builtins-x64.cc revision 756813857a4c2a4d8ad2e805969d5768d3cf43a0
1// Copyright 2009 the V8 project authors. All rights reserved. 2// Redistribution and use in source and binary forms, with or without 3// modification, are permitted provided that the following conditions are 4// met: 5// 6// * Redistributions of source code must retain the above copyright 7// notice, this list of conditions and the following disclaimer. 8// * Redistributions in binary form must reproduce the above 9// copyright notice, this list of conditions and the following 10// disclaimer in the documentation and/or other materials provided 11// with the distribution. 12// * Neither the name of Google Inc. nor the names of its 13// contributors may be used to endorse or promote products derived 14// from this software without specific prior written permission. 15// 16// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 17// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 18// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 19// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 20// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 21// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 22// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 23// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 24// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 25// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 26// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 27 28#include "v8.h" 29 30#if defined(V8_TARGET_ARCH_X64) 31 32#include "codegen-inl.h" 33#include "macro-assembler.h" 34 35namespace v8 { 36namespace internal { 37 38#define __ ACCESS_MASM(masm) 39 40 41void Builtins::Generate_Adaptor(MacroAssembler* masm, 42 CFunctionId id, 43 BuiltinExtraArguments extra_args) { 44 // ----------- S t a t e ------------- 45 // -- rax : number of arguments excluding receiver 46 // -- rdi : called function (only guaranteed when 47 // extra_args requires it) 48 // -- rsi : context 49 // -- rsp[0] : return address 50 // -- rsp[8] : last argument 51 // -- ... 52 // -- rsp[8 * argc] : first argument (argc == rax) 53 // -- rsp[8 * (argc +1)] : receiver 54 // ----------------------------------- 55 56 // Insert extra arguments. 57 int num_extra_args = 0; 58 if (extra_args == NEEDS_CALLED_FUNCTION) { 59 num_extra_args = 1; 60 __ pop(kScratchRegister); // Save return address. 61 __ push(rdi); 62 __ push(kScratchRegister); // Restore return address. 63 } else { 64 ASSERT(extra_args == NO_EXTRA_ARGUMENTS); 65 } 66 67 // JumpToExternalReference expects rax to contain the number of arguments 68 // including the receiver and the extra arguments. 69 __ addq(rax, Immediate(num_extra_args + 1)); 70 __ JumpToExternalReference(ExternalReference(id), 1); 71} 72 73 74static void EnterArgumentsAdaptorFrame(MacroAssembler* masm) { 75 __ push(rbp); 76 __ movq(rbp, rsp); 77 78 // Store the arguments adaptor context sentinel. 79 __ Push(Smi::FromInt(StackFrame::ARGUMENTS_ADAPTOR)); 80 81 // Push the function on the stack. 82 __ push(rdi); 83 84 // Preserve the number of arguments on the stack. Must preserve both 85 // rax and rbx because these registers are used when copying the 86 // arguments and the receiver. 87 __ Integer32ToSmi(rcx, rax); 88 __ push(rcx); 89} 90 91 92static void LeaveArgumentsAdaptorFrame(MacroAssembler* masm) { 93 // Retrieve the number of arguments from the stack. Number is a Smi. 94 __ movq(rbx, Operand(rbp, ArgumentsAdaptorFrameConstants::kLengthOffset)); 95 96 // Leave the frame. 97 __ movq(rsp, rbp); 98 __ pop(rbp); 99 100 // Remove caller arguments from the stack. 101 __ pop(rcx); 102 SmiIndex index = masm->SmiToIndex(rbx, rbx, kPointerSizeLog2); 103 __ lea(rsp, Operand(rsp, index.reg, index.scale, 1 * kPointerSize)); 104 __ push(rcx); 105} 106 107 108void Builtins::Generate_ArgumentsAdaptorTrampoline(MacroAssembler* masm) { 109 // ----------- S t a t e ------------- 110 // -- rax : actual number of arguments 111 // -- rbx : expected number of arguments 112 // -- rdx : code entry to call 113 // ----------------------------------- 114 115 Label invoke, dont_adapt_arguments; 116 __ IncrementCounter(&Counters::arguments_adaptors, 1); 117 118 Label enough, too_few; 119 __ cmpq(rax, rbx); 120 __ j(less, &too_few); 121 __ cmpq(rbx, Immediate(SharedFunctionInfo::kDontAdaptArgumentsSentinel)); 122 __ j(equal, &dont_adapt_arguments); 123 124 { // Enough parameters: Actual >= expected. 125 __ bind(&enough); 126 EnterArgumentsAdaptorFrame(masm); 127 128 // Copy receiver and all expected arguments. 129 const int offset = StandardFrameConstants::kCallerSPOffset; 130 __ lea(rax, Operand(rbp, rax, times_pointer_size, offset)); 131 __ movq(rcx, Immediate(-1)); // account for receiver 132 133 Label copy; 134 __ bind(©); 135 __ incq(rcx); 136 __ push(Operand(rax, 0)); 137 __ subq(rax, Immediate(kPointerSize)); 138 __ cmpq(rcx, rbx); 139 __ j(less, ©); 140 __ jmp(&invoke); 141 } 142 143 { // Too few parameters: Actual < expected. 144 __ bind(&too_few); 145 EnterArgumentsAdaptorFrame(masm); 146 147 // Copy receiver and all actual arguments. 148 const int offset = StandardFrameConstants::kCallerSPOffset; 149 __ lea(rdi, Operand(rbp, rax, times_pointer_size, offset)); 150 __ movq(rcx, Immediate(-1)); // account for receiver 151 152 Label copy; 153 __ bind(©); 154 __ incq(rcx); 155 __ push(Operand(rdi, 0)); 156 __ subq(rdi, Immediate(kPointerSize)); 157 __ cmpq(rcx, rax); 158 __ j(less, ©); 159 160 // Fill remaining expected arguments with undefined values. 161 Label fill; 162 __ LoadRoot(kScratchRegister, Heap::kUndefinedValueRootIndex); 163 __ bind(&fill); 164 __ incq(rcx); 165 __ push(kScratchRegister); 166 __ cmpq(rcx, rbx); 167 __ j(less, &fill); 168 169 // Restore function pointer. 170 __ movq(rdi, Operand(rbp, JavaScriptFrameConstants::kFunctionOffset)); 171 } 172 173 // Call the entry point. 174 __ bind(&invoke); 175 __ call(rdx); 176 177 // Leave frame and return. 178 LeaveArgumentsAdaptorFrame(masm); 179 __ ret(0); 180 181 // ------------------------------------------- 182 // Dont adapt arguments. 183 // ------------------------------------------- 184 __ bind(&dont_adapt_arguments); 185 __ jmp(rdx); 186} 187 188 189void Builtins::Generate_FunctionCall(MacroAssembler* masm) { 190 // Stack Layout: 191 // rsp[0]: Return address 192 // rsp[1]: Argument n 193 // rsp[2]: Argument n-1 194 // ... 195 // rsp[n]: Argument 1 196 // rsp[n+1]: Receiver (function to call) 197 // 198 // rax contains the number of arguments, n, not counting the receiver. 199 // 200 // 1. Make sure we have at least one argument. 201 { Label done; 202 __ testq(rax, rax); 203 __ j(not_zero, &done); 204 __ pop(rbx); 205 __ Push(Factory::undefined_value()); 206 __ push(rbx); 207 __ incq(rax); 208 __ bind(&done); 209 } 210 211 // 2. Get the function to call (passed as receiver) from the stack, check 212 // if it is a function. 213 Label non_function; 214 // The function to call is at position n+1 on the stack. 215 __ movq(rdi, Operand(rsp, rax, times_pointer_size, 1 * kPointerSize)); 216 __ JumpIfSmi(rdi, &non_function); 217 __ CmpObjectType(rdi, JS_FUNCTION_TYPE, rcx); 218 __ j(not_equal, &non_function); 219 220 // 3a. Patch the first argument if necessary when calling a function. 221 Label shift_arguments; 222 { Label convert_to_object, use_global_receiver, patch_receiver; 223 // Change context eagerly in case we need the global receiver. 224 __ movq(rsi, FieldOperand(rdi, JSFunction::kContextOffset)); 225 226 __ movq(rbx, Operand(rsp, rax, times_pointer_size, 0)); 227 __ JumpIfSmi(rbx, &convert_to_object); 228 229 __ CompareRoot(rbx, Heap::kNullValueRootIndex); 230 __ j(equal, &use_global_receiver); 231 __ CompareRoot(rbx, Heap::kUndefinedValueRootIndex); 232 __ j(equal, &use_global_receiver); 233 234 __ CmpObjectType(rbx, FIRST_JS_OBJECT_TYPE, rcx); 235 __ j(below, &convert_to_object); 236 __ CmpInstanceType(rcx, LAST_JS_OBJECT_TYPE); 237 __ j(below_equal, &shift_arguments); 238 239 __ bind(&convert_to_object); 240 __ EnterInternalFrame(); // In order to preserve argument count. 241 __ Integer32ToSmi(rax, rax); 242 __ push(rax); 243 244 __ push(rbx); 245 __ InvokeBuiltin(Builtins::TO_OBJECT, CALL_FUNCTION); 246 __ movq(rbx, rax); 247 248 __ pop(rax); 249 __ SmiToInteger32(rax, rax); 250 __ LeaveInternalFrame(); 251 // Restore the function to rdi. 252 __ movq(rdi, Operand(rsp, rax, times_pointer_size, 1 * kPointerSize)); 253 __ jmp(&patch_receiver); 254 255 // Use the global receiver object from the called function as the 256 // receiver. 257 __ bind(&use_global_receiver); 258 const int kGlobalIndex = 259 Context::kHeaderSize + Context::GLOBAL_INDEX * kPointerSize; 260 __ movq(rbx, FieldOperand(rsi, kGlobalIndex)); 261 __ movq(rbx, FieldOperand(rbx, GlobalObject::kGlobalContextOffset)); 262 __ movq(rbx, FieldOperand(rbx, kGlobalIndex)); 263 __ movq(rbx, FieldOperand(rbx, GlobalObject::kGlobalReceiverOffset)); 264 265 __ bind(&patch_receiver); 266 __ movq(Operand(rsp, rax, times_pointer_size, 0), rbx); 267 268 __ jmp(&shift_arguments); 269 } 270 271 272 // 3b. Patch the first argument when calling a non-function. The 273 // CALL_NON_FUNCTION builtin expects the non-function callee as 274 // receiver, so overwrite the first argument which will ultimately 275 // become the receiver. 276 __ bind(&non_function); 277 __ movq(Operand(rsp, rax, times_pointer_size, 0), rdi); 278 __ xor_(rdi, rdi); 279 280 // 4. Shift arguments and return address one slot down on the stack 281 // (overwriting the original receiver). Adjust argument count to make 282 // the original first argument the new receiver. 283 __ bind(&shift_arguments); 284 { Label loop; 285 __ movq(rcx, rax); 286 __ bind(&loop); 287 __ movq(rbx, Operand(rsp, rcx, times_pointer_size, 0)); 288 __ movq(Operand(rsp, rcx, times_pointer_size, 1 * kPointerSize), rbx); 289 __ decq(rcx); 290 __ j(not_sign, &loop); // While non-negative (to copy return address). 291 __ pop(rbx); // Discard copy of return address. 292 __ decq(rax); // One fewer argument (first argument is new receiver). 293 } 294 295 // 5a. Call non-function via tail call to CALL_NON_FUNCTION builtin. 296 { Label function; 297 __ testq(rdi, rdi); 298 __ j(not_zero, &function); 299 __ xor_(rbx, rbx); 300 __ GetBuiltinEntry(rdx, Builtins::CALL_NON_FUNCTION); 301 __ Jump(Handle<Code>(builtin(ArgumentsAdaptorTrampoline)), 302 RelocInfo::CODE_TARGET); 303 __ bind(&function); 304 } 305 306 // 5b. Get the code to call from the function and check that the number of 307 // expected arguments matches what we're providing. If so, jump 308 // (tail-call) to the code in register edx without checking arguments. 309 __ movq(rdx, FieldOperand(rdi, JSFunction::kSharedFunctionInfoOffset)); 310 __ movsxlq(rbx, 311 FieldOperand(rdx, 312 SharedFunctionInfo::kFormalParameterCountOffset)); 313 __ movq(rdx, FieldOperand(rdi, JSFunction::kCodeOffset)); 314 __ lea(rdx, FieldOperand(rdx, Code::kHeaderSize)); 315 __ cmpq(rax, rbx); 316 __ j(not_equal, 317 Handle<Code>(builtin(ArgumentsAdaptorTrampoline)), 318 RelocInfo::CODE_TARGET); 319 320 ParameterCount expected(0); 321 __ InvokeCode(rdx, expected, expected, JUMP_FUNCTION); 322} 323 324 325void Builtins::Generate_FunctionApply(MacroAssembler* masm) { 326 // Stack at entry: 327 // rsp: return address 328 // rsp+8: arguments 329 // rsp+16: receiver ("this") 330 // rsp+24: function 331 __ EnterInternalFrame(); 332 // Stack frame: 333 // rbp: Old base pointer 334 // rbp[1]: return address 335 // rbp[2]: function arguments 336 // rbp[3]: receiver 337 // rbp[4]: function 338 static const int kArgumentsOffset = 2 * kPointerSize; 339 static const int kReceiverOffset = 3 * kPointerSize; 340 static const int kFunctionOffset = 4 * kPointerSize; 341 __ push(Operand(rbp, kFunctionOffset)); 342 __ push(Operand(rbp, kArgumentsOffset)); 343 __ InvokeBuiltin(Builtins::APPLY_PREPARE, CALL_FUNCTION); 344 345 // Check the stack for overflow. We are not trying need to catch 346 // interruptions (e.g. debug break and preemption) here, so the "real stack 347 // limit" is checked. 348 Label okay; 349 __ LoadRoot(kScratchRegister, Heap::kRealStackLimitRootIndex); 350 __ movq(rcx, rsp); 351 // Make rcx the space we have left. The stack might already be overflowed 352 // here which will cause rcx to become negative. 353 __ subq(rcx, kScratchRegister); 354 // Make rdx the space we need for the array when it is unrolled onto the 355 // stack. 356 __ PositiveSmiTimesPowerOfTwoToInteger64(rdx, rax, kPointerSizeLog2); 357 // Check if the arguments will overflow the stack. 358 __ cmpq(rcx, rdx); 359 __ j(greater, &okay); // Signed comparison. 360 361 // Out of stack space. 362 __ push(Operand(rbp, kFunctionOffset)); 363 __ push(rax); 364 __ InvokeBuiltin(Builtins::APPLY_OVERFLOW, CALL_FUNCTION); 365 __ bind(&okay); 366 // End of stack check. 367 368 // Push current index and limit. 369 const int kLimitOffset = 370 StandardFrameConstants::kExpressionsOffset - 1 * kPointerSize; 371 const int kIndexOffset = kLimitOffset - 1 * kPointerSize; 372 __ push(rax); // limit 373 __ push(Immediate(0)); // index 374 375 // Change context eagerly to get the right global object if 376 // necessary. 377 __ movq(rdi, Operand(rbp, kFunctionOffset)); 378 __ movq(rsi, FieldOperand(rdi, JSFunction::kContextOffset)); 379 380 // Compute the receiver. 381 Label call_to_object, use_global_receiver, push_receiver; 382 __ movq(rbx, Operand(rbp, kReceiverOffset)); 383 __ JumpIfSmi(rbx, &call_to_object); 384 __ CompareRoot(rbx, Heap::kNullValueRootIndex); 385 __ j(equal, &use_global_receiver); 386 __ CompareRoot(rbx, Heap::kUndefinedValueRootIndex); 387 __ j(equal, &use_global_receiver); 388 389 // If given receiver is already a JavaScript object then there's no 390 // reason for converting it. 391 __ CmpObjectType(rbx, FIRST_JS_OBJECT_TYPE, rcx); 392 __ j(below, &call_to_object); 393 __ CmpInstanceType(rcx, LAST_JS_OBJECT_TYPE); 394 __ j(below_equal, &push_receiver); 395 396 // Convert the receiver to an object. 397 __ bind(&call_to_object); 398 __ push(rbx); 399 __ InvokeBuiltin(Builtins::TO_OBJECT, CALL_FUNCTION); 400 __ movq(rbx, rax); 401 __ jmp(&push_receiver); 402 403 // Use the current global receiver object as the receiver. 404 __ bind(&use_global_receiver); 405 const int kGlobalOffset = 406 Context::kHeaderSize + Context::GLOBAL_INDEX * kPointerSize; 407 __ movq(rbx, FieldOperand(rsi, kGlobalOffset)); 408 __ movq(rbx, FieldOperand(rbx, GlobalObject::kGlobalContextOffset)); 409 __ movq(rbx, FieldOperand(rbx, kGlobalOffset)); 410 __ movq(rbx, FieldOperand(rbx, GlobalObject::kGlobalReceiverOffset)); 411 412 // Push the receiver. 413 __ bind(&push_receiver); 414 __ push(rbx); 415 416 // Copy all arguments from the array to the stack. 417 Label entry, loop; 418 __ movq(rax, Operand(rbp, kIndexOffset)); 419 __ jmp(&entry); 420 __ bind(&loop); 421 __ movq(rdx, Operand(rbp, kArgumentsOffset)); // load arguments 422 423 // Use inline caching to speed up access to arguments. 424 Handle<Code> ic(Builtins::builtin(Builtins::KeyedLoadIC_Initialize)); 425 __ Call(ic, RelocInfo::CODE_TARGET); 426 // It is important that we do not have a test instruction after the 427 // call. A test instruction after the call is used to indicate that 428 // we have generated an inline version of the keyed load. In this 429 // case, we know that we are not generating a test instruction next. 430 431 // Push the nth argument. 432 __ push(rax); 433 434 // Update the index on the stack and in register rax. 435 __ movq(rax, Operand(rbp, kIndexOffset)); 436 __ SmiAddConstant(rax, rax, Smi::FromInt(1)); 437 __ movq(Operand(rbp, kIndexOffset), rax); 438 439 __ bind(&entry); 440 __ cmpq(rax, Operand(rbp, kLimitOffset)); 441 __ j(not_equal, &loop); 442 443 // Invoke the function. 444 ParameterCount actual(rax); 445 __ SmiToInteger32(rax, rax); 446 __ movq(rdi, Operand(rbp, kFunctionOffset)); 447 __ InvokeFunction(rdi, actual, CALL_FUNCTION); 448 449 __ LeaveInternalFrame(); 450 __ ret(3 * kPointerSize); // remove function, receiver, and arguments 451} 452 453 454// Load the built-in Array function from the current context. 455static void GenerateLoadArrayFunction(MacroAssembler* masm, Register result) { 456 // Load the global context. 457 __ movq(result, Operand(rsi, Context::SlotOffset(Context::GLOBAL_INDEX))); 458 __ movq(result, FieldOperand(result, GlobalObject::kGlobalContextOffset)); 459 // Load the Array function from the global context. 460 __ movq(result, 461 Operand(result, Context::SlotOffset(Context::ARRAY_FUNCTION_INDEX))); 462} 463 464 465// Number of empty elements to allocate for an empty array. 466static const int kPreallocatedArrayElements = 4; 467 468 469// Allocate an empty JSArray. The allocated array is put into the result 470// register. If the parameter initial_capacity is larger than zero an elements 471// backing store is allocated with this size and filled with the hole values. 472// Otherwise the elements backing store is set to the empty FixedArray. 473static void AllocateEmptyJSArray(MacroAssembler* masm, 474 Register array_function, 475 Register result, 476 Register scratch1, 477 Register scratch2, 478 Register scratch3, 479 int initial_capacity, 480 Label* gc_required) { 481 ASSERT(initial_capacity >= 0); 482 483 // Load the initial map from the array function. 484 __ movq(scratch1, FieldOperand(array_function, 485 JSFunction::kPrototypeOrInitialMapOffset)); 486 487 // Allocate the JSArray object together with space for a fixed array with the 488 // requested elements. 489 int size = JSArray::kSize; 490 if (initial_capacity > 0) { 491 size += FixedArray::SizeFor(initial_capacity); 492 } 493 __ AllocateInNewSpace(size, 494 result, 495 scratch2, 496 scratch3, 497 gc_required, 498 TAG_OBJECT); 499 500 // Allocated the JSArray. Now initialize the fields except for the elements 501 // array. 502 // result: JSObject 503 // scratch1: initial map 504 // scratch2: start of next object 505 __ movq(FieldOperand(result, JSObject::kMapOffset), scratch1); 506 __ Move(FieldOperand(result, JSArray::kPropertiesOffset), 507 Factory::empty_fixed_array()); 508 // Field JSArray::kElementsOffset is initialized later. 509 __ Move(FieldOperand(result, JSArray::kLengthOffset), Smi::FromInt(0)); 510 511 // If no storage is requested for the elements array just set the empty 512 // fixed array. 513 if (initial_capacity == 0) { 514 __ Move(FieldOperand(result, JSArray::kElementsOffset), 515 Factory::empty_fixed_array()); 516 return; 517 } 518 519 // Calculate the location of the elements array and set elements array member 520 // of the JSArray. 521 // result: JSObject 522 // scratch2: start of next object 523 __ lea(scratch1, Operand(result, JSArray::kSize)); 524 __ movq(FieldOperand(result, JSArray::kElementsOffset), scratch1); 525 526 // Initialize the FixedArray and fill it with holes. FixedArray length is 527 // stored as a smi. 528 // result: JSObject 529 // scratch1: elements array 530 // scratch2: start of next object 531 __ Move(FieldOperand(scratch1, HeapObject::kMapOffset), 532 Factory::fixed_array_map()); 533 __ Move(FieldOperand(scratch1, FixedArray::kLengthOffset), 534 Smi::FromInt(initial_capacity)); 535 536 // Fill the FixedArray with the hole value. Inline the code if short. 537 // Reconsider loop unfolding if kPreallocatedArrayElements gets changed. 538 static const int kLoopUnfoldLimit = 4; 539 ASSERT(kPreallocatedArrayElements <= kLoopUnfoldLimit); 540 __ Move(scratch3, Factory::the_hole_value()); 541 if (initial_capacity <= kLoopUnfoldLimit) { 542 // Use a scratch register here to have only one reloc info when unfolding 543 // the loop. 544 for (int i = 0; i < initial_capacity; i++) { 545 __ movq(FieldOperand(scratch1, 546 FixedArray::kHeaderSize + i * kPointerSize), 547 scratch3); 548 } 549 } else { 550 Label loop, entry; 551 __ jmp(&entry); 552 __ bind(&loop); 553 __ movq(Operand(scratch1, 0), scratch3); 554 __ addq(scratch1, Immediate(kPointerSize)); 555 __ bind(&entry); 556 __ cmpq(scratch1, scratch2); 557 __ j(below, &loop); 558 } 559} 560 561 562// Allocate a JSArray with the number of elements stored in a register. The 563// register array_function holds the built-in Array function and the register 564// array_size holds the size of the array as a smi. The allocated array is put 565// into the result register and beginning and end of the FixedArray elements 566// storage is put into registers elements_array and elements_array_end (see 567// below for when that is not the case). If the parameter fill_with_holes is 568// true the allocated elements backing store is filled with the hole values 569// otherwise it is left uninitialized. When the backing store is filled the 570// register elements_array is scratched. 571static void AllocateJSArray(MacroAssembler* masm, 572 Register array_function, // Array function. 573 Register array_size, // As a smi. 574 Register result, 575 Register elements_array, 576 Register elements_array_end, 577 Register scratch, 578 bool fill_with_hole, 579 Label* gc_required) { 580 Label not_empty, allocated; 581 582 // Load the initial map from the array function. 583 __ movq(elements_array, 584 FieldOperand(array_function, 585 JSFunction::kPrototypeOrInitialMapOffset)); 586 587 // Check whether an empty sized array is requested. 588 __ testq(array_size, array_size); 589 __ j(not_zero, ¬_empty); 590 591 // If an empty array is requested allocate a small elements array anyway. This 592 // keeps the code below free of special casing for the empty array. 593 int size = JSArray::kSize + FixedArray::SizeFor(kPreallocatedArrayElements); 594 __ AllocateInNewSpace(size, 595 result, 596 elements_array_end, 597 scratch, 598 gc_required, 599 TAG_OBJECT); 600 __ jmp(&allocated); 601 602 // Allocate the JSArray object together with space for a FixedArray with the 603 // requested elements. 604 __ bind(¬_empty); 605 SmiIndex index = 606 masm->SmiToIndex(kScratchRegister, array_size, kPointerSizeLog2); 607 __ AllocateInNewSpace(JSArray::kSize + FixedArray::kHeaderSize, 608 index.scale, 609 index.reg, 610 result, 611 elements_array_end, 612 scratch, 613 gc_required, 614 TAG_OBJECT); 615 616 // Allocated the JSArray. Now initialize the fields except for the elements 617 // array. 618 // result: JSObject 619 // elements_array: initial map 620 // elements_array_end: start of next object 621 // array_size: size of array (smi) 622 __ bind(&allocated); 623 __ movq(FieldOperand(result, JSObject::kMapOffset), elements_array); 624 __ Move(elements_array, Factory::empty_fixed_array()); 625 __ movq(FieldOperand(result, JSArray::kPropertiesOffset), elements_array); 626 // Field JSArray::kElementsOffset is initialized later. 627 __ movq(FieldOperand(result, JSArray::kLengthOffset), array_size); 628 629 // Calculate the location of the elements array and set elements array member 630 // of the JSArray. 631 // result: JSObject 632 // elements_array_end: start of next object 633 // array_size: size of array (smi) 634 __ lea(elements_array, Operand(result, JSArray::kSize)); 635 __ movq(FieldOperand(result, JSArray::kElementsOffset), elements_array); 636 637 // Initialize the fixed array. FixedArray length is stored as a smi. 638 // result: JSObject 639 // elements_array: elements array 640 // elements_array_end: start of next object 641 // array_size: size of array (smi) 642 __ Move(FieldOperand(elements_array, JSObject::kMapOffset), 643 Factory::fixed_array_map()); 644 Label not_empty_2, fill_array; 645 __ SmiTest(array_size); 646 __ j(not_zero, ¬_empty_2); 647 // Length of the FixedArray is the number of pre-allocated elements even 648 // though the actual JSArray has length 0. 649 __ Move(FieldOperand(elements_array, FixedArray::kLengthOffset), 650 Smi::FromInt(kPreallocatedArrayElements)); 651 __ jmp(&fill_array); 652 __ bind(¬_empty_2); 653 // For non-empty JSArrays the length of the FixedArray and the JSArray is the 654 // same. 655 __ movq(FieldOperand(elements_array, FixedArray::kLengthOffset), array_size); 656 657 // Fill the allocated FixedArray with the hole value if requested. 658 // result: JSObject 659 // elements_array: elements array 660 // elements_array_end: start of next object 661 __ bind(&fill_array); 662 if (fill_with_hole) { 663 Label loop, entry; 664 __ Move(scratch, Factory::the_hole_value()); 665 __ lea(elements_array, Operand(elements_array, 666 FixedArray::kHeaderSize - kHeapObjectTag)); 667 __ jmp(&entry); 668 __ bind(&loop); 669 __ movq(Operand(elements_array, 0), scratch); 670 __ addq(elements_array, Immediate(kPointerSize)); 671 __ bind(&entry); 672 __ cmpq(elements_array, elements_array_end); 673 __ j(below, &loop); 674 } 675} 676 677 678// Create a new array for the built-in Array function. This function allocates 679// the JSArray object and the FixedArray elements array and initializes these. 680// If the Array cannot be constructed in native code the runtime is called. This 681// function assumes the following state: 682// rdi: constructor (built-in Array function) 683// rax: argc 684// rsp[0]: return address 685// rsp[8]: last argument 686// This function is used for both construct and normal calls of Array. The only 687// difference between handling a construct call and a normal call is that for a 688// construct call the constructor function in rdi needs to be preserved for 689// entering the generic code. In both cases argc in rax needs to be preserved. 690// Both registers are preserved by this code so no need to differentiate between 691// a construct call and a normal call. 692static void ArrayNativeCode(MacroAssembler* masm, 693 Label *call_generic_code) { 694 Label argc_one_or_more, argc_two_or_more; 695 696 // Check for array construction with zero arguments. 697 __ testq(rax, rax); 698 __ j(not_zero, &argc_one_or_more); 699 700 // Handle construction of an empty array. 701 AllocateEmptyJSArray(masm, 702 rdi, 703 rbx, 704 rcx, 705 rdx, 706 r8, 707 kPreallocatedArrayElements, 708 call_generic_code); 709 __ IncrementCounter(&Counters::array_function_native, 1); 710 __ movq(rax, rbx); 711 __ ret(kPointerSize); 712 713 // Check for one argument. Bail out if argument is not smi or if it is 714 // negative. 715 __ bind(&argc_one_or_more); 716 __ cmpq(rax, Immediate(1)); 717 __ j(not_equal, &argc_two_or_more); 718 __ movq(rdx, Operand(rsp, kPointerSize)); // Get the argument from the stack. 719 __ JumpIfNotPositiveSmi(rdx, call_generic_code); 720 721 // Handle construction of an empty array of a certain size. Bail out if size 722 // is to large to actually allocate an elements array. 723 __ SmiCompare(rdx, Smi::FromInt(JSObject::kInitialMaxFastElementArray)); 724 __ j(greater_equal, call_generic_code); 725 726 // rax: argc 727 // rdx: array_size (smi) 728 // rdi: constructor 729 // esp[0]: return address 730 // esp[8]: argument 731 AllocateJSArray(masm, 732 rdi, 733 rdx, 734 rbx, 735 rcx, 736 r8, 737 r9, 738 true, 739 call_generic_code); 740 __ IncrementCounter(&Counters::array_function_native, 1); 741 __ movq(rax, rbx); 742 __ ret(2 * kPointerSize); 743 744 // Handle construction of an array from a list of arguments. 745 __ bind(&argc_two_or_more); 746 __ movq(rdx, rax); 747 __ Integer32ToSmi(rdx, rdx); // Convet argc to a smi. 748 // rax: argc 749 // rdx: array_size (smi) 750 // rdi: constructor 751 // esp[0] : return address 752 // esp[8] : last argument 753 AllocateJSArray(masm, 754 rdi, 755 rdx, 756 rbx, 757 rcx, 758 r8, 759 r9, 760 false, 761 call_generic_code); 762 __ IncrementCounter(&Counters::array_function_native, 1); 763 764 // rax: argc 765 // rbx: JSArray 766 // rcx: elements_array 767 // r8: elements_array_end (untagged) 768 // esp[0]: return address 769 // esp[8]: last argument 770 771 // Location of the last argument 772 __ lea(r9, Operand(rsp, kPointerSize)); 773 774 // Location of the first array element (Parameter fill_with_holes to 775 // AllocateJSArrayis false, so the FixedArray is returned in rcx). 776 __ lea(rdx, Operand(rcx, FixedArray::kHeaderSize - kHeapObjectTag)); 777 778 // rax: argc 779 // rbx: JSArray 780 // rdx: location of the first array element 781 // r9: location of the last argument 782 // esp[0]: return address 783 // esp[8]: last argument 784 Label loop, entry; 785 __ movq(rcx, rax); 786 __ jmp(&entry); 787 __ bind(&loop); 788 __ movq(kScratchRegister, Operand(r9, rcx, times_pointer_size, 0)); 789 __ movq(Operand(rdx, 0), kScratchRegister); 790 __ addq(rdx, Immediate(kPointerSize)); 791 __ bind(&entry); 792 __ decq(rcx); 793 __ j(greater_equal, &loop); 794 795 // Remove caller arguments from the stack and return. 796 // rax: argc 797 // rbx: JSArray 798 // esp[0]: return address 799 // esp[8]: last argument 800 __ pop(rcx); 801 __ lea(rsp, Operand(rsp, rax, times_pointer_size, 1 * kPointerSize)); 802 __ push(rcx); 803 __ movq(rax, rbx); 804 __ ret(0); 805} 806 807 808void Builtins::Generate_ArrayCode(MacroAssembler* masm) { 809 // ----------- S t a t e ------------- 810 // -- rax : argc 811 // -- rsp[0] : return address 812 // -- rsp[8] : last argument 813 // ----------------------------------- 814 Label generic_array_code; 815 816 // Get the Array function. 817 GenerateLoadArrayFunction(masm, rdi); 818 819 if (FLAG_debug_code) { 820 // Initial map for the builtin Array function shoud be a map. 821 __ movq(rbx, FieldOperand(rdi, JSFunction::kPrototypeOrInitialMapOffset)); 822 // Will both indicate a NULL and a Smi. 823 ASSERT(kSmiTag == 0); 824 Condition not_smi = NegateCondition(masm->CheckSmi(rbx)); 825 __ Check(not_smi, "Unexpected initial map for Array function"); 826 __ CmpObjectType(rbx, MAP_TYPE, rcx); 827 __ Check(equal, "Unexpected initial map for Array function"); 828 } 829 830 // Run the native code for the Array function called as a normal function. 831 ArrayNativeCode(masm, &generic_array_code); 832 833 // Jump to the generic array code in case the specialized code cannot handle 834 // the construction. 835 __ bind(&generic_array_code); 836 Code* code = Builtins::builtin(Builtins::ArrayCodeGeneric); 837 Handle<Code> array_code(code); 838 __ Jump(array_code, RelocInfo::CODE_TARGET); 839} 840 841 842void Builtins::Generate_ArrayConstructCode(MacroAssembler* masm) { 843 // ----------- S t a t e ------------- 844 // -- rax : argc 845 // -- rdi : constructor 846 // -- rsp[0] : return address 847 // -- rsp[8] : last argument 848 // ----------------------------------- 849 Label generic_constructor; 850 851 if (FLAG_debug_code) { 852 // The array construct code is only set for the builtin Array function which 853 // does always have a map. 854 GenerateLoadArrayFunction(masm, rbx); 855 __ cmpq(rdi, rbx); 856 __ Check(equal, "Unexpected Array function"); 857 // Initial map for the builtin Array function should be a map. 858 __ movq(rbx, FieldOperand(rdi, JSFunction::kPrototypeOrInitialMapOffset)); 859 // Will both indicate a NULL and a Smi. 860 ASSERT(kSmiTag == 0); 861 Condition not_smi = NegateCondition(masm->CheckSmi(rbx)); 862 __ Check(not_smi, "Unexpected initial map for Array function"); 863 __ CmpObjectType(rbx, MAP_TYPE, rcx); 864 __ Check(equal, "Unexpected initial map for Array function"); 865 } 866 867 // Run the native code for the Array function called as constructor. 868 ArrayNativeCode(masm, &generic_constructor); 869 870 // Jump to the generic construct code in case the specialized code cannot 871 // handle the construction. 872 __ bind(&generic_constructor); 873 Code* code = Builtins::builtin(Builtins::JSConstructStubGeneric); 874 Handle<Code> generic_construct_stub(code); 875 __ Jump(generic_construct_stub, RelocInfo::CODE_TARGET); 876} 877 878 879void Builtins::Generate_JSConstructCall(MacroAssembler* masm) { 880 // ----------- S t a t e ------------- 881 // -- rax: number of arguments 882 // -- rdi: constructor function 883 // ----------------------------------- 884 885 Label non_function_call; 886 // Check that function is not a smi. 887 __ JumpIfSmi(rdi, &non_function_call); 888 // Check that function is a JSFunction. 889 __ CmpObjectType(rdi, JS_FUNCTION_TYPE, rcx); 890 __ j(not_equal, &non_function_call); 891 892 // Jump to the function-specific construct stub. 893 __ movq(rbx, FieldOperand(rdi, JSFunction::kSharedFunctionInfoOffset)); 894 __ movq(rbx, FieldOperand(rbx, SharedFunctionInfo::kConstructStubOffset)); 895 __ lea(rbx, FieldOperand(rbx, Code::kHeaderSize)); 896 __ jmp(rbx); 897 898 // rdi: called object 899 // rax: number of arguments 900 __ bind(&non_function_call); 901 // CALL_NON_FUNCTION expects the non-function constructor as receiver 902 // (instead of the original receiver from the call site). The receiver is 903 // stack element argc+1. 904 __ movq(Operand(rsp, rax, times_pointer_size, kPointerSize), rdi); 905 // Set expected number of arguments to zero (not changing rax). 906 __ movq(rbx, Immediate(0)); 907 __ GetBuiltinEntry(rdx, Builtins::CALL_NON_FUNCTION_AS_CONSTRUCTOR); 908 __ Jump(Handle<Code>(builtin(ArgumentsAdaptorTrampoline)), 909 RelocInfo::CODE_TARGET); 910} 911 912 913static void Generate_JSConstructStubHelper(MacroAssembler* masm, 914 bool is_api_function) { 915 // Enter a construct frame. 916 __ EnterConstructFrame(); 917 918 // Store a smi-tagged arguments count on the stack. 919 __ Integer32ToSmi(rax, rax); 920 __ push(rax); 921 922 // Push the function to invoke on the stack. 923 __ push(rdi); 924 925 // Try to allocate the object without transitioning into C code. If any of the 926 // preconditions is not met, the code bails out to the runtime call. 927 Label rt_call, allocated; 928 if (FLAG_inline_new) { 929 Label undo_allocation; 930 931#ifdef ENABLE_DEBUGGER_SUPPORT 932 ExternalReference debug_step_in_fp = 933 ExternalReference::debug_step_in_fp_address(); 934 __ movq(kScratchRegister, debug_step_in_fp); 935 __ cmpq(Operand(kScratchRegister, 0), Immediate(0)); 936 __ j(not_equal, &rt_call); 937#endif 938 939 // Verified that the constructor is a JSFunction. 940 // Load the initial map and verify that it is in fact a map. 941 // rdi: constructor 942 __ movq(rax, FieldOperand(rdi, JSFunction::kPrototypeOrInitialMapOffset)); 943 // Will both indicate a NULL and a Smi 944 ASSERT(kSmiTag == 0); 945 __ JumpIfSmi(rax, &rt_call); 946 // rdi: constructor 947 // rax: initial map (if proven valid below) 948 __ CmpObjectType(rax, MAP_TYPE, rbx); 949 __ j(not_equal, &rt_call); 950 951 // Check that the constructor is not constructing a JSFunction (see comments 952 // in Runtime_NewObject in runtime.cc). In which case the initial map's 953 // instance type would be JS_FUNCTION_TYPE. 954 // rdi: constructor 955 // rax: initial map 956 __ CmpInstanceType(rax, JS_FUNCTION_TYPE); 957 __ j(equal, &rt_call); 958 959 // Now allocate the JSObject on the heap. 960 __ movzxbq(rdi, FieldOperand(rax, Map::kInstanceSizeOffset)); 961 __ shl(rdi, Immediate(kPointerSizeLog2)); 962 // rdi: size of new object 963 __ AllocateInNewSpace(rdi, 964 rbx, 965 rdi, 966 no_reg, 967 &rt_call, 968 NO_ALLOCATION_FLAGS); 969 // Allocated the JSObject, now initialize the fields. 970 // rax: initial map 971 // rbx: JSObject (not HeapObject tagged - the actual address). 972 // rdi: start of next object 973 __ movq(Operand(rbx, JSObject::kMapOffset), rax); 974 __ LoadRoot(rcx, Heap::kEmptyFixedArrayRootIndex); 975 __ movq(Operand(rbx, JSObject::kPropertiesOffset), rcx); 976 __ movq(Operand(rbx, JSObject::kElementsOffset), rcx); 977 // Set extra fields in the newly allocated object. 978 // rax: initial map 979 // rbx: JSObject 980 // rdi: start of next object 981 { Label loop, entry; 982 __ LoadRoot(rdx, Heap::kUndefinedValueRootIndex); 983 __ lea(rcx, Operand(rbx, JSObject::kHeaderSize)); 984 __ jmp(&entry); 985 __ bind(&loop); 986 __ movq(Operand(rcx, 0), rdx); 987 __ addq(rcx, Immediate(kPointerSize)); 988 __ bind(&entry); 989 __ cmpq(rcx, rdi); 990 __ j(less, &loop); 991 } 992 993 // Add the object tag to make the JSObject real, so that we can continue and 994 // jump into the continuation code at any time from now on. Any failures 995 // need to undo the allocation, so that the heap is in a consistent state 996 // and verifiable. 997 // rax: initial map 998 // rbx: JSObject 999 // rdi: start of next object 1000 __ or_(rbx, Immediate(kHeapObjectTag)); 1001 1002 // Check if a non-empty properties array is needed. 1003 // Allocate and initialize a FixedArray if it is. 1004 // rax: initial map 1005 // rbx: JSObject 1006 // rdi: start of next object 1007 // Calculate total properties described map. 1008 __ movzxbq(rdx, FieldOperand(rax, Map::kUnusedPropertyFieldsOffset)); 1009 __ movzxbq(rcx, FieldOperand(rax, Map::kPreAllocatedPropertyFieldsOffset)); 1010 __ addq(rdx, rcx); 1011 // Calculate unused properties past the end of the in-object properties. 1012 __ movzxbq(rcx, FieldOperand(rax, Map::kInObjectPropertiesOffset)); 1013 __ subq(rdx, rcx); 1014 // Done if no extra properties are to be allocated. 1015 __ j(zero, &allocated); 1016 __ Assert(positive, "Property allocation count failed."); 1017 1018 // Scale the number of elements by pointer size and add the header for 1019 // FixedArrays to the start of the next object calculation from above. 1020 // rbx: JSObject 1021 // rdi: start of next object (will be start of FixedArray) 1022 // rdx: number of elements in properties array 1023 __ AllocateInNewSpace(FixedArray::kHeaderSize, 1024 times_pointer_size, 1025 rdx, 1026 rdi, 1027 rax, 1028 no_reg, 1029 &undo_allocation, 1030 RESULT_CONTAINS_TOP); 1031 1032 // Initialize the FixedArray. 1033 // rbx: JSObject 1034 // rdi: FixedArray 1035 // rdx: number of elements 1036 // rax: start of next object 1037 __ LoadRoot(rcx, Heap::kFixedArrayMapRootIndex); 1038 __ movq(Operand(rdi, HeapObject::kMapOffset), rcx); // setup the map 1039 __ Integer32ToSmi(rdx, rdx); 1040 __ movq(Operand(rdi, FixedArray::kLengthOffset), rdx); // and length 1041 1042 // Initialize the fields to undefined. 1043 // rbx: JSObject 1044 // rdi: FixedArray 1045 // rax: start of next object 1046 // rdx: number of elements 1047 { Label loop, entry; 1048 __ LoadRoot(rdx, Heap::kUndefinedValueRootIndex); 1049 __ lea(rcx, Operand(rdi, FixedArray::kHeaderSize)); 1050 __ jmp(&entry); 1051 __ bind(&loop); 1052 __ movq(Operand(rcx, 0), rdx); 1053 __ addq(rcx, Immediate(kPointerSize)); 1054 __ bind(&entry); 1055 __ cmpq(rcx, rax); 1056 __ j(below, &loop); 1057 } 1058 1059 // Store the initialized FixedArray into the properties field of 1060 // the JSObject 1061 // rbx: JSObject 1062 // rdi: FixedArray 1063 __ or_(rdi, Immediate(kHeapObjectTag)); // add the heap tag 1064 __ movq(FieldOperand(rbx, JSObject::kPropertiesOffset), rdi); 1065 1066 1067 // Continue with JSObject being successfully allocated 1068 // rbx: JSObject 1069 __ jmp(&allocated); 1070 1071 // Undo the setting of the new top so that the heap is verifiable. For 1072 // example, the map's unused properties potentially do not match the 1073 // allocated objects unused properties. 1074 // rbx: JSObject (previous new top) 1075 __ bind(&undo_allocation); 1076 __ UndoAllocationInNewSpace(rbx); 1077 } 1078 1079 // Allocate the new receiver object using the runtime call. 1080 // rdi: function (constructor) 1081 __ bind(&rt_call); 1082 // Must restore rdi (constructor) before calling runtime. 1083 __ movq(rdi, Operand(rsp, 0)); 1084 __ push(rdi); 1085 __ CallRuntime(Runtime::kNewObject, 1); 1086 __ movq(rbx, rax); // store result in rbx 1087 1088 // New object allocated. 1089 // rbx: newly allocated object 1090 __ bind(&allocated); 1091 // Retrieve the function from the stack. 1092 __ pop(rdi); 1093 1094 // Retrieve smi-tagged arguments count from the stack. 1095 __ movq(rax, Operand(rsp, 0)); 1096 __ SmiToInteger32(rax, rax); 1097 1098 // Push the allocated receiver to the stack. We need two copies 1099 // because we may have to return the original one and the calling 1100 // conventions dictate that the called function pops the receiver. 1101 __ push(rbx); 1102 __ push(rbx); 1103 1104 // Setup pointer to last argument. 1105 __ lea(rbx, Operand(rbp, StandardFrameConstants::kCallerSPOffset)); 1106 1107 // Copy arguments and receiver to the expression stack. 1108 Label loop, entry; 1109 __ movq(rcx, rax); 1110 __ jmp(&entry); 1111 __ bind(&loop); 1112 __ push(Operand(rbx, rcx, times_pointer_size, 0)); 1113 __ bind(&entry); 1114 __ decq(rcx); 1115 __ j(greater_equal, &loop); 1116 1117 // Call the function. 1118 if (is_api_function) { 1119 __ movq(rsi, FieldOperand(rdi, JSFunction::kContextOffset)); 1120 Handle<Code> code = Handle<Code>( 1121 Builtins::builtin(Builtins::HandleApiCallConstruct)); 1122 ParameterCount expected(0); 1123 __ InvokeCode(code, expected, expected, 1124 RelocInfo::CODE_TARGET, CALL_FUNCTION); 1125 } else { 1126 ParameterCount actual(rax); 1127 __ InvokeFunction(rdi, actual, CALL_FUNCTION); 1128 } 1129 1130 // Restore context from the frame. 1131 __ movq(rsi, Operand(rbp, StandardFrameConstants::kContextOffset)); 1132 1133 // If the result is an object (in the ECMA sense), we should get rid 1134 // of the receiver and use the result; see ECMA-262 section 13.2.2-7 1135 // on page 74. 1136 Label use_receiver, exit; 1137 // If the result is a smi, it is *not* an object in the ECMA sense. 1138 __ JumpIfSmi(rax, &use_receiver); 1139 1140 // If the type of the result (stored in its map) is less than 1141 // FIRST_JS_OBJECT_TYPE, it is not an object in the ECMA sense. 1142 __ CmpObjectType(rax, FIRST_JS_OBJECT_TYPE, rcx); 1143 __ j(above_equal, &exit); 1144 1145 // Throw away the result of the constructor invocation and use the 1146 // on-stack receiver as the result. 1147 __ bind(&use_receiver); 1148 __ movq(rax, Operand(rsp, 0)); 1149 1150 // Restore the arguments count and leave the construct frame. 1151 __ bind(&exit); 1152 __ movq(rbx, Operand(rsp, kPointerSize)); // get arguments count 1153 __ LeaveConstructFrame(); 1154 1155 // Remove caller arguments from the stack and return. 1156 __ pop(rcx); 1157 SmiIndex index = masm->SmiToIndex(rbx, rbx, kPointerSizeLog2); 1158 __ lea(rsp, Operand(rsp, index.reg, index.scale, 1 * kPointerSize)); 1159 __ push(rcx); 1160 __ IncrementCounter(&Counters::constructed_objects, 1); 1161 __ ret(0); 1162} 1163 1164 1165void Builtins::Generate_JSConstructStubGeneric(MacroAssembler* masm) { 1166 Generate_JSConstructStubHelper(masm, false); 1167} 1168 1169 1170void Builtins::Generate_JSConstructStubApi(MacroAssembler* masm) { 1171 Generate_JSConstructStubHelper(masm, true); 1172} 1173 1174 1175static void Generate_JSEntryTrampolineHelper(MacroAssembler* masm, 1176 bool is_construct) { 1177 // Expects five C++ function parameters. 1178 // - Address entry (ignored) 1179 // - JSFunction* function ( 1180 // - Object* receiver 1181 // - int argc 1182 // - Object*** argv 1183 // (see Handle::Invoke in execution.cc). 1184 1185 // Platform specific argument handling. After this, the stack contains 1186 // an internal frame and the pushed function and receiver, and 1187 // register rax and rbx holds the argument count and argument array, 1188 // while rdi holds the function pointer and rsi the context. 1189#ifdef _WIN64 1190 // MSVC parameters in: 1191 // rcx : entry (ignored) 1192 // rdx : function 1193 // r8 : receiver 1194 // r9 : argc 1195 // [rsp+0x20] : argv 1196 1197 // Clear the context before we push it when entering the JS frame. 1198 __ xor_(rsi, rsi); 1199 __ EnterInternalFrame(); 1200 1201 // Load the function context into rsi. 1202 __ movq(rsi, FieldOperand(rdx, JSFunction::kContextOffset)); 1203 1204 // Push the function and the receiver onto the stack. 1205 __ push(rdx); 1206 __ push(r8); 1207 1208 // Load the number of arguments and setup pointer to the arguments. 1209 __ movq(rax, r9); 1210 // Load the previous frame pointer to access C argument on stack 1211 __ movq(kScratchRegister, Operand(rbp, 0)); 1212 __ movq(rbx, Operand(kScratchRegister, EntryFrameConstants::kArgvOffset)); 1213 // Load the function pointer into rdi. 1214 __ movq(rdi, rdx); 1215#else // _WIN64 1216 // GCC parameters in: 1217 // rdi : entry (ignored) 1218 // rsi : function 1219 // rdx : receiver 1220 // rcx : argc 1221 // r8 : argv 1222 1223 __ movq(rdi, rsi); 1224 // rdi : function 1225 1226 // Clear the context before we push it when entering the JS frame. 1227 __ xor_(rsi, rsi); 1228 // Enter an internal frame. 1229 __ EnterInternalFrame(); 1230 1231 // Push the function and receiver and setup the context. 1232 __ push(rdi); 1233 __ push(rdx); 1234 __ movq(rsi, FieldOperand(rdi, JSFunction::kContextOffset)); 1235 1236 // Load the number of arguments and setup pointer to the arguments. 1237 __ movq(rax, rcx); 1238 __ movq(rbx, r8); 1239#endif // _WIN64 1240 1241 // Current stack contents: 1242 // [rsp + 2 * kPointerSize ... ]: Internal frame 1243 // [rsp + kPointerSize] : function 1244 // [rsp] : receiver 1245 // Current register contents: 1246 // rax : argc 1247 // rbx : argv 1248 // rsi : context 1249 // rdi : function 1250 1251 // Copy arguments to the stack in a loop. 1252 // Register rbx points to array of pointers to handle locations. 1253 // Push the values of these handles. 1254 Label loop, entry; 1255 __ xor_(rcx, rcx); // Set loop variable to 0. 1256 __ jmp(&entry); 1257 __ bind(&loop); 1258 __ movq(kScratchRegister, Operand(rbx, rcx, times_pointer_size, 0)); 1259 __ push(Operand(kScratchRegister, 0)); // dereference handle 1260 __ addq(rcx, Immediate(1)); 1261 __ bind(&entry); 1262 __ cmpq(rcx, rax); 1263 __ j(not_equal, &loop); 1264 1265 // Invoke the code. 1266 if (is_construct) { 1267 // Expects rdi to hold function pointer. 1268 __ Call(Handle<Code>(Builtins::builtin(Builtins::JSConstructCall)), 1269 RelocInfo::CODE_TARGET); 1270 } else { 1271 ParameterCount actual(rax); 1272 // Function must be in rdi. 1273 __ InvokeFunction(rdi, actual, CALL_FUNCTION); 1274 } 1275 1276 // Exit the JS frame. Notice that this also removes the empty 1277 // context and the function left on the stack by the code 1278 // invocation. 1279 __ LeaveInternalFrame(); 1280 // TODO(X64): Is argument correct? Is there a receiver to remove? 1281 __ ret(1 * kPointerSize); // remove receiver 1282} 1283 1284 1285void Builtins::Generate_JSEntryTrampoline(MacroAssembler* masm) { 1286 Generate_JSEntryTrampolineHelper(masm, false); 1287} 1288 1289 1290void Builtins::Generate_JSConstructEntryTrampoline(MacroAssembler* masm) { 1291 Generate_JSEntryTrampolineHelper(masm, true); 1292} 1293 1294 1295void Builtins::Generate_LazyCompile(MacroAssembler* masm) { 1296 // Enter an internal frame. 1297 __ EnterInternalFrame(); 1298 1299 // Push a copy of the function onto the stack. 1300 __ push(rdi); 1301 1302 __ push(rdi); // Function is also the parameter to the runtime call. 1303 __ CallRuntime(Runtime::kLazyCompile, 1); 1304 __ pop(rdi); 1305 1306 // Tear down temporary frame. 1307 __ LeaveInternalFrame(); 1308 1309 // Do a tail-call of the compiled function. 1310 __ lea(rcx, FieldOperand(rax, Code::kHeaderSize)); 1311 __ jmp(rcx); 1312} 1313 1314} } // namespace v8::internal 1315 1316#endif // V8_TARGET_ARCH_X64 1317