2012-03-05 16:14:34 +00:00
|
|
|
// Copyright 2012 the V8 project authors. All rights reserved.
|
2014-04-29 06:42:26 +00:00
|
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
|
|
// found in the LICENSE file.
|
2011-08-03 11:12:46 +00:00
|
|
|
|
|
|
|
#ifndef V8_ELEMENTS_H_
|
|
|
|
#define V8_ELEMENTS_H_
|
|
|
|
|
2014-06-03 08:12:43 +00:00
|
|
|
#include "src/elements-kind.h"
|
2014-08-05 08:18:22 +00:00
|
|
|
#include "src/heap/heap.h"
|
2014-06-03 08:12:43 +00:00
|
|
|
#include "src/isolate.h"
|
2014-06-20 08:40:11 +00:00
|
|
|
#include "src/objects.h"
|
2011-08-03 11:12:46 +00:00
|
|
|
|
|
|
|
namespace v8 {
|
|
|
|
namespace internal {
|
|
|
|
|
|
|
|
// Abstract base class for handles that can operate on objects with differing
|
|
|
|
// ElementsKinds.
|
|
|
|
class ElementsAccessor {
|
|
|
|
public:
|
2012-03-06 12:03:14 +00:00
|
|
|
explicit ElementsAccessor(const char* name) : name_(name) { }
|
2011-08-03 11:12:46 +00:00
|
|
|
virtual ~ElementsAccessor() { }
|
2012-03-06 12:03:14 +00:00
|
|
|
|
2012-03-09 13:48:29 +00:00
|
|
|
virtual ElementsKind kind() const = 0;
|
|
|
|
const char* name() const { return name_; }
|
2012-03-06 12:03:14 +00:00
|
|
|
|
2012-05-23 14:24:29 +00:00
|
|
|
// Checks the elements of an object for consistency, asserting when a problem
|
|
|
|
// is found.
|
2014-04-07 10:00:14 +00:00
|
|
|
virtual void Validate(Handle<JSObject> obj) = 0;
|
2012-05-23 14:24:29 +00:00
|
|
|
|
2012-03-06 12:22:18 +00:00
|
|
|
// Returns true if a holder contains an element with the specified key
|
|
|
|
// without iterating up the prototype chain. The caller can optionally pass
|
|
|
|
// in the backing store to use for the check, which must be compatible with
|
|
|
|
// the ElementsKind of the ElementsAccessor. If backing_store is NULL, the
|
|
|
|
// holder->elements() is used as the backing store.
|
2015-02-19 09:04:49 +00:00
|
|
|
virtual bool HasElement(
|
|
|
|
Handle<JSObject> holder,
|
|
|
|
uint32_t key,
|
|
|
|
Handle<FixedArrayBase> backing_store) = 0;
|
2014-04-04 13:05:37 +00:00
|
|
|
|
2015-02-19 09:04:49 +00:00
|
|
|
inline bool HasElement(
|
|
|
|
Handle<JSObject> holder,
|
|
|
|
uint32_t key) {
|
|
|
|
return HasElement(holder, key, handle(holder->elements()));
|
2014-04-04 13:05:37 +00:00
|
|
|
}
|
2012-03-06 12:22:18 +00:00
|
|
|
|
|
|
|
// Returns the element with the specified key or undefined if there is no such
|
|
|
|
// element. This method doesn't iterate up the prototype chain. The caller
|
|
|
|
// can optionally pass in the backing store to use for the check, which must
|
|
|
|
// be compatible with the ElementsKind of the ElementsAccessor. If
|
|
|
|
// backing_store is NULL, the holder->elements() is used as the backing store.
|
2014-04-10 09:20:11 +00:00
|
|
|
MUST_USE_RESULT virtual MaybeHandle<Object> Get(
|
2014-03-20 13:16:19 +00:00
|
|
|
Handle<Object> receiver,
|
|
|
|
Handle<JSObject> holder,
|
|
|
|
uint32_t key,
|
2014-04-03 09:12:59 +00:00
|
|
|
Handle<FixedArrayBase> backing_store) = 0;
|
|
|
|
|
2014-04-10 09:20:11 +00:00
|
|
|
MUST_USE_RESULT inline MaybeHandle<Object> Get(
|
2014-04-03 09:12:59 +00:00
|
|
|
Handle<Object> receiver,
|
|
|
|
Handle<JSObject> holder,
|
2014-04-04 13:20:24 +00:00
|
|
|
uint32_t key) {
|
|
|
|
return Get(receiver, holder, key, handle(holder->elements()));
|
|
|
|
}
|
2011-08-03 11:12:46 +00:00
|
|
|
|
2012-11-08 12:58:08 +00:00
|
|
|
// Returns an element's attributes, or ABSENT if there is no such
|
|
|
|
// element. This method doesn't iterate up the prototype chain. The caller
|
|
|
|
// can optionally pass in the backing store to use for the check, which must
|
|
|
|
// be compatible with the ElementsKind of the ElementsAccessor. If
|
|
|
|
// backing_store is NULL, the holder->elements() is used as the backing store.
|
|
|
|
MUST_USE_RESULT virtual PropertyAttributes GetAttributes(
|
2015-02-19 09:04:49 +00:00
|
|
|
Handle<JSObject> holder,
|
|
|
|
uint32_t key,
|
|
|
|
Handle<FixedArrayBase> backing_store) = 0;
|
2014-04-04 13:20:24 +00:00
|
|
|
|
2015-02-19 09:04:49 +00:00
|
|
|
MUST_USE_RESULT inline PropertyAttributes GetAttributes(
|
|
|
|
Handle<JSObject> holder,
|
|
|
|
uint32_t key) {
|
|
|
|
return GetAttributes(holder, key, handle(holder->elements()));
|
2014-04-04 13:20:24 +00:00
|
|
|
}
|
2012-11-08 12:58:08 +00:00
|
|
|
|
2012-11-15 11:31:40 +00:00
|
|
|
// Returns an element's accessors, or NULL if the element does not exist or
|
|
|
|
// is plain. This method doesn't iterate up the prototype chain. The caller
|
|
|
|
// can optionally pass in the backing store to use for the check, which must
|
|
|
|
// be compatible with the ElementsKind of the ElementsAccessor. If
|
|
|
|
// backing_store is NULL, the holder->elements() is used as the backing store.
|
2014-04-07 09:20:44 +00:00
|
|
|
MUST_USE_RESULT virtual MaybeHandle<AccessorPair> GetAccessorPair(
|
|
|
|
Handle<JSObject> holder,
|
2012-11-15 11:31:40 +00:00
|
|
|
uint32_t key,
|
2014-04-07 09:20:44 +00:00
|
|
|
Handle<FixedArrayBase> backing_store) = 0;
|
|
|
|
|
|
|
|
MUST_USE_RESULT inline MaybeHandle<AccessorPair> GetAccessorPair(
|
|
|
|
Handle<JSObject> holder,
|
|
|
|
uint32_t key) {
|
2015-02-19 08:13:33 +00:00
|
|
|
return GetAccessorPair(holder, key, handle(holder->elements()));
|
2014-04-07 09:20:44 +00:00
|
|
|
}
|
2012-11-15 11:31:40 +00:00
|
|
|
|
2011-12-09 08:50:19 +00:00
|
|
|
// Modifies the length data property as specified for JSArrays and resizes the
|
|
|
|
// underlying backing store accordingly. The method honors the semantics of
|
|
|
|
// changing array sizes as defined in EcmaScript 5.1 15.4.5.2, i.e. array that
|
|
|
|
// have non-deletable elements can only be shrunk to the size of highest
|
|
|
|
// element that is non-deletable.
|
2014-04-09 13:16:19 +00:00
|
|
|
MUST_USE_RESULT virtual MaybeHandle<Object> SetLength(
|
2014-03-19 14:09:50 +00:00
|
|
|
Handle<JSArray> holder,
|
|
|
|
Handle<Object> new_length) = 0;
|
2011-11-08 11:59:56 +00:00
|
|
|
|
2011-12-09 08:50:19 +00:00
|
|
|
// Modifies both the length and capacity of a JSArray, resizing the underlying
|
|
|
|
// backing store as necessary. This method does NOT honor the semantics of
|
|
|
|
// EcmaScript 5.1 15.4.5.2, arrays can be shrunk beyond non-deletable
|
|
|
|
// elements. This method should only be called for array expansion OR by
|
|
|
|
// runtime JavaScript code that use InternalArrays and don't care about
|
|
|
|
// EcmaScript 5.1 semantics.
|
2014-03-25 09:51:13 +00:00
|
|
|
virtual void SetCapacityAndLength(
|
|
|
|
Handle<JSArray> array,
|
|
|
|
int capacity,
|
|
|
|
int length) = 0;
|
2011-12-09 08:50:19 +00:00
|
|
|
|
2012-03-06 12:22:18 +00:00
|
|
|
// Deletes an element in an object, returning a new elements backing store.
|
2014-04-09 15:45:12 +00:00
|
|
|
MUST_USE_RESULT virtual MaybeHandle<Object> Delete(
|
2015-02-04 09:34:05 +00:00
|
|
|
Handle<JSObject> holder, uint32_t key, LanguageMode language_mode) = 0;
|
2011-08-04 11:42:14 +00:00
|
|
|
|
2012-03-16 13:59:59 +00:00
|
|
|
// If kCopyToEnd is specified as the copy_size to CopyElements, it copies all
|
|
|
|
// of elements from source after source_start to the destination array.
|
|
|
|
static const int kCopyToEnd = -1;
|
|
|
|
// If kCopyToEndAndInitializeToHole is specified as the copy_size to
|
|
|
|
// CopyElements, it copies all of elements from source after source_start to
|
|
|
|
// destination array, padding any remaining uninitialized elements in the
|
|
|
|
// destination array with the hole.
|
|
|
|
static const int kCopyToEndAndInitializeToHole = -2;
|
|
|
|
|
2012-03-09 13:48:29 +00:00
|
|
|
// Copy elements from one backing store to another. Typically, callers specify
|
|
|
|
// the source JSObject or JSArray in source_holder. If the holder's backing
|
|
|
|
// store is available, it can be passed in source and source_holder is
|
|
|
|
// ignored.
|
2014-03-20 13:01:08 +00:00
|
|
|
virtual void CopyElements(
|
2014-04-03 09:12:59 +00:00
|
|
|
Handle<FixedArrayBase> source,
|
|
|
|
uint32_t source_start,
|
|
|
|
ElementsKind source_kind,
|
|
|
|
Handle<FixedArrayBase> destination,
|
|
|
|
uint32_t destination_start,
|
|
|
|
int copy_size) = 0;
|
|
|
|
|
2014-09-29 08:22:24 +00:00
|
|
|
// NOTE: this method violates the handlified function signature convention:
|
|
|
|
// raw pointer parameter |source_holder| in the function that allocates.
|
|
|
|
// This is done intentionally to avoid ArrayConcat() builtin performance
|
|
|
|
// degradation.
|
2014-04-03 09:12:59 +00:00
|
|
|
virtual void CopyElements(
|
|
|
|
JSObject* source_holder,
|
2014-03-20 13:01:08 +00:00
|
|
|
uint32_t source_start,
|
|
|
|
ElementsKind source_kind,
|
|
|
|
Handle<FixedArrayBase> destination,
|
|
|
|
uint32_t destination_start,
|
2014-04-03 09:12:59 +00:00
|
|
|
int copy_size) = 0;
|
2012-05-09 12:49:56 +00:00
|
|
|
|
2014-04-03 09:12:59 +00:00
|
|
|
inline void CopyElements(
|
2014-03-25 15:33:22 +00:00
|
|
|
Handle<JSObject> from_holder,
|
|
|
|
Handle<FixedArrayBase> to,
|
2014-04-03 09:12:59 +00:00
|
|
|
ElementsKind from_kind) {
|
|
|
|
CopyElements(
|
|
|
|
*from_holder, 0, from_kind, to, 0, kCopyToEndAndInitializeToHole);
|
2014-03-25 15:33:22 +00:00
|
|
|
}
|
|
|
|
|
2014-04-10 09:20:11 +00:00
|
|
|
MUST_USE_RESULT virtual MaybeHandle<FixedArray> AddElementsToFixedArray(
|
2015-05-20 17:03:21 +00:00
|
|
|
Handle<JSObject> receiver, Handle<FixedArray> to,
|
|
|
|
FixedArray::KeyFilter filter) = 0;
|
2011-08-10 10:51:01 +00:00
|
|
|
|
2011-08-03 11:12:46 +00:00
|
|
|
// Returns a shared ElementsAccessor for the specified ElementsKind.
|
2011-09-09 09:35:57 +00:00
|
|
|
static ElementsAccessor* ForKind(ElementsKind elements_kind) {
|
2014-12-01 09:17:24 +00:00
|
|
|
DCHECK(static_cast<int>(elements_kind) < kElementsKindCount);
|
2011-08-03 11:12:46 +00:00
|
|
|
return elements_accessors_[elements_kind];
|
|
|
|
}
|
|
|
|
|
2015-02-19 09:04:49 +00:00
|
|
|
static ElementsAccessor* ForArray(Handle<FixedArrayBase> array);
|
2011-08-17 16:15:30 +00:00
|
|
|
|
2011-08-03 11:12:46 +00:00
|
|
|
static void InitializeOncePerProcess();
|
2012-03-27 10:51:13 +00:00
|
|
|
static void TearDown();
|
2011-08-03 11:12:46 +00:00
|
|
|
|
2011-08-17 16:15:30 +00:00
|
|
|
protected:
|
2014-03-11 14:39:08 +00:00
|
|
|
friend class SloppyArgumentsElementsAccessor;
|
2015-05-21 12:19:39 +00:00
|
|
|
friend class LookupIterator;
|
2011-08-17 16:15:30 +00:00
|
|
|
|
2015-05-21 12:19:39 +00:00
|
|
|
static ElementsAccessor* ForArray(FixedArrayBase* array);
|
|
|
|
|
|
|
|
virtual uint32_t GetCapacity(JSObject* holder,
|
|
|
|
FixedArrayBase* backing_store) = 0;
|
2011-08-17 16:15:30 +00:00
|
|
|
|
2012-03-05 16:14:34 +00:00
|
|
|
// Element handlers distinguish between indexes and keys when they manipulate
|
2011-08-17 16:15:30 +00:00
|
|
|
// elements. Indexes refer to elements in terms of their location in the
|
2012-03-05 16:14:34 +00:00
|
|
|
// underlying storage's backing store representation, and are between 0 and
|
2011-08-17 16:15:30 +00:00
|
|
|
// GetCapacity. Keys refer to elements in terms of the value that would be
|
2012-03-05 16:14:34 +00:00
|
|
|
// specified in JavaScript to access the element. In most implementations,
|
|
|
|
// keys are equivalent to indexes, and GetKeyForIndex returns the same value
|
|
|
|
// it is passed. In the NumberDictionary ElementsAccessor, GetKeyForIndex maps
|
|
|
|
// the index to a key using the KeyAt method on the NumberDictionary.
|
2015-05-21 12:19:39 +00:00
|
|
|
virtual uint32_t GetKeyForIndex(FixedArrayBase* backing_store,
|
2011-08-17 16:15:30 +00:00
|
|
|
uint32_t index) = 0;
|
2015-05-21 12:19:39 +00:00
|
|
|
virtual uint32_t GetIndexForKey(FixedArrayBase* backing_store,
|
|
|
|
uint32_t key) = 0;
|
|
|
|
virtual PropertyDetails GetDetails(FixedArrayBase* backing_store,
|
|
|
|
uint32_t index) = 0;
|
2011-08-17 16:15:30 +00:00
|
|
|
|
2011-08-03 11:12:46 +00:00
|
|
|
private:
|
|
|
|
static ElementsAccessor** elements_accessors_;
|
2012-03-06 12:03:14 +00:00
|
|
|
const char* name_;
|
2011-08-03 11:12:46 +00:00
|
|
|
|
|
|
|
DISALLOW_COPY_AND_ASSIGN(ElementsAccessor);
|
|
|
|
};
|
|
|
|
|
2014-04-08 14:20:29 +00:00
|
|
|
void CheckArrayAbuse(Handle<JSObject> obj, const char* op, uint32_t key,
|
2013-02-08 14:32:38 +00:00
|
|
|
bool allow_appending = false);
|
2013-02-07 07:56:11 +00:00
|
|
|
|
2014-04-09 13:16:19 +00:00
|
|
|
MUST_USE_RESULT MaybeHandle<Object> ArrayConstructInitializeElements(
|
|
|
|
Handle<JSArray> array,
|
|
|
|
Arguments* args);
|
2014-03-17 15:01:45 +00:00
|
|
|
|
2011-08-03 11:12:46 +00:00
|
|
|
} } // namespace v8::internal
|
|
|
|
|
|
|
|
#endif // V8_ELEMENTS_H_
|