Repository navigation
Expand file tree
/
Copy pathArrayProfile.h
More file actions
303 lines (247 loc) · 12.2 KB
/
Copy pathArrayProfile.h
File metadata and controls
303 lines (247 loc) · 12.2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
/*
* Copyright (C) 2012-2022 Apple Inc. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY
* EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR
* CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
* EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
* PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
* PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
* OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/
#pragma once
#include <JavaScriptCore/Structure.h>
#include <wtf/OptionSet.h>
WTF_ALLOW_UNSAFE_BUFFER_USAGE_BEGIN
namespace JSC {
class CodeBlock;
class LLIntOffsetsExtractor;
class UnlinkedArrayProfile;
// This is a bitfield where each bit represents an type of array access that we have seen.
// There are 19 indexing types that use the lower bits.
// There are 11 typed array types taking the bits 16-20 and 26-31.
typedef unsigned ArrayModes;
// The possible IndexingTypes are limited within (0 - 16, 21, 23, 25).
// This is because CoW types only appear for JSArrays.
static_assert(CopyOnWriteArrayWithInt32 == 21);
static_assert(CopyOnWriteArrayWithDouble == 23);
static_assert(CopyOnWriteArrayWithContiguous == 25);
const ArrayModes CopyOnWriteArrayWithInt32ArrayMode = 1 << CopyOnWriteArrayWithInt32;
const ArrayModes CopyOnWriteArrayWithDoubleArrayMode = 1 << CopyOnWriteArrayWithDouble;
const ArrayModes CopyOnWriteArrayWithContiguousArrayMode = 1 << CopyOnWriteArrayWithContiguous;
const ArrayModes Int8ArrayMode = 1U << 16;
const ArrayModes Int16ArrayMode = 1U << 17;
const ArrayModes Int32ArrayMode = 1U << 18;
const ArrayModes Uint8ArrayMode = 1U << 19;
const ArrayModes Uint8ClampedArrayMode = 1U << 20;
// 21, 23, 25 are used for CoW arrays.
const ArrayModes Float16ArrayMode = 1U << 22;
const ArrayModes Uint16ArrayMode = 1U << 26;
const ArrayModes Uint32ArrayMode = 1U << 27;
const ArrayModes Float32ArrayMode = 1U << 28;
const ArrayModes Float64ArrayMode = 1U << 29;
const ArrayModes BigInt64ArrayMode = 1U << 30;
const ArrayModes BigUint64ArrayMode = 1U << 31;
JS_EXPORT_PRIVATE extern const ArrayModes typedArrayModes[NumberOfTypedArrayTypesExcludingDataView];
constexpr ArrayModes asArrayModesIgnoringTypedArrays(IndexingType indexingMode)
{
return static_cast<unsigned>(1) << static_cast<unsigned>(indexingMode);
}
#define ALL_TYPED_ARRAY_MODES \
(Int8ArrayMode \
| Int16ArrayMode \
| Int32ArrayMode \
| Uint8ArrayMode \
| Uint8ClampedArrayMode \
| Uint16ArrayMode \
| Uint32ArrayMode \
| Float16ArrayMode \
| Float32ArrayMode \
| Float64ArrayMode \
| BigInt64ArrayMode \
| BigUint64ArrayMode \
)
#define ALL_NON_ARRAY_ARRAY_MODES \
(asArrayModesIgnoringTypedArrays(NonArray) \
| asArrayModesIgnoringTypedArrays(NonArrayWithInt32) \
| asArrayModesIgnoringTypedArrays(NonArrayWithDouble) \
| asArrayModesIgnoringTypedArrays(NonArrayWithContiguous) \
| asArrayModesIgnoringTypedArrays(NonArrayWithArrayStorage) \
| asArrayModesIgnoringTypedArrays(NonArrayWithSlowPutArrayStorage) \
| ALL_TYPED_ARRAY_MODES)
#define ALL_COPY_ON_WRITE_ARRAY_MODES \
(CopyOnWriteArrayWithInt32ArrayMode \
| CopyOnWriteArrayWithDoubleArrayMode \
| CopyOnWriteArrayWithContiguousArrayMode)
#define ALL_WRITABLE_ARRAY_ARRAY_MODES \
(asArrayModesIgnoringTypedArrays(ArrayClass) \
| asArrayModesIgnoringTypedArrays(ArrayWithUndecided) \
| asArrayModesIgnoringTypedArrays(ArrayWithInt32) \
| asArrayModesIgnoringTypedArrays(ArrayWithDouble) \
| asArrayModesIgnoringTypedArrays(ArrayWithContiguous) \
| asArrayModesIgnoringTypedArrays(ArrayWithArrayStorage) \
| asArrayModesIgnoringTypedArrays(ArrayWithSlowPutArrayStorage))
#define ALL_ARRAY_ARRAY_MODES \
(ALL_WRITABLE_ARRAY_ARRAY_MODES \
| ALL_COPY_ON_WRITE_ARRAY_MODES)
#define ALL_ARRAY_MODES (ALL_NON_ARRAY_ARRAY_MODES | ALL_ARRAY_ARRAY_MODES)
inline ArrayModes arrayModesFromStructure(Structure* structure)
{
JSType type = structure->typeInfo().type();
if (isTypedArrayType(type))
return typedArrayModes[type - FirstTypedArrayType];
return asArrayModesIgnoringTypedArrays(structure->indexingMode());
}
void dumpArrayModes(PrintStream&, ArrayModes);
MAKE_PRINT_ADAPTOR(ArrayModesDump, ArrayModes, dumpArrayModes);
inline bool mergeArrayModes(ArrayModes& left, ArrayModes right)
{
ArrayModes newModes = left | right;
if (newModes == left)
return false;
left = newModes;
return true;
}
inline bool arrayModesAreClearOrTop(ArrayModes modes)
{
return !modes || modes == ALL_ARRAY_MODES;
}
// Checks if proven is a subset of expected.
inline bool arrayModesAlreadyChecked(ArrayModes proven, ArrayModes expected)
{
return (expected | proven) == expected;
}
inline bool arrayModesIncludeIgnoringTypedArrays(ArrayModes arrayModes, IndexingType shape)
{
ArrayModes modes = asArrayModesIgnoringTypedArrays(NonArray | shape) | asArrayModesIgnoringTypedArrays(ArrayClass | shape);
if (hasInt32(shape) || hasDouble(shape) || hasContiguous(shape))
modes |= asArrayModesIgnoringTypedArrays(ArrayClass | shape | CopyOnWrite);
return !!(arrayModes & modes);
}
inline bool shouldUseSlowPutArrayStorage(ArrayModes arrayModes)
{
return arrayModesIncludeIgnoringTypedArrays(arrayModes, SlowPutArrayStorageShape);
}
inline bool shouldUseFastArrayStorage(ArrayModes arrayModes)
{
return arrayModesIncludeIgnoringTypedArrays(arrayModes, ArrayStorageShape);
}
inline bool shouldUseContiguous(ArrayModes arrayModes)
{
return arrayModesIncludeIgnoringTypedArrays(arrayModes, ContiguousShape);
}
inline bool shouldUseDouble(ArrayModes arrayModes)
{
ASSERT(Options::allowDoubleShape());
return arrayModesIncludeIgnoringTypedArrays(arrayModes, DoubleShape);
}
inline bool shouldUseInt32(ArrayModes arrayModes)
{
return arrayModesIncludeIgnoringTypedArrays(arrayModes, Int32Shape);
}
inline bool hasSeenArray(ArrayModes arrayModes)
{
return arrayModes & ALL_ARRAY_ARRAY_MODES;
}
inline bool hasSeenNonArray(ArrayModes arrayModes)
{
return arrayModes & ALL_NON_ARRAY_ARRAY_MODES;
}
inline bool hasSeenWritableArray(ArrayModes arrayModes)
{
return arrayModes & ALL_WRITABLE_ARRAY_ARRAY_MODES;
}
inline bool hasSeenCopyOnWriteArray(ArrayModes arrayModes)
{
return arrayModes & ALL_COPY_ON_WRITE_ARRAY_MODES;
}
enum class ArrayProfileFlag : uint32_t {
MayStoreHole = 1 << 0, // This flag may become overloaded to indicate other special cases that were encountered during array access, as it depends on indexing type. Since we currently have basically just one indexing type (two variants of ArrayStorage), this flag for now just means exactly what its name implies.
OutOfBounds = 1 << 1,
MayBeLargeTypedArray = 1 << 2,
MayInterceptIndexedAccesses = 1 << 3,
UsesNonOriginalArrayStructures = 1 << 4,
MayBeResizableOrGrowableSharedTypedArray = 1 << 5,
DidPerformFirstRunPruning = 1 << 6,
MayBeRegExpMatchesArray = 1 << 7,
};
class ArrayProfile {
friend class CodeBlock;
friend class UnlinkedArrayProfile;
public:
explicit ArrayProfile() = default;
void clear()
{
m_lastSeenStructureID = { };
m_speculationFailureStructureID = { };
m_arrayProfileFlags = { };
m_observedArrayModes = { };
}
static constexpr uint64_t s_smallTypedArrayMaxLength = std::numeric_limits<int32_t>::max();
void setMayBeLargeTypedArray() { m_arrayProfileFlags.add(ArrayProfileFlag::MayBeLargeTypedArray); }
bool mayBeLargeTypedArray() const { return m_arrayProfileFlags.contains(ArrayProfileFlag::MayBeLargeTypedArray); }
bool mayBeResizableOrGrowableSharedTypedArray() const { return m_arrayProfileFlags.contains(ArrayProfileFlag::MayBeResizableOrGrowableSharedTypedArray); }
StructureID* addressOfSpeculationFailureStructureID() LIFETIME_BOUND { return &m_speculationFailureStructureID; }
ArrayModes* addressOfArrayModes() LIFETIME_BOUND { return &m_observedArrayModes; }
static constexpr ptrdiff_t offsetOfLastSeenStructureID() { return OBJECT_OFFSETOF(ArrayProfile, m_lastSeenStructureID); }
static constexpr ptrdiff_t offsetOfSpeculationFailureStructureID() { return OBJECT_OFFSETOF(ArrayProfile, m_speculationFailureStructureID); }
static constexpr ptrdiff_t offsetOfArrayProfileFlags() { return OBJECT_OFFSETOF(ArrayProfile, m_arrayProfileFlags); }
static constexpr ptrdiff_t offsetOfArrayModes() { return OBJECT_OFFSETOF(ArrayProfile, m_observedArrayModes); }
void setOutOfBounds() { m_arrayProfileFlags.add(ArrayProfileFlag::OutOfBounds); }
void setMayStoreHole() { m_arrayProfileFlags.add(ArrayProfileFlag::MayStoreHole); }
void observeStructureID(StructureID structureID) { m_lastSeenStructureID = structureID; }
void observeStructure(Structure* structure) { m_lastSeenStructureID = structure->id(); }
void LEGACY_NODELETE computeUpdatedPrediction(CodeBlock*);
void computeUpdatedPrediction(CodeBlock*, Structure* lastSeenStructure);
void observeArrayMode(ArrayModes mode) { m_observedArrayModes |= mode; }
void LEGACY_NODELETE observeIndexedRead(JSCell*, unsigned index);
ArrayModes observedArrayModes() const { return m_observedArrayModes; }
bool mayInterceptIndexedAccesses() const { return m_arrayProfileFlags.contains(ArrayProfileFlag::MayInterceptIndexedAccesses); }
bool mayStoreToHole() const { return m_arrayProfileFlags.contains(ArrayProfileFlag::MayStoreHole); }
bool outOfBounds() const { return m_arrayProfileFlags.contains(ArrayProfileFlag::OutOfBounds); }
bool usesOriginalArrayStructures() const { return !m_arrayProfileFlags.contains(ArrayProfileFlag::UsesNonOriginalArrayStructures); }
bool mayBeRegExpMatchesArray() const { return m_arrayProfileFlags.contains(ArrayProfileFlag::MayBeRegExpMatchesArray); }
UTF8CString briefDescription(CodeBlock*);
UTF8CString briefDescriptionWithoutUpdating();
private:
friend class LLIntOffsetsExtractor;
static Structure* polymorphicStructure() { return static_cast<Structure*>(reinterpret_cast<void*>(1)); }
StructureID m_lastSeenStructureID;
StructureID m_speculationFailureStructureID;
OptionSet<ArrayProfileFlag> m_arrayProfileFlags;
ArrayModes m_observedArrayModes { 0 };
};
static_assert(sizeof(ArrayProfile) == 16);
class UnlinkedArrayProfile {
public:
explicit UnlinkedArrayProfile() = default;
void update(ArrayProfile& arrayProfile)
{
ArrayModes newModes = arrayProfile.m_observedArrayModes | m_observedArrayModes;
m_observedArrayModes = newModes;
arrayProfile.m_observedArrayModes = newModes;
arrayProfile.m_arrayProfileFlags.add(m_arrayProfileFlags);
auto unlinkedArrayProfileFlags = arrayProfile.m_arrayProfileFlags;
unlinkedArrayProfileFlags.remove(ArrayProfileFlag::DidPerformFirstRunPruning); // We do not propagate DidPerformFirstRunPruning.
m_arrayProfileFlags = unlinkedArrayProfileFlags;
}
private:
ArrayModes m_observedArrayModes { 0 };
OptionSet<ArrayProfileFlag> m_arrayProfileFlags { };
};
static_assert(sizeof(UnlinkedArrayProfile) <= 8);
} // namespace JSC
WTF_ALLOW_UNSAFE_BUFFER_USAGE_END