0df9606dca
Nodes can now hold a LazyDeoptSafepoint which stores the frame state in case they trigger a lazy deopt. OpProperties have a new CanLazyDeopt bit, and codegen emits a safepoint table entry + lazy deopt for all nodes with this bit. Also, we now check the deoptimized code bit on entry into the maglev compiled function. An example use of these lazy deopts is added as a PropertyCell fast path for LdaGlobal, which adds a code dependency on the property cell. Bug: v8:7700 Change-Id: I663db38dfa7325d38fc6d5f079d263a958074e36 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3557251 Reviewed-by: Toon Verwaest <verwaest@chromium.org> Reviewed-by: Jakob Linke <jgruber@chromium.org> Commit-Queue: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#79688}
25 lines
556 B
JavaScript
25 lines
556 B
JavaScript
// Copyright 2022 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax --maglev --no-always-opt
|
|
|
|
var x = 1;
|
|
|
|
function f(o) {
|
|
return x;
|
|
}
|
|
|
|
%PrepareFunctionForOptimization(f);
|
|
assertEquals(1, f());
|
|
|
|
%OptimizeMaglevOnNextCall(f);
|
|
assertEquals(1, f());
|
|
assertTrue(isMaglevved(f));
|
|
|
|
// Trigger a lazy deopt now, so that f() deopts on its next call.
|
|
x = 2;
|
|
assertEquals(2, f());
|
|
assertFalse(isMaglevved(f));
|
|
assertUnoptimized(f);
|