| /* |
| * Copyright (C) 2011 Apple Inc. All rights reserved. |
| * |
| * Redistribution and use in source and binary forms, with or without |
| * modification, are permitted provided that the following conditions |
| * are met: |
| * 1. Redistributions of source code must retain the above copyright |
| * notice, this list of conditions and the following disclaimer. |
| * 2. Redistributions in binary form must reproduce the above copyright |
| * notice, this list of conditions and the following disclaimer in the |
| * documentation and/or other materials provided with the distribution. |
| * |
| * THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY |
| * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
| * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR |
| * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR |
| * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, |
| * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, |
| * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR |
| * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY |
| * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
| * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| */ |
| |
| #include "config.h" |
| #include "DFGJITCompiler.h" |
| |
| #if ENABLE(DFG_JIT) |
| |
| #include "CodeBlock.h" |
| #include "DFGJITCodeGenerator.h" |
| #include "DFGOSRExitCompiler.h" |
| #include "DFGOperations.h" |
| #include "DFGRegisterBank.h" |
| #include "DFGSpeculativeJIT.h" |
| #include "JSGlobalData.h" |
| #include "LinkBuffer.h" |
| |
| namespace JSC { namespace DFG { |
| |
| void JITCompiler::linkOSRExits(SpeculativeJIT& speculative) |
| { |
| OSRExitCompiler osrExitCompiler(*this); |
| |
| OSRExitVector::Iterator exitsIter = speculative.osrExits().begin(); |
| OSRExitVector::Iterator exitsEnd = speculative.osrExits().end(); |
| |
| while (exitsIter != exitsEnd) { |
| const OSRExit& exit = *exitsIter; |
| osrExitCompiler.compileExit(exit, speculative.speculationRecovery(exit.m_recoveryIndex)); |
| ++exitsIter; |
| } |
| } |
| |
| void JITCompiler::compileEntry() |
| { |
| m_startOfCode = label(); |
| |
| // This code currently matches the old JIT. In the function header we need to |
| // pop the return address (since we do not allow any recursion on the machine |
| // stack), and perform a fast register file check. |
| // FIXME: https://bugs.webkit.org/show_bug.cgi?id=56292 |
| // We'll need to convert the remaining cti_ style calls (specifically the register file |
| // check) which will be dependent on stack layout. (We'd need to account for this in |
| // both normal return code and when jumping to an exception handler). |
| preserveReturnAddressAfterCall(GPRInfo::regT2); |
| emitPutToCallFrameHeader(GPRInfo::regT2, RegisterFile::ReturnPC); |
| } |
| |
| void JITCompiler::compileBody() |
| { |
| // We generate the speculative code path, followed by OSR exit code to return |
| // to the old JIT code if speculations fail. |
| |
| #if DFG_ENABLE(JIT_BREAK_ON_EVERY_FUNCTION) |
| // Handy debug tool! |
| breakpoint(); |
| #endif |
| |
| addPtr(Imm32(1), AbsoluteAddress(codeBlock()->addressOfSpeculativeSuccessCounter())); |
| |
| Label speculativePathBegin = label(); |
| SpeculativeJIT speculative(*this); |
| bool compiledSpeculative = speculative.compile(); |
| ASSERT_UNUSED(compiledSpeculative, compiledSpeculative); |
| |
| linkOSRExits(speculative); |
| |
| // Iterate over the m_calls vector, checking for jumps to link. |
| bool didLinkExceptionCheck = false; |
| for (unsigned i = 0; i < m_exceptionChecks.size(); ++i) { |
| Jump& exceptionCheck = m_exceptionChecks[i].m_exceptionCheck; |
| if (exceptionCheck.isSet()) { |
| exceptionCheck.link(this); |
| didLinkExceptionCheck = true; |
| } |
| } |
| |
| // If any exception checks were linked, generate code to lookup a handler. |
| if (didLinkExceptionCheck) { |
| // lookupExceptionHandler is passed two arguments, exec (the CallFrame*), and |
| // an identifier for the operation that threw the exception, which we can use |
| // to look up handler information. The identifier we use is the return address |
| // of the call out from JIT code that threw the exception; this is still |
| // available on the stack, just below the stack pointer! |
| move(GPRInfo::callFrameRegister, GPRInfo::argumentGPR0); |
| peek(GPRInfo::argumentGPR1, -1); |
| m_calls.append(CallLinkRecord(call(), lookupExceptionHandler)); |
| // lookupExceptionHandler leaves the handler CallFrame* in the returnValueGPR, |
| // and the address of the handler in returnValueGPR2. |
| jump(GPRInfo::returnValueGPR2); |
| } |
| } |
| |
| void JITCompiler::link(LinkBuffer& linkBuffer) |
| { |
| // Link the code, populate data in CodeBlock data structures. |
| #if DFG_ENABLE(DEBUG_VERBOSE) |
| fprintf(stderr, "JIT code for %p start at [%p, %p). Size = %lu.\n", m_codeBlock, linkBuffer.debugAddress(), static_cast<char*>(linkBuffer.debugAddress()) + linkBuffer.debugSize(), linkBuffer.debugSize()); |
| #endif |
| |
| // Link all calls out from the JIT code to their respective functions. |
| for (unsigned i = 0; i < m_calls.size(); ++i) |
| linkBuffer.link(m_calls[i].m_call, m_calls[i].m_function); |
| |
| if (m_codeBlock->needsCallReturnIndices()) { |
| m_codeBlock->callReturnIndexVector().reserveCapacity(m_exceptionChecks.size()); |
| for (unsigned i = 0; i < m_exceptionChecks.size(); ++i) { |
| unsigned returnAddressOffset = linkBuffer.returnAddressOffset(m_exceptionChecks[i].m_call); |
| CodeOrigin codeOrigin = m_exceptionChecks[i].m_codeOrigin; |
| while (codeOrigin.inlineCallFrame) |
| codeOrigin = codeOrigin.inlineCallFrame->caller; |
| unsigned exceptionInfo = codeOrigin.bytecodeIndex; |
| m_codeBlock->callReturnIndexVector().append(CallReturnOffsetToBytecodeOffset(returnAddressOffset, exceptionInfo)); |
| } |
| } |
| |
| unsigned numCallsFromInlineCode = 0; |
| for (unsigned i = 0; i < m_exceptionChecks.size(); ++i) { |
| if (m_exceptionChecks[i].m_codeOrigin.inlineCallFrame) |
| numCallsFromInlineCode++; |
| } |
| |
| if (numCallsFromInlineCode) { |
| Vector<CodeOriginAtCallReturnOffset>& codeOrigins = m_codeBlock->codeOrigins(); |
| codeOrigins.resize(numCallsFromInlineCode); |
| |
| for (unsigned i = 0, j = 0; i < m_exceptionChecks.size(); ++i) { |
| CallExceptionRecord& record = m_exceptionChecks[i]; |
| if (record.m_codeOrigin.inlineCallFrame) { |
| unsigned returnAddressOffset = linkBuffer.returnAddressOffset(m_exceptionChecks[i].m_call); |
| codeOrigins[j].codeOrigin = record.m_codeOrigin; |
| codeOrigins[j].callReturnOffset = returnAddressOffset; |
| j++; |
| } |
| } |
| } |
| |
| m_codeBlock->setNumberOfStructureStubInfos(m_propertyAccesses.size()); |
| for (unsigned i = 0; i < m_propertyAccesses.size(); ++i) { |
| StructureStubInfo& info = m_codeBlock->structureStubInfo(i); |
| CodeLocationCall callReturnLocation = linkBuffer.locationOf(m_propertyAccesses[i].m_functionCall); |
| info.callReturnLocation = callReturnLocation; |
| info.u.unset.deltaCheckImmToCall = differenceBetweenCodePtr(linkBuffer.locationOf(m_propertyAccesses[i].m_deltaCheckImmToCall), callReturnLocation); |
| info.deltaCallToStructCheck = differenceBetweenCodePtr(callReturnLocation, linkBuffer.locationOf(m_propertyAccesses[i].m_deltaCallToStructCheck)); |
| #if USE(JSVALUE64) |
| info.u.unset.deltaCallToLoadOrStore = differenceBetweenCodePtr(callReturnLocation, linkBuffer.locationOf(m_propertyAccesses[i].m_deltaCallToLoadOrStore)); |
| #else |
| info.u.unset.deltaCallToTagLoadOrStore = differenceBetweenCodePtr(callReturnLocation, linkBuffer.locationOf(m_propertyAccesses[i].m_deltaCallToTagLoadOrStore)); |
| info.u.unset.deltaCallToPayloadLoadOrStore = differenceBetweenCodePtr(callReturnLocation, linkBuffer.locationOf(m_propertyAccesses[i].m_deltaCallToPayloadLoadOrStore)); |
| #endif |
| info.deltaCallToSlowCase = differenceBetweenCodePtr(callReturnLocation, linkBuffer.locationOf(m_propertyAccesses[i].m_deltaCallToSlowCase)); |
| info.deltaCallToDone = differenceBetweenCodePtr(callReturnLocation, linkBuffer.locationOf(m_propertyAccesses[i].m_deltaCallToDone)); |
| info.baseGPR = m_propertyAccesses[i].m_baseGPR; |
| #if USE(JSVALUE64) |
| info.valueGPR = m_propertyAccesses[i].m_valueGPR; |
| #else |
| info.valueTagGPR = m_propertyAccesses[i].m_valueTagGPR; |
| info.valueGPR = m_propertyAccesses[i].m_valueGPR; |
| #endif |
| info.scratchGPR = m_propertyAccesses[i].m_scratchGPR; |
| } |
| |
| m_codeBlock->setNumberOfCallLinkInfos(m_jsCalls.size()); |
| for (unsigned i = 0; i < m_jsCalls.size(); ++i) { |
| CallLinkInfo& info = m_codeBlock->callLinkInfo(i); |
| info.isCall = m_jsCalls[i].m_isCall; |
| info.isDFG = true; |
| info.callReturnLocation = CodeLocationLabel(linkBuffer.locationOf(m_jsCalls[i].m_slowCall)); |
| info.hotPathBegin = linkBuffer.locationOf(m_jsCalls[i].m_targetToCheck); |
| info.hotPathOther = linkBuffer.locationOfNearCall(m_jsCalls[i].m_fastCall); |
| } |
| |
| m_codeBlock->addMethodCallLinkInfos(m_methodGets.size()); |
| for (unsigned i = 0; i < m_methodGets.size(); ++i) { |
| MethodCallLinkInfo& info = m_codeBlock->methodCallLinkInfo(i); |
| info.cachedStructure.setLocation(linkBuffer.locationOf(m_methodGets[i].m_structToCompare)); |
| info.cachedPrototypeStructure.setLocation(linkBuffer.locationOf(m_methodGets[i].m_protoStructToCompare)); |
| info.cachedFunction.setLocation(linkBuffer.locationOf(m_methodGets[i].m_putFunction)); |
| info.cachedPrototype.setLocation(linkBuffer.locationOf(m_methodGets[i].m_protoObj)); |
| info.callReturnLocation = linkBuffer.locationOf(m_methodGets[i].m_slowCall); |
| } |
| } |
| |
| void JITCompiler::compile(JITCode& entry) |
| { |
| // Preserve the return address to the callframe. |
| compileEntry(); |
| // Generate the body of the program. |
| compileBody(); |
| // Link |
| LinkBuffer linkBuffer(*m_globalData, this); |
| link(linkBuffer); |
| entry = JITCode(linkBuffer.finalizeCode(), JITCode::DFGJIT); |
| } |
| |
| void JITCompiler::compileFunction(JITCode& entry, MacroAssemblerCodePtr& entryWithArityCheck) |
| { |
| compileEntry(); |
| |
| // === Function header code generation === |
| // This is the main entry point, without performing an arity check. |
| // If we needed to perform an arity check we will already have moved the return address, |
| // so enter after this. |
| Label fromArityCheck(this); |
| // Setup a pointer to the codeblock in the CallFrameHeader. |
| emitPutImmediateToCallFrameHeader(m_codeBlock, RegisterFile::CodeBlock); |
| // Plant a check that sufficient space is available in the RegisterFile. |
| // FIXME: https://bugs.webkit.org/show_bug.cgi?id=56291 |
| addPtr(Imm32(m_codeBlock->m_numCalleeRegisters * sizeof(Register)), GPRInfo::callFrameRegister, GPRInfo::regT1); |
| Jump registerFileCheck = branchPtr(Below, AbsoluteAddress(m_globalData->interpreter->registerFile().addressOfEnd()), GPRInfo::regT1); |
| // Return here after register file check. |
| Label fromRegisterFileCheck = label(); |
| |
| |
| // === Function body code generation === |
| compileBody(); |
| |
| // === Function footer code generation === |
| // |
| // Generate code to perform the slow register file check (if the fast one in |
| // the function header fails), and generate the entry point with arity check. |
| // |
| // Generate the register file check; if the fast check in the function head fails, |
| // we need to call out to a helper function to check whether more space is available. |
| // FIXME: change this from a cti call to a DFG style operation (normal C calling conventions). |
| registerFileCheck.link(this); |
| move(stackPointerRegister, GPRInfo::argumentGPR0); |
| poke(GPRInfo::callFrameRegister, OBJECT_OFFSETOF(struct JITStackFrame, callFrame) / sizeof(void*)); |
| Call callRegisterFileCheck = call(); |
| jump(fromRegisterFileCheck); |
| |
| // The fast entry point into a function does not check the correct number of arguments |
| // have been passed to the call (we only use the fast entry point where we can statically |
| // determine the correct number of arguments have been passed, or have already checked). |
| // In cases where an arity check is necessary, we enter here. |
| // FIXME: change this from a cti call to a DFG style operation (normal C calling conventions). |
| Label arityCheck = label(); |
| preserveReturnAddressAfterCall(GPRInfo::regT2); |
| emitPutToCallFrameHeader(GPRInfo::regT2, RegisterFile::ReturnPC); |
| branch32(Equal, GPRInfo::regT1, Imm32(m_codeBlock->m_numParameters)).linkTo(fromArityCheck, this); |
| move(stackPointerRegister, GPRInfo::argumentGPR0); |
| poke(GPRInfo::callFrameRegister, OBJECT_OFFSETOF(struct JITStackFrame, callFrame) / sizeof(void*)); |
| Call callArityCheck = call(); |
| move(GPRInfo::regT0, GPRInfo::callFrameRegister); |
| jump(fromArityCheck); |
| |
| |
| // === Link === |
| LinkBuffer linkBuffer(*m_globalData, this); |
| link(linkBuffer); |
| |
| // FIXME: switch the register file check & arity check over to DFGOpertaion style calls, not JIT stubs. |
| linkBuffer.link(callRegisterFileCheck, cti_register_file_check); |
| linkBuffer.link(callArityCheck, m_codeBlock->m_isConstructor ? cti_op_construct_arityCheck : cti_op_call_arityCheck); |
| |
| entryWithArityCheck = linkBuffer.locationOf(arityCheck); |
| entry = JITCode(linkBuffer.finalizeCode(), JITCode::DFGJIT); |
| } |
| |
| } } // namespace JSC::DFG |
| |
| #endif // ENABLE(DFG_JIT) |