Diff
Modified: trunk/Source/_javascript_Core/ChangeLog (119794 => 119795)
--- trunk/Source/_javascript_Core/ChangeLog 2012-06-08 04:24:01 UTC (rev 119794)
+++ trunk/Source/_javascript_Core/ChangeLog 2012-06-08 04:25:58 UTC (rev 119795)
@@ -42,6 +42,42 @@
2012-06-07 Gavin Barraclough <[email protected]>
+ Remove JSObject::m_inheritorID
+ https://bugs.webkit.org/show_bug.cgi?id=88378
+
+ Reviewed by Geoff Garen.
+
+ This is rarely used, and not performance critical (the commonly accessed copy is cached on JSFunction),
+ and most objects don't need an inheritorID (this value is only used if the object is used as a prototype).
+ Instead use a private named value in the object's property storage.
+
+ * dfg/DFGSpeculativeJIT.h:
+ (JSC::DFG::SpeculativeJIT::emitAllocateBasicJSObject):
+ - No need m_inheritorID to initialize!
+ * jit/JITInlineMethods.h:
+ (JSC::JIT::emitAllocateBasicJSObject):
+ - No need m_inheritorID to initialize!
+ * llint/LowLevelInterpreter.asm:
+ - No need m_inheritorID to initialize!
+ * runtime/JSGlobalData.h:
+ (JSGlobalData):
+ - Added private name 'm_inheritorIDKey'.
+ * runtime/JSGlobalThis.cpp:
+ (JSC::JSGlobalThis::setUnwrappedObject):
+ - resetInheritorID is now passed a JSGlobalData&.
+ * runtime/JSObject.cpp:
+ (JSC::JSObject::visitChildren):
+ - No m_inheritorID to be marked.
+ (JSC::JSObject::createInheritorID):
+ - Store the newly created inheritorID in the property map.
+ * runtime/JSObject.h:
+ (JSC::JSObject::resetInheritorID):
+ - Remove the inheritorID from property storage.
+ (JSC::JSObject::inheritorID):
+ - Read the inheritorID from property storage.
+
+2012-06-07 Gavin Barraclough <[email protected]>
+
Math.pow on iOS does not support denormal numbers.
https://bugs.webkit.org/show_bug.cgi?id=88592
Modified: trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.h (119794 => 119795)
--- trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.h 2012-06-08 04:24:01 UTC (rev 119794)
+++ trunk/Source/_javascript_Core/dfg/DFGSpeculativeJIT.h 2012-06-08 04:25:58 UTC (rev 119795)
@@ -2131,9 +2131,6 @@
// Initialize the object's classInfo pointer
m_jit.storePtr(MacroAssembler::TrustedImmPtr(&ClassType::s_info), MacroAssembler::Address(resultGPR, JSCell::classInfoOffset()));
- // Initialize the object's inheritorID.
- m_jit.storePtr(MacroAssembler::TrustedImmPtr(0), MacroAssembler::Address(resultGPR, JSObject::offsetOfInheritorID()));
-
// Initialize the object's property storage pointer.
m_jit.addPtr(MacroAssembler::TrustedImm32(sizeof(JSObject)), resultGPR, scratchGPR);
m_jit.storePtr(scratchGPR, MacroAssembler::Address(resultGPR, ClassType::offsetOfPropertyStorage()));
Modified: trunk/Source/_javascript_Core/jit/JITInlineMethods.h (119794 => 119795)
--- trunk/Source/_javascript_Core/jit/JITInlineMethods.h 2012-06-08 04:24:01 UTC (rev 119794)
+++ trunk/Source/_javascript_Core/jit/JITInlineMethods.h 2012-06-08 04:25:58 UTC (rev 119795)
@@ -425,9 +425,6 @@
// initialize the object's classInfo pointer
storePtr(TrustedImmPtr(&ClassType::s_info), Address(result, JSCell::classInfoOffset()));
- // initialize the inheritor ID
- storePtr(TrustedImmPtr(0), Address(result, JSObject::offsetOfInheritorID()));
-
// initialize the object's property storage pointer
addPtr(TrustedImm32(sizeof(JSObject)), result, storagePtr);
storePtr(storagePtr, Address(result, ClassType::offsetOfPropertyStorage()));
Modified: trunk/Source/_javascript_Core/llint/LowLevelInterpreter.asm (119794 => 119795)
--- trunk/Source/_javascript_Core/llint/LowLevelInterpreter.asm 2012-06-08 04:24:01 UTC (rev 119794)
+++ trunk/Source/_javascript_Core/llint/LowLevelInterpreter.asm 2012-06-08 04:25:58 UTC (rev 119795)
@@ -311,7 +311,6 @@
loadp classInfoOffset[scratch1], scratch2
storep scratch2, [result]
storep structure, JSCell::m_structure[result]
- storep 0, JSObject::m_inheritorID[result]
addp sizeof JSObject, result, scratch1
storep scratch1, JSObject::m_propertyStorage[result]
end
Modified: trunk/Source/_javascript_Core/runtime/JSGlobalData.h (119794 => 119795)
--- trunk/Source/_javascript_Core/runtime/JSGlobalData.h 2012-06-08 04:24:01 UTC (rev 119794)
+++ trunk/Source/_javascript_Core/runtime/JSGlobalData.h 2012-06-08 04:25:58 UTC (rev 119795)
@@ -38,6 +38,7 @@
#include "JSValue.h"
#include "LLIntData.h"
#include "NumericStrings.h"
+#include "PrivateName.h"
#include "SmallStrings.h"
#include "Strong.h"
#include "Terminator.h"
@@ -281,6 +282,8 @@
bool canUseRegExpJIT() { return m_canUseAssembler; }
#endif
+ PrivateName m_inheritorIDKey;
+
OwnPtr<ParserArena> parserArena;
OwnPtr<Keywords> keywords;
Interpreter* interpreter;
Modified: trunk/Source/_javascript_Core/runtime/JSGlobalThis.cpp (119794 => 119795)
--- trunk/Source/_javascript_Core/runtime/JSGlobalThis.cpp 2012-06-08 04:24:01 UTC (rev 119794)
+++ trunk/Source/_javascript_Core/runtime/JSGlobalThis.cpp 2012-06-08 04:25:58 UTC (rev 119795)
@@ -53,7 +53,7 @@
ASSERT_ARG(globalObject, globalObject);
m_unwrappedObject.set(globalData, this, globalObject);
setPrototype(globalData, globalObject->prototype());
- resetInheritorID();
+ resetInheritorID(globalData);
}
} // namespace JSC
Modified: trunk/Source/_javascript_Core/runtime/JSObject.cpp (119794 => 119795)
--- trunk/Source/_javascript_Core/runtime/JSObject.cpp 2012-06-08 04:24:01 UTC (rev 119794)
+++ trunk/Source/_javascript_Core/runtime/JSObject.cpp 2012-06-08 04:25:58 UTC (rev 119795)
@@ -98,9 +98,6 @@
thisObject->m_propertyStorage.set(storage, StorageBarrier::Unchecked);
}
- if (thisObject->m_inheritorID)
- visitor.append(&thisObject->m_inheritorID);
-
#if !ASSERT_DISABLED
visitor.m_isCheckingForDefaultMarkViolation = wasCheckingForDefaultMarkViolation;
#endif
@@ -536,15 +533,21 @@
Structure* JSObject::createInheritorID(JSGlobalData& globalData)
{
+ ASSERT(!getDirectLocation(globalData, globalData.m_inheritorIDKey));
+
JSGlobalObject* globalObject;
if (isGlobalThis())
globalObject = static_cast<JSGlobalThis*>(this)->unwrappedObject();
else
globalObject = structure()->globalObject();
ASSERT(globalObject);
- m_inheritorID.set(globalData, this, createEmptyObjectStructure(globalData, globalObject, this));
- ASSERT(m_inheritorID->isEmpty());
- return m_inheritorID.get();
+
+ Structure* inheritorID = createEmptyObjectStructure(globalData, globalObject, this);
+ ASSERT(inheritorID->isEmpty());
+
+ PutPropertySlot slot;
+ putDirectInternal<PutModeDefineOwnProperty>(globalData, globalData.m_inheritorIDKey, inheritorID, 0, slot, 0);
+ return inheritorID;
}
PropertyStorage JSObject::growPropertyStorage(JSGlobalData& globalData, size_t oldSize, size_t newSize)
Modified: trunk/Source/_javascript_Core/runtime/JSObject.h (119794 => 119795)
--- trunk/Source/_javascript_Core/runtime/JSObject.h 2012-06-08 04:24:01 UTC (rev 119794)
+++ trunk/Source/_javascript_Core/runtime/JSObject.h 2012-06-08 04:25:58 UTC (rev 119795)
@@ -236,7 +236,6 @@
static size_t offsetOfInlineStorage();
static size_t offsetOfPropertyStorage();
- static size_t offsetOfInheritorID();
static JS_EXPORTDATA const ClassInfo s_info;
@@ -264,9 +263,9 @@
// To create derived types you likely want JSNonFinalObject, below.
JSObject(JSGlobalData&, Structure*, PropertyStorage inlineStorage);
- void resetInheritorID()
+ void resetInheritorID(JSGlobalData& globalData)
{
- m_inheritorID.clear();
+ removeDirect(globalData, globalData.m_inheritorIDKey);
}
private:
@@ -303,7 +302,13 @@
Structure* createInheritorID(JSGlobalData&);
StorageBarrier m_propertyStorage;
- WriteBarrier<Structure> m_inheritorID;
+
+#if USE(JSVALUE32_64)
+ // FIXME: keep the size of JSObject a multiple of 64-bits, so that the
+ // internal storage is aligned. We can remove this when we remove JSCell's
+ // direct ClassInfo pointer.
+ void* sixtyFourBitAlign;
+#endif
};
@@ -311,8 +316,8 @@
#define JSNonFinalObject_inlineStorageCapacity 4
#define JSFinalObject_inlineStorageCapacity 6
#else
-#define JSNonFinalObject_inlineStorageCapacity 2
-#define JSFinalObject_inlineStorageCapacity 4
+#define JSNonFinalObject_inlineStorageCapacity 3
+#define JSFinalObject_inlineStorageCapacity 5
#endif
COMPILE_ASSERT((JSFinalObject_inlineStorageCapacity >= JSNonFinalObject_inlineStorageCapacity), final_storage_is_at_least_as_large_as_non_final);
@@ -417,11 +422,6 @@
return OBJECT_OFFSETOF(JSObject, m_propertyStorage);
}
-inline size_t JSObject::offsetOfInheritorID()
-{
- return OBJECT_OFFSETOF(JSObject, m_inheritorID);
-}
-
inline bool JSObject::isGlobalObject() const
{
return structure()->typeInfo().type() == GlobalObjectType;
@@ -514,9 +514,10 @@
inline Structure* JSObject::inheritorID(JSGlobalData& globalData)
{
- if (m_inheritorID) {
- ASSERT(m_inheritorID->isEmpty());
- return m_inheritorID.get();
+ if (WriteBarrierBase<Unknown>* location = getDirectLocation(globalData, globalData.m_inheritorIDKey)) {
+ Structure* inheritorID = jsCast<Structure*>(location->get());
+ ASSERT(inheritorID->isEmpty());
+ return inheritorID;
}
return createInheritorID(globalData);
}
