4a285a2549
This CL extends GetIterator to check whether the result of calling @@iterator is JSReceiver and throw SymbolIteratorInvalid if it's not JSReceiver. GetIterator bytecode involves 3 steps now: - method = GetMethod(obj, @@iterator) - iterator = Call(method, obj) - if(!IsJSReceiver(iterator)) throw SymbolIteratorInvalid [Added] New Builtin: CallIteratorWithFeedbackLazyDeoptContinuation, which is used when lazy deopt is triggered by call @@iterator. Related spec: https://tc39.es/ecma262/#sec-getiterator. Related doc: https://docs.google.com/document/d/1s67HC2f-4zxA_s1Bmm7dfwMFv_KDUfMiWIKkNSeQNKw/edit#heading=h.kdzv8mq4g4ks. Bug: v8:9489 Change-Id: I17952c0f3e24e1e600ee1348809fb188c2c70f8e Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3563447 Reviewed-by: Leszek Swirski <leszeks@chromium.org> Reviewed-by: Tobias Tebbi <tebbi@chromium.org> Commit-Queue: 王澳 <wangao.james@bytedance.com> Cr-Commit-Position: refs/heads/main@{#80112}
151 lines
4.4 KiB
Plaintext
151 lines
4.4 KiB
Plaintext
#
|
|
# Autogenerated by generate-bytecode-expectations.
|
|
#
|
|
|
|
---
|
|
wrap: yes
|
|
|
|
---
|
|
snippet: "
|
|
class A { constructor(...args) { this.args = args; } }
|
|
new A(...[1, 2, 3]);
|
|
"
|
|
frame size: 6
|
|
parameter count: 1
|
|
bytecode array length: 42
|
|
bytecodes: [
|
|
B(CreateBlockContext), U8(0),
|
|
B(PushContext), R(1),
|
|
B(LdaTheHole),
|
|
B(Star5),
|
|
/* 30 E> */ B(CreateClosure), U8(2), U8(0), U8(2),
|
|
B(Star2),
|
|
B(LdaConstant), U8(1),
|
|
B(Star3),
|
|
B(Mov), R(2), R(4),
|
|
B(CallRuntime), U16(Runtime::kDefineClass), R(3), U8(3),
|
|
B(Star3),
|
|
B(PopContext), R(1),
|
|
B(Mov), R(4), R(0),
|
|
/* 89 S> */ B(CreateArrayLiteral), U8(3), U8(0), U8(37),
|
|
B(Star2),
|
|
B(Ldar), R(0),
|
|
/* 89 E> */ B(ConstructWithSpread), R(0), R(2), U8(1), U8(1),
|
|
B(LdaUndefined),
|
|
/* 110 S> */ B(Return),
|
|
]
|
|
constant pool: [
|
|
SCOPE_INFO_TYPE,
|
|
FIXED_ARRAY_TYPE,
|
|
SHARED_FUNCTION_INFO_TYPE,
|
|
ARRAY_BOILERPLATE_DESCRIPTION_TYPE,
|
|
]
|
|
handlers: [
|
|
]
|
|
|
|
---
|
|
snippet: "
|
|
class A { constructor(...args) { this.args = args; } }
|
|
new A(0, ...[1, 2, 3]);
|
|
"
|
|
frame size: 6
|
|
parameter count: 1
|
|
bytecode array length: 44
|
|
bytecodes: [
|
|
B(CreateBlockContext), U8(0),
|
|
B(PushContext), R(1),
|
|
B(LdaTheHole),
|
|
B(Star5),
|
|
/* 30 E> */ B(CreateClosure), U8(2), U8(0), U8(2),
|
|
B(Star2),
|
|
B(LdaConstant), U8(1),
|
|
B(Star3),
|
|
B(Mov), R(2), R(4),
|
|
B(CallRuntime), U16(Runtime::kDefineClass), R(3), U8(3),
|
|
B(Star3),
|
|
B(PopContext), R(1),
|
|
B(Mov), R(4), R(0),
|
|
/* 89 S> */ B(LdaZero),
|
|
B(Star2),
|
|
B(CreateArrayLiteral), U8(3), U8(0), U8(37),
|
|
B(Star3),
|
|
B(Ldar), R(0),
|
|
/* 89 E> */ B(ConstructWithSpread), R(0), R(2), U8(2), U8(1),
|
|
B(LdaUndefined),
|
|
/* 113 S> */ B(Return),
|
|
]
|
|
constant pool: [
|
|
SCOPE_INFO_TYPE,
|
|
FIXED_ARRAY_TYPE,
|
|
SHARED_FUNCTION_INFO_TYPE,
|
|
ARRAY_BOILERPLATE_DESCRIPTION_TYPE,
|
|
]
|
|
handlers: [
|
|
]
|
|
|
|
---
|
|
snippet: "
|
|
class A { constructor(...args) { this.args = args; } }
|
|
new A(0, ...[1, 2, 3], 4);
|
|
"
|
|
frame size: 7
|
|
parameter count: 1
|
|
bytecode array length: 104
|
|
bytecodes: [
|
|
B(CreateBlockContext), U8(0),
|
|
B(PushContext), R(1),
|
|
B(LdaTheHole),
|
|
B(Star5),
|
|
/* 30 E> */ B(CreateClosure), U8(2), U8(0), U8(2),
|
|
B(Star2),
|
|
B(LdaConstant), U8(1),
|
|
B(Star3),
|
|
B(Mov), R(2), R(4),
|
|
B(CallRuntime), U16(Runtime::kDefineClass), R(3), U8(3),
|
|
B(Star3),
|
|
B(PopContext), R(1),
|
|
B(Mov), R(4), R(0),
|
|
/* 89 S> */ B(CreateArrayLiteral), U8(3), U8(0), U8(37),
|
|
B(Star3),
|
|
B(LdaSmi), I8(1),
|
|
B(Star2),
|
|
/* 101 S> */ B(CreateArrayLiteral), U8(4), U8(1), U8(37),
|
|
B(Star6),
|
|
/* 101 E> */ B(GetIterator), R(6), U8(2), U8(4),
|
|
B(Star5),
|
|
B(GetNamedProperty), R(5), U8(5), U8(6),
|
|
B(Star4),
|
|
B(Mov), R(0), R(1),
|
|
B(CallProperty0), R(4), R(5), U8(15),
|
|
B(Star6),
|
|
B(JumpIfJSReceiver), U8(7),
|
|
B(CallRuntime), U16(Runtime::kThrowIteratorResultNotAnObject), R(6), U8(1),
|
|
B(GetNamedProperty), R(6), U8(6), U8(17),
|
|
B(JumpIfToBooleanTrue), U8(19),
|
|
B(GetNamedProperty), R(6), U8(7), U8(8),
|
|
B(StaInArrayLiteral), R(3), R(2), U8(13),
|
|
B(Ldar), R(2),
|
|
B(Inc), U8(12),
|
|
B(Star2),
|
|
B(JumpLoop), U8(31), I8(0), U8(19),
|
|
B(LdaSmi), I8(4),
|
|
B(StaInArrayLiteral), R(3), R(2), U8(13),
|
|
B(Mov), R(3), R(2),
|
|
/* 89 E> */ B(CallJSRuntime), U8(%reflect_construct), R(1), U8(2),
|
|
B(LdaUndefined),
|
|
/* 116 S> */ B(Return),
|
|
]
|
|
constant pool: [
|
|
SCOPE_INFO_TYPE,
|
|
FIXED_ARRAY_TYPE,
|
|
SHARED_FUNCTION_INFO_TYPE,
|
|
ARRAY_BOILERPLATE_DESCRIPTION_TYPE,
|
|
ARRAY_BOILERPLATE_DESCRIPTION_TYPE,
|
|
ONE_BYTE_INTERNALIZED_STRING_TYPE ["next"],
|
|
ONE_BYTE_INTERNALIZED_STRING_TYPE ["done"],
|
|
ONE_BYTE_INTERNALIZED_STRING_TYPE ["value"],
|
|
]
|
|
handlers: [
|
|
]
|
|
|