallowHeapAllocation |
| // object as a sign that they are not going to use this function |
| // from code that allocates and thus invalidates the returned write |
| // barrier mode. |
| inline WriteBarrierMode GetWriteBarrierMode( |
| const DisallowHeapAllocation& promise); |
| |
| // Dispatched behavior. |
| void HeapObjectShortPrint(std::ostream& os); // NOLINT |
| #ifdef OBJECT_PRINT |
| void PrintHeader(std::ostream& os, const char* id); // NOLINT |
| #endif |
| DECL_PRINTER(HeapObject) |
| DECL_VERIFIER(HeapObject) |
| #ifdef VERIFY_HEAP |
| inline void VerifyObjectField(int offset); |
| inline void VerifySmiField(int offset); |
| |
| // Verify a pointer is a valid HeapObject pointer that points to object |
| // areas in the heap. |
| static void VerifyHeapPointer(Object* p); |
| #endif |
| |
| inline AllocationAlignment RequiredAlignment() const; |
| |
| // Whether the object needs rehashing. That is the case if the object's |
| // content depends on FLAG_hash_seed. When the object is deserialized into |
| // a heap with a different hash seed, these objects need to adapt. |
| inline bool NeedsRehashing() const; |
| |
| // Rehashing support is not implemented for all objects that need rehashing. |
| // With objects that need rehashing but cannot be rehashed, rehashing has to |
| // be disabled. |
| bool CanBeRehashed() const; |
| |
| // Rehash the object based on the layout inferred from its map. |
| void RehashBasedOnMap(); |
| |
| // Layout description. |
| // First field in a heap object is map. |
| static const int kMapOffset = Object::kHeaderSize; |
| static const int kHeaderSize = kMapOffset + kPointerSize; |
| |
| STATIC_ASSERT(kMapOffset == Internals::kHeapObjectMapOffset); |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(HeapObject); |
| }; |
| |
| |
| template <int start_offset, int end_offset, int size> |
| class FixedBodyDescriptor; |
| |
| |
| template <int start_offset> |
| class FlexibleBodyDescriptor; |
| |
| |
| // The HeapNumber class describes heap allocated numbers that cannot be |
| // represented in a Smi (small integer) |
| class HeapNumber: public HeapObject { |
| public: |
| // [value]: number value. |
| inline double value() const; |
| inline void set_value(double value); |
| |
| inline uint64_t value_as_bits() const; |
| inline void set_value_as_bits(uint64_t bits); |
| |
| DECL_CAST(HeapNumber) |
| |
| V8_EXPORT_PRIVATE void HeapNumberPrint(std::ostream& os); // NOLINT |
| DECL_VERIFIER(HeapNumber) |
| |
| inline int get_exponent(); |
| inline int get_sign(); |
| |
| // Layout description. |
| static const int kValueOffset = HeapObject::kHeaderSize; |
| // IEEE doubles are two 32 bit words. The first is just mantissa, the second |
| // is a mixture of sign, exponent and mantissa. The offsets of two 32 bit |
| // words within double numbers are endian dependent and they are set |
| // accordingly. |
| #if defined(V8_TARGET_LITTLE_ENDIAN) |
| static const int kMantissaOffset = kValueOffset; |
| static const int kExponentOffset = kValueOffset + 4; |
| #elif defined(V8_TARGET_BIG_ENDIAN) |
| static const int kMantissaOffset = kValueOffset + 4; |
| static const int kExponentOffset = kValueOffset; |
| #else |
| #error Unknown byte ordering |
| #endif |
| |
| static const int kSize = kValueOffset + kDoubleSize; |
| static const uint32_t kSignMask = 0x80000000u; |
| static const uint32_t kExponentMask = 0x7ff00000u; |
| static const uint32_t kMantissaMask = 0xfffffu; |
| static const int kMantissaBits = 52; |
| static const int kExponentBits = 11; |
| static const int kExponentBias = 1023; |
| static const int kExponentShift = 20; |
| static const int kInfinityOrNanExponent = |
| (kExponentMask >> kExponentShift) - kExponentBias; |
| static const int kMantissaBitsInTopWord = 20; |
| static const int kNonMantissaBitsInTopWord = 12; |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(HeapNumber); |
| }; |
| |
| enum EnsureElementsMode { |
| DONT_ALLOW_DOUBLE_ELEMENTS, |
| ALLOW_COPIED_DOUBLE_ELEMENTS, |
| ALLOW_CONVERTED_DOUBLE_ELEMENTS |
| }; |
| |
| |
| // Indicator for one component of an AccessorPair. |
| enum AccessorComponent { |
| ACCESSOR_GETTER, |
| ACCESSOR_SETTER |
| }; |
| |
| enum class GetKeysConversion { kKeepNumbers, kConvertToString }; |
| |
| enum class KeyCollectionMode { |
| kOwnOnly = static_cast<int>(v8::KeyCollectionMode::kOwnOnly), |
| kIncludePrototypes = |
| static_cast<int>(v8::KeyCollectionMode::kIncludePrototypes) |
| }; |
| |
| enum class AllocationSiteUpdateMode { kUpdate, kCheckOnly }; |
| |
| class PropertyArray : public HeapObject { |
| public: |
| // [length]: length of the array. |
| inline int length() const; |
| |
| // Get the length using acquire loads. |
| inline int synchronized_length() const; |
| |
| // This is only used on a newly allocated PropertyArray which |
| // doesn't have an existing hash. |
| inline void initialize_length(int length); |
| |
| inline void SetHash(int hash); |
| inline int Hash() const; |
| |
| inline Object* get(int index) const; |
| |
| inline void set(int index, Object* value); |
| // Setter with explicit barrier mode. |
| inline void set(int index, Object* value, WriteBarrierMode mode); |
| |
| // Gives access to raw memory which stores the array's data. |
| inline Object** data_start(); |
| |
| // Garbage collection support. |
| static constexpr int SizeFor(int length) { |
| return kHeaderSize + length * kPointerSize; |
| } |
| |
| DECL_CAST(PropertyArray) |
| DECL_PRINTER(PropertyArray) |
| DECL_VERIFIER(PropertyArray) |
| |
| // Layout description. |
| static const int kLengthAndHashOffset = HeapObject::kHeaderSize; |
| static const int kHeaderSize = kLengthAndHashOffset + kPointerSize; |
| |
| // Garbage collection support. |
| typedef FlexibleBodyDescriptor<kHeaderSize> BodyDescriptor; |
| // No weak fields. |
| typedef BodyDescriptor BodyDescriptorWeak; |
| |
| static const int kLengthFieldSize = 10; |
| class LengthField : public BitField<int, 0, kLengthFieldSize> {}; |
| static const int kMaxLength = LengthField::kMax; |
| class HashField : public BitField<int, kLengthFieldSize, |
| kSmiValueSize - kLengthFieldSize - 1> {}; |
| |
| static const int kNoHashSentinel = 0; |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(PropertyArray); |
| }; |
| |
| // JSReceiver includes types on which properties can be defined, i.e., |
| // JSObject and JSProxy. |
| class JSReceiver: public HeapObject { |
| public: |
| // Returns true if there is no slow (ie, dictionary) backing store. |
| inline bool HasFastProperties() const; |
| |
| // Returns the properties array backing store if it |
| // exists. Otherwise, returns an empty_property_array when there's a |
| // Smi (hash code) or an empty_fixed_array for a fast properties |
| // map. |
| inline PropertyArray* property_array() const; |
| |
| // Gets slow properties for non-global objects. |
| inline NameDictionary* property_dictionary() const; |
| |
| // Sets the properties backing store and makes sure any existing hash is moved |
| // to the new properties store. To clear out the properties store, pass in the |
| // empty_fixed_array(), the hash will be maintained in this case as well. |
| void SetProperties(HeapObject* properties); |
| |
| // There are five possible values for the properties offset. |
| // 1) EmptyFixedArray/EmptyPropertyDictionary - This is the standard |
| // placeholder. |
| // |
| // 2) Smi - This is the hash code of the object. |
| // |
| // 3) PropertyArray - This is similar to a FixedArray but stores |
| // the hash code of the object in its length field. This is a fast |
| // backing store. |
| // |
| // 4) NameDictionary - This is the dictionary-mode backing store. |
| // |
| // 4) GlobalDictionary - This is the backing store for the |
| // GlobalObject. |
| // |
| // This is used only in the deoptimizer and heap. Please use the |
| // above typed getters and setters to access the properties. |
| DECL_ACCESSORS(raw_properties_or_hash, Object) |
| |
| inline void initialize_properties(); |
| |
| // Deletes an existing named property in a normalized object. |
| static void DeleteNormalizedProperty(Handle<JSReceiver> object, int entry); |
| |
| DECL_CAST(JSReceiver) |
| |
| // ES6 section 7.1.1 ToPrimitive |
| MUST_USE_RESULT static MaybeHandle<Object> ToPrimitive( |
| Handle<JSReceiver> receiver, |
| ToPrimitiveHint hint = ToPrimitiveHint::kDefault); |
| |
| // ES6 section 7.1.1.1 OrdinaryToPrimitive |
| MUST_USE_RESULT static MaybeHandle<Object> OrdinaryToPrimitive( |
| Handle<JSReceiver> receiver, OrdinaryToPrimitiveHint hint); |
| |
| static MaybeHandle<Context> GetFunctionRealm(Handle<JSReceiver> receiver); |
| |
| // Get the first non-hidden prototype. |
| static inline MaybeHandle<Object> GetPrototype(Isolate* isolate, |
| Handle<JSReceiver> receiver); |
| |
| MUST_USE_RESULT static Maybe<bool> HasInPrototypeChain( |
| Isolate* isolate, Handle<JSReceiver> object, Handle<Object> proto); |
| |
| // Reads all enumerable own properties of source and adds them to |
| // target, using either Set or CreateDataProperty depending on the |
| // use_set argument. This only copies values not present in the |
| // maybe_excluded_properties list. |
| MUST_USE_RESULT static Maybe<bool> SetOrCopyDataProperties( |
| Isolate* isolate, Handle<JSReceiver> target, Handle<Object> source, |
| const ScopedVector<Handle<Object>>* excluded_properties = nullptr, |
| bool use_set = true); |
| |
| // Implementation of [[HasProperty]], ECMA-262 5th edition, section 8.12.6. |
| MUST_USE_RESULT static Maybe<bool> HasProperty(LookupIterator* it); |
| MUST_USE_RESULT static inline Maybe<bool> HasProperty( |
| Handle<JSReceiver> object, Handle<Name> name); |
| MUST_USE_RESULT static inline Maybe<bool> HasElement( |
| Handle<JSReceiver> object, uint32_t index); |
| |
| MUST_USE_RESULT static Maybe<bool> HasOwnProperty(Handle<JSReceiver> object, |
| Handle<Name> name); |
| MUST_USE_RESULT static inline Maybe<bool> HasOwnProperty( |
| Handle<JSReceiver> object, uint32_t index); |
| |
| MUST_USE_RESULT static inline MaybeHandle<Object> GetProperty( |
| Isolate* isolate, Handle<JSReceiver> receiver, const char* key); |
| MUST_USE_RESULT static inline MaybeHandle<Object> GetProperty( |
| Handle<JSReceiver> receiver, Handle<Name> name); |
| MUST_USE_RESULT static inline MaybeHandle<Object> GetElement( |
| Isolate* isolate, Handle<JSReceiver> receiver, uint32_t index); |
| |
| // Implementation of ES6 [[Delete]] |
| MUST_USE_RESULT static Maybe<bool> DeletePropertyOrElement( |
| Handle<JSReceiver> object, Handle<Name> name, |
| LanguageMode language_mode = LanguageMode::kSloppy); |
| MUST_USE_RESULT static Maybe<bool> DeleteProperty( |
| Handle<JSReceiver> object, Handle<Name> name, |
| LanguageMode language_mode = LanguageMode::kSloppy); |
| MUST_USE_RESULT static Maybe<bool> DeleteProperty(LookupIterator* it, |
| LanguageMode language_mode); |
| MUST_USE_RESULT static Maybe<bool> DeleteElement( |
| Handle<JSReceiver> object, uint32_t index, |
| LanguageMode language_mode = LanguageMode::kSloppy); |
| |
| MUST_USE_RESULT static Object* DefineProperty(Isolate* isolate, |
| Handle<Object> object, |
| Handle<Object> name, |
| Handle<Object> attributes); |
| MUST_USE_RESULT static MaybeHandle<Object> DefineProperties( |
| Isolate* isolate, Handle<Object> object, Handle<Object> properties); |
| |
| // "virtual" dispatcher to the correct [[DefineOwnProperty]] implementation. |
| MUST_USE_RESULT static Maybe<bool> DefineOwnProperty( |
| Isolate* isolate, Handle<JSReceiver> object, Handle<Object> key, |
| PropertyDescriptor* desc, ShouldThrow should_throw); |
| |
| // ES6 7.3.4 (when passed kDontThrow) |
| MUST_USE_RESULT static Maybe<bool> CreateDataProperty( |
| LookupIterator* it, Handle<Object> value, ShouldThrow should_throw); |
| |
| // ES6 9.1.6.1 |
| MUST_USE_RESULT static Maybe<bool> OrdinaryDefineOwnProperty( |
| Isolate* isolate, Handle<JSObject> object, Handle<Object> key, |
| PropertyDescriptor* desc, ShouldThrow should_throw); |
| MUST_USE_RESULT static Maybe<bool> OrdinaryDefineOwnProperty( |
| LookupIterator* it, PropertyDescriptor* desc, ShouldThrow should_throw); |
| // ES6 9.1.6.2 |
| MUST_USE_RESULT static Maybe<bool> IsCompatiblePropertyDescriptor( |
| Isolate* isolate, bool extensible, PropertyDescriptor* desc, |
| PropertyDescriptor* current, Handle<Name> property_name, |
| ShouldThrow should_throw); |
| // ES6 9.1.6.3 |
| // |it| can be NULL in cases where the ES spec passes |undefined| as the |
| // receiver. Exactly one of |it| and |property_name| must be provided. |
| MUST_USE_RESULT static Maybe<bool> ValidateAndApplyPropertyDescriptor( |
| Isolate* isolate, LookupIterator* it, bool extensible, |
| PropertyDescriptor* desc, PropertyDescriptor* current, |
| ShouldThrow should_throw, Handle<Name> property_name); |
| |
| V8_EXPORT_PRIVATE MUST_USE_RESULT static Maybe<bool> GetOwnPropertyDescriptor( |
| Isolate* isolate, Handle<JSReceiver> object, Handle<Object> key, |
| PropertyDescriptor* desc); |
| MUST_USE_RESULT static Maybe<bool> GetOwnPropertyDescriptor( |
| LookupIterator* it, PropertyDescriptor* desc); |
| |
| typedef PropertyAttributes IntegrityLevel; |
| |
| // ES6 7.3.14 (when passed kDontThrow) |
| // 'level' must be SEALED or FROZEN. |
| MUST_USE_RESULT static Maybe<bool> SetIntegrityLevel( |
| Handle<JSReceiver> object, IntegrityLevel lvl, ShouldThrow should_throw); |
| |
| // ES6 7.3.15 |
| // 'level' must be SEALED or FROZEN. |
| MUST_USE_RESULT static Maybe<bool> TestIntegrityLevel( |
| Handle<JSReceiver> object, IntegrityLevel lvl); |
| |
| // ES6 [[PreventExtensions]] (when passed kDontThrow) |
| MUST_USE_RESULT static Maybe<bool> PreventExtensions( |
| Handle<JSReceiver> object, ShouldThrow should_throw); |
| |
| MUST_USE_RESULT static Maybe<bool> IsExtensible(Handle<JSReceiver> object); |
| |
| // Returns the class name ([[Class]] property in the specification). |
| V8_EXPORT_PRIVATE String* class_name(); |
| |
| // Returns the constructor name (the name (possibly, inferred name) of the |
| // function that was used to instantiate the object). |
| static Handle<String> GetConstructorName(Handle<JSReceiver> receiver); |
| |
| Handle<Context> GetCreationContext(); |
| |
| MUST_USE_RESULT static inline Maybe<PropertyAttributes> GetPropertyAttributes( |
| Handle<JSReceiver> object, Handle<Name> name); |
| MUST_USE_RESULT static inline Maybe<PropertyAttributes> |
| GetOwnPropertyAttributes(Handle<JSReceiver> object, Handle<Name> name); |
| MUST_USE_RESULT static inline Maybe<PropertyAttributes> |
| GetOwnPropertyAttributes(Handle<JSReceiver> object, uint32_t index); |
| |
| MUST_USE_RESULT static inline Maybe<PropertyAttributes> GetElementAttributes( |
| Handle<JSReceiver> object, uint32_t index); |
| MUST_USE_RESULT static inline Maybe<PropertyAttributes> |
| GetOwnElementAttributes(Handle<JSReceiver> object, uint32_t index); |
| |
| MUST_USE_RESULT static Maybe<PropertyAttributes> GetPropertyAttributes( |
| LookupIterator* it); |
| |
| // Set the object's prototype (only JSReceiver and null are allowed values). |
| MUST_USE_RESULT static Maybe<bool> SetPrototype(Handle<JSReceiver> object, |
| Handle<Object> value, |
| bool from_javascript, |
| ShouldThrow should_throw); |
| |
| inline static Handle<Object> GetDataProperty(Handle<JSReceiver> object, |
| Handle<Name> name); |
| static Handle<Object> GetDataProperty(LookupIterator* it); |
| |
| |
| // Retrieves a permanent object identity hash code. The undefined value might |
| // be returned in case no hash was created yet. |
| Object* GetIdentityHash(Isolate* isolate); |
| |
| // Retrieves a permanent object identity hash code. May create and store a |
| // hash code if needed and none exists. |
| static Smi* CreateIdentityHash(Isolate* isolate, JSReceiver* key); |
| Smi* GetOrCreateIdentityHash(Isolate* isolate); |
| |
| // Stores the hash code. The hash passed in must be masked with |
| // JSReceiver::kHashMask. |
| void SetIdentityHash(int masked_hash); |
| |
| // ES6 [[OwnPropertyKeys]] (modulo return type) |
| MUST_USE_RESULT static inline MaybeHandle<FixedArray> OwnPropertyKeys( |
| Handle<JSReceiver> object); |
| |
| MUST_USE_RESULT static MaybeHandle<FixedArray> GetOwnValues( |
| Handle<JSReceiver> object, PropertyFilter filter); |
| |
| MUST_USE_RESULT static MaybeHandle<FixedArray> GetOwnEntries( |
| Handle<JSReceiver> object, PropertyFilter filter); |
| |
| static const int kHashMask = PropertyArray::HashField::kMask; |
| |
| // Layout description. |
| static const int kPropertiesOrHashOffset = HeapObject::kHeaderSize; |
| static const int kHeaderSize = HeapObject::kHeaderSize + kPointerSize; |
| |
| bool HasProxyInPrototype(Isolate* isolate); |
| |
| bool HasComplexElements(); |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(JSReceiver); |
| }; |
| |
| |
| // The JSObject describes real heap allocated JavaScript objects with |
| // properties. |
| // Note that the map of JSObject changes during execution to enable inline |
| // caching. |
| class JSObject: public JSReceiver { |
| public: |
| static bool IsUnmodifiedApiObject(Object** o); |
| |
| static MUST_USE_RESULT MaybeHandle<JSObject> New( |
| Handle<JSFunction> constructor, Handle<JSReceiver> new_target, |
| Handle<AllocationSite> site = Handle<AllocationSite>::null()); |
| |
| static MaybeHandle<Context> GetFunctionRealm(Handle<JSObject> object); |
| |
| // [elements]: The elements (properties with names that are integers). |
| // |
| // Elements can be in two general modes: fast and slow. Each mode |
| // corresponds to a set of object representations of elements that |
| // have something in common. |
| // |
| // In the fast mode elements is a FixedArray and so each element can |
| // be quickly accessed. This fact is used in the generated code. The |
| // elements array can have one of three maps in this mode: |
| // fixed_array_map, sloppy_arguments_elements_map or |
| // fixed_cow_array_map (for copy-on-write arrays). In the latter case |
| // the elements array may be shared by a few objects and so before |
| // writing to any element the array must be copied. Use |
| // EnsureWritableFastElements in this case. |
| // |
| // In the slow mode the elements is either a NumberDictionary, a |
| // FixedArray parameter map for a (sloppy) arguments object. |
| DECL_ACCESSORS(elements, FixedArrayBase) |
| inline void initialize_elements(); |
| static inline void SetMapAndElements(Handle<JSObject> object, |
| Handle<Map> map, |
| Handle<FixedArrayBase> elements); |
| inline ElementsKind GetElementsKind(); |
| ElementsAccessor* GetElementsAccessor(); |
| // Returns true if an object has elements of PACKED_SMI_ELEMENTS or |
| // HOLEY_SMI_ELEMENTS ElementsKind. |
| inline bool HasSmiElements(); |
| // Returns true if an object has elements of PACKED_ELEMENTS or |
| // HOLEY_ELEMENTS ElementsKind. |
| inline bool HasObjectElements(); |
| // Returns true if an object has elements of PACKED_SMI_ELEMENTS, |
| // HOLEY_SMI_ELEMENTS, PACKED_ELEMENTS, or HOLEY_ELEMENTS. |
| inline bool HasSmiOrObjectElements(); |
| // Returns true if an object has any of the "fast" elements kinds. |
| inline bool HasFastElements(); |
| // Returns true if an object has elements of PACKED_DOUBLE_ELEMENTS or |
| // HOLEY_DOUBLE_ELEMENTS ElementsKind. |
| inline bool HasDoubleElements(); |
| // Returns true if an object has elements of HOLEY_SMI_ELEMENTS, |
| // HOLEY_DOUBLE_ELEMENTS, or HOLEY_ELEMENTS ElementsKind. |
| inline bool HasHoleyElements(); |
| inline bool HasSloppyArgumentsElements(); |
| inline bool HasStringWrapperElements(); |
| inline bool HasDictionaryElements(); |
| |
| inline bool HasFixedTypedArrayElements(); |
| |
| inline bool HasFixedUint8ClampedElements(); |
| inline bool HasFixedArrayElements(); |
| inline bool HasFixedInt8Elements(); |
| inline bool HasFixedUint8Elements(); |
| inline bool HasFixedInt16Elements(); |
| inline bool HasFixedUint16Elements(); |
| inline bool HasFixedInt32Elements(); |
| inline bool HasFixedUint32Elements(); |
| inline bool HasFixedFloat32Elements(); |
| inline bool HasFixedFloat64Elements(); |
| |
| inline bool HasFastArgumentsElements(); |
| inline bool HasSlowArgumentsElements(); |
| inline bool HasFastStringWrapperElements(); |
| inline bool HasSlowStringWrapperElements(); |
| bool HasEnumerableElements(); |
| |
| inline NumberDictionary* element_dictionary(); // Gets slow elements. |
| |
| // Requires: HasFastElements(). |
| static void EnsureWritableFastElements(Handle<JSObject> object); |
| |
| MUST_USE_RESULT static Maybe<bool> SetPropertyWithInterceptor( |
| LookupIterator* it, ShouldThrow should_throw, Handle<Object> value); |
| |
| // The API currently still wants DefineOwnPropertyIgnoreAttributes to convert |
| // AccessorInfo objects to data fields. We allow FORCE_FIELD as an exception |
| // to the default behavior that calls the setter. |
| enum AccessorInfoHandling { FORCE_FIELD, DONT_FORCE_FIELD }; |
| |
| MUST_USE_RESULT static MaybeHandle<Object> DefineOwnPropertyIgnoreAttributes( |
| LookupIterator* it, Handle<Object> value, PropertyAttributes attributes, |
| AccessorInfoHandling handling = DONT_FORCE_FIELD); |
| |
| MUST_USE_RESULT static Maybe<bool> DefineOwnPropertyIgnoreAttributes( |
| LookupIterator* it, Handle<Object> value, PropertyAttributes attributes, |
| ShouldThrow should_throw, |
| AccessorInfoHandling handling = DONT_FORCE_FIELD); |
| |
| MUST_USE_RESULT static MaybeHandle<Object> SetOwnPropertyIgnoreAttributes( |
| Handle<JSObject> object, Handle<Name> name, Handle<Object> value, |
| PropertyAttributes attributes); |
| |
| MUST_USE_RESULT static MaybeHandle<Object> SetOwnElementIgnoreAttributes( |
| Handle<JSObject> object, uint32_t index, Handle<Object> value, |
| PropertyAttributes attributes); |
| |
| // Equivalent to one of the above depending on whether |name| can be converted |
| // to an array index. |
| MUST_USE_RESULT static MaybeHandle<Object> |
| DefinePropertyOrElementIgnoreAttributes(Handle<JSObject> object, |
| Handle<Name> name, |
| Handle<Object> value, |
| PropertyAttributes attributes = NONE); |
| |
| // Adds or reconfigures a property to attributes NONE. It will fail when it |
| // cannot. |
| MUST_USE_RESULT static Maybe<bool> CreateDataProperty( |
| LookupIterator* it, Handle<Object> value, |
| ShouldThrow should_throw = kDontThrow); |
| |
| static void AddProperty(Handle<JSObject> object, Handle<Name> name, |
| Handle<Object> value, PropertyAttributes attributes); |
| |
| MUST_USE_RESULT static Maybe<bool> AddDataElement( |
| Handle<JSObject> receiver, uint32_t index, Handle<Object> value, |
| PropertyAttributes attributes, ShouldThrow should_throw); |
| MUST_USE_RESULT static MaybeHandle<Object> AddDataElement( |
| Handle<JSObject> receiver, uint32_t index, Handle<Object> value, |
| PropertyAttributes attributes); |
| |
| // Extend the receiver with a single fast property appeared first in the |
| // passed map. This also extends the property backing store if necessary. |
| static void AllocateStorageForMap(Handle<JSObject> object, Handle<Map> map); |
| |
| // Migrates the given object to a map whose field representations are the |
| // lowest upper bound of all known representations for that field. |
| static void MigrateInstance(Handle<JSObject> instance); |
| |
| // Migrates the given object only if the target map is already available, |
| // or returns false if such a map is not yet available. |
| static bool TryMigrateInstance(Handle<JSObject> instance); |
| |
| // Sets the property value in a normalized object given (key, value, details). |
| // Handles the special representation of JS global objects. |
| static void SetNormalizedProperty(Handle<JSObject> object, Handle<Name> name, |
| Handle<Object> value, |
| PropertyDetails details); |
| static void SetDictionaryElement(Handle<JSObject> object, uint32_t index, |
| Handle<Object> value, |
| PropertyAttributes attributes); |
| static void SetDictionaryArgumentsElement(Handle<JSObject> object, |
| uint32_t index, |
| Handle<Object> value, |
| PropertyAttributes attributes); |
| |
| static void OptimizeAsPrototype(Handle<JSObject> object, |
| bool enable_setup_mode = true); |
| static void ReoptimizeIfPrototype(Handle<JSObject> object); |
| static void MakePrototypesFast(Handle<Object> receiver, |
| WhereToStart where_to_start, Isolate* isolate); |
| static void LazyRegisterPrototypeUser(Handle<Map> user, Isolate* isolate); |
| static void UpdatePrototypeUserRegistration(Handle<Map> old_map, |
| Handle<Map> new_map, |
| Isolate* isolate); |
| static bool UnregisterPrototypeUser(Handle<Map> user, Isolate* isolate); |
| static Map* InvalidatePrototypeChains(Map* map); |
| static void InvalidatePrototypeValidityCell(JSGlobalObject* global); |
| |
| // Updates prototype chain tracking information when an object changes its |
| // map from |old_map| to |new_map|. |
| static void NotifyMapChange(Handle<Map> old_map, Handle<Map> new_map, |
| Isolate* isolate); |
| |
| // Utility used by many Array builtins and runtime functions |
| static inline bool PrototypeHasNoElements(Isolate* isolate, JSObject* object); |
| |
| // Alternative implementation of WeakFixedArray::NullCallback. |
| class PrototypeRegistryCompactionCallback { |
| public: |
| static void Callback(Object* value, int old_index, int new_index); |
| }; |
| |
| // Retrieve interceptors. |
| inline InterceptorInfo* GetNamedInterceptor(); |
| inline InterceptorInfo* GetIndexedInterceptor(); |
| |
| // Used from JSReceiver. |
| MUST_USE_RESULT static Maybe<PropertyAttributes> |
| GetPropertyAttributesWithInterceptor(LookupIterator* it); |
| MUST_USE_RESULT static Maybe<PropertyAttributes> |
| GetPropertyAttributesWithFailedAccessCheck(LookupIterator* it); |
| |
| // Defines an AccessorPair property on the given object. |
| // TODO(mstarzinger): Rename to SetAccessor(). |
| static MaybeHandle<Object> DefineAccessor(Handle<JSObject> object, |
| Handle<Name> name, |
| Handle<Object> getter, |
| Handle<Object> setter, |
| PropertyAttributes attributes); |
| static MaybeHandle<Object> DefineAccessor(LookupIterator* it, |
| Handle<Object> getter, |
| Handle<Object> setter, |
| PropertyAttributes attributes); |
| |
| // Defines an AccessorInfo property on the given object. |
| MUST_USE_RESULT static MaybeHandle<Object> SetAccessor( |
| Handle<JSObject> object, Handle<Name> name, Handle<AccessorInfo> info, |
| PropertyAttributes attributes); |
| |
| // The result must be checked first for exceptions. If there's no exception, |
| // the output parameter |done| indicates whether the interceptor has a result |
| // or not. |
| MUST_USE_RESULT static MaybeHandle<Object> GetPropertyWithInterceptor( |
| LookupIterator* it, bool* done); |
| |
| static void ValidateElements(JSObject* object); |
| |
| // Makes sure that this object can contain HeapObject as elements. |
| static inline void EnsureCanContainHeapObjectElements(Handle<JSObject> obj); |
| |
| // Makes sure that this object can contain the specified elements. |
| static inline void EnsureCanContainElements( |
| Handle<JSObject> object, |
| Object** elements, |
| uint32_t count, |
| EnsureElementsMode mode); |
| static inline void EnsureCanContainElements( |
| Handle<JSObject> object, |
| Handle<FixedArrayBase> elements, |
| uint32_t length, |
| EnsureElementsMode mode); |
| static void EnsureCanContainElements( |
| Handle<JSObject> object, |
| Arguments* arguments, |
| uint32_t first_arg, |
| uint32_t arg_count, |
| EnsureElementsMode mode); |
| |
| // Would we convert a fast elements array to dictionary mode given |
| // an access at key? |
| bool WouldConvertToSlowElements(uint32_t index); |
| |
| static const uint32_t kMinAddedElementsCapacity = 16; |
| |
| // Computes the new capacity when expanding the elements of a JSObject. |
| static uint32_t NewElementsCapacity(uint32_t old_capacity) { |
| // (old_capacity + 50%) + kMinAddedElementsCapacity |
| return old_capacity + (old_capacity >> 1) + kMinAddedElementsCapacity; |
| } |
| |
| // These methods do not perform access checks! |
| template <AllocationSiteUpdateMode update_or_check = |
| AllocationSiteUpdateMode::kUpdate> |
| static bool UpdateAllocationSite(Handle<JSObject> object, |
| ElementsKind to_kind); |
| |
| // Lookup interceptors are used for handling properties controlled by host |
| // objects. |
| inline bool HasNamedInterceptor(); |
| inline bool HasIndexedInterceptor(); |
| |
| // Support functions for v8 api (needed for correct interceptor behavior). |
| MUST_USE_RESULT static Maybe<bool> HasRealNamedProperty( |
| Handle<JSObject> object, Handle<Name> name); |
| MUST_USE_RESULT static Maybe<bool> HasRealElementProperty( |
| Handle<JSObject> object, uint32_t index); |
| MUST_USE_RESULT static Maybe<bool> HasRealNamedCallbackProperty( |
| Handle<JSObject> object, Handle<Name> name); |
| |
| // Get the header size for a JSObject. Used to compute the index of |
| // embedder fields as well as the number of embedder fields. |
| // The |function_has_prototype_slot| parameter is needed only for |
| // JSFunction objects. |
| static int GetHeaderSize(InstanceType instance_type, |
| bool function_has_prototype_slot = false); |
| static inline int GetHeaderSize(const Map* map); |
| inline int GetHeaderSize() const; |
| |
| static inline int GetEmbedderFieldCount(const Map* map); |
| inline int GetEmbedderFieldCount() const; |
| inline int GetEmbedderFieldOffset(int index); |
| inline Object* GetEmbedderField(int index); |
| inline void SetEmbedderField(int index, Object* value); |
| inline void SetEmbedderField(int index, Smi* value); |
| bool WasConstructedFromApiFunction(); |
| |
| // Returns a new map with all transitions dropped from the object's current |
| // map and the ElementsKind set. |
| static Handle<Map> GetElementsTransitionMap(Handle<JSObject> object, |
| ElementsKind to_kind); |
| static void TransitionElementsKind(Handle<JSObject> object, |
| ElementsKind to_kind); |
| |
| // Always use this to migrate an object to a new map. |
| // |expected_additional_properties| is only used for fast-to-slow transitions |
| // and ignored otherwise. |
| static void MigrateToMap(Handle<JSObject> object, Handle<Map> new_map, |
| int expected_additional_properties = 0); |
| |
| // Forces a prototype without any of the checks that the regular SetPrototype |
| // would do. |
| static void ForceSetPrototype(Handle<JSObject> object, Handle<Object> proto); |
| |
| // Convert the object to use the canonical dictionary |
| // representation. If the object is expected to have additional properties |
| // added this number can be indicated to have the backing store allocated to |
| // an initial capacity for holding these properties. |
| static void NormalizeProperties(Handle<JSObject> object, |
| PropertyNormalizationMode mode, |
| int expected_additional_properties, |
| const char* reason); |
| |
| // Convert and update the elements backing store to be a |
| // NumberDictionary dictionary. Returns the backing after conversion. |
| static Handle<NumberDictionary> NormalizeElements(Handle<JSObject> object); |
| |
| void RequireSlowElements(NumberDictionary* dictionary); |
| |
| // Transform slow named properties to fast variants. |
| static void MigrateSlowToFast(Handle<JSObject> object, |
| int unused_property_fields, const char* reason); |
| |
| inline bool IsUnboxedDoubleField(FieldIndex index); |
| |
| // Access fast-case object properties at index. |
| static Handle<Object> FastPropertyAt(Handle<JSObject> object, |
| Representation representation, |
| FieldIndex index); |
| inline Object* RawFastPropertyAt(FieldIndex index); |
| inline double RawFastDoublePropertyAt(FieldIndex index); |
| inline uint64_t RawFastDoublePropertyAsBitsAt(FieldIndex index); |
| |
| inline void FastPropertyAtPut(FieldIndex index, Object* value); |
| inline void RawFastPropertyAtPut(FieldIndex index, Object* value); |
| inline void RawFastDoublePropertyAsBitsAtPut(FieldIndex index, uint64_t bits); |
| inline void WriteToField(int descriptor, PropertyDetails details, |
| Object* value); |
| |
| // Access to in object properties. |
| inline int GetInObjectPropertyOffset(int index); |
| inline Object* InObjectPropertyAt(int index); |
| inline Object* InObjectPropertyAtPut(int index, |
| Object* value, |
| WriteBarrierMode mode |
| = UPDATE_WRITE_BARRIER); |
| |
| // Set the object's prototype (only JSReceiver and null are allowed values). |
| MUST_USE_RESULT static Maybe<bool> SetPrototype(Handle<JSObject> object, |
| Handle<Object> value, |
| bool from_javascript, |
| ShouldThrow should_throw); |
| |
| // Makes the object prototype immutable |
| // Never called from JavaScript |
| static void SetImmutableProto(Handle<JSObject> object); |
| |
| // Initializes the body starting at |start_offset|. It is responsibility of |
| // the caller to initialize object header. Fill the pre-allocated fields with |
| // pre_allocated_value and the rest with filler_value. |
| // Note: this call does not update write barrier, the caller is responsible |
| // to ensure that |filler_value| can be collected without WB here. |
| inline void InitializeBody(Map* map, int start_offset, |
| Object* pre_allocated_value, Object* filler_value); |
| |
| // Check whether this object references another object |
| bool ReferencesObject(Object* obj); |
| |
| MUST_USE_RESULT static Maybe<bool> TestIntegrityLevel(Handle<JSObject> object, |
| IntegrityLevel lvl); |
| |
| MUST_USE_RESULT static Maybe<bool> PreventExtensions( |
| Handle<JSObject> object, ShouldThrow should_throw); |
| |
| static bool IsExtensible(Handle<JSObject> object); |
| |
| DECL_CAST(JSObject) |
| |
| // Dispatched behavior. |
| void JSObjectShortPrint(StringStream* accumulator); |
| DECL_PRINTER(JSObject) |
| DECL_VERIFIER(JSObject) |
| #ifdef OBJECT_PRINT |
| bool PrintProperties(std::ostream& os); // NOLINT |
| void PrintElements(std::ostream& os); // NOLINT |
| #endif |
| #if defined(DEBUG) || defined(OBJECT_PRINT) |
| void PrintTransitions(std::ostream& os); // NOLINT |
| #endif |
| |
| static void PrintElementsTransition( |
| FILE* file, Handle<JSObject> object, |
| ElementsKind from_kind, Handle<FixedArrayBase> from_elements, |
| ElementsKind to_kind, Handle<FixedArrayBase> to_elements); |
| |
| void PrintInstanceMigration(FILE* file, Map* original_map, Map* new_map); |
| |
| #ifdef DEBUG |
| // Structure for collecting spill information about JSObjects. |
| class SpillInformation { |
| public: |
| void Clear(); |
| void Print(); |
| int number_of_objects_; |
| int number_of_objects_with_fast_properties_; |
| int number_of_objects_with_fast_elements_; |
| int number_of_fast_used_fields_; |
| int number_of_fast_unused_fields_; |
| int number_of_slow_used_properties_; |
| int number_of_slow_unused_properties_; |
| int number_of_fast_used_elements_; |
| int number_of_fast_unused_elements_; |
| int number_of_slow_used_elements_; |
| int number_of_slow_unused_elements_; |
| }; |
| |
| void IncrementSpillStatistics(SpillInformation* info); |
| #endif |
| |
| #ifdef VERIFY_HEAP |
| // If a GC was caused while constructing this object, the elements pointer |
| // may point to a one pointer filler map. The object won't be rooted, but |
| // our heap verification code could stumble across it. |
| bool ElementsAreSafeToExamine(); |
| #endif |
| |
| Object* SlowReverseLookup(Object* value); |
| |
| // Maximal number of elements (numbered 0 .. kMaxElementCount - 1). |
| // Also maximal value of JSArray's length property. |
| static const uint32_t kMaxElementCount = 0xffffffffu; |
| |
| // Constants for heuristics controlling conversion of fast elements |
| // to slow elements. |
| |
| // Maximal gap that can be introduced by adding an element beyond |
| // the current elements length. |
| static const uint32_t kMaxGap = 1024; |
| |
| // Maximal length of fast elements array that won't be checked for |
| // being dense enough on expansion. |
| static const int kMaxUncheckedFastElementsLength = 5000; |
| |
| // Same as above but for old arrays. This limit is more strict. We |
| // don't want to be wasteful with long lived objects. |
| static const int kMaxUncheckedOldFastElementsLength = 500; |
| |
| // This constant applies only to the initial map of "global.Object" and |
| // not to arbitrary other JSObject maps. |
| static const int kInitialGlobalObjectUnusedPropertiesCount = 4; |
| |
| static const int kMaxInstanceSize = 255 * kPointerSize; |
| |
| // When extending the backing storage for property values, we increase |
| // its size by more than the 1 entry necessary, so sequentially adding fields |
| // to the same object requires fewer allocations and copies. |
| static const int kFieldsAdded = 3; |
| STATIC_ASSERT(kMaxNumberOfDescriptors + kFieldsAdded <= |
| PropertyArray::kMaxLength); |
| |
| // Layout description. |
| static const int kElementsOffset = JSReceiver::kHeaderSize; |
| static const int kHeaderSize = kElementsOffset + kPointerSize; |
| |
| STATIC_ASSERT(kHeaderSize == Internals::kJSObjectHeaderSize); |
| static const int kMaxInObjectProperties = |
| (kMaxInstanceSize - kHeaderSize) >> kPointerSizeLog2; |
| STATIC_ASSERT(kMaxInObjectProperties <= kMaxNumberOfDescriptors); |
| // TODO(cbruni): Revisit calculation of the max supported embedder fields. |
| static const int kMaxEmbedderFields = |
| ((1 << kFirstInobjectPropertyOffsetBitCount) - 1 - kHeaderSize) >> |
| kPointerSizeLog2; |
| STATIC_ASSERT(kMaxEmbedderFields <= kMaxInObjectProperties); |
| |
| class BodyDescriptor; |
| // No weak fields. |
| typedef BodyDescriptor BodyDescriptorWeak; |
| |
| class FastBodyDescriptor; |
| // No weak fields. |
| typedef FastBodyDescriptor FastBodyDescriptorWeak; |
| |
| // Gets the number of currently used elements. |
| int GetFastElementsUsage(); |
| |
| static bool AllCanRead(LookupIterator* it); |
| static bool AllCanWrite(LookupIterator* it); |
| |
| private: |
| friend class JSReceiver; |
| friend class Object; |
| |
| // Used from Object::GetProperty(). |
| MUST_USE_RESULT static MaybeHandle<Object> GetPropertyWithFailedAccessCheck( |
| LookupIterator* it); |
| |
| MUST_USE_RESULT static Maybe<bool> SetPropertyWithFailedAccessCheck( |
| LookupIterator* it, Handle<Object> value, ShouldThrow should_throw); |
| |
| MUST_USE_RESULT static Maybe<bool> DeletePropertyWithInterceptor( |
| LookupIterator* it, ShouldThrow should_throw); |
| |
| bool ReferencesObjectFromElements(FixedArray* elements, |
| ElementsKind kind, |
| Object* object); |
| |
| // Helper for fast versions of preventExtensions, seal, and freeze. |
| // attrs is one of NONE, SEALED, or FROZEN (depending on the operation). |
| template <PropertyAttributes attrs> |
| MUST_USE_RESULT static Maybe<bool> PreventExtensionsWithTransition( |
| Handle<JSObject> object, ShouldThrow should_throw); |
| |
| DISALLOW_IMPLICIT_CONSTRUCTORS(JSObject); |
| }; |
| |
| |
| // JSAccessorPropertyDescriptor is just a JSObject with a specific initial |
| // map. This initial map adds in-object properties for "get", "set", |
| // "enumerable" and "configurable" properties, as assigned by the |
| // FromPropertyDescriptor function for regular accessor properties. |
| class JSAccessorPropertyDescriptor: public JSObject { |
| public: |
| // Offsets of object fields. |
| static const int kGetOffset = JSObject::kHeaderSize; |
| static const int kSetOffset = kGetOffset + kPointerSize; |
| static const int kEnumerableOffset = kSetOffset + kPointerSize; |
| static const int kConfigurableOffset = kEnumerableOffset + kPointerSize; |
| static const int kSize = kConfigurableOffset + kPointerSize; |
| // Indices of in-object properties. |
| static const int kGetIndex = 0; |
| static const int kSetIndex = 1; |
| static const int kEnumerableIndex = 2; |
| static const int kConfigurableIndex = 3; |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(JSAccessorPropertyDescriptor); |
| }; |
| |
| |
| // JSDataPropertyDescriptor is just a JSObject with a specific initial map. |
| // This initial map adds in-object properties for "value", "writable", |
| // "enumerable" and "configurable" properties, as assigned by the |
| // FromPropertyDescriptor function for regular data properties. |
| class JSDataPropertyDescriptor: public JSObject { |
| public: |
| // Offsets of object fields. |
| static const int kValueOffset = JSObject::kHeaderSize; |
| static const int kWritableOffset = kValueOffset + kPointerSize; |
| static const int kEnumerableOffset = kWritableOffset + kPointerSize; |
| static const int kConfigurableOffset = kEnumerableOffset + kPointerSize; |
| static const int kSize = kConfigurableOffset + kPointerSize; |
| // Indices of in-object properties. |
| static const int kValueIndex = 0; |
| static const int kWritableIndex = 1; |
| static const int kEnumerableIndex = 2; |
| static const int kConfigurableIndex = 3; |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(JSDataPropertyDescriptor); |
| }; |
| |
| |
| // JSIteratorResult is just a JSObject with a specific initial map. |
| // This initial map adds in-object properties for "done" and "value", |
| // as specified by ES6 section 25.1.1.3 The IteratorResult Interface |
| class JSIteratorResult: public JSObject { |
| public: |
| DECL_ACCESSORS(value, Object) |
| |
| DECL_ACCESSORS(done, Object) |
| |
| // Offsets of object fields. |
| static const int kValueOffset = JSObject::kHeaderSize; |
| static const int kDoneOffset = kValueOffset + kPointerSize; |
| static const int kSize = kDoneOffset + kPointerSize; |
| // Indices of in-object properties. |
| static const int kValueIndex = 0; |
| static const int kDoneIndex = 1; |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(JSIteratorResult); |
| }; |
| |
| // FreeSpace are fixed-size free memory blocks used by the heap and GC. |
| // They look like heap objects (are heap object tagged and have a map) so that |
| // the heap remains iterable. They have a size and a next pointer. |
| // The next pointer is the raw address of the next FreeSpace object (or NULL) |
| // in the free list. |
| class FreeSpace: public HeapObject { |
| public: |
| // [size]: size of the free space including the header. |
| inline int size() const; |
| inline void set_size(int value); |
| |
| inline int relaxed_read_size() const; |
| inline void relaxed_write_size(int value); |
| |
| inline int Size(); |
| |
| // Accessors for the next field. |
| inline FreeSpace* next(); |
| inline void set_next(FreeSpace* next); |
| |
| inline static FreeSpace* cast(HeapObject* obj); |
| |
| // Dispatched behavior. |
| DECL_PRINTER(FreeSpace) |
| DECL_VERIFIER(FreeSpace) |
| |
| // Layout description. |
| // Size is smi tagged when it is stored. |
| static const int kSizeOffset = HeapObject::kHeaderSize; |
| static const int kNextOffset = POINTER_SIZE_ALIGN(kSizeOffset + kPointerSize); |
| static const int kSize = kNextOffset + kPointerSize; |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(FreeSpace); |
| }; |
| |
| class PrototypeInfo; |
| |
| // An abstract superclass, a marker class really, for simple structure classes. |
| // It doesn't carry much functionality but allows struct classes to be |
| // identified in the type system. |
| class Struct: public HeapObject { |
| public: |
| inline void InitializeBody(int object_size); |
| DECL_CAST(Struct) |
| void BriefPrintDetails(std::ostream& os); |
| }; |
| |
| class Tuple2 : public Struct { |
| public: |
| DECL_ACCESSORS(value1, Object) |
| DECL_ACCESSORS(value2, Object) |
| |
| DECL_CAST(Tuple2) |
| |
| // Dispatched behavior. |
| DECL_PRINTER(Tuple2) |
| DECL_VERIFIER(Tuple2) |
| void BriefPrintDetails(std::ostream& os); |
| |
| static const int kValue1Offset = HeapObject::kHeaderSize; |
| static const int kValue2Offset = kValue1Offset + kPointerSize; |
| static const int kSize = kValue2Offset + kPointerSize; |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(Tuple2); |
| }; |
| |
| class Tuple3 : public Tuple2 { |
| public: |
| DECL_ACCESSORS(value3, Object) |
| |
| DECL_CAST(Tuple3) |
| |
| // Dispatched behavior. |
| DECL_PRINTER(Tuple3) |
| DECL_VERIFIER(Tuple3) |
| void BriefPrintDetails(std::ostream& os); |
| |
| static const int kValue3Offset = Tuple2::kSize; |
| static const int kSize = kValue3Offset + kPointerSize; |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(Tuple3); |
| }; |
| |
| class PromiseCapability : public Tuple3 { |
| public: |
| DECL_CAST(PromiseCapability) |
| DECL_PRINTER(PromiseCapability) |
| DECL_VERIFIER(PromiseCapability) |
| |
| DECL_ACCESSORS(promise, Object) |
| DECL_ACCESSORS(resolve, Object) |
| DECL_ACCESSORS(reject, Object) |
| |
| static const int kPromiseOffset = Tuple3::kValue1Offset; |
| static const int kResolveOffset = Tuple3::kValue2Offset; |
| static const int kRejectOffset = Tuple3::kValue3Offset; |
| static const int kSize = Tuple3::kSize; |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(PromiseCapability); |
| }; |
| |
| // A container struct to hold state required for PromiseResolveThenableJob. |
| class PromiseResolveThenableJobInfo : public Struct { |
| public: |
| DECL_ACCESSORS(thenable, JSReceiver) |
| DECL_ACCESSORS(then, JSReceiver) |
| DECL_ACCESSORS(resolve, JSFunction) |
| DECL_ACCESSORS(reject, JSFunction) |
| |
| DECL_ACCESSORS(context, Context) |
| |
| static const int kThenableOffset = Struct::kHeaderSize; |
| static const int kThenOffset = kThenableOffset + kPointerSize; |
| static const int kResolveOffset = kThenOffset + kPointerSize; |
| static const int kRejectOffset = kResolveOffset + kPointerSize; |
| static const int kContextOffset = kRejectOffset + kPointerSize; |
| static const int kSize = kContextOffset + kPointerSize; |
| |
| DECL_CAST(PromiseResolveThenableJobInfo) |
| DECL_PRINTER(PromiseResolveThenableJobInfo) |
| DECL_VERIFIER(PromiseResolveThenableJobInfo) |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(PromiseResolveThenableJobInfo); |
| }; |
| |
| class JSPromise; |
| |
| // Struct to hold state required for PromiseReactionJob. |
| class PromiseReactionJobInfo : public Struct { |
| public: |
| DECL_ACCESSORS(value, Object) |
| DECL_ACCESSORS(tasks, Object) |
| |
| // Check comment in JSPromise for information on what state these |
| // deferred fields could be in. |
| DECL_ACCESSORS(deferred_promise, Object) |
| DECL_ACCESSORS(deferred_on_resolve, Object) |
| DECL_ACCESSORS(deferred_on_reject, Object) |
| |
| DECL_INT_ACCESSORS(debug_id) |
| |
| DECL_ACCESSORS(context, Context) |
| |
| static const int kValueOffset = Struct::kHeaderSize; |
| static const int kTasksOffset = kValueOffset + kPointerSize; |
| static const int kDeferredPromiseOffset = kTasksOffset + kPointerSize; |
| static const int kDeferredOnResolveOffset = |
| kDeferredPromiseOffset + kPointerSize; |
| static const int kDeferredOnRejectOffset = |
| kDeferredOnResolveOffset + kPointerSize; |
| static const int kContextOffset = kDeferredOnRejectOffset + kPointerSize; |
| static const int kSize = kContextOffset + kPointerSize; |
| |
| DECL_CAST(PromiseReactionJobInfo) |
| DECL_PRINTER(PromiseReactionJobInfo) |
| DECL_VERIFIER(PromiseReactionJobInfo) |
| |
| private: |
| DISALLOW_IMPLICIT_CONSTRUCTORS(PromiseReactionJobInfo); |
| }; |
| |
| class AsyncGeneratorRequest : public Struct { |
| public: |
| // Holds an AsyncGeneratorRequest, or Undefined. |
| DECL_ACCESSORS(next, Object) |
| DECL_INT_ACCESSORS(resume_mode) |
| DECL_ACCESSORS(value, Object) |
| DECL_ACCESSORS(promise, Object) |
| |
| static const int kNextOffset = Struct::kHeaderSize; |
| static const int kResumeModeOffset = kNextOffset + kPointerSize; |
| static const int kValueOffset = kResumeModeOffset + kPointerSize; |
| static const int kPromiseOffset = kValueOffset + kPointerSize; |
| static const int kSize = kPromiseOffset + kPointerSize; |
| |
| DECL_CAST(AsyncGeneratorRequest) |
| DECL_PRINTER(AsyncGeneratorRequest) |
| DECL_VERIFIER(AsyncGeneratorRequest) |
|