fbd114bd27
This is a reland of c83c9590ba
Changes since revert: nothing, issue was crbug.com/v8/11666
Original change's description:
> [ic] Add a new MegaDOM IC
>
> This patch implements the MegaDOM IC setup and access. A new MegaDOM
> IC state indicates that we've seen only DOM accessors at this access
> site.
>
> This CL only adds support for DOM getters in LoadIC, other kinds of
> access will be added in follow on CLs.
>
> Still remaining TODO before shipping:
> 1. Have a mechanism to invalidate the protector
> 2. Have a mechanism to find the accessors that aren't overloaded
> 3. Use a new builtin to miss to runtime on access check failure
>
> Change-Id: Ie12efe5e9fa284f023043b996d61e7d74e710ee2
> Bug: v8:11321
> Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2618239
> Reviewed-by: Omer Katz <omerkatz@chromium.org>
> Reviewed-by: Camillo Bruni <cbruni@chromium.org>
> Reviewed-by: Dan Elphick <delphick@chromium.org>
> Reviewed-by: Mythri Alle <mythria@chromium.org>
> Commit-Queue: Sathya Gunasekaran <gsathya@chromium.org>
> Cr-Commit-Position: refs/heads/master@{#73733}
Bug: v8:11321
Change-Id: I2bec54465542b5b40c42adb6eb12b6ce72cce5bd
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2794439
Reviewed-by: Dan Elphick <delphick@chromium.org>
Reviewed-by: Mythri Alle <mythria@chromium.org>
Reviewed-by: Camillo Bruni <cbruni@chromium.org>
Reviewed-by: Omer Katz <omerkatz@chromium.org>
Reviewed-by: Ulan Degenbaev <ulan@chromium.org>
Commit-Queue: Sathya Gunasekaran <gsathya@chromium.org>
Cr-Commit-Position: refs/heads/master@{#74056}
53 lines
1013 B
JavaScript
53 lines
1013 B
JavaScript
// Copyright 2021 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
//
|
|
// Flags: --enable-mega-dom-ic --allow-natives-syntax
|
|
|
|
function load(obj) {
|
|
return obj.nodeType;
|
|
}
|
|
|
|
%PrepareFunctionForOptimization(load);
|
|
|
|
var a = new d8.dom.Div();
|
|
var b = new d8.dom.Div();
|
|
b.b = 1;
|
|
|
|
var c = new d8.dom.Div();
|
|
c.c = 1;
|
|
|
|
var d = new d8.dom.Div();
|
|
d.d = 1;
|
|
|
|
var e = new d8.dom.Div();
|
|
e.e = 1;
|
|
|
|
var f = new d8.dom.Div();
|
|
f.f = 1;
|
|
|
|
const objs = [
|
|
a, b, c, d, e, f
|
|
];
|
|
|
|
|
|
function test() {
|
|
let result = 0;
|
|
for (let i = 0; i < objs.length; i++) {
|
|
result += load(objs[i]);
|
|
}
|
|
|
|
return result;
|
|
}
|
|
%PrepareFunctionForOptimization(test);
|
|
let result = test();
|
|
assertEquals(6, result);
|
|
assertEquals(load({}), undefined);
|
|
assertEquals(load({ nodeType: 'foo' }), 'foo');
|
|
|
|
%OptimizeFunctionOnNextCall(test);
|
|
result = test();
|
|
assertEquals(6, result);
|
|
assertEquals(load({}), undefined)
|
|
assertEquals(load({nodeType: 'foo'}), 'foo')
|