{

Array::Class nonArray;

if (profile.usesOriginalArrayStructures())

nonArray = Array::OriginalNonArray;

else

nonArray = Array::NonArray;

auto handleContiguousModes = [&] (Array::Type type, ArrayModes observed) {

Array::Class isArray;

Array::Conversion converts;

RELEASE_ASSERT((observed & (asArrayModesIgnoringTypedArrays(toIndexingShape(type)) | asArrayModesIgnoringTypedArrays(toIndexingShape(type) | ArrayClass) | asArrayModesIgnoringTypedArrays(toIndexingShape(type) | ArrayClass | CopyOnWrite))) == observed);

if (observed & asArrayModesIgnoringTypedArrays(toIndexingShape(type))) {

if ((observed & asArrayModesIgnoringTypedArrays(toIndexingShape(type))) == observed)

isArray = nonArray;

else

isArray = Array::PossiblyArray;

} else

isArray = Array::Array;

if (action == Array::Write && (observed & asArrayModesIgnoringTypedArrays(toIndexingShape(type) | ArrayClass | CopyOnWrite)))

converts = Array::Convert;

else

converts = Array::AsIs;

return ArrayMode(type, isArray, converts, action).withProfile(profile, makeSafe);

};

ArrayModes observed = profile.observedArrayModes();

switch (observed) {

case 0:

return ArrayMode(Array::Unprofiled);

case asArrayModesIgnoringTypedArrays(NonArray):

if (action == Array::Write && !profile.mayInterceptIndexedAccesses())

return ArrayMode(Array::SelectUsingArguments, nonArray, Array::OutOfBounds, Array::Convert, action);

return ArrayMode(Array::SelectUsingPredictions, nonArray, action).withSpeculationFromProfile(profile, makeSafe);

case asArrayModesIgnoringTypedArrays(ArrayWithUndecided):

if (action == Array::Write)

return ArrayMode(Array::SelectUsingArguments, Array::Array, Array::OutOfBounds, Array::Convert, action);

return ArrayMode(Array::Undecided, Array::Array, Array::OutOfBounds, Array::AsIs, action).withProfile(profile, makeSafe);

case asArrayModesIgnoringTypedArrays(NonArray) | asArrayModesIgnoringTypedArrays(ArrayWithUndecided):

if (action == Array::Write && !profile.mayInterceptIndexedAccesses())

return ArrayMode(Array::SelectUsingArguments, Array::PossiblyArray, Array::OutOfBounds, Array::Convert, action);

return ArrayMode(Array::SelectUsingPredictions, action).withSpeculationFromProfile(profile, makeSafe);

case asArrayModesIgnoringTypedArrays(NonArrayWithInt32):

case asArrayModesIgnoringTypedArrays(ArrayWithInt32):

case asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithInt32):

case asArrayModesIgnoringTypedArrays(NonArrayWithInt32) | asArrayModesIgnoringTypedArrays(ArrayWithInt32):

case asArrayModesIgnoringTypedArrays(NonArrayWithInt32) | asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithInt32):

case asArrayModesIgnoringTypedArrays(ArrayWithInt32) | asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithInt32):

case asArrayModesIgnoringTypedArrays(NonArrayWithInt32) | asArrayModesIgnoringTypedArrays(ArrayWithInt32) | asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithInt32):

return handleContiguousModes(Array::Int32, observed);

case asArrayModesIgnoringTypedArrays(NonArrayWithDouble):

case asArrayModesIgnoringTypedArrays(ArrayWithDouble):

case asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithDouble):

case asArrayModesIgnoringTypedArrays(NonArrayWithDouble) | asArrayModesIgnoringTypedArrays(ArrayWithDouble):

case asArrayModesIgnoringTypedArrays(NonArrayWithDouble) | asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithDouble):

case asArrayModesIgnoringTypedArrays(ArrayWithDouble) | asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithDouble):

case asArrayModesIgnoringTypedArrays(NonArrayWithDouble) | asArrayModesIgnoringTypedArrays(ArrayWithDouble) | asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithDouble):

return handleContiguousModes(Array::Double, observed);

case asArrayModesIgnoringTypedArrays(NonArrayWithContiguous):

case asArrayModesIgnoringTypedArrays(ArrayWithContiguous):

case asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithContiguous):

case asArrayModesIgnoringTypedArrays(NonArrayWithContiguous) | asArrayModesIgnoringTypedArrays(ArrayWithContiguous):

case asArrayModesIgnoringTypedArrays(NonArrayWithContiguous) | asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithContiguous):

case asArrayModesIgnoringTypedArrays(ArrayWithContiguous) | asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithContiguous):

case asArrayModesIgnoringTypedArrays(NonArrayWithContiguous) | asArrayModesIgnoringTypedArrays(ArrayWithContiguous) | asArrayModesIgnoringTypedArrays(CopyOnWriteArrayWithContiguous):

return handleContiguousModes(Array::Contiguous, observed);

case asArrayModesIgnoringTypedArrays(NonArrayWithArrayStorage):

return ArrayMode(Array::ArrayStorage, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case asArrayModesIgnoringTypedArrays(NonArrayWithSlowPutArrayStorage):

case asArrayModesIgnoringTypedArrays(NonArrayWithArrayStorage) | asArrayModesIgnoringTypedArrays(NonArrayWithSlowPutArrayStorage):

return ArrayMode(Array::SlowPutArrayStorage, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case asArrayModesIgnoringTypedArrays(ArrayWithArrayStorage):

return ArrayMode(Array::ArrayStorage, Array::Array, Array::AsIs, action).withProfile(profile, makeSafe);

case asArrayModesIgnoringTypedArrays(ArrayWithSlowPutArrayStorage):

case asArrayModesIgnoringTypedArrays(ArrayWithArrayStorage) | asArrayModesIgnoringTypedArrays(ArrayWithSlowPutArrayStorage):

return ArrayMode(Array::SlowPutArrayStorage, Array::Array, Array::AsIs, action).withProfile(profile, makeSafe);

case asArrayModesIgnoringTypedArrays(NonArrayWithArrayStorage) | asArrayModesIgnoringTypedArrays(ArrayWithArrayStorage):

return ArrayMode(Array::ArrayStorage, Array::PossiblyArray, Array::AsIs, action).withProfile(profile, makeSafe);

case asArrayModesIgnoringTypedArrays(NonArrayWithSlowPutArrayStorage) | asArrayModesIgnoringTypedArrays(ArrayWithSlowPutArrayStorage):

case asArrayModesIgnoringTypedArrays(NonArrayWithArrayStorage) | asArrayModesIgnoringTypedArrays(ArrayWithArrayStorage) | asArrayModesIgnoringTypedArrays(NonArrayWithSlowPutArrayStorage) | asArrayModesIgnoringTypedArrays(ArrayWithSlowPutArrayStorage):

return ArrayMode(Array::SlowPutArrayStorage, Array::PossiblyArray, Array::AsIs, action).withProfile(profile, makeSafe);

case Int8ArrayMode:

return ArrayMode(Array::Int8Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case Int16ArrayMode:

return ArrayMode(Array::Int16Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case Int32ArrayMode:

return ArrayMode(Array::Int32Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case Uint8ArrayMode:

return ArrayMode(Array::Uint8Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case Uint8ClampedArrayMode:

return ArrayMode(Array::Uint8ClampedArray, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case Uint16ArrayMode:

return ArrayMode(Array::Uint16Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case Uint32ArrayMode:

return ArrayMode(Array::Uint32Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case Float16ArrayMode:

return ArrayMode(Array::Float16Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case Float32ArrayMode:

return ArrayMode(Array::Float32Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case Float64ArrayMode:

return ArrayMode(Array::Float64Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case BigInt64ArrayMode:

return ArrayMode(Array::BigInt64Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

case BigUint64ArrayMode:

return ArrayMode(Array::BigUint64Array, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

default:

// If we have seen multiple TypedArray types, or a TypedArray and non-typed array, it doesn't make sense to try to convert the object since you can't convert typed arrays.

if (observed & ALL_TYPED_ARRAY_MODES)

return ArrayMode(Array::Generic, nonArray, Array::AsIs, action).withProfile(profile, makeSafe);

if ((observed & asArrayModesIgnoringTypedArrays(NonArray)) && profile.mayInterceptIndexedAccesses())

return ArrayMode(Array::SelectUsingPredictions).withSpeculationFromProfile(profile, makeSafe);

Array::Type type;

Array::Class arrayClass;

if (shouldUseSlowPutArrayStorage(observed))

type = Array::SlowPutArrayStorage;

else if (shouldUseFastArrayStorage(observed))

type = Array::ArrayStorage;

else if (shouldUseContiguous(observed))

type = Array::Contiguous;

else if (shouldUseDouble(observed))

type = Array::Double;

else if (shouldUseInt32(observed))

type = Array::Int32;

else

type = Array::SelectUsingArguments;

if (hasSeenArray(observed) && hasSeenNonArray(observed))

arrayClass = Array::PossiblyArray;

else if (hasSeenArray(observed))

arrayClass = Array::Array;

else if (hasSeenNonArray(observed))

arrayClass = nonArray;

else

arrayClass = Array::PossiblyArray;

return ArrayMode(type, arrayClass, Array::Convert, action).withProfile(profile, makeSafe);

}

{

if (node->op() == GetArrayLength)

return true;

if (node->op() != GetById)

return false;

auto uid = node->cacheableIdentifier().uid();

return uid == graph.m_vm.propertyNames->length.impl();

Graph& graph, Node* node,

SpeculatedType base, SpeculatedType index, SpeculatedType value) const

{

if (!base || !index) {

// It can be that we had a legitimate arrayMode but no incoming predictions. That'll

// happen if we inlined code based on, say, a global variable watchpoint, but later

// realized that the callsite could not have possibly executed. It may be worthwhile

// to fix that, but for now I'm leaving it as-is.

return ArrayMode(Array::ForceExit, action());

}

if (!isInt32Speculation(index) && !mayBeLargeTypedArray())

return ArrayMode(Array::Generic, action());

// If we had exited because of an exotic object behavior, then don't try to specialize.

if (graph.hasExitSite(node->origin.semantic, ExoticObjectMode))

return ArrayMode(Array::Generic, action());

if (isInBounds() && graph.hasExitSite(node->origin.semantic, LoadFromHole))

return withSpeculation(Array::OutOfBounds).refine(graph, node, base, index, value);

// Note: our profiling currently doesn't give us good information in case we have

// an unlikely control flow path that sets the base to a non-cell value. Value

// profiling and prediction propagation will probably tell us that the value is

// either a cell or not, but that doesn't tell us which is more likely: that this

// is an array access on a cell (what we want and can optimize) or that the user is

// doing a crazy by-val access on a primitive (we can't easily optimize this and

// don't want to). So, for now, we assume that if the base is not a cell according

// to value profiling, but the array profile tells us something else, then we

// should just trust the array profile.

auto typedArrayResult = [&] (ArrayMode result) -> ArrayMode {

if (node->op() == PutByValDirect) {

// This is semantically identical to defineOwnProperty({configurable: true, writable:true, enumerable:true}),

// which we can't model as a simple store to the typed array since typed array indexed properties

// are non-configurable.

return ArrayMode(Array::Generic, action());

}

if (graph.hasExitSite(node->origin.semantic, UnexpectedResizableArrayBufferView)) {

constexpr bool mayBeResizableOrGrowableSharedTypedArray = true;

return result.withArrayClassAndSpeculation(result.arrayClass(), result.speculation(), result.mayBeLargeTypedArray(), mayBeResizableOrGrowableSharedTypedArray);

}

return result;

};

switch (type()) {

case Array::SelectUsingArguments:

if (!value)

return withType(Array::ForceExit);

if (isInt32Speculation(value))

return withTypeAndConversion(Array::Int32, Array::Convert);

if (isFullNumberSpeculation(value))

return withTypeAndConversion(Array::Double, Array::Convert);

return withTypeAndConversion(Array::Contiguous, Array::Convert);

case Array::Undecided: {

// As long as we have a JSArray getting its length shouldn't require any sane chainness.

if (canBecomeGetArrayLength(graph, node) && isJSArray())

return *this;

// If we have an OriginalArray and the JSArray prototype chain is sane,

// any indexed access always return undefined. We have a fast path for that.

if (node->op() == GetByVal

&& isJSArrayWithOriginalStructure()

&& !graph.hasExitSite(node->origin.semantic, OutOfBounds)

&& graph.isWatchingArrayPrototypeChainIsSaneWatchpoint(node))

return withSpeculation(Array::InBoundsSaneChain);

return ArrayMode(Array::Generic, action());

}

case Array::Int32:

if (!value || isInt32Speculation(value))

return *this;

if (isFullNumberSpeculation(value))

return withTypeAndConversion(Array::Double, Array::Convert);

return withTypeAndConversion(Array::Contiguous, Array::Convert);

case Array::Double:

if (!value || isFullNumberSpeculation(value))

return *this;

return withTypeAndConversion(Array::Contiguous, Array::Convert);

case Array::Contiguous:

return *this;

case Array::Int8Array:

case Array::Int16Array:

case Array::Int32Array:

case Array::Uint8Array:

case Array::Uint8ClampedArray:

case Array::Uint16Array:

case Array::Uint32Array:

case Array::Float16Array:

case Array::Float32Array:

case Array::Float64Array:

case Array::BigInt64Array:

case Array::BigUint64Array:

if (node->op() == PutByVal || node->op() == GetByVal) {

if (graph.hasExitSite(node->origin.semantic, OutOfBounds) || !isInBounds())

return typedArrayResult(withSpeculation(Array::OutOfBounds));

}

return typedArrayResult(withSpeculation(Array::InBounds));

case Array::Unprofiled:

case Array::SelectUsingPredictions: {

base &= ~SpecOther;

if (isStringSpeculation(base))

return withType(Array::String);

if (isDirectArgumentsSpeculation(base) || isScopedArgumentsSpeculation(base)) {

// Handle out-of-bounds accesses as generic accesses.

Array::Type type = isDirectArgumentsSpeculation(base) ? Array::DirectArguments : Array::ScopedArguments;

if (graph.hasExitSite(node->origin.semantic, OutOfBounds) || !isInBounds()) {

// FIXME: Support OOB access for ScopedArguments.

// https://bugs.webkit.org/show_bug.cgi?id=179596

if (type == Array::DirectArguments)

return ArrayMode(type, Array::NonArray, Array::OutOfBounds, Array::AsIs, action());

return ArrayMode(Array::Generic, action());

}

return withType(type);

}

ArrayMode result = withSpeculation(Array::InBounds);

if (node->op() == PutByVal || node->op() == GetByVal) {

if (graph.hasExitSite(node->origin.semantic, OutOfBounds) || !isInBounds())

result = withSpeculation(Array::OutOfBounds);

}

if (isInt8ArraySpeculation(base))

return typedArrayResult(result.withType(Array::Int8Array));

if (isInt16ArraySpeculation(base))

return typedArrayResult(result.withType(Array::Int16Array));

if (isInt32ArraySpeculation(base))

return typedArrayResult(result.withType(Array::Int32Array));

if (isUint8ArraySpeculation(base))

return typedArrayResult(result.withType(Array::Uint8Array));

if (isUint8ClampedArraySpeculation(base))

return typedArrayResult(result.withType(Array::Uint8ClampedArray));

if (isUint16ArraySpeculation(base))

return typedArrayResult(result.withType(Array::Uint16Array));

if (isUint32ArraySpeculation(base))

return typedArrayResult(result.withType(Array::Uint32Array));

if (isFloat16ArraySpeculation(base))

return typedArrayResult(result.withType(Array::Float16Array));

if (isFloat32ArraySpeculation(base))

return typedArrayResult(result.withType(Array::Float32Array));

if (isFloat64ArraySpeculation(base))

return typedArrayResult(result.withType(Array::Float64Array));

if (isBigInt64ArraySpeculation(base))

return typedArrayResult(result.withType(Array::BigInt64Array));

if (isBigUint64ArraySpeculation(base))

return typedArrayResult(result.withType(Array::BigUint64Array));

if (type() == Array::Unprofiled)

return ArrayMode(Array::ForceExit, action());

return ArrayMode(Array::Generic, action());

}

default:

return *this;

}

{

JSGlobalObject* globalObject = graph.globalObjectFor(codeOrigin);

auto addNonCopyOnWriteStructures = [&](StructureSet& set) {

switch (type()) {

case Array::Int32:

set.add(globalObject->originalArrayStructureForIndexingType(ArrayWithInt32));

return;

case Array::Double:

set.add(globalObject->originalArrayStructureForIndexingType(ArrayWithDouble));

return;

case Array::Contiguous:

set.add(globalObject->originalArrayStructureForIndexingType(ArrayWithContiguous));

return;

case Array::Undecided:

set.add(globalObject->originalArrayStructureForIndexingType(ArrayWithUndecided));

return;

case Array::ArrayStorage:

set.add(globalObject->originalArrayStructureForIndexingType(ArrayWithArrayStorage));

return;

default:

CRASH();

return;

}

};

auto addCopyOnWriteStructures = [&](StructureSet& set) {

switch (type()) {

case Array::Int32:

set.add(globalObject->originalArrayStructureForIndexingType(CopyOnWriteArrayWithInt32));

return;

case Array::Double:

set.add(globalObject->originalArrayStructureForIndexingType(CopyOnWriteArrayWithDouble));

return;

case Array::Contiguous:

set.add(globalObject->originalArrayStructureForIndexingType(CopyOnWriteArrayWithContiguous));

return;

default:

return;

}

};

switch (arrayClass()) {

case Array::OriginalArray: {

StructureSet set;

if (conversion() == Array::AsIs) {

addCopyOnWriteStructures(set);

addNonCopyOnWriteStructures(set);

return set;

}

addNonCopyOnWriteStructures(set);

return set;

}

case Array::OriginalCopyOnWriteArray: {

StructureSet set;

if (conversion() == Array::AsIs) {

addCopyOnWriteStructures(set);

return set;

}

addNonCopyOnWriteStructures(set);

return set;

}

case Array::OriginalNonCopyOnWriteArray: {

StructureSet set;

addNonCopyOnWriteStructures(set);

return set;

}

case Array::OriginalNonArray: {

TypedArrayType type = typedArrayType();

if (type == NotTypedArray)

return { };

bool isResizableOrGrowableShared = false;

return { globalObject->typedArrayStructureConcurrently(type, isResizableOrGrowableShared) };

}

default:

return { };

}

{

ASSERT(isSpecific());

IndexingType indexingModeMask = IsArray | IndexingShapeMask;

if (action() == Array::Write)

indexingModeMask |= CopyOnWrite;

switch (arrayClass()) {

case Array::Array: {

if (arrayModesAlreadyChecked(value.m_arrayModes, asArrayModesIgnoringTypedArrays(shape | IsArray)))

return true;

if (!value.m_structure.isFinite())

return false;

for (unsigned i = value.m_structure.size(); i--;) {

RegisteredStructure structure = value.m_structure[i];

if ((structure->indexingMode() & indexingModeMask) != (shape | IsArray))

return false;

}

return true;

}

// Array::OriginalNonArray can be shown when the value is a TypedArray with original structure.

// But here, we already filtered TypedArrays. So, just handle it like a NonArray.

case Array::OriginalNonArray:

case Array::NonArray: {

if (arrayModesAlreadyChecked(value.m_arrayModes, asArrayModesIgnoringTypedArrays(shape)))

return true;

if (!value.m_structure.isFinite())

return false;

for (unsigned i = value.m_structure.size(); i--;) {

RegisteredStructure structure = value.m_structure[i];

if ((structure->indexingMode() & indexingModeMask) != shape)

return false;

}

return true;

}

case Array::PossiblyArray: {

if (arrayModesAlreadyChecked(value.m_arrayModes, asArrayModesIgnoringTypedArrays(shape) | asArrayModesIgnoringTypedArrays(shape | IsArray)))

return true;

if (!value.m_structure.isFinite())

return false;

for (unsigned i = value.m_structure.size(); i--;) {

RegisteredStructure structure = value.m_structure[i];

if ((structure->indexingMode() & (indexingModeMask & ~IsArray)) != shape)

return false;

}

return true;

}

// If ArrayMode is Array::OriginalArray, Array::OriginalCopyOnWriteArray, or Array::OriginalNonCopyOnWriteArray, CheckArray is never emitted. Instead, we always emit CheckStructure.

// So, we should perform the same check to the CheckStructure here.

case Array::OriginalArray:

case Array::OriginalNonCopyOnWriteArray:

case Array::OriginalCopyOnWriteArray: {

if (!value.m_structure.isFinite())

return false;

if (!value.m_structure.size())

return false;

auto originalStructures = originalArrayStructures(graph, node);

bool pass = true;

value.m_structure.forEach([&](auto structure) {

pass &= originalStructures.contains(structure.get());

});

return pass;

}

}

return false;

{

switch (type()) {

case Array::Generic:

return true;

case Array::ForceExit:

return false;

case Array::String:

return speculationChecked(value.m_type, SpecString);

case Array::Int32:

return alreadyChecked(graph, node, value, Int32Shape);

case Array::Double:

return alreadyChecked(graph, node, value, DoubleShape);

case Array::Contiguous:

return alreadyChecked(graph, node, value, ContiguousShape);

case Array::ArrayStorage:

return alreadyChecked(graph, node, value, ArrayStorageShape);

case Array::Undecided:

return alreadyChecked(graph, node, value, UndecidedShape);

case Array::SlowPutArrayStorage:

switch (arrayClass()) {

case Array::OriginalArray:

case Array::OriginalNonCopyOnWriteArray:

case Array::OriginalCopyOnWriteArray: {

CRASH();

return false;

}

case Array::Array: {

if (arrayModesAlreadyChecked(value.m_arrayModes, asArrayModesIgnoringTypedArrays(ArrayWithArrayStorage) | asArrayModesIgnoringTypedArrays(ArrayWithSlowPutArrayStorage)))

return true;

if (value.m_structure.isTop())

return false;

for (unsigned i = value.m_structure.size(); i--;) {

RegisteredStructure structure = value.m_structure[i];

if (!hasAnyArrayStorage(structure->indexingType()))

return false;

if (!(structure->indexingType() & IsArray))

return false;

}

return true;

}

// Array::OriginalNonArray can be shown when the value is a TypedArray with original structure.

// But here, we already filtered TypedArrays. So, just handle it like a NonArray.

case Array::NonArray:

case Array::OriginalNonArray: {

if (arrayModesAlreadyChecked(value.m_arrayModes, asArrayModesIgnoringTypedArrays(NonArrayWithArrayStorage) | asArrayModesIgnoringTypedArrays(NonArrayWithSlowPutArrayStorage)))

return true;

if (value.m_structure.isTop())

return false;

for (unsigned i = value.m_structure.size(); i--;) {

RegisteredStructure structure = value.m_structure[i];

if (!hasAnyArrayStorage(structure->indexingType()))

return false;

if (structure->indexingType() & IsArray)

return false;

}

return true;

}

case Array::PossiblyArray: {

if (arrayModesAlreadyChecked(value.m_arrayModes, asArrayModesIgnoringTypedArrays(NonArrayWithArrayStorage) | asArrayModesIgnoringTypedArrays(ArrayWithArrayStorage) | asArrayModesIgnoringTypedArrays(NonArrayWithSlowPutArrayStorage) | asArrayModesIgnoringTypedArrays(ArrayWithSlowPutArrayStorage)))

return true;

if (value.m_structure.isTop())

return false;

for (unsigned i = value.m_structure.size(); i--;) {

RegisteredStructure structure = value.m_structure[i];

if (!hasAnyArrayStorage(structure->indexingType()))

return false;

}

return true;

}

default:

CRASH();

}

case Array::DirectArguments:

return speculationChecked(value.m_type, SpecDirectArguments);

case Array::ScopedArguments:

return speculationChecked(value.m_type, SpecScopedArguments);

case Array::Int8Array:

return speculationChecked(value.m_type, SpecInt8Array);

case Array::Int16Array:

return speculationChecked(value.m_type, SpecInt16Array);

case Array::Int32Array:

return speculationChecked(value.m_type, SpecInt32Array);

case Array::Uint8Array:

return speculationChecked(value.m_type, SpecUint8Array);

case Array::Uint8ClampedArray:

return speculationChecked(value.m_type, SpecUint8ClampedArray);

case Array::Uint16Array:

return speculationChecked(value.m_type, SpecUint16Array);

case Array::Uint32Array:

return speculationChecked(value.m_type, SpecUint32Array);

case Array::Float16Array:

return speculationChecked(value.m_type, SpecFloat16Array);

case Array::Float32Array:

return speculationChecked(value.m_type, SpecFloat32Array);

case Array::Float64Array:

return speculationChecked(value.m_type, SpecFloat64Array);

case Array::BigInt64Array:

return speculationChecked(value.m_type, SpecBigInt64Array);

case Array::BigUint64Array:

return speculationChecked(value.m_type, SpecBigUint64Array);

case Array::AnyTypedArray:

return speculationChecked(value.m_type, SpecTypedArrayView);

case Array::SelectUsingPredictions:

case Array::Unprofiled:

case Array::SelectUsingArguments:

break;

}

CRASH();

return false;

{

switch (type) {

case Array::Int32:

return Int32Shape;

case Array::Double:

ASSERT(Options::allowDoubleShape());

return DoubleShape;

case Array::Contiguous:

return ContiguousShape;

case Array::Undecided:

return UndecidedShape;

case Array::ArrayStorage:

return ArrayStorageShape;

case Array::SlowPutArrayStorage:

return SlowPutArrayStorageShape;

default:

return NoIndexingShape;

}

{

switch (type) {

case Array::Int8Array:

return TypeInt8;

case Array::Int16Array:

return TypeInt16;

case Array::Int32Array:

return TypeInt32;

case Array::Uint8Array:

return TypeUint8;

case Array::Uint8ClampedArray:

return TypeUint8Clamped;

case Array::Uint16Array:

return TypeUint16;

case Array::Uint32Array:

return TypeUint32;

case Array::Float16Array:

return TypeFloat16;

case Array::Float32Array:

return TypeFloat32;

case Array::Float64Array:

return TypeFloat64;

case Array::BigInt64Array:

return TypeBigInt64;

case Array::BigUint64Array:

return TypeBigUint64;

case Array::AnyTypedArray:

RELEASE_ASSERT_NOT_REACHED();

return NotTypedArray;

default:

return NotTypedArray;

}

{

switch (type) {

case TypeInt8:

return Array::Int8Array;

case TypeInt16:

return Array::Int16Array;

case TypeInt32:

return Array::Int32Array;

case TypeUint8:

return Array::Uint8Array;

case TypeUint8Clamped:

return Array::Uint8ClampedArray;

case TypeUint16:

return Array::Uint16Array;

case TypeUint32:

return Array::Uint32Array;

case TypeFloat16:

return Array::Float16Array;

case TypeFloat32:

return Array::Float32Array;

case TypeFloat64:

return Array::Float64Array;

case TypeBigInt64:

return Array::BigInt64Array;

case TypeBigUint64:

return Array::BigUint64Array;

default:

return Array::Generic;

}

{

if (oldType == Array::Generic)

return oldType;

Array::Type newArrayType = toArrayType(newType);

if (newArrayType == Array::Generic)

return newArrayType;

if (oldType != newArrayType)

return Array::AnyTypedArray;

return oldType;

{

switch (type) {

case Array::Int32:

case Array::Double:

case Array::Contiguous:

case Array::ArrayStorage:

case Array::SlowPutArrayStorage:

case Array::Int8Array:

case Array::Int16Array:

case Array::Int32Array:

case Array::Uint8Array:

case Array::Uint8ClampedArray:

case Array::Uint16Array:

case Array::Uint32Array:

case Array::Float16Array:

case Array::Float32Array:

case Array::Float64Array:

case Array::BigInt64Array:

case Array::BigUint64Array:

case Array::AnyTypedArray:

return true;

default:

// These don't allow for bounds check lowering either because the bounds

// check isn't a speculation (like String, sort of) or because the type implies an impure access.

return false;

}

{

out.print(type(), "+", arrayClass(), "+", speculation(), "+", conversion(), "+", action());

if (mayBeLargeTypedArray())

out.print("+LargeTypedArray");

if (mayBeResizableOrGrowableSharedTypedArray())

out.print("+ResizableOrGrowableSharedTypedArray");