| /* |
| * Copyright (C) 2013-2019 Apple Inc. All rights reserved. |
| * |
| * Redistribution and use in source and binary forms, with or without |
| * modification, are permitted provided that the following conditions |
| * are met: |
| * 1. Redistributions of source code must retain the above copyright |
| * notice, this list of conditions and the following disclaimer. |
| * 2. Redistributions in binary form must reproduce the above copyright |
| * notice, this list of conditions and the following disclaimer in the |
| * documentation and/or other materials provided with the distribution. |
| * |
| * THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY |
| * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
| * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR |
| * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR |
| * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, |
| * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, |
| * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR |
| * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY |
| * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
| * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| */ |
| |
| #include "config.h" |
| #include "DFGWatchpointCollectionPhase.h" |
| |
| #if ENABLE(DFG_JIT) |
| |
| #include "DFGGraph.h" |
| #include "DFGPhase.h" |
| #include "JSCJSValueInlines.h" |
| |
| // FIXME: Remove this phase entirely by moving the addLazily() calls into either the backend or |
| // into the phase that performs the optimization. Moving the calls into the backend makes the most |
| // sense when the intermediate phases don't need to know that the watchpoint was set. Moving the |
| // calls earlier usually only makes sense if the node's only purpose was to convey the need for |
| // the watchpoint (like VarInjectionWatchpoint). But, it can also make sense if the fact that the |
| // watchpoint was set enables other optimizations. |
| // https://bugs.webkit.org/show_bug.cgi?id=144669 |
| |
| namespace JSC { namespace DFG { |
| |
| class WatchpointCollectionPhase : public Phase { |
| static constexpr bool verbose = false; |
| |
| public: |
| WatchpointCollectionPhase(Graph& graph) |
| : Phase(graph, "watchpoint collection") |
| { |
| } |
| |
| bool run() |
| { |
| for (BlockIndex blockIndex = m_graph.numBlocks(); blockIndex--;) { |
| BasicBlock* block = m_graph.block(blockIndex); |
| if (!block) |
| continue; |
| |
| for (unsigned nodeIndex = block->size(); nodeIndex--;) { |
| m_node = block->at(nodeIndex); |
| handle(); |
| } |
| } |
| |
| return true; |
| } |
| |
| private: |
| void handle() |
| { |
| switch (m_node->op()) { |
| case TypeOfIsUndefined: |
| handleMasqueradesAsUndefined(); |
| break; |
| |
| case CompareEq: |
| if (m_node->isBinaryUseKind(ObjectUse) |
| || (m_node->child1().useKind() == ObjectUse && m_node->child2().useKind() == ObjectOrOtherUse) |
| || (m_node->child1().useKind() == ObjectOrOtherUse && m_node->child2().useKind() == ObjectUse) |
| || (m_node->child1().useKind() == KnownOtherUse || m_node->child2().useKind() == KnownOtherUse)) |
| handleMasqueradesAsUndefined(); |
| break; |
| |
| case ToBoolean: |
| case LogicalNot: |
| case Branch: |
| switch (m_node->child1().useKind()) { |
| case ObjectOrOtherUse: |
| case UntypedUse: |
| handleMasqueradesAsUndefined(); |
| break; |
| default: |
| break; |
| } |
| break; |
| |
| default: |
| break; |
| } |
| } |
| |
| void handleMasqueradesAsUndefined() |
| { |
| if (m_graph.masqueradesAsUndefinedWatchpointIsStillValid(m_node->origin.semantic)) |
| addLazily(globalObject()->masqueradesAsUndefinedWatchpoint()); |
| } |
| |
| void addLazily(WatchpointSet* set) |
| { |
| m_graph.watchpoints().addLazily(set); |
| } |
| |
| JSGlobalObject* globalObject() |
| { |
| return m_graph.globalObjectFor(m_node->origin.semantic); |
| } |
| |
| Node* m_node; |
| }; |
| |
| bool performWatchpointCollection(Graph& graph) |
| { |
| return runPhase<WatchpointCollectionPhase>(graph); |
| } |
| |
| } } // namespace JSC::DFG |
| |
| #endif // ENABLE(DFG_JIT) |
| |