v8/test/mjsunit/es9
Caitlin Potter fbcf0221fa [CloneObjectIC] add CSA implementation of slow case
The CSA implementation is a separate handler so that TF has the
opportunity to reduce to a direct call, skipping some of the dispatching
in the CloneObjectIC stub.

This patch moves the looping over a source object's keys and values into the
base CodeStubAssembler, so that it can be shared between ObjectAssignFast
and CloneObjectIC_Slow.

During each step of the loop, storing is delegated to a new SetPropertyInLiteral
helper in KeyedStoreGenericGenerator, which performs a store without consulting
the prototype chain, and automatically reconfigures accessors into data
properties regardless of their attributes.

BUG=v8:8067, v8:7611
R=ishell@chromium.org, jkummerow@chromium.org

Change-Id: I06ae89f37e9b4265aab67389cf68a96529f90578
Reviewed-on: https://chromium-review.googlesource.com/1182122
Commit-Queue: Caitlin Potter <caitp@igalia.com>
Reviewed-by: Igor Sheludko <ishell@chromium.org>
Cr-Commit-Position: refs/heads/master@{#55806}
2018-09-11 20:43:53 +00:00
..
regress [CloneObjectIC] copy may_have_interesting_symbols bit to fast result map 2018-08-04 16:48:18 +00:00
object-rest-basic.js
object-spread-basic.js
object-spread-ic-dontenum-transition.js [CloneObjectIC] add CSA implementation of slow case 2018-09-11 20:43:53 +00:00
object-spread-ic-multiple-transitions.js [CloneObjectIC] add CSA implementation of slow case 2018-09-11 20:43:53 +00:00
object-spread-ic.js [runtime] use new CloneObject bytecode for some ObjectLiteralSpread cases 2018-07-20 16:48:59 +00:00
regexp-lookbehind.js [regexp] make lookbehind assertions non-quantifiable. 2018-02-20 11:24:32 +00:00
template-escapes.js Remove always-on --harmony-template-escapes flag 2017-11-28 18:36:41 +00:00