blob: 76089dc25704a22ba35db6432b91cb2d6bf7e82b [file] [log] [blame]
ager@chromium.org0ee099b2011-01-25 14:06:47 +00001// Copyright 2011 the V8 project authors. All rights reserved.
ricow@chromium.org65fae842010-08-25 15:26:24 +00002// Redistribution and use in source and binary forms, with or without
3// modification, are permitted provided that the following conditions are
4// met:
5//
6// * Redistributions of source code must retain the above copyright
7// notice, this list of conditions and the following disclaimer.
8// * Redistributions in binary form must reproduce the above
9// copyright notice, this list of conditions and the following
10// disclaimer in the documentation and/or other materials provided
11// with the distribution.
12// * Neither the name of Google Inc. nor the names of its
13// contributors may be used to endorse or promote products derived
14// from this software without specific prior written permission.
15//
16// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
17// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
18// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
19// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
20// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
21// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
22// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
23// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
24// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
25// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
26// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27
28#include "v8.h"
29
30#if defined(V8_TARGET_ARCH_IA32)
31
32#include "bootstrapper.h"
vegorov@chromium.org7304bca2011-05-16 12:14:13 +000033#include "code-stubs.h"
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +000034#include "isolate.h"
vegorov@chromium.org7304bca2011-05-16 12:14:13 +000035#include "jsregexp.h"
ricow@chromium.org65fae842010-08-25 15:26:24 +000036#include "regexp-macro-assembler.h"
37
38namespace v8 {
39namespace internal {
40
41#define __ ACCESS_MASM(masm)
whesse@chromium.org7a392b32011-01-31 11:30:36 +000042
43void ToNumberStub::Generate(MacroAssembler* masm) {
44 // The ToNumber stub takes one argument in eax.
karlklose@chromium.org83a47282011-05-11 11:54:09 +000045 Label check_heap_number, call_builtin;
whesse@chromium.org7b260152011-06-20 15:33:18 +000046 __ JumpIfNotSmi(eax, &check_heap_number, Label::kNear);
whesse@chromium.org7a392b32011-01-31 11:30:36 +000047 __ ret(0);
48
49 __ bind(&check_heap_number);
50 __ mov(ebx, FieldOperand(eax, HeapObject::kMapOffset));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +000051 Factory* factory = masm->isolate()->factory();
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +000052 __ cmp(ebx, Immediate(factory->heap_number_map()));
karlklose@chromium.org83a47282011-05-11 11:54:09 +000053 __ j(not_equal, &call_builtin, Label::kNear);
whesse@chromium.org7a392b32011-01-31 11:30:36 +000054 __ ret(0);
55
56 __ bind(&call_builtin);
57 __ pop(ecx); // Pop return address.
58 __ push(eax);
59 __ push(ecx); // Push return address.
60 __ InvokeBuiltin(Builtins::TO_NUMBER, JUMP_FUNCTION);
61}
62
63
ricow@chromium.org65fae842010-08-25 15:26:24 +000064void FastNewClosureStub::Generate(MacroAssembler* masm) {
65 // Create a new closure from the given function info in new
66 // space. Set the context to the current context in esi.
67 Label gc;
68 __ AllocateInNewSpace(JSFunction::kSize, eax, ebx, ecx, &gc, TAG_OBJECT);
69
70 // Get the function info from the stack.
71 __ mov(edx, Operand(esp, 1 * kPointerSize));
72
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +000073 int map_index = strict_mode_ == kStrictMode
74 ? Context::STRICT_MODE_FUNCTION_MAP_INDEX
75 : Context::FUNCTION_MAP_INDEX;
76
ricow@chromium.org65fae842010-08-25 15:26:24 +000077 // Compute the function map in the current global context and set that
78 // as the map of the allocated object.
79 __ mov(ecx, Operand(esi, Context::SlotOffset(Context::GLOBAL_INDEX)));
80 __ mov(ecx, FieldOperand(ecx, GlobalObject::kGlobalContextOffset));
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +000081 __ mov(ecx, Operand(ecx, Context::SlotOffset(map_index)));
ricow@chromium.org65fae842010-08-25 15:26:24 +000082 __ mov(FieldOperand(eax, JSObject::kMapOffset), ecx);
83
84 // Initialize the rest of the function. We don't have to update the
85 // write barrier because the allocated object is in new space.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +000086 Factory* factory = masm->isolate()->factory();
87 __ mov(ebx, Immediate(factory->empty_fixed_array()));
ricow@chromium.org65fae842010-08-25 15:26:24 +000088 __ mov(FieldOperand(eax, JSObject::kPropertiesOffset), ebx);
89 __ mov(FieldOperand(eax, JSObject::kElementsOffset), ebx);
90 __ mov(FieldOperand(eax, JSFunction::kPrototypeOrInitialMapOffset),
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +000091 Immediate(factory->the_hole_value()));
ricow@chromium.org65fae842010-08-25 15:26:24 +000092 __ mov(FieldOperand(eax, JSFunction::kSharedFunctionInfoOffset), edx);
93 __ mov(FieldOperand(eax, JSFunction::kContextOffset), esi);
94 __ mov(FieldOperand(eax, JSFunction::kLiteralsOffset), ebx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +000095 __ mov(FieldOperand(eax, JSFunction::kNextFunctionLinkOffset),
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +000096 Immediate(factory->undefined_value()));
ricow@chromium.org65fae842010-08-25 15:26:24 +000097
98 // Initialize the code pointer in the function to be the one
99 // found in the shared function info object.
100 __ mov(edx, FieldOperand(edx, SharedFunctionInfo::kCodeOffset));
101 __ lea(edx, FieldOperand(edx, Code::kHeaderSize));
102 __ mov(FieldOperand(eax, JSFunction::kCodeEntryOffset), edx);
103
104 // Return and remove the on-stack parameter.
105 __ ret(1 * kPointerSize);
106
107 // Create a new closure through the slower runtime call.
108 __ bind(&gc);
109 __ pop(ecx); // Temporarily remove return address.
110 __ pop(edx);
111 __ push(esi);
112 __ push(edx);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +0000113 __ push(Immediate(factory->false_value()));
ricow@chromium.org65fae842010-08-25 15:26:24 +0000114 __ push(ecx); // Restore return address.
vegorov@chromium.org21b5e952010-11-23 10:24:40 +0000115 __ TailCallRuntime(Runtime::kNewClosure, 3, 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +0000116}
117
118
119void FastNewContextStub::Generate(MacroAssembler* masm) {
120 // Try to allocate the context in new space.
121 Label gc;
ager@chromium.org0ee099b2011-01-25 14:06:47 +0000122 int length = slots_ + Context::MIN_CONTEXT_SLOTS;
123 __ AllocateInNewSpace((length * kPointerSize) + FixedArray::kHeaderSize,
ricow@chromium.org65fae842010-08-25 15:26:24 +0000124 eax, ebx, ecx, &gc, TAG_OBJECT);
125
126 // Get the function from the stack.
127 __ mov(ecx, Operand(esp, 1 * kPointerSize));
128
129 // Setup the object header.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +0000130 Factory* factory = masm->isolate()->factory();
svenpanne@chromium.org6d786c92011-06-15 10:58:27 +0000131 __ mov(FieldOperand(eax, HeapObject::kMapOffset),
132 factory->function_context_map());
ricow@chromium.org65fae842010-08-25 15:26:24 +0000133 __ mov(FieldOperand(eax, Context::kLengthOffset),
ager@chromium.org0ee099b2011-01-25 14:06:47 +0000134 Immediate(Smi::FromInt(length)));
ricow@chromium.org65fae842010-08-25 15:26:24 +0000135
136 // Setup the fixed slots.
lrn@chromium.org5d00b602011-01-05 09:51:43 +0000137 __ Set(ebx, Immediate(0)); // Set to NULL.
ricow@chromium.org65fae842010-08-25 15:26:24 +0000138 __ mov(Operand(eax, Context::SlotOffset(Context::CLOSURE_INDEX)), ecx);
svenpanne@chromium.org6d786c92011-06-15 10:58:27 +0000139 __ mov(Operand(eax, Context::SlotOffset(Context::PREVIOUS_INDEX)), esi);
ricow@chromium.org65fae842010-08-25 15:26:24 +0000140 __ mov(Operand(eax, Context::SlotOffset(Context::EXTENSION_INDEX)), ebx);
141
svenpanne@chromium.org6d786c92011-06-15 10:58:27 +0000142 // Copy the global object from the previous context.
143 __ mov(ebx, Operand(esi, Context::SlotOffset(Context::GLOBAL_INDEX)));
ricow@chromium.org65fae842010-08-25 15:26:24 +0000144 __ mov(Operand(eax, Context::SlotOffset(Context::GLOBAL_INDEX)), ebx);
145
146 // Initialize the rest of the slots to undefined.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +0000147 __ mov(ebx, factory->undefined_value());
ager@chromium.org0ee099b2011-01-25 14:06:47 +0000148 for (int i = Context::MIN_CONTEXT_SLOTS; i < length; i++) {
ricow@chromium.org65fae842010-08-25 15:26:24 +0000149 __ mov(Operand(eax, Context::SlotOffset(i)), ebx);
150 }
151
152 // Return and remove the on-stack parameter.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000153 __ mov(esi, eax);
ricow@chromium.org65fae842010-08-25 15:26:24 +0000154 __ ret(1 * kPointerSize);
155
156 // Need to collect. Call into runtime system.
157 __ bind(&gc);
svenpanne@chromium.org6d786c92011-06-15 10:58:27 +0000158 __ TailCallRuntime(Runtime::kNewFunctionContext, 1, 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +0000159}
160
161
162void FastCloneShallowArrayStub::Generate(MacroAssembler* masm) {
163 // Stack layout on entry:
164 //
165 // [esp + kPointerSize]: constant elements.
166 // [esp + (2 * kPointerSize)]: literal index.
167 // [esp + (3 * kPointerSize)]: literals array.
168
169 // All sizes here are multiples of kPointerSize.
170 int elements_size = (length_ > 0) ? FixedArray::SizeFor(length_) : 0;
171 int size = JSArray::kSize + elements_size;
172
173 // Load boilerplate object into ecx and check if we need to create a
174 // boilerplate.
175 Label slow_case;
176 __ mov(ecx, Operand(esp, 3 * kPointerSize));
177 __ mov(eax, Operand(esp, 2 * kPointerSize));
178 STATIC_ASSERT(kPointerSize == 4);
179 STATIC_ASSERT(kSmiTagSize == 1);
180 STATIC_ASSERT(kSmiTag == 0);
ricow@chromium.orgd236f4d2010-09-01 06:52:08 +0000181 __ mov(ecx, FieldOperand(ecx, eax, times_half_pointer_size,
182 FixedArray::kHeaderSize));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +0000183 Factory* factory = masm->isolate()->factory();
184 __ cmp(ecx, factory->undefined_value());
ricow@chromium.org65fae842010-08-25 15:26:24 +0000185 __ j(equal, &slow_case);
186
187 if (FLAG_debug_code) {
188 const char* message;
189 Handle<Map> expected_map;
190 if (mode_ == CLONE_ELEMENTS) {
191 message = "Expected (writable) fixed array";
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +0000192 expected_map = factory->fixed_array_map();
ricow@chromium.org65fae842010-08-25 15:26:24 +0000193 } else {
194 ASSERT(mode_ == COPY_ON_WRITE_ELEMENTS);
195 message = "Expected copy-on-write fixed array";
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +0000196 expected_map = factory->fixed_cow_array_map();
ricow@chromium.org65fae842010-08-25 15:26:24 +0000197 }
198 __ push(ecx);
199 __ mov(ecx, FieldOperand(ecx, JSArray::kElementsOffset));
200 __ cmp(FieldOperand(ecx, HeapObject::kMapOffset), expected_map);
201 __ Assert(equal, message);
202 __ pop(ecx);
203 }
204
205 // Allocate both the JS array and the elements array in one big
206 // allocation. This avoids multiple limit checks.
207 __ AllocateInNewSpace(size, eax, ebx, edx, &slow_case, TAG_OBJECT);
208
209 // Copy the JS array part.
210 for (int i = 0; i < JSArray::kSize; i += kPointerSize) {
211 if ((i != JSArray::kElementsOffset) || (length_ == 0)) {
212 __ mov(ebx, FieldOperand(ecx, i));
213 __ mov(FieldOperand(eax, i), ebx);
214 }
215 }
216
217 if (length_ > 0) {
218 // Get hold of the elements array of the boilerplate and setup the
219 // elements pointer in the resulting object.
220 __ mov(ecx, FieldOperand(ecx, JSArray::kElementsOffset));
221 __ lea(edx, Operand(eax, JSArray::kSize));
222 __ mov(FieldOperand(eax, JSArray::kElementsOffset), edx);
223
224 // Copy the elements array.
225 for (int i = 0; i < elements_size; i += kPointerSize) {
226 __ mov(ebx, FieldOperand(ecx, i));
227 __ mov(FieldOperand(edx, i), ebx);
228 }
229 }
230
231 // Return and remove the on-stack parameters.
232 __ ret(3 * kPointerSize);
233
234 __ bind(&slow_case);
235 __ TailCallRuntime(Runtime::kCreateArrayLiteralShallow, 3, 1);
236}
237
238
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000239// The stub expects its argument on the stack and returns its result in tos_:
240// zero for false, and a non-zero value for true.
ricow@chromium.org65fae842010-08-25 15:26:24 +0000241void ToBooleanStub::Generate(MacroAssembler* masm) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000242 // This stub overrides SometimesSetsUpAFrame() to return false. That means
243 // we cannot call anything that could cause a GC from this stub.
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000244 Label patch;
ager@chromium.orgea91cc52011-05-23 06:06:11 +0000245 Factory* factory = masm->isolate()->factory();
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000246 const Register argument = eax;
lrn@chromium.orgac2828d2011-06-23 06:29:21 +0000247 const Register map = edx;
248
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000249 if (!types_.IsEmpty()) {
250 __ mov(argument, Operand(esp, 1 * kPointerSize));
251 }
ager@chromium.orgea91cc52011-05-23 06:06:11 +0000252
253 // undefined -> false
whesse@chromium.org4acdc2c2011-08-15 13:01:23 +0000254 CheckOddball(masm, UNDEFINED, Heap::kUndefinedValueRootIndex, false);
ager@chromium.orgea91cc52011-05-23 06:06:11 +0000255
256 // Boolean -> its value
whesse@chromium.org4acdc2c2011-08-15 13:01:23 +0000257 CheckOddball(masm, BOOLEAN, Heap::kFalseValueRootIndex, false);
258 CheckOddball(masm, BOOLEAN, Heap::kTrueValueRootIndex, true);
ricow@chromium.org65fae842010-08-25 15:26:24 +0000259
lrn@chromium.orgac2828d2011-06-23 06:29:21 +0000260 // 'null' -> false.
whesse@chromium.org4acdc2c2011-08-15 13:01:23 +0000261 CheckOddball(masm, NULL_TYPE, Heap::kNullValueRootIndex, false);
ricow@chromium.org65fae842010-08-25 15:26:24 +0000262
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000263 if (types_.Contains(SMI)) {
264 // Smis: 0 -> false, all other -> true
265 Label not_smi;
266 __ JumpIfNotSmi(argument, &not_smi, Label::kNear);
whesse@chromium.org4acdc2c2011-08-15 13:01:23 +0000267 // argument contains the correct return value already.
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000268 if (!tos_.is(argument)) {
269 __ mov(tos_, argument);
270 }
271 __ ret(1 * kPointerSize);
272 __ bind(&not_smi);
vegorov@chromium.org7943d462011-08-01 11:41:52 +0000273 } else if (types_.NeedsMap()) {
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000274 // If we need a map later and have a Smi -> patch.
275 __ JumpIfSmi(argument, &patch, Label::kNear);
276 }
ricow@chromium.org65fae842010-08-25 15:26:24 +0000277
vegorov@chromium.org7943d462011-08-01 11:41:52 +0000278 if (types_.NeedsMap()) {
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000279 __ mov(map, FieldOperand(argument, HeapObject::kMapOffset));
ricow@chromium.org65fae842010-08-25 15:26:24 +0000280
whesse@chromium.org4acdc2c2011-08-15 13:01:23 +0000281 if (types_.CanBeUndetectable()) {
282 __ test_b(FieldOperand(map, Map::kBitFieldOffset),
283 1 << Map::kIsUndetectable);
284 // Undetectable -> false.
285 Label not_undetectable;
286 __ j(zero, &not_undetectable, Label::kNear);
287 __ Set(tos_, Immediate(0));
288 __ ret(1 * kPointerSize);
289 __ bind(&not_undetectable);
290 }
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000291 }
ricow@chromium.org65fae842010-08-25 15:26:24 +0000292
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000293 if (types_.Contains(SPEC_OBJECT)) {
294 // spec object -> true.
295 Label not_js_object;
296 __ CmpInstanceType(map, FIRST_SPEC_OBJECT_TYPE);
297 __ j(below, &not_js_object, Label::kNear);
whesse@chromium.org4acdc2c2011-08-15 13:01:23 +0000298 // argument contains the correct return value already.
299 if (!tos_.is(argument)) {
300 __ Set(tos_, Immediate(1));
301 }
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000302 __ ret(1 * kPointerSize);
303 __ bind(&not_js_object);
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000304 }
ricow@chromium.org65fae842010-08-25 15:26:24 +0000305
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000306 if (types_.Contains(STRING)) {
307 // String value -> false iff empty.
308 Label not_string;
309 __ CmpInstanceType(map, FIRST_NONSTRING_TYPE);
310 __ j(above_equal, &not_string, Label::kNear);
311 __ mov(tos_, FieldOperand(argument, String::kLengthOffset));
312 __ ret(1 * kPointerSize); // the string length is OK as the return value
313 __ bind(&not_string);
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000314 }
315
316 if (types_.Contains(HEAP_NUMBER)) {
317 // heap number -> false iff +0, -0, or NaN.
318 Label not_heap_number, false_result;
319 __ cmp(map, factory->heap_number_map());
320 __ j(not_equal, &not_heap_number, Label::kNear);
321 __ fldz();
322 __ fld_d(FieldOperand(argument, HeapNumber::kValueOffset));
323 __ FCmp();
324 __ j(zero, &false_result, Label::kNear);
whesse@chromium.org4acdc2c2011-08-15 13:01:23 +0000325 // argument contains the correct return value already.
326 if (!tos_.is(argument)) {
327 __ Set(tos_, Immediate(1));
328 }
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000329 __ ret(1 * kPointerSize);
330 __ bind(&false_result);
331 __ Set(tos_, Immediate(0));
332 __ ret(1 * kPointerSize);
333 __ bind(&not_heap_number);
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000334 }
335
whesse@chromium.org4acdc2c2011-08-15 13:01:23 +0000336 __ bind(&patch);
337 GenerateTypeTransition(masm);
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000338}
339
340
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000341void StoreBufferOverflowStub::Generate(MacroAssembler* masm) {
342 // We don't allow a GC during a store buffer overflow so there is no need to
343 // store the registers in any particular way, but we do have to store and
344 // restore them.
345 __ pushad();
346 if (save_doubles_ == kSaveFPRegs) {
347 CpuFeatures::Scope scope(SSE2);
348 __ sub(esp, Immediate(kDoubleSize * XMMRegister::kNumRegisters));
349 for (int i = 0; i < XMMRegister::kNumRegisters; i++) {
350 XMMRegister reg = XMMRegister::from_code(i);
351 __ movdbl(Operand(esp, i * kDoubleSize), reg);
352 }
353 }
354 const int argument_count = 1;
355
356 AllowExternalCallThatCantCauseGC scope(masm);
357 __ PrepareCallCFunction(argument_count, ecx);
358 __ mov(Operand(esp, 0 * kPointerSize),
359 Immediate(ExternalReference::isolate_address()));
360 __ CallCFunction(
361 ExternalReference::store_buffer_overflow_function(masm->isolate()),
362 argument_count);
363 if (save_doubles_ == kSaveFPRegs) {
364 CpuFeatures::Scope scope(SSE2);
365 for (int i = 0; i < XMMRegister::kNumRegisters; i++) {
366 XMMRegister reg = XMMRegister::from_code(i);
367 __ movdbl(reg, Operand(esp, i * kDoubleSize));
368 }
369 __ add(esp, Immediate(kDoubleSize * XMMRegister::kNumRegisters));
370 }
371 __ popad();
372 __ ret(0);
373}
374
375
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000376void ToBooleanStub::CheckOddball(MacroAssembler* masm,
377 Type type,
lrn@chromium.orgd4e9e222011-08-03 12:01:58 +0000378 Heap::RootListIndex value,
whesse@chromium.org4acdc2c2011-08-15 13:01:23 +0000379 bool result) {
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000380 const Register argument = eax;
381 if (types_.Contains(type)) {
382 // If we see an expected oddball, return its ToBoolean value tos_.
383 Label different_value;
lrn@chromium.orgd4e9e222011-08-03 12:01:58 +0000384 __ CompareRoot(argument, value);
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000385 __ j(not_equal, &different_value, Label::kNear);
whesse@chromium.org4acdc2c2011-08-15 13:01:23 +0000386 if (!result) {
387 // If we have to return zero, there is no way around clearing tos_.
388 __ Set(tos_, Immediate(0));
389 } else if (!tos_.is(argument)) {
390 // If we have to return non-zero, we can re-use the argument if it is the
391 // same register as the result, because we never see Smi-zero here.
392 __ Set(tos_, Immediate(1));
393 }
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000394 __ ret(1 * kPointerSize);
395 __ bind(&different_value);
ricow@chromium.org9fa09672011-07-25 11:05:35 +0000396 }
397}
398
399
400void ToBooleanStub::GenerateTypeTransition(MacroAssembler* masm) {
401 __ pop(ecx); // Get return address, operand is now on top of stack.
402 __ push(Immediate(Smi::FromInt(tos_.code())));
403 __ push(Immediate(Smi::FromInt(types_.ToByte())));
404 __ push(ecx); // Push return address.
405 // Patch the caller to an appropriate specialized stub and return the
406 // operation result to the caller of the stub.
407 __ TailCallExternalReference(
408 ExternalReference(IC_Utility(IC::kToBoolean_Patch), masm->isolate()),
409 3,
410 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +0000411}
412
413
ricow@chromium.org65fae842010-08-25 15:26:24 +0000414class FloatingPointHelper : public AllStatic {
415 public:
ricow@chromium.org65fae842010-08-25 15:26:24 +0000416 enum ArgLocation {
417 ARGS_ON_STACK,
418 ARGS_IN_REGISTERS
419 };
420
421 // Code pattern for loading a floating point value. Input value must
422 // be either a smi or a heap number object (fp value). Requirements:
423 // operand in register number. Returns operand as floating point number
424 // on FPU stack.
425 static void LoadFloatOperand(MacroAssembler* masm, Register number);
426
427 // Code pattern for loading floating point values. Input values must
428 // be either smi or heap number objects (fp values). Requirements:
429 // operand_1 on TOS+1 or in edx, operand_2 on TOS+2 or in eax.
430 // Returns operands as floating point numbers on FPU stack.
431 static void LoadFloatOperands(MacroAssembler* masm,
432 Register scratch,
433 ArgLocation arg_location = ARGS_ON_STACK);
434
435 // Similar to LoadFloatOperand but assumes that both operands are smis.
436 // Expects operands in edx, eax.
437 static void LoadFloatSmis(MacroAssembler* masm, Register scratch);
438
439 // Test if operands are smi or number objects (fp). Requirements:
440 // operand_1 in eax, operand_2 in edx; falls through on float
441 // operands, jumps to the non_float label otherwise.
442 static void CheckFloatOperands(MacroAssembler* masm,
443 Label* non_float,
444 Register scratch);
445
kasperl@chromium.orga5551262010-12-07 12:49:48 +0000446 // Checks that the two floating point numbers on top of the FPU stack
447 // have int32 values.
448 static void CheckFloatOperandsAreInt32(MacroAssembler* masm,
449 Label* non_int32);
450
ricow@chromium.org65fae842010-08-25 15:26:24 +0000451 // Takes the operands in edx and eax and loads them as integers in eax
452 // and ecx.
ricow@chromium.org65fae842010-08-25 15:26:24 +0000453 static void LoadUnknownsAsIntegers(MacroAssembler* masm,
454 bool use_sse3,
455 Label* operand_conversion_failure);
456
kasperl@chromium.orga5551262010-12-07 12:49:48 +0000457 // Must only be called after LoadUnknownsAsIntegers. Assumes that the
458 // operands are pushed on the stack, and that their conversions to int32
459 // are in eax and ecx. Checks that the original numbers were in the int32
460 // range.
461 static void CheckLoadedIntegersWereInt32(MacroAssembler* masm,
462 bool use_sse3,
463 Label* not_int32);
464
465 // Assumes that operands are smis or heap numbers and loads them
466 // into xmm0 and xmm1. Operands are in edx and eax.
ricow@chromium.org65fae842010-08-25 15:26:24 +0000467 // Leaves operands unchanged.
468 static void LoadSSE2Operands(MacroAssembler* masm);
469
470 // Test if operands are numbers (smi or HeapNumber objects), and load
471 // them into xmm0 and xmm1 if they are. Jump to label not_numbers if
472 // either operand is not a number. Operands are in edx and eax.
473 // Leaves operands unchanged.
474 static void LoadSSE2Operands(MacroAssembler* masm, Label* not_numbers);
475
476 // Similar to LoadSSE2Operands but assumes that both operands are smis.
477 // Expects operands in edx, eax.
478 static void LoadSSE2Smis(MacroAssembler* masm, Register scratch);
kasperl@chromium.orga5551262010-12-07 12:49:48 +0000479
480 // Checks that the two floating point numbers loaded into xmm0 and xmm1
481 // have int32 values.
482 static void CheckSSE2OperandsAreInt32(MacroAssembler* masm,
483 Label* non_int32,
484 Register scratch);
ricow@chromium.org65fae842010-08-25 15:26:24 +0000485};
486
487
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000488// Get the integer part of a heap number. Surprisingly, all this bit twiddling
489// is faster than using the built-in instructions on floating point registers.
490// Trashes edi and ebx. Dest is ecx. Source cannot be ecx or one of the
491// trashed registers.
492static void IntegerConvert(MacroAssembler* masm,
493 Register source,
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000494 bool use_sse3,
495 Label* conversion_failure) {
496 ASSERT(!source.is(ecx) && !source.is(edi) && !source.is(ebx));
497 Label done, right_exponent, normal_exponent;
498 Register scratch = ebx;
499 Register scratch2 = edi;
vegorov@chromium.org7304bca2011-05-16 12:14:13 +0000500 // Get exponent word.
501 __ mov(scratch, FieldOperand(source, HeapNumber::kExponentOffset));
502 // Get exponent alone in scratch2.
503 __ mov(scratch2, scratch);
504 __ and_(scratch2, HeapNumber::kExponentMask);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000505 if (use_sse3) {
506 CpuFeatures::Scope scope(SSE3);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +0000507 // Check whether the exponent is too big for a 64 bit signed integer.
508 static const uint32_t kTooBigExponent =
509 (HeapNumber::kExponentBias + 63) << HeapNumber::kExponentShift;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000510 __ cmp(scratch2, Immediate(kTooBigExponent));
vegorov@chromium.org7304bca2011-05-16 12:14:13 +0000511 __ j(greater_equal, conversion_failure);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000512 // Load x87 register with heap number.
513 __ fld_d(FieldOperand(source, HeapNumber::kValueOffset));
514 // Reserve space for 64 bit answer.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000515 __ sub(esp, Immediate(sizeof(uint64_t))); // Nolint.
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000516 // Do conversion, which cannot fail because we checked the exponent.
517 __ fisttp_d(Operand(esp, 0));
518 __ mov(ecx, Operand(esp, 0)); // Load low word of answer into ecx.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000519 __ add(esp, Immediate(sizeof(uint64_t))); // Nolint.
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000520 } else {
521 // Load ecx with zero. We use this either for the final shift or
522 // for the answer.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000523 __ xor_(ecx, ecx);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000524 // Check whether the exponent matches a 32 bit signed int that cannot be
525 // represented by a Smi. A non-smi 32 bit integer is 1.xxx * 2^30 so the
526 // exponent is 30 (biased). This is the exponent that we are fastest at and
527 // also the highest exponent we can handle here.
528 const uint32_t non_smi_exponent =
529 (HeapNumber::kExponentBias + 30) << HeapNumber::kExponentShift;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000530 __ cmp(scratch2, Immediate(non_smi_exponent));
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000531 // If we have a match of the int32-but-not-Smi exponent then skip some
532 // logic.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +0000533 __ j(equal, &right_exponent, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000534 // If the exponent is higher than that then go to slow case. This catches
535 // numbers that don't fit in a signed int32, infinities and NaNs.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +0000536 __ j(less, &normal_exponent, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000537
538 {
539 // Handle a big exponent. The only reason we have this code is that the
540 // >>> operator has a tendency to generate numbers with an exponent of 31.
541 const uint32_t big_non_smi_exponent =
542 (HeapNumber::kExponentBias + 31) << HeapNumber::kExponentShift;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000543 __ cmp(scratch2, Immediate(big_non_smi_exponent));
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000544 __ j(not_equal, conversion_failure);
545 // We have the big exponent, typically from >>>. This means the number is
546 // in the range 2^31 to 2^32 - 1. Get the top bits of the mantissa.
547 __ mov(scratch2, scratch);
548 __ and_(scratch2, HeapNumber::kMantissaMask);
549 // Put back the implicit 1.
550 __ or_(scratch2, 1 << HeapNumber::kExponentShift);
551 // Shift up the mantissa bits to take up the space the exponent used to
552 // take. We just orred in the implicit bit so that took care of one and
553 // we want to use the full unsigned range so we subtract 1 bit from the
554 // shift distance.
555 const int big_shift_distance = HeapNumber::kNonMantissaBitsInTopWord - 1;
556 __ shl(scratch2, big_shift_distance);
557 // Get the second half of the double.
558 __ mov(ecx, FieldOperand(source, HeapNumber::kMantissaOffset));
559 // Shift down 21 bits to get the most significant 11 bits or the low
560 // mantissa word.
561 __ shr(ecx, 32 - big_shift_distance);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000562 __ or_(ecx, scratch2);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000563 // We have the answer in ecx, but we may need to negate it.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000564 __ test(scratch, scratch);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +0000565 __ j(positive, &done, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000566 __ neg(ecx);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +0000567 __ jmp(&done, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000568 }
569
570 __ bind(&normal_exponent);
571 // Exponent word in scratch, exponent part of exponent word in scratch2.
572 // Zero in ecx.
573 // We know the exponent is smaller than 30 (biased). If it is less than
574 // 0 (biased) then the number is smaller in magnitude than 1.0 * 2^0, ie
575 // it rounds to zero.
576 const uint32_t zero_exponent =
577 (HeapNumber::kExponentBias + 0) << HeapNumber::kExponentShift;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000578 __ sub(scratch2, Immediate(zero_exponent));
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000579 // ecx already has a Smi zero.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +0000580 __ j(less, &done, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000581
582 // We have a shifted exponent between 0 and 30 in scratch2.
583 __ shr(scratch2, HeapNumber::kExponentShift);
584 __ mov(ecx, Immediate(30));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000585 __ sub(ecx, scratch2);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000586
587 __ bind(&right_exponent);
588 // Here ecx is the shift, scratch is the exponent word.
589 // Get the top bits of the mantissa.
590 __ and_(scratch, HeapNumber::kMantissaMask);
591 // Put back the implicit 1.
592 __ or_(scratch, 1 << HeapNumber::kExponentShift);
593 // Shift up the mantissa bits to take up the space the exponent used to
594 // take. We have kExponentShift + 1 significant bits int he low end of the
595 // word. Shift them to the top bits.
596 const int shift_distance = HeapNumber::kNonMantissaBitsInTopWord - 2;
597 __ shl(scratch, shift_distance);
598 // Get the second half of the double. For some exponents we don't
599 // actually need this because the bits get shifted out again, but
600 // it's probably slower to test than just to do it.
601 __ mov(scratch2, FieldOperand(source, HeapNumber::kMantissaOffset));
602 // Shift down 22 bits to get the most significant 10 bits or the low
603 // mantissa word.
604 __ shr(scratch2, 32 - shift_distance);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000605 __ or_(scratch2, scratch);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000606 // Move down according to the exponent.
607 __ shr_cl(scratch2);
608 // Now the unsigned answer is in scratch2. We need to move it to ecx and
609 // we may need to fix the sign.
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000610 Label negative;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000611 __ xor_(ecx, ecx);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000612 __ cmp(ecx, FieldOperand(source, HeapNumber::kExponentOffset));
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000613 __ j(greater, &negative, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000614 __ mov(ecx, scratch2);
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000615 __ jmp(&done, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000616 __ bind(&negative);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000617 __ sub(ecx, scratch2);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000618 __ bind(&done);
619 }
620}
621
622
whesse@chromium.org030d38e2011-07-13 13:23:34 +0000623void UnaryOpStub::PrintName(StringStream* stream) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000624 const char* op_name = Token::Name(op_);
625 const char* overwrite_name = NULL; // Make g++ happy.
626 switch (mode_) {
627 case UNARY_NO_OVERWRITE: overwrite_name = "Alloc"; break;
628 case UNARY_OVERWRITE: overwrite_name = "Overwrite"; break;
629 }
whesse@chromium.org030d38e2011-07-13 13:23:34 +0000630 stream->Add("UnaryOpStub_%s_%s_%s",
631 op_name,
632 overwrite_name,
633 UnaryOpIC::GetName(operand_type_));
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000634}
635
636
637// TODO(svenpanne): Use virtual functions instead of switch.
danno@chromium.org40cb8782011-05-25 07:58:50 +0000638void UnaryOpStub::Generate(MacroAssembler* masm) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000639 switch (operand_type_) {
danno@chromium.org40cb8782011-05-25 07:58:50 +0000640 case UnaryOpIC::UNINITIALIZED:
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000641 GenerateTypeTransition(masm);
642 break;
danno@chromium.org40cb8782011-05-25 07:58:50 +0000643 case UnaryOpIC::SMI:
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000644 GenerateSmiStub(masm);
645 break;
danno@chromium.org40cb8782011-05-25 07:58:50 +0000646 case UnaryOpIC::HEAP_NUMBER:
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000647 GenerateHeapNumberStub(masm);
648 break;
danno@chromium.org40cb8782011-05-25 07:58:50 +0000649 case UnaryOpIC::GENERIC:
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000650 GenerateGenericStub(masm);
651 break;
652 }
653}
654
655
danno@chromium.org40cb8782011-05-25 07:58:50 +0000656void UnaryOpStub::GenerateTypeTransition(MacroAssembler* masm) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000657 __ pop(ecx); // Save return address.
ricow@chromium.org4f693d62011-07-04 14:01:31 +0000658
659 __ push(eax); // the operand
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000660 __ push(Immediate(Smi::FromInt(op_)));
ricow@chromium.org4f693d62011-07-04 14:01:31 +0000661 __ push(Immediate(Smi::FromInt(mode_)));
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000662 __ push(Immediate(Smi::FromInt(operand_type_)));
663
664 __ push(ecx); // Push return address.
665
666 // Patch the caller to an appropriate specialized stub and return the
667 // operation result to the caller of the stub.
668 __ TailCallExternalReference(
ricow@chromium.org4f693d62011-07-04 14:01:31 +0000669 ExternalReference(IC_Utility(IC::kUnaryOp_Patch), masm->isolate()), 4, 1);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000670}
671
672
673// TODO(svenpanne): Use virtual functions instead of switch.
danno@chromium.org40cb8782011-05-25 07:58:50 +0000674void UnaryOpStub::GenerateSmiStub(MacroAssembler* masm) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000675 switch (op_) {
676 case Token::SUB:
677 GenerateSmiStubSub(masm);
678 break;
679 case Token::BIT_NOT:
680 GenerateSmiStubBitNot(masm);
681 break;
682 default:
683 UNREACHABLE();
684 }
685}
686
687
danno@chromium.org40cb8782011-05-25 07:58:50 +0000688void UnaryOpStub::GenerateSmiStubSub(MacroAssembler* masm) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000689 Label non_smi, undo, slow;
690 GenerateSmiCodeSub(masm, &non_smi, &undo, &slow,
691 Label::kNear, Label::kNear, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000692 __ bind(&undo);
693 GenerateSmiCodeUndo(masm);
694 __ bind(&non_smi);
695 __ bind(&slow);
696 GenerateTypeTransition(masm);
697}
698
699
danno@chromium.org40cb8782011-05-25 07:58:50 +0000700void UnaryOpStub::GenerateSmiStubBitNot(MacroAssembler* masm) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000701 Label non_smi;
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000702 GenerateSmiCodeBitNot(masm, &non_smi);
703 __ bind(&non_smi);
704 GenerateTypeTransition(masm);
705}
706
707
danno@chromium.org40cb8782011-05-25 07:58:50 +0000708void UnaryOpStub::GenerateSmiCodeSub(MacroAssembler* masm,
709 Label* non_smi,
710 Label* undo,
711 Label* slow,
712 Label::Distance non_smi_near,
713 Label::Distance undo_near,
714 Label::Distance slow_near) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000715 // Check whether the value is a smi.
whesse@chromium.org7b260152011-06-20 15:33:18 +0000716 __ JumpIfNotSmi(eax, non_smi, non_smi_near);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000717
718 // We can't handle -0 with smis, so use a type transition for that case.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000719 __ test(eax, eax);
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000720 __ j(zero, slow, slow_near);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000721
722 // Try optimistic subtraction '0 - value', saving operand in eax for undo.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000723 __ mov(edx, eax);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000724 __ Set(eax, Immediate(0));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000725 __ sub(eax, edx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000726 __ j(overflow, undo, undo_near);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000727 __ ret(0);
728}
729
730
danno@chromium.org40cb8782011-05-25 07:58:50 +0000731void UnaryOpStub::GenerateSmiCodeBitNot(
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000732 MacroAssembler* masm,
733 Label* non_smi,
734 Label::Distance non_smi_near) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000735 // Check whether the value is a smi.
whesse@chromium.org7b260152011-06-20 15:33:18 +0000736 __ JumpIfNotSmi(eax, non_smi, non_smi_near);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000737
738 // Flip bits and revert inverted smi-tag.
739 __ not_(eax);
740 __ and_(eax, ~kSmiTagMask);
741 __ ret(0);
742}
743
744
danno@chromium.org40cb8782011-05-25 07:58:50 +0000745void UnaryOpStub::GenerateSmiCodeUndo(MacroAssembler* masm) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000746 __ mov(eax, edx);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000747}
748
749
750// TODO(svenpanne): Use virtual functions instead of switch.
danno@chromium.org40cb8782011-05-25 07:58:50 +0000751void UnaryOpStub::GenerateHeapNumberStub(MacroAssembler* masm) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000752 switch (op_) {
753 case Token::SUB:
754 GenerateHeapNumberStubSub(masm);
755 break;
756 case Token::BIT_NOT:
757 GenerateHeapNumberStubBitNot(masm);
758 break;
759 default:
760 UNREACHABLE();
761 }
762}
763
764
danno@chromium.org40cb8782011-05-25 07:58:50 +0000765void UnaryOpStub::GenerateHeapNumberStubSub(MacroAssembler* masm) {
ager@chromium.orgea91cc52011-05-23 06:06:11 +0000766 Label non_smi, undo, slow, call_builtin;
767 GenerateSmiCodeSub(masm, &non_smi, &undo, &call_builtin, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000768 __ bind(&non_smi);
769 GenerateHeapNumberCodeSub(masm, &slow);
770 __ bind(&undo);
771 GenerateSmiCodeUndo(masm);
772 __ bind(&slow);
773 GenerateTypeTransition(masm);
ager@chromium.orgea91cc52011-05-23 06:06:11 +0000774 __ bind(&call_builtin);
775 GenerateGenericCodeFallback(masm);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000776}
777
778
danno@chromium.org40cb8782011-05-25 07:58:50 +0000779void UnaryOpStub::GenerateHeapNumberStubBitNot(
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000780 MacroAssembler* masm) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000781 Label non_smi, slow;
782 GenerateSmiCodeBitNot(masm, &non_smi, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000783 __ bind(&non_smi);
784 GenerateHeapNumberCodeBitNot(masm, &slow);
785 __ bind(&slow);
786 GenerateTypeTransition(masm);
787}
788
789
danno@chromium.org40cb8782011-05-25 07:58:50 +0000790void UnaryOpStub::GenerateHeapNumberCodeSub(MacroAssembler* masm,
791 Label* slow) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000792 __ mov(edx, FieldOperand(eax, HeapObject::kMapOffset));
793 __ cmp(edx, masm->isolate()->factory()->heap_number_map());
794 __ j(not_equal, slow);
795
796 if (mode_ == UNARY_OVERWRITE) {
797 __ xor_(FieldOperand(eax, HeapNumber::kExponentOffset),
798 Immediate(HeapNumber::kSignMask)); // Flip sign.
799 } else {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000800 __ mov(edx, eax);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000801 // edx: operand
802
803 Label slow_allocate_heapnumber, heapnumber_allocated;
804 __ AllocateHeapNumber(eax, ebx, ecx, &slow_allocate_heapnumber);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +0000805 __ jmp(&heapnumber_allocated, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000806
807 __ bind(&slow_allocate_heapnumber);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000808 {
809 FrameScope scope(masm, StackFrame::INTERNAL);
810 __ push(edx);
811 __ CallRuntime(Runtime::kNumberAlloc, 0);
812 __ pop(edx);
813 }
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000814
815 __ bind(&heapnumber_allocated);
816 // eax: allocated 'empty' number
817 __ mov(ecx, FieldOperand(edx, HeapNumber::kExponentOffset));
818 __ xor_(ecx, HeapNumber::kSignMask); // Flip sign.
819 __ mov(FieldOperand(eax, HeapNumber::kExponentOffset), ecx);
820 __ mov(ecx, FieldOperand(edx, HeapNumber::kMantissaOffset));
821 __ mov(FieldOperand(eax, HeapNumber::kMantissaOffset), ecx);
822 }
823 __ ret(0);
824}
825
826
danno@chromium.org40cb8782011-05-25 07:58:50 +0000827void UnaryOpStub::GenerateHeapNumberCodeBitNot(MacroAssembler* masm,
828 Label* slow) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000829 __ mov(edx, FieldOperand(eax, HeapObject::kMapOffset));
830 __ cmp(edx, masm->isolate()->factory()->heap_number_map());
831 __ j(not_equal, slow);
832
833 // Convert the heap number in eax to an untagged integer in ecx.
vegorov@chromium.org7304bca2011-05-16 12:14:13 +0000834 IntegerConvert(masm, eax, CpuFeatures::IsSupported(SSE3), slow);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000835
836 // Do the bitwise operation and check if the result fits in a smi.
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000837 Label try_float;
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000838 __ not_(ecx);
839 __ cmp(ecx, 0xc0000000);
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000840 __ j(sign, &try_float, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000841
842 // Tag the result as a smi and we're done.
843 STATIC_ASSERT(kSmiTagSize == 1);
844 __ lea(eax, Operand(ecx, times_2, kSmiTag));
845 __ ret(0);
846
847 // Try to store the result in a heap number.
848 __ bind(&try_float);
849 if (mode_ == UNARY_NO_OVERWRITE) {
850 Label slow_allocate_heapnumber, heapnumber_allocated;
kmillikin@chromium.orgc53e10d2011-05-18 09:12:58 +0000851 __ mov(ebx, eax);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000852 __ AllocateHeapNumber(eax, edx, edi, &slow_allocate_heapnumber);
853 __ jmp(&heapnumber_allocated);
854
855 __ bind(&slow_allocate_heapnumber);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000856 {
857 FrameScope scope(masm, StackFrame::INTERNAL);
858 // Push the original HeapNumber on the stack. The integer value can't
859 // be stored since it's untagged and not in the smi range (so we can't
860 // smi-tag it). We'll recalculate the value after the GC instead.
861 __ push(ebx);
862 __ CallRuntime(Runtime::kNumberAlloc, 0);
863 // New HeapNumber is in eax.
864 __ pop(edx);
865 }
kmillikin@chromium.orgc53e10d2011-05-18 09:12:58 +0000866 // IntegerConvert uses ebx and edi as scratch registers.
867 // This conversion won't go slow-case.
868 IntegerConvert(masm, edx, CpuFeatures::IsSupported(SSE3), slow);
869 __ not_(ecx);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000870
871 __ bind(&heapnumber_allocated);
872 }
873 if (CpuFeatures::IsSupported(SSE2)) {
874 CpuFeatures::Scope use_sse2(SSE2);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000875 __ cvtsi2sd(xmm0, ecx);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000876 __ movdbl(FieldOperand(eax, HeapNumber::kValueOffset), xmm0);
877 } else {
878 __ push(ecx);
879 __ fild_s(Operand(esp, 0));
880 __ pop(ecx);
881 __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset));
882 }
883 __ ret(0);
884}
885
886
887// TODO(svenpanne): Use virtual functions instead of switch.
danno@chromium.org40cb8782011-05-25 07:58:50 +0000888void UnaryOpStub::GenerateGenericStub(MacroAssembler* masm) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000889 switch (op_) {
890 case Token::SUB:
891 GenerateGenericStubSub(masm);
892 break;
893 case Token::BIT_NOT:
894 GenerateGenericStubBitNot(masm);
895 break;
896 default:
897 UNREACHABLE();
898 }
899}
900
901
danno@chromium.org40cb8782011-05-25 07:58:50 +0000902void UnaryOpStub::GenerateGenericStubSub(MacroAssembler* masm) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000903 Label non_smi, undo, slow;
904 GenerateSmiCodeSub(masm, &non_smi, &undo, &slow, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000905 __ bind(&non_smi);
906 GenerateHeapNumberCodeSub(masm, &slow);
907 __ bind(&undo);
908 GenerateSmiCodeUndo(masm);
909 __ bind(&slow);
910 GenerateGenericCodeFallback(masm);
911}
912
913
danno@chromium.org40cb8782011-05-25 07:58:50 +0000914void UnaryOpStub::GenerateGenericStubBitNot(MacroAssembler* masm) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +0000915 Label non_smi, slow;
916 GenerateSmiCodeBitNot(masm, &non_smi, Label::kNear);
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000917 __ bind(&non_smi);
918 GenerateHeapNumberCodeBitNot(masm, &slow);
919 __ bind(&slow);
920 GenerateGenericCodeFallback(masm);
921}
922
923
danno@chromium.org40cb8782011-05-25 07:58:50 +0000924void UnaryOpStub::GenerateGenericCodeFallback(MacroAssembler* masm) {
sgjesse@chromium.org8e8294a2011-05-02 14:30:53 +0000925 // Handle the slow case by jumping to the corresponding JavaScript builtin.
926 __ pop(ecx); // pop return address.
927 __ push(eax);
928 __ push(ecx); // push return address
929 switch (op_) {
930 case Token::SUB:
931 __ InvokeBuiltin(Builtins::UNARY_MINUS, JUMP_FUNCTION);
932 break;
933 case Token::BIT_NOT:
934 __ InvokeBuiltin(Builtins::BIT_NOT, JUMP_FUNCTION);
935 break;
936 default:
937 UNREACHABLE();
938 }
939}
940
941
danno@chromium.org40cb8782011-05-25 07:58:50 +0000942void BinaryOpStub::GenerateTypeTransition(MacroAssembler* masm) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +0000943 __ pop(ecx); // Save return address.
944 __ push(edx);
945 __ push(eax);
946 // Left and right arguments are now on top.
947 // Push this stub's key. Although the operation and the type info are
948 // encoded into the key, the encoding is opaque, so push them too.
949 __ push(Immediate(Smi::FromInt(MinorKey())));
950 __ push(Immediate(Smi::FromInt(op_)));
951 __ push(Immediate(Smi::FromInt(operands_type_)));
952
953 __ push(ecx); // Push return address.
954
955 // Patch the caller to an appropriate specialized stub and return the
956 // operation result to the caller of the stub.
957 __ TailCallExternalReference(
danno@chromium.org40cb8782011-05-25 07:58:50 +0000958 ExternalReference(IC_Utility(IC::kBinaryOp_Patch),
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +0000959 masm->isolate()),
kasperl@chromium.orga5551262010-12-07 12:49:48 +0000960 5,
961 1);
962}
963
964
965// Prepare for a type transition runtime call when the args are already on
966// the stack, under the return address.
danno@chromium.org40cb8782011-05-25 07:58:50 +0000967void BinaryOpStub::GenerateTypeTransitionWithSavedArgs(MacroAssembler* masm) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +0000968 __ pop(ecx); // Save return address.
969 // Left and right arguments are already on top of the stack.
970 // Push this stub's key. Although the operation and the type info are
971 // encoded into the key, the encoding is opaque, so push them too.
972 __ push(Immediate(Smi::FromInt(MinorKey())));
973 __ push(Immediate(Smi::FromInt(op_)));
974 __ push(Immediate(Smi::FromInt(operands_type_)));
975
976 __ push(ecx); // Push return address.
977
978 // Patch the caller to an appropriate specialized stub and return the
979 // operation result to the caller of the stub.
980 __ TailCallExternalReference(
danno@chromium.org40cb8782011-05-25 07:58:50 +0000981 ExternalReference(IC_Utility(IC::kBinaryOp_Patch),
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +0000982 masm->isolate()),
kasperl@chromium.orga5551262010-12-07 12:49:48 +0000983 5,
984 1);
985}
986
987
danno@chromium.org40cb8782011-05-25 07:58:50 +0000988void BinaryOpStub::Generate(MacroAssembler* masm) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +0000989 // Explicitly allow generation of nested stubs. It is safe here because
990 // generation code does not use any raw pointers.
991 AllowStubCallsScope allow_stub_calls(masm, true);
992
kasperl@chromium.orga5551262010-12-07 12:49:48 +0000993 switch (operands_type_) {
danno@chromium.org40cb8782011-05-25 07:58:50 +0000994 case BinaryOpIC::UNINITIALIZED:
kasperl@chromium.orga5551262010-12-07 12:49:48 +0000995 GenerateTypeTransition(masm);
996 break;
danno@chromium.org40cb8782011-05-25 07:58:50 +0000997 case BinaryOpIC::SMI:
kasperl@chromium.orga5551262010-12-07 12:49:48 +0000998 GenerateSmiStub(masm);
999 break;
danno@chromium.org40cb8782011-05-25 07:58:50 +00001000 case BinaryOpIC::INT32:
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001001 GenerateInt32Stub(masm);
1002 break;
danno@chromium.org40cb8782011-05-25 07:58:50 +00001003 case BinaryOpIC::HEAP_NUMBER:
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001004 GenerateHeapNumberStub(masm);
1005 break;
danno@chromium.org40cb8782011-05-25 07:58:50 +00001006 case BinaryOpIC::ODDBALL:
lrn@chromium.org7516f052011-03-30 08:52:27 +00001007 GenerateOddballStub(masm);
1008 break;
danno@chromium.org40cb8782011-05-25 07:58:50 +00001009 case BinaryOpIC::BOTH_STRING:
danno@chromium.org160a7b02011-04-18 15:51:38 +00001010 GenerateBothStringStub(masm);
1011 break;
danno@chromium.org40cb8782011-05-25 07:58:50 +00001012 case BinaryOpIC::STRING:
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001013 GenerateStringStub(masm);
1014 break;
danno@chromium.org40cb8782011-05-25 07:58:50 +00001015 case BinaryOpIC::GENERIC:
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001016 GenerateGeneric(masm);
1017 break;
1018 default:
1019 UNREACHABLE();
1020 }
1021}
1022
1023
whesse@chromium.org030d38e2011-07-13 13:23:34 +00001024void BinaryOpStub::PrintName(StringStream* stream) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001025 const char* op_name = Token::Name(op_);
1026 const char* overwrite_name;
1027 switch (mode_) {
1028 case NO_OVERWRITE: overwrite_name = "Alloc"; break;
1029 case OVERWRITE_RIGHT: overwrite_name = "OverwriteRight"; break;
1030 case OVERWRITE_LEFT: overwrite_name = "OverwriteLeft"; break;
1031 default: overwrite_name = "UnknownOverwrite"; break;
1032 }
whesse@chromium.org030d38e2011-07-13 13:23:34 +00001033 stream->Add("BinaryOpStub_%s_%s_%s",
1034 op_name,
1035 overwrite_name,
1036 BinaryOpIC::GetName(operands_type_));
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001037}
1038
1039
danno@chromium.org40cb8782011-05-25 07:58:50 +00001040void BinaryOpStub::GenerateSmiCode(
1041 MacroAssembler* masm,
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001042 Label* slow,
1043 SmiCodeGenerateHeapNumberResults allow_heapnumber_results) {
1044 // 1. Move arguments into edx, eax except for DIV and MOD, which need the
1045 // dividend in eax and edx free for the division. Use eax, ebx for those.
1046 Comment load_comment(masm, "-- Load arguments");
1047 Register left = edx;
1048 Register right = eax;
1049 if (op_ == Token::DIV || op_ == Token::MOD) {
1050 left = eax;
1051 right = ebx;
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00001052 __ mov(ebx, eax);
1053 __ mov(eax, edx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001054 }
1055
1056
1057 // 2. Prepare the smi check of both operands by oring them together.
1058 Comment smi_check_comment(masm, "-- Smi check arguments");
1059 Label not_smis;
1060 Register combined = ecx;
1061 ASSERT(!left.is(combined) && !right.is(combined));
1062 switch (op_) {
1063 case Token::BIT_OR:
1064 // Perform the operation into eax and smi check the result. Preserve
1065 // eax in case the result is not a smi.
1066 ASSERT(!left.is(ecx) && !right.is(ecx));
1067 __ mov(ecx, right);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001068 __ or_(right, left); // Bitwise or is commutative.
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001069 combined = right;
1070 break;
1071
1072 case Token::BIT_XOR:
1073 case Token::BIT_AND:
1074 case Token::ADD:
1075 case Token::SUB:
1076 case Token::MUL:
1077 case Token::DIV:
1078 case Token::MOD:
1079 __ mov(combined, right);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001080 __ or_(combined, left);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001081 break;
1082
1083 case Token::SHL:
1084 case Token::SAR:
1085 case Token::SHR:
1086 // Move the right operand into ecx for the shift operation, use eax
1087 // for the smi check register.
1088 ASSERT(!left.is(ecx) && !right.is(ecx));
1089 __ mov(ecx, right);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001090 __ or_(right, left);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001091 combined = right;
1092 break;
1093
1094 default:
1095 break;
1096 }
1097
1098 // 3. Perform the smi check of the operands.
1099 STATIC_ASSERT(kSmiTag == 0); // Adjust zero check if not the case.
whesse@chromium.org7b260152011-06-20 15:33:18 +00001100 __ JumpIfNotSmi(combined, &not_smis);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001101
1102 // 4. Operands are both smis, perform the operation leaving the result in
1103 // eax and check the result if necessary.
1104 Comment perform_smi(masm, "-- Perform smi operation");
1105 Label use_fp_on_smis;
1106 switch (op_) {
1107 case Token::BIT_OR:
1108 // Nothing to do.
1109 break;
1110
1111 case Token::BIT_XOR:
1112 ASSERT(right.is(eax));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001113 __ xor_(right, left); // Bitwise xor is commutative.
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001114 break;
1115
1116 case Token::BIT_AND:
1117 ASSERT(right.is(eax));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001118 __ and_(right, left); // Bitwise and is commutative.
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001119 break;
1120
1121 case Token::SHL:
1122 // Remove tags from operands (but keep sign).
1123 __ SmiUntag(left);
1124 __ SmiUntag(ecx);
1125 // Perform the operation.
1126 __ shl_cl(left);
1127 // Check that the *signed* result fits in a smi.
1128 __ cmp(left, 0xc0000000);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00001129 __ j(sign, &use_fp_on_smis);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001130 // Tag the result and store it in register eax.
1131 __ SmiTag(left);
1132 __ mov(eax, left);
1133 break;
1134
1135 case Token::SAR:
1136 // Remove tags from operands (but keep sign).
1137 __ SmiUntag(left);
1138 __ SmiUntag(ecx);
1139 // Perform the operation.
1140 __ sar_cl(left);
1141 // Tag the result and store it in register eax.
1142 __ SmiTag(left);
1143 __ mov(eax, left);
1144 break;
1145
1146 case Token::SHR:
1147 // Remove tags from operands (but keep sign).
1148 __ SmiUntag(left);
1149 __ SmiUntag(ecx);
1150 // Perform the operation.
1151 __ shr_cl(left);
1152 // Check that the *unsigned* result fits in a smi.
1153 // Neither of the two high-order bits can be set:
1154 // - 0x80000000: high bit would be lost when smi tagging.
1155 // - 0x40000000: this number would convert to negative when
1156 // Smi tagging these two cases can only happen with shifts
1157 // by 0 or 1 when handed a valid smi.
1158 __ test(left, Immediate(0xc0000000));
ager@chromium.orgea91cc52011-05-23 06:06:11 +00001159 __ j(not_zero, &use_fp_on_smis);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001160 // Tag the result and store it in register eax.
1161 __ SmiTag(left);
1162 __ mov(eax, left);
1163 break;
1164
1165 case Token::ADD:
1166 ASSERT(right.is(eax));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001167 __ add(right, left); // Addition is commutative.
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00001168 __ j(overflow, &use_fp_on_smis);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001169 break;
1170
1171 case Token::SUB:
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001172 __ sub(left, right);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00001173 __ j(overflow, &use_fp_on_smis);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001174 __ mov(eax, left);
1175 break;
1176
1177 case Token::MUL:
1178 // If the smi tag is 0 we can just leave the tag on one operand.
1179 STATIC_ASSERT(kSmiTag == 0); // Adjust code below if not the case.
1180 // We can't revert the multiplication if the result is not a smi
1181 // so save the right operand.
1182 __ mov(ebx, right);
1183 // Remove tag from one of the operands (but keep sign).
1184 __ SmiUntag(right);
1185 // Do multiplication.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001186 __ imul(right, left); // Multiplication is commutative.
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00001187 __ j(overflow, &use_fp_on_smis);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001188 // Check for negative zero result. Use combined = left | right.
1189 __ NegativeZeroTest(right, combined, &use_fp_on_smis);
1190 break;
1191
1192 case Token::DIV:
1193 // We can't revert the division if the result is not a smi so
1194 // save the left operand.
1195 __ mov(edi, left);
1196 // Check for 0 divisor.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001197 __ test(right, right);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00001198 __ j(zero, &use_fp_on_smis);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001199 // Sign extend left into edx:eax.
1200 ASSERT(left.is(eax));
1201 __ cdq();
1202 // Divide edx:eax by right.
1203 __ idiv(right);
1204 // Check for the corner case of dividing the most negative smi by
1205 // -1. We cannot use the overflow flag, since it is not set by idiv
1206 // instruction.
1207 STATIC_ASSERT(kSmiTag == 0 && kSmiTagSize == 1);
1208 __ cmp(eax, 0x40000000);
1209 __ j(equal, &use_fp_on_smis);
1210 // Check for negative zero result. Use combined = left | right.
1211 __ NegativeZeroTest(eax, combined, &use_fp_on_smis);
1212 // Check that the remainder is zero.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001213 __ test(edx, edx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001214 __ j(not_zero, &use_fp_on_smis);
1215 // Tag the result and store it in register eax.
1216 __ SmiTag(eax);
1217 break;
1218
1219 case Token::MOD:
1220 // Check for 0 divisor.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001221 __ test(right, right);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00001222 __ j(zero, &not_smis);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001223
1224 // Sign extend left into edx:eax.
1225 ASSERT(left.is(eax));
1226 __ cdq();
1227 // Divide edx:eax by right.
1228 __ idiv(right);
1229 // Check for negative zero result. Use combined = left | right.
1230 __ NegativeZeroTest(edx, combined, slow);
1231 // Move remainder to register eax.
1232 __ mov(eax, edx);
1233 break;
1234
1235 default:
1236 UNREACHABLE();
1237 }
1238
1239 // 5. Emit return of result in eax. Some operations have registers pushed.
1240 switch (op_) {
1241 case Token::ADD:
1242 case Token::SUB:
1243 case Token::MUL:
1244 case Token::DIV:
1245 __ ret(0);
1246 break;
1247 case Token::MOD:
1248 case Token::BIT_OR:
1249 case Token::BIT_AND:
1250 case Token::BIT_XOR:
1251 case Token::SAR:
1252 case Token::SHL:
1253 case Token::SHR:
1254 __ ret(2 * kPointerSize);
1255 break;
1256 default:
1257 UNREACHABLE();
1258 }
1259
1260 // 6. For some operations emit inline code to perform floating point
1261 // operations on known smis (e.g., if the result of the operation
1262 // overflowed the smi range).
1263 if (allow_heapnumber_results == NO_HEAPNUMBER_RESULTS) {
1264 __ bind(&use_fp_on_smis);
1265 switch (op_) {
1266 // Undo the effects of some operations, and some register moves.
1267 case Token::SHL:
1268 // The arguments are saved on the stack, and only used from there.
1269 break;
1270 case Token::ADD:
1271 // Revert right = right + left.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001272 __ sub(right, left);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001273 break;
1274 case Token::SUB:
1275 // Revert left = left - right.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001276 __ add(left, right);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001277 break;
1278 case Token::MUL:
1279 // Right was clobbered but a copy is in ebx.
1280 __ mov(right, ebx);
1281 break;
1282 case Token::DIV:
1283 // Left was clobbered but a copy is in edi. Right is in ebx for
1284 // division. They should be in eax, ebx for jump to not_smi.
1285 __ mov(eax, edi);
1286 break;
1287 default:
1288 // No other operators jump to use_fp_on_smis.
1289 break;
1290 }
1291 __ jmp(&not_smis);
1292 } else {
1293 ASSERT(allow_heapnumber_results == ALLOW_HEAPNUMBER_RESULTS);
1294 switch (op_) {
ager@chromium.orgea91cc52011-05-23 06:06:11 +00001295 case Token::SHL:
1296 case Token::SHR: {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001297 Comment perform_float(masm, "-- Perform float operation on smis");
1298 __ bind(&use_fp_on_smis);
1299 // Result we want is in left == edx, so we can put the allocated heap
1300 // number in eax.
1301 __ AllocateHeapNumber(eax, ecx, ebx, slow);
1302 // Store the result in the HeapNumber and return.
ager@chromium.orgea91cc52011-05-23 06:06:11 +00001303 // It's OK to overwrite the arguments on the stack because we
1304 // are about to return.
1305 if (op_ == Token::SHR) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001306 __ mov(Operand(esp, 1 * kPointerSize), left);
ager@chromium.orgea91cc52011-05-23 06:06:11 +00001307 __ mov(Operand(esp, 2 * kPointerSize), Immediate(0));
1308 __ fild_d(Operand(esp, 1 * kPointerSize));
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001309 __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset));
ager@chromium.orgea91cc52011-05-23 06:06:11 +00001310 } else {
1311 ASSERT_EQ(Token::SHL, op_);
1312 if (CpuFeatures::IsSupported(SSE2)) {
1313 CpuFeatures::Scope use_sse2(SSE2);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001314 __ cvtsi2sd(xmm0, left);
ager@chromium.orgea91cc52011-05-23 06:06:11 +00001315 __ movdbl(FieldOperand(eax, HeapNumber::kValueOffset), xmm0);
1316 } else {
1317 __ mov(Operand(esp, 1 * kPointerSize), left);
1318 __ fild_s(Operand(esp, 1 * kPointerSize));
1319 __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset));
1320 }
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001321 }
ager@chromium.orgea91cc52011-05-23 06:06:11 +00001322 __ ret(2 * kPointerSize);
1323 break;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001324 }
1325
1326 case Token::ADD:
1327 case Token::SUB:
1328 case Token::MUL:
1329 case Token::DIV: {
1330 Comment perform_float(masm, "-- Perform float operation on smis");
1331 __ bind(&use_fp_on_smis);
1332 // Restore arguments to edx, eax.
1333 switch (op_) {
1334 case Token::ADD:
1335 // Revert right = right + left.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001336 __ sub(right, left);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001337 break;
1338 case Token::SUB:
1339 // Revert left = left - right.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001340 __ add(left, right);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001341 break;
1342 case Token::MUL:
1343 // Right was clobbered but a copy is in ebx.
1344 __ mov(right, ebx);
1345 break;
1346 case Token::DIV:
1347 // Left was clobbered but a copy is in edi. Right is in ebx for
1348 // division.
1349 __ mov(edx, edi);
1350 __ mov(eax, right);
1351 break;
1352 default: UNREACHABLE();
1353 break;
1354 }
1355 __ AllocateHeapNumber(ecx, ebx, no_reg, slow);
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00001356 if (CpuFeatures::IsSupported(SSE2)) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001357 CpuFeatures::Scope use_sse2(SSE2);
1358 FloatingPointHelper::LoadSSE2Smis(masm, ebx);
1359 switch (op_) {
1360 case Token::ADD: __ addsd(xmm0, xmm1); break;
1361 case Token::SUB: __ subsd(xmm0, xmm1); break;
1362 case Token::MUL: __ mulsd(xmm0, xmm1); break;
1363 case Token::DIV: __ divsd(xmm0, xmm1); break;
1364 default: UNREACHABLE();
1365 }
1366 __ movdbl(FieldOperand(ecx, HeapNumber::kValueOffset), xmm0);
1367 } else { // SSE2 not available, use FPU.
1368 FloatingPointHelper::LoadFloatSmis(masm, ebx);
1369 switch (op_) {
1370 case Token::ADD: __ faddp(1); break;
1371 case Token::SUB: __ fsubp(1); break;
1372 case Token::MUL: __ fmulp(1); break;
1373 case Token::DIV: __ fdivp(1); break;
1374 default: UNREACHABLE();
1375 }
1376 __ fstp_d(FieldOperand(ecx, HeapNumber::kValueOffset));
1377 }
1378 __ mov(eax, ecx);
1379 __ ret(0);
1380 break;
1381 }
1382
1383 default:
1384 break;
1385 }
1386 }
1387
1388 // 7. Non-smi operands, fall out to the non-smi code with the operands in
1389 // edx and eax.
1390 Comment done_comment(masm, "-- Enter non-smi code");
1391 __ bind(&not_smis);
1392 switch (op_) {
1393 case Token::BIT_OR:
1394 case Token::SHL:
1395 case Token::SAR:
1396 case Token::SHR:
1397 // Right operand is saved in ecx and eax was destroyed by the smi
1398 // check.
1399 __ mov(eax, ecx);
1400 break;
1401
1402 case Token::DIV:
1403 case Token::MOD:
1404 // Operands are in eax, ebx at this point.
1405 __ mov(edx, eax);
1406 __ mov(eax, ebx);
1407 break;
1408
1409 default:
1410 break;
1411 }
1412}
1413
1414
danno@chromium.org40cb8782011-05-25 07:58:50 +00001415void BinaryOpStub::GenerateSmiStub(MacroAssembler* masm) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001416 Label call_runtime;
1417
1418 switch (op_) {
1419 case Token::ADD:
1420 case Token::SUB:
1421 case Token::MUL:
1422 case Token::DIV:
1423 break;
1424 case Token::MOD:
1425 case Token::BIT_OR:
1426 case Token::BIT_AND:
1427 case Token::BIT_XOR:
1428 case Token::SAR:
1429 case Token::SHL:
1430 case Token::SHR:
1431 GenerateRegisterArgsPush(masm);
1432 break;
1433 default:
1434 UNREACHABLE();
1435 }
1436
danno@chromium.org40cb8782011-05-25 07:58:50 +00001437 if (result_type_ == BinaryOpIC::UNINITIALIZED ||
1438 result_type_ == BinaryOpIC::SMI) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001439 GenerateSmiCode(masm, &call_runtime, NO_HEAPNUMBER_RESULTS);
1440 } else {
1441 GenerateSmiCode(masm, &call_runtime, ALLOW_HEAPNUMBER_RESULTS);
1442 }
1443 __ bind(&call_runtime);
1444 switch (op_) {
1445 case Token::ADD:
1446 case Token::SUB:
1447 case Token::MUL:
1448 case Token::DIV:
1449 GenerateTypeTransition(masm);
1450 break;
1451 case Token::MOD:
1452 case Token::BIT_OR:
1453 case Token::BIT_AND:
1454 case Token::BIT_XOR:
1455 case Token::SAR:
1456 case Token::SHL:
1457 case Token::SHR:
1458 GenerateTypeTransitionWithSavedArgs(masm);
1459 break;
1460 default:
1461 UNREACHABLE();
1462 }
1463}
1464
1465
danno@chromium.org40cb8782011-05-25 07:58:50 +00001466void BinaryOpStub::GenerateStringStub(MacroAssembler* masm) {
1467 ASSERT(operands_type_ == BinaryOpIC::STRING);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001468 ASSERT(op_ == Token::ADD);
ager@chromium.org0ee099b2011-01-25 14:06:47 +00001469 // Try to add arguments as strings, otherwise, transition to the generic
danno@chromium.org40cb8782011-05-25 07:58:50 +00001470 // BinaryOpIC type.
ager@chromium.org0ee099b2011-01-25 14:06:47 +00001471 GenerateAddStrings(masm);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001472 GenerateTypeTransition(masm);
1473}
1474
1475
danno@chromium.org40cb8782011-05-25 07:58:50 +00001476void BinaryOpStub::GenerateBothStringStub(MacroAssembler* masm) {
danno@chromium.org160a7b02011-04-18 15:51:38 +00001477 Label call_runtime;
danno@chromium.org40cb8782011-05-25 07:58:50 +00001478 ASSERT(operands_type_ == BinaryOpIC::BOTH_STRING);
danno@chromium.org160a7b02011-04-18 15:51:38 +00001479 ASSERT(op_ == Token::ADD);
1480 // If both arguments are strings, call the string add stub.
1481 // Otherwise, do a transition.
1482
1483 // Registers containing left and right operands respectively.
1484 Register left = edx;
1485 Register right = eax;
1486
1487 // Test if left operand is a string.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00001488 __ JumpIfSmi(left, &call_runtime, Label::kNear);
danno@chromium.org160a7b02011-04-18 15:51:38 +00001489 __ CmpObjectType(left, FIRST_NONSTRING_TYPE, ecx);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00001490 __ j(above_equal, &call_runtime, Label::kNear);
danno@chromium.org160a7b02011-04-18 15:51:38 +00001491
1492 // Test if right operand is a string.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00001493 __ JumpIfSmi(right, &call_runtime, Label::kNear);
danno@chromium.org160a7b02011-04-18 15:51:38 +00001494 __ CmpObjectType(right, FIRST_NONSTRING_TYPE, ecx);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00001495 __ j(above_equal, &call_runtime, Label::kNear);
danno@chromium.org160a7b02011-04-18 15:51:38 +00001496
1497 StringAddStub string_add_stub(NO_STRING_CHECK_IN_STUB);
1498 GenerateRegisterArgsPush(masm);
1499 __ TailCallStub(&string_add_stub);
1500
1501 __ bind(&call_runtime);
1502 GenerateTypeTransition(masm);
1503}
1504
1505
danno@chromium.org40cb8782011-05-25 07:58:50 +00001506void BinaryOpStub::GenerateInt32Stub(MacroAssembler* masm) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001507 Label call_runtime;
danno@chromium.org40cb8782011-05-25 07:58:50 +00001508 ASSERT(operands_type_ == BinaryOpIC::INT32);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001509
1510 // Floating point case.
1511 switch (op_) {
1512 case Token::ADD:
1513 case Token::SUB:
1514 case Token::MUL:
1515 case Token::DIV: {
1516 Label not_floats;
1517 Label not_int32;
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00001518 if (CpuFeatures::IsSupported(SSE2)) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001519 CpuFeatures::Scope use_sse2(SSE2);
1520 FloatingPointHelper::LoadSSE2Operands(masm, &not_floats);
1521 FloatingPointHelper::CheckSSE2OperandsAreInt32(masm, &not_int32, ecx);
1522 switch (op_) {
1523 case Token::ADD: __ addsd(xmm0, xmm1); break;
1524 case Token::SUB: __ subsd(xmm0, xmm1); break;
1525 case Token::MUL: __ mulsd(xmm0, xmm1); break;
1526 case Token::DIV: __ divsd(xmm0, xmm1); break;
1527 default: UNREACHABLE();
1528 }
1529 // Check result type if it is currently Int32.
danno@chromium.org40cb8782011-05-25 07:58:50 +00001530 if (result_type_ <= BinaryOpIC::INT32) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001531 __ cvttsd2si(ecx, Operand(xmm0));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001532 __ cvtsi2sd(xmm2, ecx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001533 __ ucomisd(xmm0, xmm2);
1534 __ j(not_zero, &not_int32);
1535 __ j(carry, &not_int32);
1536 }
1537 GenerateHeapResultAllocation(masm, &call_runtime);
1538 __ movdbl(FieldOperand(eax, HeapNumber::kValueOffset), xmm0);
1539 __ ret(0);
1540 } else { // SSE2 not available, use FPU.
1541 FloatingPointHelper::CheckFloatOperands(masm, &not_floats, ebx);
1542 FloatingPointHelper::LoadFloatOperands(
1543 masm,
1544 ecx,
1545 FloatingPointHelper::ARGS_IN_REGISTERS);
1546 FloatingPointHelper::CheckFloatOperandsAreInt32(masm, &not_int32);
1547 switch (op_) {
1548 case Token::ADD: __ faddp(1); break;
1549 case Token::SUB: __ fsubp(1); break;
1550 case Token::MUL: __ fmulp(1); break;
1551 case Token::DIV: __ fdivp(1); break;
1552 default: UNREACHABLE();
1553 }
1554 Label after_alloc_failure;
1555 GenerateHeapResultAllocation(masm, &after_alloc_failure);
1556 __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset));
1557 __ ret(0);
1558 __ bind(&after_alloc_failure);
1559 __ ffree();
1560 __ jmp(&call_runtime);
1561 }
1562
1563 __ bind(&not_floats);
1564 __ bind(&not_int32);
1565 GenerateTypeTransition(masm);
1566 break;
1567 }
1568
1569 case Token::MOD: {
1570 // For MOD we go directly to runtime in the non-smi case.
1571 break;
1572 }
1573 case Token::BIT_OR:
1574 case Token::BIT_AND:
1575 case Token::BIT_XOR:
1576 case Token::SAR:
1577 case Token::SHL:
1578 case Token::SHR: {
1579 GenerateRegisterArgsPush(masm);
1580 Label not_floats;
1581 Label not_int32;
1582 Label non_smi_result;
1583 /* {
1584 CpuFeatures::Scope use_sse2(SSE2);
1585 FloatingPointHelper::LoadSSE2Operands(masm, &not_floats);
1586 FloatingPointHelper::CheckSSE2OperandsAreInt32(masm, &not_int32, ecx);
1587 }*/
1588 FloatingPointHelper::LoadUnknownsAsIntegers(masm,
1589 use_sse3_,
1590 &not_floats);
1591 FloatingPointHelper::CheckLoadedIntegersWereInt32(masm, use_sse3_,
1592 &not_int32);
1593 switch (op_) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001594 case Token::BIT_OR: __ or_(eax, ecx); break;
1595 case Token::BIT_AND: __ and_(eax, ecx); break;
1596 case Token::BIT_XOR: __ xor_(eax, ecx); break;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001597 case Token::SAR: __ sar_cl(eax); break;
1598 case Token::SHL: __ shl_cl(eax); break;
1599 case Token::SHR: __ shr_cl(eax); break;
1600 default: UNREACHABLE();
1601 }
1602 if (op_ == Token::SHR) {
1603 // Check if result is non-negative and fits in a smi.
1604 __ test(eax, Immediate(0xc0000000));
1605 __ j(not_zero, &call_runtime);
1606 } else {
1607 // Check if result fits in a smi.
1608 __ cmp(eax, 0xc0000000);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00001609 __ j(negative, &non_smi_result, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001610 }
1611 // Tag smi result and return.
1612 __ SmiTag(eax);
1613 __ ret(2 * kPointerSize); // Drop two pushed arguments from the stack.
1614
1615 // All ops except SHR return a signed int32 that we load in
1616 // a HeapNumber.
1617 if (op_ != Token::SHR) {
1618 __ bind(&non_smi_result);
1619 // Allocate a heap number if needed.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001620 __ mov(ebx, eax); // ebx: result
karlklose@chromium.org83a47282011-05-11 11:54:09 +00001621 Label skip_allocation;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001622 switch (mode_) {
1623 case OVERWRITE_LEFT:
1624 case OVERWRITE_RIGHT:
1625 // If the operand was an object, we skip the
1626 // allocation of a heap number.
1627 __ mov(eax, Operand(esp, mode_ == OVERWRITE_RIGHT ?
1628 1 * kPointerSize : 2 * kPointerSize));
whesse@chromium.org7b260152011-06-20 15:33:18 +00001629 __ JumpIfNotSmi(eax, &skip_allocation, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001630 // Fall through!
1631 case NO_OVERWRITE:
1632 __ AllocateHeapNumber(eax, ecx, edx, &call_runtime);
1633 __ bind(&skip_allocation);
1634 break;
1635 default: UNREACHABLE();
1636 }
1637 // Store the result in the HeapNumber and return.
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00001638 if (CpuFeatures::IsSupported(SSE2)) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001639 CpuFeatures::Scope use_sse2(SSE2);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001640 __ cvtsi2sd(xmm0, ebx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001641 __ movdbl(FieldOperand(eax, HeapNumber::kValueOffset), xmm0);
1642 } else {
1643 __ mov(Operand(esp, 1 * kPointerSize), ebx);
1644 __ fild_s(Operand(esp, 1 * kPointerSize));
1645 __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset));
1646 }
1647 __ ret(2 * kPointerSize); // Drop two pushed arguments from the stack.
1648 }
1649
1650 __ bind(&not_floats);
1651 __ bind(&not_int32);
1652 GenerateTypeTransitionWithSavedArgs(masm);
1653 break;
1654 }
1655 default: UNREACHABLE(); break;
1656 }
1657
1658 // If an allocation fails, or SHR or MOD hit a hard case,
1659 // use the runtime system to get the correct result.
1660 __ bind(&call_runtime);
1661
1662 switch (op_) {
1663 case Token::ADD:
1664 GenerateRegisterArgsPush(masm);
1665 __ InvokeBuiltin(Builtins::ADD, JUMP_FUNCTION);
1666 break;
1667 case Token::SUB:
1668 GenerateRegisterArgsPush(masm);
1669 __ InvokeBuiltin(Builtins::SUB, JUMP_FUNCTION);
1670 break;
1671 case Token::MUL:
1672 GenerateRegisterArgsPush(masm);
1673 __ InvokeBuiltin(Builtins::MUL, JUMP_FUNCTION);
1674 break;
1675 case Token::DIV:
1676 GenerateRegisterArgsPush(masm);
1677 __ InvokeBuiltin(Builtins::DIV, JUMP_FUNCTION);
1678 break;
1679 case Token::MOD:
1680 GenerateRegisterArgsPush(masm);
1681 __ InvokeBuiltin(Builtins::MOD, JUMP_FUNCTION);
1682 break;
1683 case Token::BIT_OR:
1684 __ InvokeBuiltin(Builtins::BIT_OR, JUMP_FUNCTION);
1685 break;
1686 case Token::BIT_AND:
1687 __ InvokeBuiltin(Builtins::BIT_AND, JUMP_FUNCTION);
1688 break;
1689 case Token::BIT_XOR:
1690 __ InvokeBuiltin(Builtins::BIT_XOR, JUMP_FUNCTION);
1691 break;
1692 case Token::SAR:
1693 __ InvokeBuiltin(Builtins::SAR, JUMP_FUNCTION);
1694 break;
1695 case Token::SHL:
1696 __ InvokeBuiltin(Builtins::SHL, JUMP_FUNCTION);
1697 break;
1698 case Token::SHR:
1699 __ InvokeBuiltin(Builtins::SHR, JUMP_FUNCTION);
1700 break;
1701 default:
1702 UNREACHABLE();
1703 }
1704}
1705
1706
danno@chromium.org40cb8782011-05-25 07:58:50 +00001707void BinaryOpStub::GenerateOddballStub(MacroAssembler* masm) {
lrn@chromium.org7516f052011-03-30 08:52:27 +00001708 if (op_ == Token::ADD) {
1709 // Handle string addition here, because it is the only operation
1710 // that does not do a ToNumber conversion on the operands.
1711 GenerateAddStrings(masm);
1712 }
1713
danno@chromium.org160a7b02011-04-18 15:51:38 +00001714 Factory* factory = masm->isolate()->factory();
1715
lrn@chromium.org7516f052011-03-30 08:52:27 +00001716 // Convert odd ball arguments to numbers.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00001717 Label check, done;
danno@chromium.org160a7b02011-04-18 15:51:38 +00001718 __ cmp(edx, factory->undefined_value());
karlklose@chromium.org83a47282011-05-11 11:54:09 +00001719 __ j(not_equal, &check, Label::kNear);
lrn@chromium.org7516f052011-03-30 08:52:27 +00001720 if (Token::IsBitOp(op_)) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001721 __ xor_(edx, edx);
lrn@chromium.org7516f052011-03-30 08:52:27 +00001722 } else {
danno@chromium.org160a7b02011-04-18 15:51:38 +00001723 __ mov(edx, Immediate(factory->nan_value()));
lrn@chromium.org7516f052011-03-30 08:52:27 +00001724 }
karlklose@chromium.org83a47282011-05-11 11:54:09 +00001725 __ jmp(&done, Label::kNear);
lrn@chromium.org7516f052011-03-30 08:52:27 +00001726 __ bind(&check);
danno@chromium.org160a7b02011-04-18 15:51:38 +00001727 __ cmp(eax, factory->undefined_value());
karlklose@chromium.org83a47282011-05-11 11:54:09 +00001728 __ j(not_equal, &done, Label::kNear);
lrn@chromium.org7516f052011-03-30 08:52:27 +00001729 if (Token::IsBitOp(op_)) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001730 __ xor_(eax, eax);
lrn@chromium.org7516f052011-03-30 08:52:27 +00001731 } else {
danno@chromium.org160a7b02011-04-18 15:51:38 +00001732 __ mov(eax, Immediate(factory->nan_value()));
lrn@chromium.org7516f052011-03-30 08:52:27 +00001733 }
1734 __ bind(&done);
1735
1736 GenerateHeapNumberStub(masm);
1737}
1738
1739
danno@chromium.org40cb8782011-05-25 07:58:50 +00001740void BinaryOpStub::GenerateHeapNumberStub(MacroAssembler* masm) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001741 Label call_runtime;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001742
1743 // Floating point case.
1744 switch (op_) {
1745 case Token::ADD:
1746 case Token::SUB:
1747 case Token::MUL:
1748 case Token::DIV: {
1749 Label not_floats;
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00001750 if (CpuFeatures::IsSupported(SSE2)) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001751 CpuFeatures::Scope use_sse2(SSE2);
1752 FloatingPointHelper::LoadSSE2Operands(masm, &not_floats);
1753
1754 switch (op_) {
1755 case Token::ADD: __ addsd(xmm0, xmm1); break;
1756 case Token::SUB: __ subsd(xmm0, xmm1); break;
1757 case Token::MUL: __ mulsd(xmm0, xmm1); break;
1758 case Token::DIV: __ divsd(xmm0, xmm1); break;
1759 default: UNREACHABLE();
1760 }
1761 GenerateHeapResultAllocation(masm, &call_runtime);
1762 __ movdbl(FieldOperand(eax, HeapNumber::kValueOffset), xmm0);
1763 __ ret(0);
1764 } else { // SSE2 not available, use FPU.
1765 FloatingPointHelper::CheckFloatOperands(masm, &not_floats, ebx);
1766 FloatingPointHelper::LoadFloatOperands(
1767 masm,
1768 ecx,
1769 FloatingPointHelper::ARGS_IN_REGISTERS);
1770 switch (op_) {
1771 case Token::ADD: __ faddp(1); break;
1772 case Token::SUB: __ fsubp(1); break;
1773 case Token::MUL: __ fmulp(1); break;
1774 case Token::DIV: __ fdivp(1); break;
1775 default: UNREACHABLE();
1776 }
1777 Label after_alloc_failure;
1778 GenerateHeapResultAllocation(masm, &after_alloc_failure);
1779 __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset));
1780 __ ret(0);
1781 __ bind(&after_alloc_failure);
1782 __ ffree();
1783 __ jmp(&call_runtime);
1784 }
1785
1786 __ bind(&not_floats);
1787 GenerateTypeTransition(masm);
1788 break;
1789 }
1790
1791 case Token::MOD: {
1792 // For MOD we go directly to runtime in the non-smi case.
1793 break;
1794 }
1795 case Token::BIT_OR:
1796 case Token::BIT_AND:
1797 case Token::BIT_XOR:
1798 case Token::SAR:
1799 case Token::SHL:
1800 case Token::SHR: {
1801 GenerateRegisterArgsPush(masm);
1802 Label not_floats;
1803 Label non_smi_result;
1804 FloatingPointHelper::LoadUnknownsAsIntegers(masm,
1805 use_sse3_,
1806 &not_floats);
1807 switch (op_) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001808 case Token::BIT_OR: __ or_(eax, ecx); break;
1809 case Token::BIT_AND: __ and_(eax, ecx); break;
1810 case Token::BIT_XOR: __ xor_(eax, ecx); break;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001811 case Token::SAR: __ sar_cl(eax); break;
1812 case Token::SHL: __ shl_cl(eax); break;
1813 case Token::SHR: __ shr_cl(eax); break;
1814 default: UNREACHABLE();
1815 }
1816 if (op_ == Token::SHR) {
1817 // Check if result is non-negative and fits in a smi.
1818 __ test(eax, Immediate(0xc0000000));
1819 __ j(not_zero, &call_runtime);
1820 } else {
1821 // Check if result fits in a smi.
1822 __ cmp(eax, 0xc0000000);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00001823 __ j(negative, &non_smi_result, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001824 }
1825 // Tag smi result and return.
1826 __ SmiTag(eax);
1827 __ ret(2 * kPointerSize); // Drop two pushed arguments from the stack.
1828
1829 // All ops except SHR return a signed int32 that we load in
1830 // a HeapNumber.
1831 if (op_ != Token::SHR) {
1832 __ bind(&non_smi_result);
1833 // Allocate a heap number if needed.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001834 __ mov(ebx, eax); // ebx: result
karlklose@chromium.org83a47282011-05-11 11:54:09 +00001835 Label skip_allocation;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001836 switch (mode_) {
1837 case OVERWRITE_LEFT:
1838 case OVERWRITE_RIGHT:
1839 // If the operand was an object, we skip the
1840 // allocation of a heap number.
1841 __ mov(eax, Operand(esp, mode_ == OVERWRITE_RIGHT ?
1842 1 * kPointerSize : 2 * kPointerSize));
whesse@chromium.org7b260152011-06-20 15:33:18 +00001843 __ JumpIfNotSmi(eax, &skip_allocation, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001844 // Fall through!
1845 case NO_OVERWRITE:
1846 __ AllocateHeapNumber(eax, ecx, edx, &call_runtime);
1847 __ bind(&skip_allocation);
1848 break;
1849 default: UNREACHABLE();
1850 }
1851 // Store the result in the HeapNumber and return.
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00001852 if (CpuFeatures::IsSupported(SSE2)) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001853 CpuFeatures::Scope use_sse2(SSE2);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00001854 __ cvtsi2sd(xmm0, ebx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001855 __ movdbl(FieldOperand(eax, HeapNumber::kValueOffset), xmm0);
1856 } else {
1857 __ mov(Operand(esp, 1 * kPointerSize), ebx);
1858 __ fild_s(Operand(esp, 1 * kPointerSize));
1859 __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset));
1860 }
1861 __ ret(2 * kPointerSize); // Drop two pushed arguments from the stack.
1862 }
1863
1864 __ bind(&not_floats);
1865 GenerateTypeTransitionWithSavedArgs(masm);
1866 break;
1867 }
1868 default: UNREACHABLE(); break;
1869 }
1870
1871 // If an allocation fails, or SHR or MOD hit a hard case,
1872 // use the runtime system to get the correct result.
1873 __ bind(&call_runtime);
1874
1875 switch (op_) {
1876 case Token::ADD:
1877 GenerateRegisterArgsPush(masm);
1878 __ InvokeBuiltin(Builtins::ADD, JUMP_FUNCTION);
1879 break;
1880 case Token::SUB:
1881 GenerateRegisterArgsPush(masm);
1882 __ InvokeBuiltin(Builtins::SUB, JUMP_FUNCTION);
1883 break;
1884 case Token::MUL:
1885 GenerateRegisterArgsPush(masm);
1886 __ InvokeBuiltin(Builtins::MUL, JUMP_FUNCTION);
1887 break;
1888 case Token::DIV:
1889 GenerateRegisterArgsPush(masm);
1890 __ InvokeBuiltin(Builtins::DIV, JUMP_FUNCTION);
1891 break;
1892 case Token::MOD:
1893 GenerateRegisterArgsPush(masm);
1894 __ InvokeBuiltin(Builtins::MOD, JUMP_FUNCTION);
1895 break;
1896 case Token::BIT_OR:
1897 __ InvokeBuiltin(Builtins::BIT_OR, JUMP_FUNCTION);
1898 break;
1899 case Token::BIT_AND:
1900 __ InvokeBuiltin(Builtins::BIT_AND, JUMP_FUNCTION);
1901 break;
1902 case Token::BIT_XOR:
1903 __ InvokeBuiltin(Builtins::BIT_XOR, JUMP_FUNCTION);
1904 break;
1905 case Token::SAR:
1906 __ InvokeBuiltin(Builtins::SAR, JUMP_FUNCTION);
1907 break;
1908 case Token::SHL:
1909 __ InvokeBuiltin(Builtins::SHL, JUMP_FUNCTION);
1910 break;
1911 case Token::SHR:
1912 __ InvokeBuiltin(Builtins::SHR, JUMP_FUNCTION);
1913 break;
1914 default:
1915 UNREACHABLE();
1916 }
1917}
1918
1919
danno@chromium.org40cb8782011-05-25 07:58:50 +00001920void BinaryOpStub::GenerateGeneric(MacroAssembler* masm) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001921 Label call_runtime;
1922
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00001923 Counters* counters = masm->isolate()->counters();
1924 __ IncrementCounter(counters->generic_binary_stub_calls(), 1);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001925
1926 switch (op_) {
1927 case Token::ADD:
1928 case Token::SUB:
1929 case Token::MUL:
1930 case Token::DIV:
1931 break;
1932 case Token::MOD:
1933 case Token::BIT_OR:
1934 case Token::BIT_AND:
1935 case Token::BIT_XOR:
1936 case Token::SAR:
1937 case Token::SHL:
1938 case Token::SHR:
1939 GenerateRegisterArgsPush(masm);
1940 break;
1941 default:
1942 UNREACHABLE();
1943 }
1944
1945 GenerateSmiCode(masm, &call_runtime, ALLOW_HEAPNUMBER_RESULTS);
1946
1947 // Floating point case.
1948 switch (op_) {
1949 case Token::ADD:
1950 case Token::SUB:
1951 case Token::MUL:
1952 case Token::DIV: {
1953 Label not_floats;
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00001954 if (CpuFeatures::IsSupported(SSE2)) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00001955 CpuFeatures::Scope use_sse2(SSE2);
1956 FloatingPointHelper::LoadSSE2Operands(masm, &not_floats);
1957
1958 switch (op_) {
1959 case Token::ADD: __ addsd(xmm0, xmm1); break;
1960 case Token::SUB: __ subsd(xmm0, xmm1); break;
1961 case Token::MUL: __ mulsd(xmm0, xmm1); break;
1962 case Token::DIV: __ divsd(xmm0, xmm1); break;
1963 default: UNREACHABLE();
1964 }
1965 GenerateHeapResultAllocation(masm, &call_runtime);
1966 __ movdbl(FieldOperand(eax, HeapNumber::kValueOffset), xmm0);
1967 __ ret(0);
1968 } else { // SSE2 not available, use FPU.
1969 FloatingPointHelper::CheckFloatOperands(masm, &not_floats, ebx);
1970 FloatingPointHelper::LoadFloatOperands(
1971 masm,
1972 ecx,
1973 FloatingPointHelper::ARGS_IN_REGISTERS);
1974 switch (op_) {
1975 case Token::ADD: __ faddp(1); break;
1976 case Token::SUB: __ fsubp(1); break;
1977 case Token::MUL: __ fmulp(1); break;
1978 case Token::DIV: __ fdivp(1); break;
1979 default: UNREACHABLE();
1980 }
1981 Label after_alloc_failure;
1982 GenerateHeapResultAllocation(masm, &after_alloc_failure);
1983 __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset));
1984 __ ret(0);
1985 __ bind(&after_alloc_failure);
1986 __ ffree();
1987 __ jmp(&call_runtime);
1988 }
1989 __ bind(&not_floats);
1990 break;
1991 }
1992 case Token::MOD: {
1993 // For MOD we go directly to runtime in the non-smi case.
1994 break;
1995 }
1996 case Token::BIT_OR:
1997 case Token::BIT_AND:
1998 case Token::BIT_XOR:
1999 case Token::SAR:
2000 case Token::SHL:
2001 case Token::SHR: {
2002 Label non_smi_result;
2003 FloatingPointHelper::LoadUnknownsAsIntegers(masm,
2004 use_sse3_,
2005 &call_runtime);
2006 switch (op_) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002007 case Token::BIT_OR: __ or_(eax, ecx); break;
2008 case Token::BIT_AND: __ and_(eax, ecx); break;
2009 case Token::BIT_XOR: __ xor_(eax, ecx); break;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002010 case Token::SAR: __ sar_cl(eax); break;
2011 case Token::SHL: __ shl_cl(eax); break;
2012 case Token::SHR: __ shr_cl(eax); break;
2013 default: UNREACHABLE();
2014 }
2015 if (op_ == Token::SHR) {
2016 // Check if result is non-negative and fits in a smi.
2017 __ test(eax, Immediate(0xc0000000));
2018 __ j(not_zero, &call_runtime);
2019 } else {
2020 // Check if result fits in a smi.
2021 __ cmp(eax, 0xc0000000);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00002022 __ j(negative, &non_smi_result, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002023 }
2024 // Tag smi result and return.
2025 __ SmiTag(eax);
2026 __ ret(2 * kPointerSize); // Drop the arguments from the stack.
2027
2028 // All ops except SHR return a signed int32 that we load in
2029 // a HeapNumber.
2030 if (op_ != Token::SHR) {
2031 __ bind(&non_smi_result);
2032 // Allocate a heap number if needed.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002033 __ mov(ebx, eax); // ebx: result
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002034 Label skip_allocation;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002035 switch (mode_) {
2036 case OVERWRITE_LEFT:
2037 case OVERWRITE_RIGHT:
2038 // If the operand was an object, we skip the
2039 // allocation of a heap number.
2040 __ mov(eax, Operand(esp, mode_ == OVERWRITE_RIGHT ?
2041 1 * kPointerSize : 2 * kPointerSize));
whesse@chromium.org7b260152011-06-20 15:33:18 +00002042 __ JumpIfNotSmi(eax, &skip_allocation, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002043 // Fall through!
2044 case NO_OVERWRITE:
2045 __ AllocateHeapNumber(eax, ecx, edx, &call_runtime);
2046 __ bind(&skip_allocation);
2047 break;
2048 default: UNREACHABLE();
2049 }
2050 // Store the result in the HeapNumber and return.
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00002051 if (CpuFeatures::IsSupported(SSE2)) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002052 CpuFeatures::Scope use_sse2(SSE2);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002053 __ cvtsi2sd(xmm0, ebx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002054 __ movdbl(FieldOperand(eax, HeapNumber::kValueOffset), xmm0);
2055 } else {
2056 __ mov(Operand(esp, 1 * kPointerSize), ebx);
2057 __ fild_s(Operand(esp, 1 * kPointerSize));
2058 __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset));
2059 }
2060 __ ret(2 * kPointerSize);
2061 }
2062 break;
2063 }
2064 default: UNREACHABLE(); break;
2065 }
2066
2067 // If all else fails, use the runtime system to get the correct
2068 // result.
2069 __ bind(&call_runtime);
2070 switch (op_) {
2071 case Token::ADD: {
ager@chromium.org0ee099b2011-01-25 14:06:47 +00002072 GenerateAddStrings(masm);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002073 GenerateRegisterArgsPush(masm);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002074 __ InvokeBuiltin(Builtins::ADD, JUMP_FUNCTION);
2075 break;
2076 }
2077 case Token::SUB:
2078 GenerateRegisterArgsPush(masm);
2079 __ InvokeBuiltin(Builtins::SUB, JUMP_FUNCTION);
2080 break;
2081 case Token::MUL:
2082 GenerateRegisterArgsPush(masm);
2083 __ InvokeBuiltin(Builtins::MUL, JUMP_FUNCTION);
2084 break;
2085 case Token::DIV:
2086 GenerateRegisterArgsPush(masm);
2087 __ InvokeBuiltin(Builtins::DIV, JUMP_FUNCTION);
2088 break;
2089 case Token::MOD:
2090 __ InvokeBuiltin(Builtins::MOD, JUMP_FUNCTION);
2091 break;
2092 case Token::BIT_OR:
2093 __ InvokeBuiltin(Builtins::BIT_OR, JUMP_FUNCTION);
2094 break;
2095 case Token::BIT_AND:
2096 __ InvokeBuiltin(Builtins::BIT_AND, JUMP_FUNCTION);
2097 break;
2098 case Token::BIT_XOR:
2099 __ InvokeBuiltin(Builtins::BIT_XOR, JUMP_FUNCTION);
2100 break;
2101 case Token::SAR:
2102 __ InvokeBuiltin(Builtins::SAR, JUMP_FUNCTION);
2103 break;
2104 case Token::SHL:
2105 __ InvokeBuiltin(Builtins::SHL, JUMP_FUNCTION);
2106 break;
2107 case Token::SHR:
2108 __ InvokeBuiltin(Builtins::SHR, JUMP_FUNCTION);
2109 break;
2110 default:
2111 UNREACHABLE();
2112 }
2113}
2114
2115
danno@chromium.org40cb8782011-05-25 07:58:50 +00002116void BinaryOpStub::GenerateAddStrings(MacroAssembler* masm) {
fschneider@chromium.org3a5fd782011-02-24 10:10:44 +00002117 ASSERT(op_ == Token::ADD);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002118 Label left_not_string, call_runtime;
ager@chromium.org0ee099b2011-01-25 14:06:47 +00002119
2120 // Registers containing left and right operands respectively.
2121 Register left = edx;
2122 Register right = eax;
2123
2124 // Test if left operand is a string.
whesse@chromium.org7b260152011-06-20 15:33:18 +00002125 __ JumpIfSmi(left, &left_not_string, Label::kNear);
ager@chromium.org0ee099b2011-01-25 14:06:47 +00002126 __ CmpObjectType(left, FIRST_NONSTRING_TYPE, ecx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002127 __ j(above_equal, &left_not_string, Label::kNear);
ager@chromium.org0ee099b2011-01-25 14:06:47 +00002128
2129 StringAddStub string_add_left_stub(NO_STRING_CHECK_LEFT_IN_STUB);
2130 GenerateRegisterArgsPush(masm);
2131 __ TailCallStub(&string_add_left_stub);
2132
2133 // Left operand is not a string, test right.
2134 __ bind(&left_not_string);
whesse@chromium.org7b260152011-06-20 15:33:18 +00002135 __ JumpIfSmi(right, &call_runtime, Label::kNear);
ager@chromium.org0ee099b2011-01-25 14:06:47 +00002136 __ CmpObjectType(right, FIRST_NONSTRING_TYPE, ecx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002137 __ j(above_equal, &call_runtime, Label::kNear);
ager@chromium.org0ee099b2011-01-25 14:06:47 +00002138
2139 StringAddStub string_add_right_stub(NO_STRING_CHECK_RIGHT_IN_STUB);
2140 GenerateRegisterArgsPush(masm);
2141 __ TailCallStub(&string_add_right_stub);
2142
2143 // Neither argument is a string.
2144 __ bind(&call_runtime);
2145}
2146
2147
danno@chromium.org40cb8782011-05-25 07:58:50 +00002148void BinaryOpStub::GenerateHeapResultAllocation(
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002149 MacroAssembler* masm,
2150 Label* alloc_failure) {
2151 Label skip_allocation;
2152 OverwriteMode mode = mode_;
2153 switch (mode) {
2154 case OVERWRITE_LEFT: {
2155 // If the argument in edx is already an object, we skip the
2156 // allocation of a heap number.
whesse@chromium.org7b260152011-06-20 15:33:18 +00002157 __ JumpIfNotSmi(edx, &skip_allocation, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002158 // Allocate a heap number for the result. Keep eax and edx intact
2159 // for the possible runtime call.
2160 __ AllocateHeapNumber(ebx, ecx, no_reg, alloc_failure);
2161 // Now edx can be overwritten losing one of the arguments as we are
2162 // now done and will not need it any more.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002163 __ mov(edx, ebx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002164 __ bind(&skip_allocation);
2165 // Use object in edx as a result holder
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002166 __ mov(eax, edx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002167 break;
2168 }
2169 case OVERWRITE_RIGHT:
2170 // If the argument in eax is already an object, we skip the
2171 // allocation of a heap number.
whesse@chromium.org7b260152011-06-20 15:33:18 +00002172 __ JumpIfNotSmi(eax, &skip_allocation, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002173 // Fall through!
2174 case NO_OVERWRITE:
2175 // Allocate a heap number for the result. Keep eax and edx intact
2176 // for the possible runtime call.
2177 __ AllocateHeapNumber(ebx, ecx, no_reg, alloc_failure);
2178 // Now eax can be overwritten losing one of the arguments as we are
2179 // now done and will not need it any more.
2180 __ mov(eax, ebx);
2181 __ bind(&skip_allocation);
2182 break;
2183 default: UNREACHABLE();
2184 }
2185}
2186
2187
danno@chromium.org40cb8782011-05-25 07:58:50 +00002188void BinaryOpStub::GenerateRegisterArgsPush(MacroAssembler* masm) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002189 __ pop(ecx);
2190 __ push(edx);
2191 __ push(eax);
2192 __ push(ecx);
2193}
2194
2195
ricow@chromium.org65fae842010-08-25 15:26:24 +00002196void TranscendentalCacheStub::Generate(MacroAssembler* masm) {
whesse@chromium.org023421e2010-12-21 12:19:12 +00002197 // TAGGED case:
2198 // Input:
2199 // esp[4]: tagged number input argument (should be number).
2200 // esp[0]: return address.
2201 // Output:
2202 // eax: tagged double result.
2203 // UNTAGGED case:
2204 // Input::
2205 // esp[0]: return address.
2206 // xmm1: untagged double input argument
2207 // Output:
2208 // xmm1: untagged double result.
2209
ricow@chromium.org65fae842010-08-25 15:26:24 +00002210 Label runtime_call;
2211 Label runtime_call_clear_stack;
whesse@chromium.org023421e2010-12-21 12:19:12 +00002212 Label skip_cache;
2213 const bool tagged = (argument_type_ == TAGGED);
2214 if (tagged) {
2215 // Test that eax is a number.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002216 Label input_not_smi;
2217 Label loaded;
whesse@chromium.org023421e2010-12-21 12:19:12 +00002218 __ mov(eax, Operand(esp, kPointerSize));
whesse@chromium.org7b260152011-06-20 15:33:18 +00002219 __ JumpIfNotSmi(eax, &input_not_smi, Label::kNear);
whesse@chromium.org023421e2010-12-21 12:19:12 +00002220 // Input is a smi. Untag and load it onto the FPU stack.
2221 // Then load the low and high words of the double into ebx, edx.
2222 STATIC_ASSERT(kSmiTagSize == 1);
2223 __ sar(eax, 1);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002224 __ sub(esp, Immediate(2 * kPointerSize));
whesse@chromium.org023421e2010-12-21 12:19:12 +00002225 __ mov(Operand(esp, 0), eax);
2226 __ fild_s(Operand(esp, 0));
2227 __ fst_d(Operand(esp, 0));
2228 __ pop(edx);
2229 __ pop(ebx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002230 __ jmp(&loaded, Label::kNear);
whesse@chromium.org023421e2010-12-21 12:19:12 +00002231 __ bind(&input_not_smi);
2232 // Check if input is a HeapNumber.
2233 __ mov(ebx, FieldOperand(eax, HeapObject::kMapOffset));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002234 Factory* factory = masm->isolate()->factory();
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002235 __ cmp(ebx, Immediate(factory->heap_number_map()));
whesse@chromium.org023421e2010-12-21 12:19:12 +00002236 __ j(not_equal, &runtime_call);
2237 // Input is a HeapNumber. Push it on the FPU stack and load its
2238 // low and high words into ebx, edx.
2239 __ fld_d(FieldOperand(eax, HeapNumber::kValueOffset));
2240 __ mov(edx, FieldOperand(eax, HeapNumber::kExponentOffset));
2241 __ mov(ebx, FieldOperand(eax, HeapNumber::kMantissaOffset));
ricow@chromium.org65fae842010-08-25 15:26:24 +00002242
whesse@chromium.org023421e2010-12-21 12:19:12 +00002243 __ bind(&loaded);
2244 } else { // UNTAGGED.
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00002245 if (CpuFeatures::IsSupported(SSE4_1)) {
whesse@chromium.org023421e2010-12-21 12:19:12 +00002246 CpuFeatures::Scope sse4_scope(SSE4_1);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002247 __ pextrd(edx, xmm1, 0x1); // copy xmm1[63..32] to edx.
whesse@chromium.org023421e2010-12-21 12:19:12 +00002248 } else {
2249 __ pshufd(xmm0, xmm1, 0x1);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002250 __ movd(edx, xmm0);
whesse@chromium.org023421e2010-12-21 12:19:12 +00002251 }
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002252 __ movd(ebx, xmm1);
whesse@chromium.org023421e2010-12-21 12:19:12 +00002253 }
2254
2255 // ST[0] or xmm1 == double value
ricow@chromium.org65fae842010-08-25 15:26:24 +00002256 // ebx = low 32 bits of double value
2257 // edx = high 32 bits of double value
2258 // Compute hash (the shifts are arithmetic):
2259 // h = (low ^ high); h ^= h >> 16; h ^= h >> 8; h = h & (cacheSize - 1);
2260 __ mov(ecx, ebx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002261 __ xor_(ecx, edx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002262 __ mov(eax, ecx);
2263 __ sar(eax, 16);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002264 __ xor_(ecx, eax);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002265 __ mov(eax, ecx);
2266 __ sar(eax, 8);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002267 __ xor_(ecx, eax);
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00002268 ASSERT(IsPowerOf2(TranscendentalCache::SubCache::kCacheSize));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002269 __ and_(ecx,
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00002270 Immediate(TranscendentalCache::SubCache::kCacheSize - 1));
ricow@chromium.org65fae842010-08-25 15:26:24 +00002271
whesse@chromium.org023421e2010-12-21 12:19:12 +00002272 // ST[0] or xmm1 == double value.
ricow@chromium.org65fae842010-08-25 15:26:24 +00002273 // ebx = low 32 bits of double value.
2274 // edx = high 32 bits of double value.
2275 // ecx = TranscendentalCache::hash(double value).
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00002276 ExternalReference cache_array =
2277 ExternalReference::transcendental_cache_array_address(masm->isolate());
2278 __ mov(eax, Immediate(cache_array));
2279 int cache_array_index =
2280 type_ * sizeof(masm->isolate()->transcendental_cache()->caches_[0]);
2281 __ mov(eax, Operand(eax, cache_array_index));
ricow@chromium.org65fae842010-08-25 15:26:24 +00002282 // Eax points to the cache for the type type_.
2283 // If NULL, the cache hasn't been initialized yet, so go through runtime.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002284 __ test(eax, eax);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002285 __ j(zero, &runtime_call_clear_stack);
2286#ifdef DEBUG
2287 // Check that the layout of cache elements match expectations.
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00002288 { TranscendentalCache::SubCache::Element test_elem[2];
ricow@chromium.org65fae842010-08-25 15:26:24 +00002289 char* elem_start = reinterpret_cast<char*>(&test_elem[0]);
2290 char* elem2_start = reinterpret_cast<char*>(&test_elem[1]);
2291 char* elem_in0 = reinterpret_cast<char*>(&(test_elem[0].in[0]));
2292 char* elem_in1 = reinterpret_cast<char*>(&(test_elem[0].in[1]));
2293 char* elem_out = reinterpret_cast<char*>(&(test_elem[0].output));
2294 CHECK_EQ(12, elem2_start - elem_start); // Two uint_32's and a pointer.
2295 CHECK_EQ(0, elem_in0 - elem_start);
2296 CHECK_EQ(kIntSize, elem_in1 - elem_start);
2297 CHECK_EQ(2 * kIntSize, elem_out - elem_start);
2298 }
2299#endif
2300 // Find the address of the ecx'th entry in the cache, i.e., &eax[ecx*12].
2301 __ lea(ecx, Operand(ecx, ecx, times_2, 0));
2302 __ lea(ecx, Operand(eax, ecx, times_4, 0));
2303 // Check if cache matches: Double value is stored in uint32_t[2] array.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002304 Label cache_miss;
ricow@chromium.org65fae842010-08-25 15:26:24 +00002305 __ cmp(ebx, Operand(ecx, 0));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002306 __ j(not_equal, &cache_miss, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002307 __ cmp(edx, Operand(ecx, kIntSize));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002308 __ j(not_equal, &cache_miss, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002309 // Cache hit!
2310 __ mov(eax, Operand(ecx, 2 * kIntSize));
whesse@chromium.org023421e2010-12-21 12:19:12 +00002311 if (tagged) {
2312 __ fstp(0);
2313 __ ret(kPointerSize);
2314 } else { // UNTAGGED.
2315 __ movdbl(xmm1, FieldOperand(eax, HeapNumber::kValueOffset));
2316 __ Ret();
2317 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00002318
2319 __ bind(&cache_miss);
2320 // Update cache with new value.
2321 // We are short on registers, so use no_reg as scratch.
2322 // This gives slightly larger code.
whesse@chromium.org023421e2010-12-21 12:19:12 +00002323 if (tagged) {
2324 __ AllocateHeapNumber(eax, edi, no_reg, &runtime_call_clear_stack);
2325 } else { // UNTAGGED.
2326 __ AllocateHeapNumber(eax, edi, no_reg, &skip_cache);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002327 __ sub(esp, Immediate(kDoubleSize));
whesse@chromium.org023421e2010-12-21 12:19:12 +00002328 __ movdbl(Operand(esp, 0), xmm1);
2329 __ fld_d(Operand(esp, 0));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002330 __ add(esp, Immediate(kDoubleSize));
whesse@chromium.org023421e2010-12-21 12:19:12 +00002331 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00002332 GenerateOperation(masm);
2333 __ mov(Operand(ecx, 0), ebx);
2334 __ mov(Operand(ecx, kIntSize), edx);
2335 __ mov(Operand(ecx, 2 * kIntSize), eax);
2336 __ fstp_d(FieldOperand(eax, HeapNumber::kValueOffset));
whesse@chromium.org023421e2010-12-21 12:19:12 +00002337 if (tagged) {
2338 __ ret(kPointerSize);
2339 } else { // UNTAGGED.
2340 __ movdbl(xmm1, FieldOperand(eax, HeapNumber::kValueOffset));
2341 __ Ret();
ricow@chromium.org65fae842010-08-25 15:26:24 +00002342
whesse@chromium.org023421e2010-12-21 12:19:12 +00002343 // Skip cache and return answer directly, only in untagged case.
2344 __ bind(&skip_cache);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002345 __ sub(esp, Immediate(kDoubleSize));
whesse@chromium.org023421e2010-12-21 12:19:12 +00002346 __ movdbl(Operand(esp, 0), xmm1);
2347 __ fld_d(Operand(esp, 0));
2348 GenerateOperation(masm);
2349 __ fstp_d(Operand(esp, 0));
2350 __ movdbl(xmm1, Operand(esp, 0));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002351 __ add(esp, Immediate(kDoubleSize));
whesse@chromium.org023421e2010-12-21 12:19:12 +00002352 // We return the value in xmm1 without adding it to the cache, but
2353 // we cause a scavenging GC so that future allocations will succeed.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002354 {
2355 FrameScope scope(masm, StackFrame::INTERNAL);
2356 // Allocate an unused object bigger than a HeapNumber.
2357 __ push(Immediate(Smi::FromInt(2 * kDoubleSize)));
2358 __ CallRuntimeSaveDoubles(Runtime::kAllocateInNewSpace);
2359 }
whesse@chromium.org023421e2010-12-21 12:19:12 +00002360 __ Ret();
2361 }
2362
2363 // Call runtime, doing whatever allocation and cleanup is necessary.
2364 if (tagged) {
2365 __ bind(&runtime_call_clear_stack);
2366 __ fstp(0);
2367 __ bind(&runtime_call);
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00002368 ExternalReference runtime =
2369 ExternalReference(RuntimeFunction(), masm->isolate());
2370 __ TailCallExternalReference(runtime, 1, 1);
whesse@chromium.org023421e2010-12-21 12:19:12 +00002371 } else { // UNTAGGED.
2372 __ bind(&runtime_call_clear_stack);
2373 __ bind(&runtime_call);
2374 __ AllocateHeapNumber(eax, edi, no_reg, &skip_cache);
2375 __ movdbl(FieldOperand(eax, HeapNumber::kValueOffset), xmm1);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002376 {
2377 FrameScope scope(masm, StackFrame::INTERNAL);
2378 __ push(eax);
2379 __ CallRuntime(RuntimeFunction(), 1);
2380 }
whesse@chromium.org023421e2010-12-21 12:19:12 +00002381 __ movdbl(xmm1, FieldOperand(eax, HeapNumber::kValueOffset));
2382 __ Ret();
2383 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00002384}
2385
2386
2387Runtime::FunctionId TranscendentalCacheStub::RuntimeFunction() {
2388 switch (type_) {
ricow@chromium.org65fae842010-08-25 15:26:24 +00002389 case TranscendentalCache::SIN: return Runtime::kMath_sin;
2390 case TranscendentalCache::COS: return Runtime::kMath_cos;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002391 case TranscendentalCache::LOG: return Runtime::kMath_log;
ricow@chromium.org65fae842010-08-25 15:26:24 +00002392 default:
2393 UNIMPLEMENTED();
2394 return Runtime::kAbort;
2395 }
2396}
2397
2398
2399void TranscendentalCacheStub::GenerateOperation(MacroAssembler* masm) {
2400 // Only free register is edi.
whesse@chromium.org023421e2010-12-21 12:19:12 +00002401 // Input value is on FP stack, and also in ebx/edx.
2402 // Input value is possibly in xmm1.
2403 // Address of result (a newly allocated HeapNumber) may be in eax.
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002404 if (type_ == TranscendentalCache::SIN || type_ == TranscendentalCache::COS) {
2405 // Both fsin and fcos require arguments in the range +/-2^63 and
2406 // return NaN for infinities and NaN. They can share all code except
2407 // the actual fsin/fcos operation.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002408 Label in_range, done;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002409 // If argument is outside the range -2^63..2^63, fsin/cos doesn't
2410 // work. We must reduce it to the appropriate range.
2411 __ mov(edi, edx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002412 __ and_(edi, Immediate(0x7ff00000)); // Exponent only.
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002413 int supported_exponent_limit =
2414 (63 + HeapNumber::kExponentBias) << HeapNumber::kExponentShift;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002415 __ cmp(edi, Immediate(supported_exponent_limit));
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00002416 __ j(below, &in_range, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002417 // Check for infinity and NaN. Both return NaN for sin.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002418 __ cmp(edi, Immediate(0x7ff00000));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002419 Label non_nan_result;
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00002420 __ j(not_equal, &non_nan_result, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002421 // Input is +/-Infinity or NaN. Result is NaN.
2422 __ fstp(0);
2423 // NaN is represented by 0x7ff8000000000000.
2424 __ push(Immediate(0x7ff80000));
2425 __ push(Immediate(0));
2426 __ fld_d(Operand(esp, 0));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002427 __ add(esp, Immediate(2 * kPointerSize));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002428 __ jmp(&done, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002429
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002430 __ bind(&non_nan_result);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002431
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002432 // Use fpmod to restrict argument to the range +/-2*PI.
2433 __ mov(edi, eax); // Save eax before using fnstsw_ax.
2434 __ fldpi();
2435 __ fadd(0);
2436 __ fld(1);
2437 // FPU Stack: input, 2*pi, input.
2438 {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002439 Label no_exceptions;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002440 __ fwait();
2441 __ fnstsw_ax();
2442 // Clear if Illegal Operand or Zero Division exceptions are set.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002443 __ test(eax, Immediate(5));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002444 __ j(zero, &no_exceptions, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002445 __ fnclex();
2446 __ bind(&no_exceptions);
2447 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00002448
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002449 // Compute st(0) % st(1)
2450 {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002451 Label partial_remainder_loop;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002452 __ bind(&partial_remainder_loop);
2453 __ fprem1();
2454 __ fwait();
2455 __ fnstsw_ax();
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002456 __ test(eax, Immediate(0x400 /* C2 */));
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002457 // If C2 is set, computation only has partial result. Loop to
2458 // continue computation.
2459 __ j(not_zero, &partial_remainder_loop);
2460 }
2461 // FPU Stack: input, 2*pi, input % 2*pi
2462 __ fstp(2);
2463 __ fstp(0);
2464 __ mov(eax, edi); // Restore eax (allocated HeapNumber pointer).
2465
2466 // FPU Stack: input % 2*pi
2467 __ bind(&in_range);
2468 switch (type_) {
2469 case TranscendentalCache::SIN:
2470 __ fsin();
2471 break;
2472 case TranscendentalCache::COS:
2473 __ fcos();
2474 break;
2475 default:
2476 UNREACHABLE();
2477 }
2478 __ bind(&done);
2479 } else {
2480 ASSERT(type_ == TranscendentalCache::LOG);
2481 __ fldln2();
2482 __ fxch();
2483 __ fyl2x();
ricow@chromium.org65fae842010-08-25 15:26:24 +00002484 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00002485}
2486
2487
ricow@chromium.org65fae842010-08-25 15:26:24 +00002488// Input: edx, eax are the left and right objects of a bit op.
2489// Output: eax, ecx are left and right integers for a bit op.
ricow@chromium.org65fae842010-08-25 15:26:24 +00002490void FloatingPointHelper::LoadUnknownsAsIntegers(MacroAssembler* masm,
2491 bool use_sse3,
2492 Label* conversion_failure) {
2493 // Check float operands.
2494 Label arg1_is_object, check_undefined_arg1;
2495 Label arg2_is_object, check_undefined_arg2;
2496 Label load_arg2, done;
2497
2498 // Test if arg1 is a Smi.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00002499 __ JumpIfNotSmi(edx, &arg1_is_object, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002500
2501 __ SmiUntag(edx);
2502 __ jmp(&load_arg2);
2503
2504 // If the argument is undefined it converts to zero (ECMA-262, section 9.5).
2505 __ bind(&check_undefined_arg1);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002506 Factory* factory = masm->isolate()->factory();
2507 __ cmp(edx, factory->undefined_value());
ricow@chromium.org65fae842010-08-25 15:26:24 +00002508 __ j(not_equal, conversion_failure);
2509 __ mov(edx, Immediate(0));
2510 __ jmp(&load_arg2);
2511
2512 __ bind(&arg1_is_object);
2513 __ mov(ebx, FieldOperand(edx, HeapObject::kMapOffset));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002514 __ cmp(ebx, factory->heap_number_map());
ricow@chromium.org65fae842010-08-25 15:26:24 +00002515 __ j(not_equal, &check_undefined_arg1);
2516
2517 // Get the untagged integer version of the edx heap number in ecx.
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00002518 IntegerConvert(masm, edx, use_sse3, conversion_failure);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002519 __ mov(edx, ecx);
2520
2521 // Here edx has the untagged integer, eax has a Smi or a heap number.
2522 __ bind(&load_arg2);
2523
2524 // Test if arg2 is a Smi.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00002525 __ JumpIfNotSmi(eax, &arg2_is_object, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002526
2527 __ SmiUntag(eax);
2528 __ mov(ecx, eax);
2529 __ jmp(&done);
2530
2531 // If the argument is undefined it converts to zero (ECMA-262, section 9.5).
2532 __ bind(&check_undefined_arg2);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002533 __ cmp(eax, factory->undefined_value());
ricow@chromium.org65fae842010-08-25 15:26:24 +00002534 __ j(not_equal, conversion_failure);
2535 __ mov(ecx, Immediate(0));
2536 __ jmp(&done);
2537
2538 __ bind(&arg2_is_object);
2539 __ mov(ebx, FieldOperand(eax, HeapObject::kMapOffset));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002540 __ cmp(ebx, factory->heap_number_map());
ricow@chromium.org65fae842010-08-25 15:26:24 +00002541 __ j(not_equal, &check_undefined_arg2);
2542
2543 // Get the untagged integer version of the eax heap number in ecx.
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00002544 IntegerConvert(masm, eax, use_sse3, conversion_failure);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002545 __ bind(&done);
2546 __ mov(eax, edx);
2547}
2548
2549
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002550void FloatingPointHelper::CheckLoadedIntegersWereInt32(MacroAssembler* masm,
2551 bool use_sse3,
2552 Label* not_int32) {
2553 return;
2554}
2555
2556
ricow@chromium.org65fae842010-08-25 15:26:24 +00002557void FloatingPointHelper::LoadFloatOperand(MacroAssembler* masm,
2558 Register number) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002559 Label load_smi, done;
ricow@chromium.org65fae842010-08-25 15:26:24 +00002560
whesse@chromium.org7b260152011-06-20 15:33:18 +00002561 __ JumpIfSmi(number, &load_smi, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002562 __ fld_d(FieldOperand(number, HeapNumber::kValueOffset));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002563 __ jmp(&done, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002564
2565 __ bind(&load_smi);
2566 __ SmiUntag(number);
2567 __ push(number);
2568 __ fild_s(Operand(esp, 0));
2569 __ pop(number);
2570
2571 __ bind(&done);
2572}
2573
2574
2575void FloatingPointHelper::LoadSSE2Operands(MacroAssembler* masm) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002576 Label load_smi_edx, load_eax, load_smi_eax, done;
ricow@chromium.org65fae842010-08-25 15:26:24 +00002577 // Load operand in edx into xmm0.
whesse@chromium.org7b260152011-06-20 15:33:18 +00002578 __ JumpIfSmi(edx, &load_smi_edx, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002579 __ movdbl(xmm0, FieldOperand(edx, HeapNumber::kValueOffset));
2580
2581 __ bind(&load_eax);
2582 // Load operand in eax into xmm1.
whesse@chromium.org7b260152011-06-20 15:33:18 +00002583 __ JumpIfSmi(eax, &load_smi_eax, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002584 __ movdbl(xmm1, FieldOperand(eax, HeapNumber::kValueOffset));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002585 __ jmp(&done, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002586
2587 __ bind(&load_smi_edx);
2588 __ SmiUntag(edx); // Untag smi before converting to float.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002589 __ cvtsi2sd(xmm0, edx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002590 __ SmiTag(edx); // Retag smi for heap number overwriting test.
2591 __ jmp(&load_eax);
2592
2593 __ bind(&load_smi_eax);
2594 __ SmiUntag(eax); // Untag smi before converting to float.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002595 __ cvtsi2sd(xmm1, eax);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002596 __ SmiTag(eax); // Retag smi for heap number overwriting test.
2597
2598 __ bind(&done);
2599}
2600
2601
2602void FloatingPointHelper::LoadSSE2Operands(MacroAssembler* masm,
2603 Label* not_numbers) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002604 Label load_smi_edx, load_eax, load_smi_eax, load_float_eax, done;
ricow@chromium.org65fae842010-08-25 15:26:24 +00002605 // Load operand in edx into xmm0, or branch to not_numbers.
whesse@chromium.org7b260152011-06-20 15:33:18 +00002606 __ JumpIfSmi(edx, &load_smi_edx, Label::kNear);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002607 Factory* factory = masm->isolate()->factory();
2608 __ cmp(FieldOperand(edx, HeapObject::kMapOffset), factory->heap_number_map());
ricow@chromium.org65fae842010-08-25 15:26:24 +00002609 __ j(not_equal, not_numbers); // Argument in edx is not a number.
2610 __ movdbl(xmm0, FieldOperand(edx, HeapNumber::kValueOffset));
2611 __ bind(&load_eax);
2612 // Load operand in eax into xmm1, or branch to not_numbers.
whesse@chromium.org7b260152011-06-20 15:33:18 +00002613 __ JumpIfSmi(eax, &load_smi_eax, Label::kNear);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002614 __ cmp(FieldOperand(eax, HeapObject::kMapOffset), factory->heap_number_map());
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002615 __ j(equal, &load_float_eax, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002616 __ jmp(not_numbers); // Argument in eax is not a number.
2617 __ bind(&load_smi_edx);
2618 __ SmiUntag(edx); // Untag smi before converting to float.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002619 __ cvtsi2sd(xmm0, edx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002620 __ SmiTag(edx); // Retag smi for heap number overwriting test.
2621 __ jmp(&load_eax);
2622 __ bind(&load_smi_eax);
2623 __ SmiUntag(eax); // Untag smi before converting to float.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002624 __ cvtsi2sd(xmm1, eax);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002625 __ SmiTag(eax); // Retag smi for heap number overwriting test.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002626 __ jmp(&done, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002627 __ bind(&load_float_eax);
2628 __ movdbl(xmm1, FieldOperand(eax, HeapNumber::kValueOffset));
2629 __ bind(&done);
2630}
2631
2632
2633void FloatingPointHelper::LoadSSE2Smis(MacroAssembler* masm,
2634 Register scratch) {
2635 const Register left = edx;
2636 const Register right = eax;
2637 __ mov(scratch, left);
2638 ASSERT(!scratch.is(right)); // We're about to clobber scratch.
2639 __ SmiUntag(scratch);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002640 __ cvtsi2sd(xmm0, scratch);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002641
2642 __ mov(scratch, right);
2643 __ SmiUntag(scratch);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002644 __ cvtsi2sd(xmm1, scratch);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002645}
2646
2647
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002648void FloatingPointHelper::CheckSSE2OperandsAreInt32(MacroAssembler* masm,
2649 Label* non_int32,
2650 Register scratch) {
2651 __ cvttsd2si(scratch, Operand(xmm0));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002652 __ cvtsi2sd(xmm2, scratch);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002653 __ ucomisd(xmm0, xmm2);
2654 __ j(not_zero, non_int32);
2655 __ j(carry, non_int32);
2656 __ cvttsd2si(scratch, Operand(xmm1));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002657 __ cvtsi2sd(xmm2, scratch);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002658 __ ucomisd(xmm1, xmm2);
2659 __ j(not_zero, non_int32);
2660 __ j(carry, non_int32);
2661}
2662
2663
ricow@chromium.org65fae842010-08-25 15:26:24 +00002664void FloatingPointHelper::LoadFloatOperands(MacroAssembler* masm,
2665 Register scratch,
2666 ArgLocation arg_location) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002667 Label load_smi_1, load_smi_2, done_load_1, done;
ricow@chromium.org65fae842010-08-25 15:26:24 +00002668 if (arg_location == ARGS_IN_REGISTERS) {
2669 __ mov(scratch, edx);
2670 } else {
2671 __ mov(scratch, Operand(esp, 2 * kPointerSize));
2672 }
whesse@chromium.org7b260152011-06-20 15:33:18 +00002673 __ JumpIfSmi(scratch, &load_smi_1, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002674 __ fld_d(FieldOperand(scratch, HeapNumber::kValueOffset));
2675 __ bind(&done_load_1);
2676
2677 if (arg_location == ARGS_IN_REGISTERS) {
2678 __ mov(scratch, eax);
2679 } else {
2680 __ mov(scratch, Operand(esp, 1 * kPointerSize));
2681 }
whesse@chromium.org7b260152011-06-20 15:33:18 +00002682 __ JumpIfSmi(scratch, &load_smi_2, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002683 __ fld_d(FieldOperand(scratch, HeapNumber::kValueOffset));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002684 __ jmp(&done, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002685
2686 __ bind(&load_smi_1);
2687 __ SmiUntag(scratch);
2688 __ push(scratch);
2689 __ fild_s(Operand(esp, 0));
2690 __ pop(scratch);
2691 __ jmp(&done_load_1);
2692
2693 __ bind(&load_smi_2);
2694 __ SmiUntag(scratch);
2695 __ push(scratch);
2696 __ fild_s(Operand(esp, 0));
2697 __ pop(scratch);
2698
2699 __ bind(&done);
2700}
2701
2702
2703void FloatingPointHelper::LoadFloatSmis(MacroAssembler* masm,
2704 Register scratch) {
2705 const Register left = edx;
2706 const Register right = eax;
2707 __ mov(scratch, left);
2708 ASSERT(!scratch.is(right)); // We're about to clobber scratch.
2709 __ SmiUntag(scratch);
2710 __ push(scratch);
2711 __ fild_s(Operand(esp, 0));
2712
2713 __ mov(scratch, right);
2714 __ SmiUntag(scratch);
2715 __ mov(Operand(esp, 0), scratch);
2716 __ fild_s(Operand(esp, 0));
2717 __ pop(scratch);
2718}
2719
2720
2721void FloatingPointHelper::CheckFloatOperands(MacroAssembler* masm,
2722 Label* non_float,
2723 Register scratch) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002724 Label test_other, done;
ricow@chromium.org65fae842010-08-25 15:26:24 +00002725 // Test if both operands are floats or smi -> scratch=k_is_float;
2726 // Otherwise scratch = k_not_float.
whesse@chromium.org7b260152011-06-20 15:33:18 +00002727 __ JumpIfSmi(edx, &test_other, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002728 __ mov(scratch, FieldOperand(edx, HeapObject::kMapOffset));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002729 Factory* factory = masm->isolate()->factory();
2730 __ cmp(scratch, factory->heap_number_map());
ricow@chromium.org65fae842010-08-25 15:26:24 +00002731 __ j(not_equal, non_float); // argument in edx is not a number -> NaN
2732
2733 __ bind(&test_other);
whesse@chromium.org7b260152011-06-20 15:33:18 +00002734 __ JumpIfSmi(eax, &done, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002735 __ mov(scratch, FieldOperand(eax, HeapObject::kMapOffset));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002736 __ cmp(scratch, factory->heap_number_map());
ricow@chromium.org65fae842010-08-25 15:26:24 +00002737 __ j(not_equal, non_float); // argument in eax is not a number -> NaN
2738
2739 // Fall-through: Both operands are numbers.
2740 __ bind(&done);
2741}
2742
2743
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002744void FloatingPointHelper::CheckFloatOperandsAreInt32(MacroAssembler* masm,
2745 Label* non_int32) {
2746 return;
2747}
2748
2749
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002750void MathPowStub::Generate(MacroAssembler* masm) {
2751 // Registers are used as follows:
2752 // edx = base
2753 // eax = exponent
2754 // ecx = temporary, result
2755
2756 CpuFeatures::Scope use_sse2(SSE2);
2757 Label allocate_return, call_runtime;
2758
2759 // Load input parameters.
2760 __ mov(edx, Operand(esp, 2 * kPointerSize));
2761 __ mov(eax, Operand(esp, 1 * kPointerSize));
2762
2763 // Save 1 in xmm3 - we need this several times later on.
2764 __ mov(ecx, Immediate(1));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002765 __ cvtsi2sd(xmm3, ecx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002766
2767 Label exponent_nonsmi;
2768 Label base_nonsmi;
2769 // If the exponent is a heap number go to that specific case.
whesse@chromium.org7b260152011-06-20 15:33:18 +00002770 __ JumpIfNotSmi(eax, &exponent_nonsmi);
2771 __ JumpIfNotSmi(edx, &base_nonsmi);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002772
ager@chromium.org9ee27ae2011-03-02 13:43:26 +00002773 // Optimized version when both exponent and base are smis.
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002774 Label powi;
2775 __ SmiUntag(edx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002776 __ cvtsi2sd(xmm0, edx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002777 __ jmp(&powi);
2778 // exponent is smi and base is a heapnumber.
2779 __ bind(&base_nonsmi);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002780 Factory* factory = masm->isolate()->factory();
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002781 __ cmp(FieldOperand(edx, HeapObject::kMapOffset),
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002782 factory->heap_number_map());
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002783 __ j(not_equal, &call_runtime);
2784
2785 __ movdbl(xmm0, FieldOperand(edx, HeapNumber::kValueOffset));
2786
2787 // Optimized version of pow if exponent is a smi.
2788 // xmm0 contains the base.
2789 __ bind(&powi);
2790 __ SmiUntag(eax);
2791
2792 // Save exponent in base as we need to check if exponent is negative later.
2793 // We know that base and exponent are in different registers.
2794 __ mov(edx, eax);
2795
2796 // Get absolute value of exponent.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002797 Label no_neg;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002798 __ cmp(eax, 0);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002799 __ j(greater_equal, &no_neg, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002800 __ neg(eax);
2801 __ bind(&no_neg);
2802
2803 // Load xmm1 with 1.
2804 __ movsd(xmm1, xmm3);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002805 Label while_true;
2806 Label no_multiply;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002807
2808 __ bind(&while_true);
2809 __ shr(eax, 1);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002810 __ j(not_carry, &no_multiply, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002811 __ mulsd(xmm1, xmm0);
2812 __ bind(&no_multiply);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002813 __ mulsd(xmm0, xmm0);
2814 __ j(not_zero, &while_true);
2815
2816 // base has the original value of the exponent - if the exponent is
2817 // negative return 1/result.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002818 __ test(edx, edx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002819 __ j(positive, &allocate_return);
2820 // Special case if xmm1 has reached infinity.
2821 __ mov(ecx, Immediate(0x7FB00000));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002822 __ movd(xmm0, ecx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002823 __ cvtss2sd(xmm0, xmm0);
2824 __ ucomisd(xmm0, xmm1);
2825 __ j(equal, &call_runtime);
2826 __ divsd(xmm3, xmm1);
2827 __ movsd(xmm1, xmm3);
2828 __ jmp(&allocate_return);
2829
2830 // exponent (or both) is a heapnumber - no matter what we should now work
2831 // on doubles.
2832 __ bind(&exponent_nonsmi);
2833 __ cmp(FieldOperand(eax, HeapObject::kMapOffset),
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002834 factory->heap_number_map());
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002835 __ j(not_equal, &call_runtime);
2836 __ movdbl(xmm1, FieldOperand(eax, HeapNumber::kValueOffset));
2837 // Test if exponent is nan.
2838 __ ucomisd(xmm1, xmm1);
2839 __ j(parity_even, &call_runtime);
2840
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002841 Label base_not_smi;
2842 Label handle_special_cases;
whesse@chromium.org7b260152011-06-20 15:33:18 +00002843 __ JumpIfNotSmi(edx, &base_not_smi, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002844 __ SmiUntag(edx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002845 __ cvtsi2sd(xmm0, edx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002846 __ jmp(&handle_special_cases, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002847
2848 __ bind(&base_not_smi);
2849 __ cmp(FieldOperand(edx, HeapObject::kMapOffset),
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00002850 factory->heap_number_map());
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002851 __ j(not_equal, &call_runtime);
2852 __ mov(ecx, FieldOperand(edx, HeapNumber::kExponentOffset));
2853 __ and_(ecx, HeapNumber::kExponentMask);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002854 __ cmp(ecx, Immediate(HeapNumber::kExponentMask));
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002855 // base is NaN or +/-Infinity
2856 __ j(greater_equal, &call_runtime);
2857 __ movdbl(xmm0, FieldOperand(edx, HeapNumber::kValueOffset));
2858
2859 // base is in xmm0 and exponent is in xmm1.
2860 __ bind(&handle_special_cases);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002861 Label not_minus_half;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002862 // Test for -0.5.
2863 // Load xmm2 with -0.5.
2864 __ mov(ecx, Immediate(0xBF000000));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002865 __ movd(xmm2, ecx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002866 __ cvtss2sd(xmm2, xmm2);
2867 // xmm2 now has -0.5.
2868 __ ucomisd(xmm2, xmm1);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002869 __ j(not_equal, &not_minus_half, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002870
2871 // Calculates reciprocal of square root.
kmillikin@chromium.org31b12772011-02-02 16:08:26 +00002872 // sqrtsd returns -0 when input is -0. ECMA spec requires +0.
fschneider@chromium.orgfb144a02011-05-04 12:43:48 +00002873 __ xorps(xmm1, xmm1);
kmillikin@chromium.org31b12772011-02-02 16:08:26 +00002874 __ addsd(xmm1, xmm0);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002875 __ sqrtsd(xmm1, xmm1);
kmillikin@chromium.org31b12772011-02-02 16:08:26 +00002876 __ divsd(xmm3, xmm1);
2877 __ movsd(xmm1, xmm3);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002878 __ jmp(&allocate_return);
2879
2880 // Test for 0.5.
2881 __ bind(&not_minus_half);
2882 // Load xmm2 with 0.5.
2883 // Since xmm3 is 1 and xmm2 is -0.5 this is simply xmm2 + xmm3.
2884 __ addsd(xmm2, xmm3);
2885 // xmm2 now has 0.5.
2886 __ ucomisd(xmm2, xmm1);
2887 __ j(not_equal, &call_runtime);
2888 // Calculates square root.
kmillikin@chromium.org31b12772011-02-02 16:08:26 +00002889 // sqrtsd returns -0 when input is -0. ECMA spec requires +0.
fschneider@chromium.orgfb144a02011-05-04 12:43:48 +00002890 __ xorps(xmm1, xmm1);
kmillikin@chromium.org31b12772011-02-02 16:08:26 +00002891 __ addsd(xmm1, xmm0);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002892 __ sqrtsd(xmm1, xmm1);
2893
2894 __ bind(&allocate_return);
2895 __ AllocateHeapNumber(ecx, eax, edx, &call_runtime);
2896 __ movdbl(FieldOperand(ecx, HeapNumber::kValueOffset), xmm1);
2897 __ mov(eax, ecx);
ager@chromium.org9ee27ae2011-03-02 13:43:26 +00002898 __ ret(2 * kPointerSize);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00002899
2900 __ bind(&call_runtime);
2901 __ TailCallRuntime(Runtime::kMath_pow_cfunction, 2, 1);
2902}
2903
2904
ricow@chromium.org65fae842010-08-25 15:26:24 +00002905void ArgumentsAccessStub::GenerateReadElement(MacroAssembler* masm) {
2906 // The key is in edx and the parameter count is in eax.
2907
2908 // The displacement is used for skipping the frame pointer on the
2909 // stack. It is the offset of the last parameter (if any) relative
2910 // to the frame pointer.
2911 static const int kDisplacement = 1 * kPointerSize;
2912
2913 // Check that the key is a smi.
2914 Label slow;
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00002915 __ JumpIfNotSmi(edx, &slow, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002916
2917 // Check if the calling frame is an arguments adaptor frame.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002918 Label adaptor;
ricow@chromium.org65fae842010-08-25 15:26:24 +00002919 __ mov(ebx, Operand(ebp, StandardFrameConstants::kCallerFPOffset));
2920 __ mov(ecx, Operand(ebx, StandardFrameConstants::kContextOffset));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002921 __ cmp(ecx, Immediate(Smi::FromInt(StackFrame::ARGUMENTS_ADAPTOR)));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00002922 __ j(equal, &adaptor, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002923
2924 // Check index against formal parameters count limit passed in
2925 // through register eax. Use unsigned comparison to get negative
2926 // check for free.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002927 __ cmp(edx, eax);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00002928 __ j(above_equal, &slow, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002929
2930 // Read the argument from the stack and return it.
2931 STATIC_ASSERT(kSmiTagSize == 1);
2932 STATIC_ASSERT(kSmiTag == 0); // Shifting code depends on these.
2933 __ lea(ebx, Operand(ebp, eax, times_2, 0));
2934 __ neg(edx);
2935 __ mov(eax, Operand(ebx, edx, times_2, kDisplacement));
2936 __ ret(0);
2937
2938 // Arguments adaptor case: Check index against actual arguments
2939 // limit found in the arguments adaptor frame. Use unsigned
2940 // comparison to get negative check for free.
2941 __ bind(&adaptor);
2942 __ mov(ecx, Operand(ebx, ArgumentsAdaptorFrameConstants::kLengthOffset));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002943 __ cmp(edx, ecx);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00002944 __ j(above_equal, &slow, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00002945
2946 // Read the argument from the stack and return it.
2947 STATIC_ASSERT(kSmiTagSize == 1);
2948 STATIC_ASSERT(kSmiTag == 0); // Shifting code depends on these.
2949 __ lea(ebx, Operand(ebx, ecx, times_2, 0));
2950 __ neg(edx);
2951 __ mov(eax, Operand(ebx, edx, times_2, kDisplacement));
2952 __ ret(0);
2953
2954 // Slow-case: Handle non-smi or out-of-bounds access to arguments
2955 // by calling the runtime system.
2956 __ bind(&slow);
2957 __ pop(ebx); // Return address.
2958 __ push(edx);
2959 __ push(ebx);
2960 __ TailCallRuntime(Runtime::kGetArgumentsProperty, 1, 1);
2961}
2962
2963
whesse@chromium.org7b260152011-06-20 15:33:18 +00002964void ArgumentsAccessStub::GenerateNewNonStrictSlow(MacroAssembler* masm) {
ricow@chromium.org65fae842010-08-25 15:26:24 +00002965 // esp[0] : return address
2966 // esp[4] : number of parameters
2967 // esp[8] : receiver displacement
whesse@chromium.org7b260152011-06-20 15:33:18 +00002968 // esp[12] : function
ricow@chromium.org65fae842010-08-25 15:26:24 +00002969
whesse@chromium.org7b260152011-06-20 15:33:18 +00002970 // Check if the calling frame is an arguments adaptor frame.
2971 Label runtime;
2972 __ mov(edx, Operand(ebp, StandardFrameConstants::kCallerFPOffset));
2973 __ mov(ecx, Operand(edx, StandardFrameConstants::kContextOffset));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00002974 __ cmp(ecx, Immediate(Smi::FromInt(StackFrame::ARGUMENTS_ADAPTOR)));
whesse@chromium.org7b260152011-06-20 15:33:18 +00002975 __ j(not_equal, &runtime, Label::kNear);
2976
2977 // Patch the arguments.length and the parameters pointer.
2978 __ mov(ecx, Operand(edx, ArgumentsAdaptorFrameConstants::kLengthOffset));
2979 __ mov(Operand(esp, 1 * kPointerSize), ecx);
2980 __ lea(edx, Operand(edx, ecx, times_2,
2981 StandardFrameConstants::kCallerSPOffset));
2982 __ mov(Operand(esp, 2 * kPointerSize), edx);
2983
2984 __ bind(&runtime);
2985 __ TailCallRuntime(Runtime::kNewArgumentsFast, 3, 1);
2986}
2987
2988
2989void ArgumentsAccessStub::GenerateNewNonStrictFast(MacroAssembler* masm) {
2990 // esp[0] : return address
2991 // esp[4] : number of parameters (tagged)
2992 // esp[8] : receiver displacement
2993 // esp[12] : function
2994
2995 // ebx = parameter count (tagged)
2996 __ mov(ebx, Operand(esp, 1 * kPointerSize));
2997
2998 // Check if the calling frame is an arguments adaptor frame.
2999 // TODO(rossberg): Factor out some of the bits that are shared with the other
3000 // Generate* functions.
3001 Label runtime;
3002 Label adaptor_frame, try_allocate;
3003 __ mov(edx, Operand(ebp, StandardFrameConstants::kCallerFPOffset));
3004 __ mov(ecx, Operand(edx, StandardFrameConstants::kContextOffset));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003005 __ cmp(ecx, Immediate(Smi::FromInt(StackFrame::ARGUMENTS_ADAPTOR)));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003006 __ j(equal, &adaptor_frame, Label::kNear);
3007
3008 // No adaptor, parameter count = argument count.
3009 __ mov(ecx, ebx);
3010 __ jmp(&try_allocate, Label::kNear);
3011
3012 // We have an adaptor frame. Patch the parameters pointer.
3013 __ bind(&adaptor_frame);
3014 __ mov(ecx, Operand(edx, ArgumentsAdaptorFrameConstants::kLengthOffset));
3015 __ lea(edx, Operand(edx, ecx, times_2,
3016 StandardFrameConstants::kCallerSPOffset));
3017 __ mov(Operand(esp, 2 * kPointerSize), edx);
3018
3019 // ebx = parameter count (tagged)
3020 // ecx = argument count (tagged)
3021 // esp[4] = parameter count (tagged)
3022 // esp[8] = address of receiver argument
3023 // Compute the mapped parameter count = min(ebx, ecx) in ebx.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003024 __ cmp(ebx, ecx);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003025 __ j(less_equal, &try_allocate, Label::kNear);
3026 __ mov(ebx, ecx);
3027
3028 __ bind(&try_allocate);
3029
3030 // Save mapped parameter count.
3031 __ push(ebx);
3032
3033 // Compute the sizes of backing store, parameter map, and arguments object.
3034 // 1. Parameter map, has 2 extra words containing context and backing store.
3035 const int kParameterMapHeaderSize =
3036 FixedArray::kHeaderSize + 2 * kPointerSize;
3037 Label no_parameter_map;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003038 __ test(ebx, ebx);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003039 __ j(zero, &no_parameter_map, Label::kNear);
3040 __ lea(ebx, Operand(ebx, times_2, kParameterMapHeaderSize));
3041 __ bind(&no_parameter_map);
3042
3043 // 2. Backing store.
3044 __ lea(ebx, Operand(ebx, ecx, times_2, FixedArray::kHeaderSize));
3045
3046 // 3. Arguments object.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003047 __ add(ebx, Immediate(Heap::kArgumentsObjectSize));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003048
3049 // Do the allocation of all three objects in one go.
3050 __ AllocateInNewSpace(ebx, eax, edx, edi, &runtime, TAG_OBJECT);
3051
3052 // eax = address of new object(s) (tagged)
3053 // ecx = argument count (tagged)
3054 // esp[0] = mapped parameter count (tagged)
3055 // esp[8] = parameter count (tagged)
3056 // esp[12] = address of receiver argument
3057 // Get the arguments boilerplate from the current (global) context into edi.
3058 Label has_mapped_parameters, copy;
3059 __ mov(edi, Operand(esi, Context::SlotOffset(Context::GLOBAL_INDEX)));
3060 __ mov(edi, FieldOperand(edi, GlobalObject::kGlobalContextOffset));
3061 __ mov(ebx, Operand(esp, 0 * kPointerSize));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003062 __ test(ebx, ebx);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003063 __ j(not_zero, &has_mapped_parameters, Label::kNear);
3064 __ mov(edi, Operand(edi,
3065 Context::SlotOffset(Context::ARGUMENTS_BOILERPLATE_INDEX)));
3066 __ jmp(&copy, Label::kNear);
3067
3068 __ bind(&has_mapped_parameters);
3069 __ mov(edi, Operand(edi,
3070 Context::SlotOffset(Context::ALIASED_ARGUMENTS_BOILERPLATE_INDEX)));
3071 __ bind(&copy);
3072
3073 // eax = address of new object (tagged)
3074 // ebx = mapped parameter count (tagged)
3075 // ecx = argument count (tagged)
3076 // edi = address of boilerplate object (tagged)
3077 // esp[0] = mapped parameter count (tagged)
3078 // esp[8] = parameter count (tagged)
3079 // esp[12] = address of receiver argument
3080 // Copy the JS object part.
3081 for (int i = 0; i < JSObject::kHeaderSize; i += kPointerSize) {
3082 __ mov(edx, FieldOperand(edi, i));
3083 __ mov(FieldOperand(eax, i), edx);
3084 }
3085
3086 // Setup the callee in-object property.
3087 STATIC_ASSERT(Heap::kArgumentsCalleeIndex == 1);
3088 __ mov(edx, Operand(esp, 4 * kPointerSize));
3089 __ mov(FieldOperand(eax, JSObject::kHeaderSize +
3090 Heap::kArgumentsCalleeIndex * kPointerSize),
3091 edx);
3092
3093 // Use the length (smi tagged) and set that as an in-object property too.
3094 STATIC_ASSERT(Heap::kArgumentsLengthIndex == 0);
3095 __ mov(FieldOperand(eax, JSObject::kHeaderSize +
3096 Heap::kArgumentsLengthIndex * kPointerSize),
3097 ecx);
3098
3099 // Setup the elements pointer in the allocated arguments object.
3100 // If we allocated a parameter map, edi will point there, otherwise to the
3101 // backing store.
3102 __ lea(edi, Operand(eax, Heap::kArgumentsObjectSize));
3103 __ mov(FieldOperand(eax, JSObject::kElementsOffset), edi);
3104
3105 // eax = address of new object (tagged)
3106 // ebx = mapped parameter count (tagged)
3107 // ecx = argument count (tagged)
3108 // edi = address of parameter map or backing store (tagged)
3109 // esp[0] = mapped parameter count (tagged)
3110 // esp[8] = parameter count (tagged)
3111 // esp[12] = address of receiver argument
3112 // Free a register.
3113 __ push(eax);
3114
3115 // Initialize parameter map. If there are no mapped arguments, we're done.
3116 Label skip_parameter_map;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003117 __ test(ebx, ebx);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003118 __ j(zero, &skip_parameter_map);
3119
3120 __ mov(FieldOperand(edi, FixedArray::kMapOffset),
3121 Immediate(FACTORY->non_strict_arguments_elements_map()));
3122 __ lea(eax, Operand(ebx, reinterpret_cast<intptr_t>(Smi::FromInt(2))));
3123 __ mov(FieldOperand(edi, FixedArray::kLengthOffset), eax);
3124 __ mov(FieldOperand(edi, FixedArray::kHeaderSize + 0 * kPointerSize), esi);
3125 __ lea(eax, Operand(edi, ebx, times_2, kParameterMapHeaderSize));
3126 __ mov(FieldOperand(edi, FixedArray::kHeaderSize + 1 * kPointerSize), eax);
3127
3128 // Copy the parameter slots and the holes in the arguments.
3129 // We need to fill in mapped_parameter_count slots. They index the context,
3130 // where parameters are stored in reverse order, at
3131 // MIN_CONTEXT_SLOTS .. MIN_CONTEXT_SLOTS+parameter_count-1
3132 // The mapped parameter thus need to get indices
3133 // MIN_CONTEXT_SLOTS+parameter_count-1 ..
3134 // MIN_CONTEXT_SLOTS+parameter_count-mapped_parameter_count
3135 // We loop from right to left.
3136 Label parameters_loop, parameters_test;
3137 __ push(ecx);
3138 __ mov(eax, Operand(esp, 2 * kPointerSize));
3139 __ mov(ebx, Immediate(Smi::FromInt(Context::MIN_CONTEXT_SLOTS)));
3140 __ add(ebx, Operand(esp, 4 * kPointerSize));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003141 __ sub(ebx, eax);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003142 __ mov(ecx, FACTORY->the_hole_value());
3143 __ mov(edx, edi);
3144 __ lea(edi, Operand(edi, eax, times_2, kParameterMapHeaderSize));
3145 // eax = loop variable (tagged)
3146 // ebx = mapping index (tagged)
3147 // ecx = the hole value
3148 // edx = address of parameter map (tagged)
3149 // edi = address of backing store (tagged)
3150 // esp[0] = argument count (tagged)
3151 // esp[4] = address of new object (tagged)
3152 // esp[8] = mapped parameter count (tagged)
3153 // esp[16] = parameter count (tagged)
3154 // esp[20] = address of receiver argument
3155 __ jmp(&parameters_test, Label::kNear);
3156
3157 __ bind(&parameters_loop);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003158 __ sub(eax, Immediate(Smi::FromInt(1)));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003159 __ mov(FieldOperand(edx, eax, times_2, kParameterMapHeaderSize), ebx);
3160 __ mov(FieldOperand(edi, eax, times_2, FixedArray::kHeaderSize), ecx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003161 __ add(ebx, Immediate(Smi::FromInt(1)));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003162 __ bind(&parameters_test);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003163 __ test(eax, eax);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003164 __ j(not_zero, &parameters_loop, Label::kNear);
3165 __ pop(ecx);
3166
3167 __ bind(&skip_parameter_map);
3168
3169 // ecx = argument count (tagged)
3170 // edi = address of backing store (tagged)
3171 // esp[0] = address of new object (tagged)
3172 // esp[4] = mapped parameter count (tagged)
3173 // esp[12] = parameter count (tagged)
3174 // esp[16] = address of receiver argument
3175 // Copy arguments header and remaining slots (if there are any).
3176 __ mov(FieldOperand(edi, FixedArray::kMapOffset),
3177 Immediate(FACTORY->fixed_array_map()));
3178 __ mov(FieldOperand(edi, FixedArray::kLengthOffset), ecx);
3179
3180 Label arguments_loop, arguments_test;
3181 __ mov(ebx, Operand(esp, 1 * kPointerSize));
3182 __ mov(edx, Operand(esp, 4 * kPointerSize));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003183 __ sub(edx, ebx); // Is there a smarter way to do negative scaling?
3184 __ sub(edx, ebx);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003185 __ jmp(&arguments_test, Label::kNear);
3186
3187 __ bind(&arguments_loop);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003188 __ sub(edx, Immediate(kPointerSize));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003189 __ mov(eax, Operand(edx, 0));
3190 __ mov(FieldOperand(edi, ebx, times_2, FixedArray::kHeaderSize), eax);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003191 __ add(ebx, Immediate(Smi::FromInt(1)));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003192
3193 __ bind(&arguments_test);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003194 __ cmp(ebx, ecx);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003195 __ j(less, &arguments_loop, Label::kNear);
3196
3197 // Restore.
3198 __ pop(eax); // Address of arguments object.
3199 __ pop(ebx); // Parameter count.
3200
3201 // Return and remove the on-stack parameters.
3202 __ ret(3 * kPointerSize);
3203
3204 // Do the runtime call to allocate the arguments object.
3205 __ bind(&runtime);
3206 __ pop(eax); // Remove saved parameter count.
3207 __ mov(Operand(esp, 1 * kPointerSize), ecx); // Patch argument count.
3208 __ TailCallRuntime(Runtime::kNewStrictArgumentsFast, 3, 1);
3209}
3210
3211
3212void ArgumentsAccessStub::GenerateNewStrict(MacroAssembler* masm) {
3213 // esp[0] : return address
3214 // esp[4] : number of parameters
3215 // esp[8] : receiver displacement
3216 // esp[12] : function
ricow@chromium.org65fae842010-08-25 15:26:24 +00003217
3218 // Check if the calling frame is an arguments adaptor frame.
3219 Label adaptor_frame, try_allocate, runtime;
3220 __ mov(edx, Operand(ebp, StandardFrameConstants::kCallerFPOffset));
3221 __ mov(ecx, Operand(edx, StandardFrameConstants::kContextOffset));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003222 __ cmp(ecx, Immediate(Smi::FromInt(StackFrame::ARGUMENTS_ADAPTOR)));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003223 __ j(equal, &adaptor_frame, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003224
3225 // Get the length from the frame.
3226 __ mov(ecx, Operand(esp, 1 * kPointerSize));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003227 __ jmp(&try_allocate, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003228
3229 // Patch the arguments.length and the parameters pointer.
3230 __ bind(&adaptor_frame);
3231 __ mov(ecx, Operand(edx, ArgumentsAdaptorFrameConstants::kLengthOffset));
3232 __ mov(Operand(esp, 1 * kPointerSize), ecx);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003233 __ lea(edx, Operand(edx, ecx, times_2,
3234 StandardFrameConstants::kCallerSPOffset));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003235 __ mov(Operand(esp, 2 * kPointerSize), edx);
3236
3237 // Try the new space allocation. Start out with computing the size of
3238 // the arguments object and the elements array.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003239 Label add_arguments_object;
ricow@chromium.org65fae842010-08-25 15:26:24 +00003240 __ bind(&try_allocate);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003241 __ test(ecx, ecx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003242 __ j(zero, &add_arguments_object, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003243 __ lea(ecx, Operand(ecx, times_2, FixedArray::kHeaderSize));
3244 __ bind(&add_arguments_object);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003245 __ add(ecx, Immediate(Heap::kArgumentsObjectSizeStrict));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003246
3247 // Do the allocation of both objects in one go.
3248 __ AllocateInNewSpace(ecx, eax, edx, ebx, &runtime, TAG_OBJECT);
3249
3250 // Get the arguments boilerplate from the current (global) context.
ricow@chromium.org65fae842010-08-25 15:26:24 +00003251 __ mov(edi, Operand(esi, Context::SlotOffset(Context::GLOBAL_INDEX)));
3252 __ mov(edi, FieldOperand(edi, GlobalObject::kGlobalContextOffset));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003253 const int offset =
3254 Context::SlotOffset(Context::STRICT_MODE_ARGUMENTS_BOILERPLATE_INDEX);
3255 __ mov(edi, Operand(edi, offset));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003256
3257 // Copy the JS object part.
3258 for (int i = 0; i < JSObject::kHeaderSize; i += kPointerSize) {
3259 __ mov(ebx, FieldOperand(edi, i));
3260 __ mov(FieldOperand(eax, i), ebx);
3261 }
3262
ricow@chromium.org65fae842010-08-25 15:26:24 +00003263 // Get the length (smi tagged) and set that as an in-object property too.
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003264 STATIC_ASSERT(Heap::kArgumentsLengthIndex == 0);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003265 __ mov(ecx, Operand(esp, 1 * kPointerSize));
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003266 __ mov(FieldOperand(eax, JSObject::kHeaderSize +
whesse@chromium.org7b260152011-06-20 15:33:18 +00003267 Heap::kArgumentsLengthIndex * kPointerSize),
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003268 ecx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003269
3270 // If there are no actual arguments, we're done.
3271 Label done;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003272 __ test(ecx, ecx);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003273 __ j(zero, &done, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003274
3275 // Get the parameters pointer from the stack.
3276 __ mov(edx, Operand(esp, 2 * kPointerSize));
3277
3278 // Setup the elements pointer in the allocated arguments object and
3279 // initialize the header in the elements fixed array.
whesse@chromium.org7b260152011-06-20 15:33:18 +00003280 __ lea(edi, Operand(eax, Heap::kArgumentsObjectSizeStrict));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003281 __ mov(FieldOperand(eax, JSObject::kElementsOffset), edi);
3282 __ mov(FieldOperand(edi, FixedArray::kMapOffset),
whesse@chromium.org7b260152011-06-20 15:33:18 +00003283 Immediate(FACTORY->fixed_array_map()));
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003284
ricow@chromium.org65fae842010-08-25 15:26:24 +00003285 __ mov(FieldOperand(edi, FixedArray::kLengthOffset), ecx);
3286 // Untag the length for the loop below.
3287 __ SmiUntag(ecx);
3288
3289 // Copy the fixed array slots.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003290 Label loop;
ricow@chromium.org65fae842010-08-25 15:26:24 +00003291 __ bind(&loop);
3292 __ mov(ebx, Operand(edx, -1 * kPointerSize)); // Skip receiver.
3293 __ mov(FieldOperand(edi, FixedArray::kHeaderSize), ebx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003294 __ add(edi, Immediate(kPointerSize));
3295 __ sub(edx, Immediate(kPointerSize));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003296 __ dec(ecx);
3297 __ j(not_zero, &loop);
3298
3299 // Return and remove the on-stack parameters.
3300 __ bind(&done);
3301 __ ret(3 * kPointerSize);
3302
3303 // Do the runtime call to allocate the arguments object.
3304 __ bind(&runtime);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003305 __ TailCallRuntime(Runtime::kNewStrictArgumentsFast, 3, 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003306}
3307
3308
3309void RegExpExecStub::Generate(MacroAssembler* masm) {
3310 // Just jump directly to runtime if native RegExp is not selected at compile
3311 // time or if regexp entry in generated code is turned off runtime switch or
3312 // at compilation.
3313#ifdef V8_INTERPRETED_REGEXP
3314 __ TailCallRuntime(Runtime::kRegExpExec, 4, 1);
3315#else // V8_INTERPRETED_REGEXP
3316 if (!FLAG_regexp_entry_native) {
3317 __ TailCallRuntime(Runtime::kRegExpExec, 4, 1);
3318 return;
3319 }
3320
3321 // Stack frame on entry.
3322 // esp[0]: return address
3323 // esp[4]: last_match_info (expected JSArray)
3324 // esp[8]: previous index
3325 // esp[12]: subject string
3326 // esp[16]: JSRegExp object
3327
3328 static const int kLastMatchInfoOffset = 1 * kPointerSize;
3329 static const int kPreviousIndexOffset = 2 * kPointerSize;
3330 static const int kSubjectOffset = 3 * kPointerSize;
3331 static const int kJSRegExpOffset = 4 * kPointerSize;
3332
3333 Label runtime, invoke_regexp;
3334
3335 // Ensure that a RegExp stack is allocated.
3336 ExternalReference address_of_regexp_stack_memory_address =
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003337 ExternalReference::address_of_regexp_stack_memory_address(
3338 masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00003339 ExternalReference address_of_regexp_stack_memory_size =
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003340 ExternalReference::address_of_regexp_stack_memory_size(masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00003341 __ mov(ebx, Operand::StaticVariable(address_of_regexp_stack_memory_size));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003342 __ test(ebx, ebx);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00003343 __ j(zero, &runtime);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003344
3345 // Check that the first argument is a JSRegExp object.
3346 __ mov(eax, Operand(esp, kJSRegExpOffset));
3347 STATIC_ASSERT(kSmiTag == 0);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003348 __ JumpIfSmi(eax, &runtime);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003349 __ CmpObjectType(eax, JS_REGEXP_TYPE, ecx);
3350 __ j(not_equal, &runtime);
3351 // Check that the RegExp has been compiled (data contains a fixed array).
3352 __ mov(ecx, FieldOperand(eax, JSRegExp::kDataOffset));
3353 if (FLAG_debug_code) {
3354 __ test(ecx, Immediate(kSmiTagMask));
3355 __ Check(not_zero, "Unexpected type for RegExp data, FixedArray expected");
3356 __ CmpObjectType(ecx, FIXED_ARRAY_TYPE, ebx);
3357 __ Check(equal, "Unexpected type for RegExp data, FixedArray expected");
3358 }
3359
3360 // ecx: RegExp data (FixedArray)
3361 // Check the type of the RegExp. Only continue if type is JSRegExp::IRREGEXP.
3362 __ mov(ebx, FieldOperand(ecx, JSRegExp::kDataTagOffset));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003363 __ cmp(ebx, Immediate(Smi::FromInt(JSRegExp::IRREGEXP)));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003364 __ j(not_equal, &runtime);
3365
3366 // ecx: RegExp data (FixedArray)
3367 // Check that the number of captures fit in the static offsets vector buffer.
3368 __ mov(edx, FieldOperand(ecx, JSRegExp::kIrregexpCaptureCountOffset));
3369 // Calculate number of capture registers (number_of_captures + 1) * 2. This
3370 // uses the asumption that smis are 2 * their untagged value.
3371 STATIC_ASSERT(kSmiTag == 0);
3372 STATIC_ASSERT(kSmiTagSize + kSmiShiftSize == 1);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003373 __ add(edx, Immediate(2)); // edx was a smi.
ricow@chromium.org65fae842010-08-25 15:26:24 +00003374 // Check that the static offsets vector buffer is large enough.
3375 __ cmp(edx, OffsetsVector::kStaticOffsetsVectorSize);
3376 __ j(above, &runtime);
3377
3378 // ecx: RegExp data (FixedArray)
3379 // edx: Number of capture registers
3380 // Check that the second argument is a string.
3381 __ mov(eax, Operand(esp, kSubjectOffset));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003382 __ JumpIfSmi(eax, &runtime);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003383 Condition is_string = masm->IsObjectStringType(eax, ebx, ebx);
3384 __ j(NegateCondition(is_string), &runtime);
3385 // Get the length of the string to ebx.
3386 __ mov(ebx, FieldOperand(eax, String::kLengthOffset));
3387
3388 // ebx: Length of subject string as a smi
3389 // ecx: RegExp data (FixedArray)
3390 // edx: Number of capture registers
3391 // Check that the third argument is a positive smi less than the subject
3392 // string length. A negative value will be greater (unsigned comparison).
3393 __ mov(eax, Operand(esp, kPreviousIndexOffset));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003394 __ JumpIfNotSmi(eax, &runtime);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003395 __ cmp(eax, ebx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003396 __ j(above_equal, &runtime);
3397
3398 // ecx: RegExp data (FixedArray)
3399 // edx: Number of capture registers
3400 // Check that the fourth object is a JSArray object.
3401 __ mov(eax, Operand(esp, kLastMatchInfoOffset));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003402 __ JumpIfSmi(eax, &runtime);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003403 __ CmpObjectType(eax, JS_ARRAY_TYPE, ebx);
3404 __ j(not_equal, &runtime);
3405 // Check that the JSArray is in fast case.
3406 __ mov(ebx, FieldOperand(eax, JSArray::kElementsOffset));
3407 __ mov(eax, FieldOperand(ebx, HeapObject::kMapOffset));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003408 Factory* factory = masm->isolate()->factory();
3409 __ cmp(eax, factory->fixed_array_map());
ricow@chromium.org65fae842010-08-25 15:26:24 +00003410 __ j(not_equal, &runtime);
3411 // Check that the last match info has space for the capture registers and the
3412 // additional information.
3413 __ mov(eax, FieldOperand(ebx, FixedArray::kLengthOffset));
3414 __ SmiUntag(eax);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003415 __ add(edx, Immediate(RegExpImpl::kLastMatchOverhead));
3416 __ cmp(edx, eax);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003417 __ j(greater, &runtime);
3418
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003419 // Reset offset for possibly sliced string.
3420 __ Set(edi, Immediate(0));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003421 // ecx: RegExp data (FixedArray)
3422 // Check the representation and encoding of the subject string.
3423 Label seq_ascii_string, seq_two_byte_string, check_code;
3424 __ mov(eax, Operand(esp, kSubjectOffset));
3425 __ mov(ebx, FieldOperand(eax, HeapObject::kMapOffset));
3426 __ movzx_b(ebx, FieldOperand(ebx, Map::kInstanceTypeOffset));
3427 // First check for flat two byte string.
3428 __ and_(ebx,
3429 kIsNotStringMask | kStringRepresentationMask | kStringEncodingMask);
3430 STATIC_ASSERT((kStringTag | kSeqStringTag | kTwoByteStringTag) == 0);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003431 __ j(zero, &seq_two_byte_string, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003432 // Any other flat string must be a flat ascii string.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003433 __ and_(ebx, Immediate(kIsNotStringMask | kStringRepresentationMask));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003434 __ j(zero, &seq_ascii_string, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003435
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003436 // Check for flat cons string or sliced string.
ricow@chromium.org65fae842010-08-25 15:26:24 +00003437 // A flat cons string is a cons string where the second part is the empty
3438 // string. In that case the subject string is just the first part of the cons
3439 // string. Also in this case the first part of the cons string is known to be
3440 // a sequential string or an external string.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003441 // In the case of a sliced string its offset has to be taken into account.
3442 Label cons_string, check_encoding;
yangguo@chromium.org80c42ed2011-08-31 09:03:56 +00003443 STATIC_ASSERT(kConsStringTag < kExternalStringTag);
3444 STATIC_ASSERT(kSlicedStringTag > kExternalStringTag);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003445 __ cmp(ebx, Immediate(kExternalStringTag));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003446 __ j(less, &cons_string);
3447 __ j(equal, &runtime);
3448
3449 // String is sliced.
3450 __ mov(edi, FieldOperand(eax, SlicedString::kOffsetOffset));
3451 __ mov(eax, FieldOperand(eax, SlicedString::kParentOffset));
3452 // edi: offset of sliced string, smi-tagged.
3453 // eax: parent string.
3454 __ jmp(&check_encoding, Label::kNear);
3455 // String is a cons string, check whether it is flat.
3456 __ bind(&cons_string);
3457 __ cmp(FieldOperand(eax, ConsString::kSecondOffset), factory->empty_string());
ricow@chromium.org65fae842010-08-25 15:26:24 +00003458 __ j(not_equal, &runtime);
3459 __ mov(eax, FieldOperand(eax, ConsString::kFirstOffset));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003460 __ bind(&check_encoding);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003461 __ mov(ebx, FieldOperand(eax, HeapObject::kMapOffset));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003462 // eax: first part of cons string or parent of sliced string.
3463 // ebx: map of first part of cons string or map of parent of sliced string.
3464 // Is first part of cons or parent of slice a flat two byte string?
ricow@chromium.org65fae842010-08-25 15:26:24 +00003465 __ test_b(FieldOperand(ebx, Map::kInstanceTypeOffset),
3466 kStringRepresentationMask | kStringEncodingMask);
3467 STATIC_ASSERT((kSeqStringTag | kTwoByteStringTag) == 0);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003468 __ j(zero, &seq_two_byte_string, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003469 // Any other flat string must be ascii.
3470 __ test_b(FieldOperand(ebx, Map::kInstanceTypeOffset),
3471 kStringRepresentationMask);
3472 __ j(not_zero, &runtime);
3473
3474 __ bind(&seq_ascii_string);
3475 // eax: subject string (flat ascii)
3476 // ecx: RegExp data (FixedArray)
3477 __ mov(edx, FieldOperand(ecx, JSRegExp::kDataAsciiCodeOffset));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003478 __ Set(ecx, Immediate(1)); // Type is ascii.
3479 __ jmp(&check_code, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003480
3481 __ bind(&seq_two_byte_string);
3482 // eax: subject string (flat two byte)
3483 // ecx: RegExp data (FixedArray)
3484 __ mov(edx, FieldOperand(ecx, JSRegExp::kDataUC16CodeOffset));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003485 __ Set(ecx, Immediate(0)); // Type is two byte.
ricow@chromium.org65fae842010-08-25 15:26:24 +00003486
3487 __ bind(&check_code);
3488 // Check that the irregexp code has been generated for the actual string
3489 // encoding. If it has, the field contains a code object otherwise it contains
jkummerow@chromium.orgddda9e82011-07-06 11:27:02 +00003490 // a smi (code flushing support).
3491 __ JumpIfSmi(edx, &runtime);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003492
3493 // eax: subject string
3494 // edx: code
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003495 // ecx: encoding of subject string (1 if ascii, 0 if two_byte);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003496 // Load used arguments before starting to push arguments for call to native
3497 // RegExp code to avoid handling changing stack height.
3498 __ mov(ebx, Operand(esp, kPreviousIndexOffset));
3499 __ SmiUntag(ebx); // Previous index from smi.
3500
3501 // eax: subject string
3502 // ebx: previous index
3503 // edx: code
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003504 // ecx: encoding of subject string (1 if ascii 0 if two_byte);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003505 // All checks done. Now push arguments for native regexp code.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003506 Counters* counters = masm->isolate()->counters();
3507 __ IncrementCounter(counters->regexp_entry_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003508
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003509 // Isolates: note we add an additional parameter here (isolate pointer).
3510 static const int kRegExpExecuteArguments = 8;
kmillikin@chromium.org49edbdf2011-02-16 12:32:18 +00003511 __ EnterApiExitFrame(kRegExpExecuteArguments);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003512
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003513 // Argument 8: Pass current isolate address.
3514 __ mov(Operand(esp, 7 * kPointerSize),
3515 Immediate(ExternalReference::isolate_address()));
3516
ricow@chromium.org65fae842010-08-25 15:26:24 +00003517 // Argument 7: Indicate that this is a direct call from JavaScript.
3518 __ mov(Operand(esp, 6 * kPointerSize), Immediate(1));
3519
3520 // Argument 6: Start (high end) of backtracking stack memory area.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003521 __ mov(esi, Operand::StaticVariable(address_of_regexp_stack_memory_address));
3522 __ add(esi, Operand::StaticVariable(address_of_regexp_stack_memory_size));
3523 __ mov(Operand(esp, 5 * kPointerSize), esi);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003524
3525 // Argument 5: static offsets vector buffer.
3526 __ mov(Operand(esp, 4 * kPointerSize),
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003527 Immediate(ExternalReference::address_of_static_offsets_vector(
3528 masm->isolate())));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003529
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003530 // Argument 2: Previous index.
3531 __ mov(Operand(esp, 1 * kPointerSize), ebx);
3532
3533 // Argument 1: Original subject string.
3534 // The original subject is in the previous stack frame. Therefore we have to
3535 // use ebp, which points exactly to one pointer size below the previous esp.
3536 // (Because creating a new stack frame pushes the previous ebp onto the stack
3537 // and thereby moves up esp by one kPointerSize.)
3538 __ mov(esi, Operand(ebp, kSubjectOffset + kPointerSize));
3539 __ mov(Operand(esp, 0 * kPointerSize), esi);
3540
3541 // esi: original subject string
3542 // eax: underlying subject string
3543 // ebx: previous index
3544 // ecx: encoding of subject string (1 if ascii 0 if two_byte);
3545 // edx: code
ricow@chromium.org65fae842010-08-25 15:26:24 +00003546 // Argument 4: End of string data
3547 // Argument 3: Start of string data
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003548 // Prepare start and end index of the input.
3549 // Load the length from the original sliced string if that is the case.
3550 __ mov(esi, FieldOperand(esi, String::kLengthOffset));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003551 __ add(esi, edi); // Calculate input end wrt offset.
ricow@chromium.org65fae842010-08-25 15:26:24 +00003552 __ SmiUntag(edi);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003553 __ add(ebx, edi); // Calculate input start wrt offset.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003554
3555 // ebx: start index of the input string
3556 // esi: end index of the input string
3557 Label setup_two_byte, setup_rest;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003558 __ test(ecx, ecx);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003559 __ j(zero, &setup_two_byte, Label::kNear);
3560 __ SmiUntag(esi);
3561 __ lea(ecx, FieldOperand(eax, esi, times_1, SeqAsciiString::kHeaderSize));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003562 __ mov(Operand(esp, 3 * kPointerSize), ecx); // Argument 4.
3563 __ lea(ecx, FieldOperand(eax, ebx, times_1, SeqAsciiString::kHeaderSize));
3564 __ mov(Operand(esp, 2 * kPointerSize), ecx); // Argument 3.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003565 __ jmp(&setup_rest, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003566
3567 __ bind(&setup_two_byte);
3568 STATIC_ASSERT(kSmiTag == 0);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003569 STATIC_ASSERT(kSmiTagSize == 1); // esi is smi (powered by 2).
3570 __ lea(ecx, FieldOperand(eax, esi, times_1, SeqTwoByteString::kHeaderSize));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003571 __ mov(Operand(esp, 3 * kPointerSize), ecx); // Argument 4.
3572 __ lea(ecx, FieldOperand(eax, ebx, times_2, SeqTwoByteString::kHeaderSize));
3573 __ mov(Operand(esp, 2 * kPointerSize), ecx); // Argument 3.
3574
3575 __ bind(&setup_rest);
3576
ricow@chromium.org65fae842010-08-25 15:26:24 +00003577 // Locate the code entry and call it.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003578 __ add(edx, Immediate(Code::kHeaderSize - kHeapObjectTag));
3579 __ call(edx);
kmillikin@chromium.org49edbdf2011-02-16 12:32:18 +00003580
3581 // Drop arguments and come back to JS mode.
3582 __ LeaveApiExitFrame();
ricow@chromium.org65fae842010-08-25 15:26:24 +00003583
3584 // Check the result.
3585 Label success;
3586 __ cmp(eax, NativeRegExpMacroAssembler::SUCCESS);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00003587 __ j(equal, &success);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003588 Label failure;
3589 __ cmp(eax, NativeRegExpMacroAssembler::FAILURE);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00003590 __ j(equal, &failure);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003591 __ cmp(eax, NativeRegExpMacroAssembler::EXCEPTION);
3592 // If not exception it can only be retry. Handle that in the runtime system.
3593 __ j(not_equal, &runtime);
3594 // Result must now be exception. If there is no pending exception already a
3595 // stack overflow (on the backtrack stack) was detected in RegExp code but
3596 // haven't created the exception yet. Handle that in the runtime system.
3597 // TODO(592): Rerunning the RegExp to get the stack overflow exception.
kmillikin@chromium.org83e16822011-09-13 08:21:47 +00003598 ExternalReference pending_exception(Isolate::kPendingExceptionAddress,
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003599 masm->isolate());
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003600 __ mov(edx, Immediate(masm->isolate()->factory()->the_hole_value()));
kmillikin@chromium.org49edbdf2011-02-16 12:32:18 +00003601 __ mov(eax, Operand::StaticVariable(pending_exception));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003602 __ cmp(edx, eax);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003603 __ j(equal, &runtime);
kmillikin@chromium.org49edbdf2011-02-16 12:32:18 +00003604 // For exception, throw the exception again.
3605
3606 // Clear the pending exception variable.
3607 __ mov(Operand::StaticVariable(pending_exception), edx);
3608
3609 // Special handling of termination exceptions which are uncatchable
3610 // by javascript code.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003611 __ cmp(eax, factory->termination_exception());
kmillikin@chromium.org49edbdf2011-02-16 12:32:18 +00003612 Label throw_termination_exception;
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003613 __ j(equal, &throw_termination_exception, Label::kNear);
kmillikin@chromium.org49edbdf2011-02-16 12:32:18 +00003614
3615 // Handle normal exception by following handler chain.
3616 __ Throw(eax);
3617
3618 __ bind(&throw_termination_exception);
3619 __ ThrowUncatchable(TERMINATION, eax);
3620
ricow@chromium.org65fae842010-08-25 15:26:24 +00003621 __ bind(&failure);
kmillikin@chromium.org49edbdf2011-02-16 12:32:18 +00003622 // For failure to match, return null.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003623 __ mov(eax, factory->null_value());
ricow@chromium.org65fae842010-08-25 15:26:24 +00003624 __ ret(4 * kPointerSize);
3625
3626 // Load RegExp data.
3627 __ bind(&success);
3628 __ mov(eax, Operand(esp, kJSRegExpOffset));
3629 __ mov(ecx, FieldOperand(eax, JSRegExp::kDataOffset));
3630 __ mov(edx, FieldOperand(ecx, JSRegExp::kIrregexpCaptureCountOffset));
3631 // Calculate number of capture registers (number_of_captures + 1) * 2.
3632 STATIC_ASSERT(kSmiTag == 0);
3633 STATIC_ASSERT(kSmiTagSize + kSmiShiftSize == 1);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003634 __ add(edx, Immediate(2)); // edx was a smi.
ricow@chromium.org65fae842010-08-25 15:26:24 +00003635
3636 // edx: Number of capture registers
3637 // Load last_match_info which is still known to be a fast case JSArray.
3638 __ mov(eax, Operand(esp, kLastMatchInfoOffset));
3639 __ mov(ebx, FieldOperand(eax, JSArray::kElementsOffset));
3640
3641 // ebx: last_match_info backing store (FixedArray)
3642 // edx: number of capture registers
3643 // Store the capture count.
3644 __ SmiTag(edx); // Number of capture registers to smi.
3645 __ mov(FieldOperand(ebx, RegExpImpl::kLastCaptureCountOffset), edx);
3646 __ SmiUntag(edx); // Number of capture registers back from smi.
3647 // Store last subject and last input.
3648 __ mov(eax, Operand(esp, kSubjectOffset));
3649 __ mov(FieldOperand(ebx, RegExpImpl::kLastSubjectOffset), eax);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003650 __ RecordWriteField(ebx,
3651 RegExpImpl::kLastSubjectOffset,
3652 eax,
3653 edi,
3654 kDontSaveFPRegs);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003655 __ mov(eax, Operand(esp, kSubjectOffset));
3656 __ mov(FieldOperand(ebx, RegExpImpl::kLastInputOffset), eax);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003657 __ RecordWriteField(ebx,
3658 RegExpImpl::kLastInputOffset,
3659 eax,
3660 edi,
3661 kDontSaveFPRegs);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003662
3663 // Get the static offsets vector filled by the native regexp code.
3664 ExternalReference address_of_static_offsets_vector =
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003665 ExternalReference::address_of_static_offsets_vector(masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00003666 __ mov(ecx, Immediate(address_of_static_offsets_vector));
3667
3668 // ebx: last_match_info backing store (FixedArray)
3669 // ecx: offsets vector
3670 // edx: number of capture registers
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003671 Label next_capture, done;
ricow@chromium.org65fae842010-08-25 15:26:24 +00003672 // Capture register counter starts from number of capture registers and
3673 // counts down until wraping after zero.
3674 __ bind(&next_capture);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003675 __ sub(edx, Immediate(1));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003676 __ j(negative, &done, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003677 // Read the value from the static offsets vector buffer.
3678 __ mov(edi, Operand(ecx, edx, times_int_size, 0));
3679 __ SmiTag(edi);
3680 // Store the smi value in the last match info.
3681 __ mov(FieldOperand(ebx,
3682 edx,
3683 times_pointer_size,
3684 RegExpImpl::kFirstCaptureOffset),
3685 edi);
3686 __ jmp(&next_capture);
3687 __ bind(&done);
3688
3689 // Return last match info.
3690 __ mov(eax, Operand(esp, kLastMatchInfoOffset));
3691 __ ret(4 * kPointerSize);
3692
3693 // Do the runtime call to execute the regexp.
3694 __ bind(&runtime);
3695 __ TailCallRuntime(Runtime::kRegExpExec, 4, 1);
3696#endif // V8_INTERPRETED_REGEXP
3697}
3698
3699
kasperl@chromium.orga5551262010-12-07 12:49:48 +00003700void RegExpConstructResultStub::Generate(MacroAssembler* masm) {
3701 const int kMaxInlineLength = 100;
3702 Label slowcase;
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003703 Label done;
kasperl@chromium.orga5551262010-12-07 12:49:48 +00003704 __ mov(ebx, Operand(esp, kPointerSize * 3));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003705 __ JumpIfNotSmi(ebx, &slowcase);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003706 __ cmp(ebx, Immediate(Smi::FromInt(kMaxInlineLength)));
kasperl@chromium.orga5551262010-12-07 12:49:48 +00003707 __ j(above, &slowcase);
3708 // Smi-tagging is equivalent to multiplying by 2.
3709 STATIC_ASSERT(kSmiTag == 0);
3710 STATIC_ASSERT(kSmiTagSize == 1);
3711 // Allocate RegExpResult followed by FixedArray with size in ebx.
3712 // JSArray: [Map][empty properties][Elements][Length-smi][index][input]
3713 // Elements: [Map][Length][..elements..]
3714 __ AllocateInNewSpace(JSRegExpResult::kSize + FixedArray::kHeaderSize,
3715 times_half_pointer_size,
3716 ebx, // In: Number of elements (times 2, being a smi)
3717 eax, // Out: Start of allocation (tagged).
3718 ecx, // Out: End of allocation.
3719 edx, // Scratch register
3720 &slowcase,
3721 TAG_OBJECT);
3722 // eax: Start of allocated area, object-tagged.
3723
3724 // Set JSArray map to global.regexp_result_map().
3725 // Set empty properties FixedArray.
3726 // Set elements to point to FixedArray allocated right after the JSArray.
3727 // Interleave operations for better latency.
3728 __ mov(edx, ContextOperand(esi, Context::GLOBAL_INDEX));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003729 Factory* factory = masm->isolate()->factory();
3730 __ mov(ecx, Immediate(factory->empty_fixed_array()));
kasperl@chromium.orga5551262010-12-07 12:49:48 +00003731 __ lea(ebx, Operand(eax, JSRegExpResult::kSize));
3732 __ mov(edx, FieldOperand(edx, GlobalObject::kGlobalContextOffset));
3733 __ mov(FieldOperand(eax, JSObject::kElementsOffset), ebx);
3734 __ mov(FieldOperand(eax, JSObject::kPropertiesOffset), ecx);
3735 __ mov(edx, ContextOperand(edx, Context::REGEXP_RESULT_MAP_INDEX));
3736 __ mov(FieldOperand(eax, HeapObject::kMapOffset), edx);
3737
3738 // Set input, index and length fields from arguments.
3739 __ mov(ecx, Operand(esp, kPointerSize * 1));
3740 __ mov(FieldOperand(eax, JSRegExpResult::kInputOffset), ecx);
3741 __ mov(ecx, Operand(esp, kPointerSize * 2));
3742 __ mov(FieldOperand(eax, JSRegExpResult::kIndexOffset), ecx);
3743 __ mov(ecx, Operand(esp, kPointerSize * 3));
3744 __ mov(FieldOperand(eax, JSArray::kLengthOffset), ecx);
3745
3746 // Fill out the elements FixedArray.
3747 // eax: JSArray.
3748 // ebx: FixedArray.
3749 // ecx: Number of elements in array, as smi.
3750
3751 // Set map.
3752 __ mov(FieldOperand(ebx, HeapObject::kMapOffset),
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003753 Immediate(factory->fixed_array_map()));
kasperl@chromium.orga5551262010-12-07 12:49:48 +00003754 // Set length.
3755 __ mov(FieldOperand(ebx, FixedArray::kLengthOffset), ecx);
3756 // Fill contents of fixed-array with the-hole.
3757 __ SmiUntag(ecx);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003758 __ mov(edx, Immediate(factory->the_hole_value()));
kasperl@chromium.orga5551262010-12-07 12:49:48 +00003759 __ lea(ebx, FieldOperand(ebx, FixedArray::kHeaderSize));
3760 // Fill fixed array elements with hole.
3761 // eax: JSArray.
3762 // ecx: Number of elements to fill.
3763 // ebx: Start of elements in FixedArray.
3764 // edx: the hole.
3765 Label loop;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003766 __ test(ecx, ecx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00003767 __ bind(&loop);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003768 __ j(less_equal, &done, Label::kNear); // Jump if ecx is negative or zero.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003769 __ sub(ecx, Immediate(1));
kasperl@chromium.orga5551262010-12-07 12:49:48 +00003770 __ mov(Operand(ebx, ecx, times_pointer_size, 0), edx);
3771 __ jmp(&loop);
3772
3773 __ bind(&done);
3774 __ ret(3 * kPointerSize);
3775
3776 __ bind(&slowcase);
3777 __ TailCallRuntime(Runtime::kRegExpConstructResult, 3, 1);
3778}
3779
3780
ricow@chromium.org65fae842010-08-25 15:26:24 +00003781void NumberToStringStub::GenerateLookupNumberStringCache(MacroAssembler* masm,
3782 Register object,
3783 Register result,
3784 Register scratch1,
3785 Register scratch2,
3786 bool object_is_smi,
3787 Label* not_found) {
3788 // Use of registers. Register result is used as a temporary.
3789 Register number_string_cache = result;
3790 Register mask = scratch1;
3791 Register scratch = scratch2;
3792
3793 // Load the number string cache.
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00003794 ExternalReference roots_address =
3795 ExternalReference::roots_address(masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00003796 __ mov(scratch, Immediate(Heap::kNumberStringCacheRootIndex));
3797 __ mov(number_string_cache,
3798 Operand::StaticArray(scratch, times_pointer_size, roots_address));
3799 // Make the hash mask from the length of the number string cache. It
3800 // contains two elements (number and string) for each cache entry.
3801 __ mov(mask, FieldOperand(number_string_cache, FixedArray::kLengthOffset));
3802 __ shr(mask, kSmiTagSize + 1); // Untag length and divide it by two.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003803 __ sub(mask, Immediate(1)); // Make mask.
ricow@chromium.org65fae842010-08-25 15:26:24 +00003804
3805 // Calculate the entry in the number string cache. The hash value in the
3806 // number string cache for smis is just the smi value, and the hash for
3807 // doubles is the xor of the upper and lower words. See
3808 // Heap::GetNumberStringCache.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003809 Label smi_hash_calculated;
3810 Label load_result_from_cache;
ricow@chromium.org65fae842010-08-25 15:26:24 +00003811 if (object_is_smi) {
3812 __ mov(scratch, object);
3813 __ SmiUntag(scratch);
3814 } else {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003815 Label not_smi;
ricow@chromium.org65fae842010-08-25 15:26:24 +00003816 STATIC_ASSERT(kSmiTag == 0);
whesse@chromium.org7b260152011-06-20 15:33:18 +00003817 __ JumpIfNotSmi(object, &not_smi, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003818 __ mov(scratch, object);
3819 __ SmiUntag(scratch);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003820 __ jmp(&smi_hash_calculated, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003821 __ bind(&not_smi);
3822 __ cmp(FieldOperand(object, HeapObject::kMapOffset),
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003823 masm->isolate()->factory()->heap_number_map());
ricow@chromium.org65fae842010-08-25 15:26:24 +00003824 __ j(not_equal, not_found);
3825 STATIC_ASSERT(8 == kDoubleSize);
3826 __ mov(scratch, FieldOperand(object, HeapNumber::kValueOffset));
3827 __ xor_(scratch, FieldOperand(object, HeapNumber::kValueOffset + 4));
3828 // Object is heap number and hash is now in scratch. Calculate cache index.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003829 __ and_(scratch, mask);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003830 Register index = scratch;
3831 Register probe = mask;
3832 __ mov(probe,
3833 FieldOperand(number_string_cache,
3834 index,
3835 times_twice_pointer_size,
3836 FixedArray::kHeaderSize));
whesse@chromium.org7b260152011-06-20 15:33:18 +00003837 __ JumpIfSmi(probe, not_found);
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00003838 if (CpuFeatures::IsSupported(SSE2)) {
ricow@chromium.org65fae842010-08-25 15:26:24 +00003839 CpuFeatures::Scope fscope(SSE2);
3840 __ movdbl(xmm0, FieldOperand(object, HeapNumber::kValueOffset));
3841 __ movdbl(xmm1, FieldOperand(probe, HeapNumber::kValueOffset));
3842 __ ucomisd(xmm0, xmm1);
3843 } else {
3844 __ fld_d(FieldOperand(object, HeapNumber::kValueOffset));
3845 __ fld_d(FieldOperand(probe, HeapNumber::kValueOffset));
3846 __ FCmp();
3847 }
3848 __ j(parity_even, not_found); // Bail out if NaN is involved.
3849 __ j(not_equal, not_found); // The cache did not contain this value.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003850 __ jmp(&load_result_from_cache, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003851 }
3852
3853 __ bind(&smi_hash_calculated);
3854 // Object is smi and hash is now in scratch. Calculate cache index.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003855 __ and_(scratch, mask);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003856 Register index = scratch;
3857 // Check if the entry is the smi we are looking for.
3858 __ cmp(object,
3859 FieldOperand(number_string_cache,
3860 index,
3861 times_twice_pointer_size,
3862 FixedArray::kHeaderSize));
3863 __ j(not_equal, not_found);
3864
3865 // Get the result from the cache.
3866 __ bind(&load_result_from_cache);
3867 __ mov(result,
3868 FieldOperand(number_string_cache,
3869 index,
3870 times_twice_pointer_size,
3871 FixedArray::kHeaderSize + kPointerSize));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003872 Counters* counters = masm->isolate()->counters();
3873 __ IncrementCounter(counters->number_to_string_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003874}
3875
3876
3877void NumberToStringStub::Generate(MacroAssembler* masm) {
3878 Label runtime;
3879
3880 __ mov(ebx, Operand(esp, kPointerSize));
3881
3882 // Generate code to lookup number in the number string cache.
3883 GenerateLookupNumberStringCache(masm, ebx, eax, ecx, edx, false, &runtime);
3884 __ ret(1 * kPointerSize);
3885
3886 __ bind(&runtime);
3887 // Handle number to string in the runtime system if not found in the cache.
3888 __ TailCallRuntime(Runtime::kNumberToStringSkipCache, 1, 1);
3889}
3890
3891
3892static int NegativeComparisonResult(Condition cc) {
3893 ASSERT(cc != equal);
3894 ASSERT((cc == less) || (cc == less_equal)
3895 || (cc == greater) || (cc == greater_equal));
3896 return (cc == greater || cc == greater_equal) ? LESS : GREATER;
3897}
3898
3899void CompareStub::Generate(MacroAssembler* masm) {
3900 ASSERT(lhs_.is(no_reg) && rhs_.is(no_reg));
3901
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003902 Label check_unequal_objects;
ricow@chromium.org65fae842010-08-25 15:26:24 +00003903
erik.corry@gmail.comd88afa22010-09-15 12:33:05 +00003904 // Compare two smis if required.
3905 if (include_smi_compare_) {
3906 Label non_smi, smi_done;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003907 __ mov(ecx, edx);
3908 __ or_(ecx, eax);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003909 __ JumpIfNotSmi(ecx, &non_smi, Label::kNear);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003910 __ sub(edx, eax); // Return on the result of the subtraction.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00003911 __ j(no_overflow, &smi_done, Label::kNear);
whesse@chromium.org4a5224e2010-10-20 12:37:07 +00003912 __ not_(edx); // Correct sign in case of overflow. edx is never 0 here.
erik.corry@gmail.comd88afa22010-09-15 12:33:05 +00003913 __ bind(&smi_done);
3914 __ mov(eax, edx);
3915 __ ret(0);
3916 __ bind(&non_smi);
3917 } else if (FLAG_debug_code) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003918 __ mov(ecx, edx);
3919 __ or_(ecx, eax);
erik.corry@gmail.comd88afa22010-09-15 12:33:05 +00003920 __ test(ecx, Immediate(kSmiTagMask));
3921 __ Assert(not_zero, "Unexpected smi operands.");
3922 }
3923
ricow@chromium.org65fae842010-08-25 15:26:24 +00003924 // NOTICE! This code is only reached after a smi-fast-case check, so
3925 // it is certain that at least one operand isn't a smi.
3926
3927 // Identical objects can be compared fast, but there are some tricky cases
3928 // for NaN and undefined.
3929 {
3930 Label not_identical;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003931 __ cmp(eax, edx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003932 __ j(not_equal, &not_identical);
3933
3934 if (cc_ != equal) {
3935 // Check for undefined. undefined OP undefined is false even though
3936 // undefined == undefined.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003937 Label check_for_nan;
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003938 __ cmp(edx, masm->isolate()->factory()->undefined_value());
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003939 __ j(not_equal, &check_for_nan, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003940 __ Set(eax, Immediate(Smi::FromInt(NegativeComparisonResult(cc_))));
3941 __ ret(0);
3942 __ bind(&check_for_nan);
3943 }
3944
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003945 // Test for NaN. Sadly, we can't just compare to factory->nan_value(),
ricow@chromium.org65fae842010-08-25 15:26:24 +00003946 // so we do the second best thing - test it ourselves.
3947 // Note: if cc_ != equal, never_nan_nan_ is not used.
3948 if (never_nan_nan_ && (cc_ == equal)) {
3949 __ Set(eax, Immediate(Smi::FromInt(EQUAL)));
3950 __ ret(0);
3951 } else {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003952 Label heap_number;
ricow@chromium.org65fae842010-08-25 15:26:24 +00003953 __ cmp(FieldOperand(edx, HeapObject::kMapOffset),
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00003954 Immediate(masm->isolate()->factory()->heap_number_map()));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003955 __ j(equal, &heap_number, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003956 if (cc_ != equal) {
3957 // Call runtime on identical JSObjects. Otherwise return equal.
ricow@chromium.orgd2be9012011-06-01 06:00:58 +00003958 __ CmpObjectType(eax, FIRST_SPEC_OBJECT_TYPE, ecx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003959 __ j(above_equal, &not_identical);
3960 }
3961 __ Set(eax, Immediate(Smi::FromInt(EQUAL)));
3962 __ ret(0);
3963
3964 __ bind(&heap_number);
3965 // It is a heap number, so return non-equal if it's NaN and equal if
3966 // it's not NaN.
3967 // The representation of NaN values has all exponent bits (52..62) set,
3968 // and not all mantissa bits (0..51) clear.
3969 // We only accept QNaNs, which have bit 51 set.
3970 // Read top bits of double representation (second word of value).
3971
3972 // Value is a QNaN if value & kQuietNaNMask == kQuietNaNMask, i.e.,
3973 // all bits in the mask are set. We only need to check the word
3974 // that contains the exponent and high bit of the mantissa.
3975 STATIC_ASSERT(((kQuietNaNHighBitsMask << 1) & 0x80000000u) != 0);
3976 __ mov(edx, FieldOperand(edx, HeapNumber::kExponentOffset));
lrn@chromium.org5d00b602011-01-05 09:51:43 +00003977 __ Set(eax, Immediate(0));
ricow@chromium.org65fae842010-08-25 15:26:24 +00003978 // Shift value and mask so kQuietNaNHighBitsMask applies to topmost
3979 // bits.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00003980 __ add(edx, edx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003981 __ cmp(edx, kQuietNaNHighBitsMask << 1);
3982 if (cc_ == equal) {
3983 STATIC_ASSERT(EQUAL != 1);
3984 __ setcc(above_equal, eax);
3985 __ ret(0);
3986 } else {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00003987 Label nan;
3988 __ j(above_equal, &nan, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00003989 __ Set(eax, Immediate(Smi::FromInt(EQUAL)));
3990 __ ret(0);
3991 __ bind(&nan);
3992 __ Set(eax, Immediate(Smi::FromInt(NegativeComparisonResult(cc_))));
3993 __ ret(0);
3994 }
3995 }
3996
3997 __ bind(&not_identical);
3998 }
3999
4000 // Strict equality can quickly decide whether objects are equal.
4001 // Non-strict object equality is slower, so it is handled later in the stub.
4002 if (cc_ == equal && strict_) {
4003 Label slow; // Fallthrough label.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004004 Label not_smis;
ricow@chromium.org65fae842010-08-25 15:26:24 +00004005 // If we're doing a strict equality comparison, we don't have to do
4006 // type conversion, so we generate code to do fast comparison for objects
4007 // and oddballs. Non-smi numbers and strings still go through the usual
4008 // slow-case code.
4009 // If either is a Smi (we know that not both are), then they can only
4010 // be equal if the other is a HeapNumber. If so, use the slow case.
4011 STATIC_ASSERT(kSmiTag == 0);
4012 ASSERT_EQ(0, Smi::FromInt(0));
4013 __ mov(ecx, Immediate(kSmiTagMask));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004014 __ and_(ecx, eax);
4015 __ test(ecx, edx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004016 __ j(not_zero, &not_smis, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004017 // One operand is a smi.
4018
4019 // Check whether the non-smi is a heap number.
4020 STATIC_ASSERT(kSmiTagMask == 1);
4021 // ecx still holds eax & kSmiTag, which is either zero or one.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004022 __ sub(ecx, Immediate(0x01));
ricow@chromium.org65fae842010-08-25 15:26:24 +00004023 __ mov(ebx, edx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004024 __ xor_(ebx, eax);
4025 __ and_(ebx, ecx); // ebx holds either 0 or eax ^ edx.
4026 __ xor_(ebx, eax);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004027 // if eax was smi, ebx is now edx, else eax.
4028
4029 // Check if the non-smi operand is a heap number.
4030 __ cmp(FieldOperand(ebx, HeapObject::kMapOffset),
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004031 Immediate(masm->isolate()->factory()->heap_number_map()));
ricow@chromium.org65fae842010-08-25 15:26:24 +00004032 // If heap number, handle it in the slow case.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004033 __ j(equal, &slow, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004034 // Return non-equal (ebx is not zero)
4035 __ mov(eax, ebx);
4036 __ ret(0);
4037
4038 __ bind(&not_smis);
4039 // If either operand is a JSObject or an oddball value, then they are not
4040 // equal since their pointers are different
4041 // There is no test for undetectability in strict equality.
4042
4043 // Get the type of the first operand.
4044 // If the first object is a JS object, we have done pointer comparison.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004045 Label first_non_object;
ricow@chromium.orgd2be9012011-06-01 06:00:58 +00004046 STATIC_ASSERT(LAST_TYPE == LAST_SPEC_OBJECT_TYPE);
4047 __ CmpObjectType(eax, FIRST_SPEC_OBJECT_TYPE, ecx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004048 __ j(below, &first_non_object, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004049
4050 // Return non-zero (eax is not zero)
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004051 Label return_not_equal;
ricow@chromium.org65fae842010-08-25 15:26:24 +00004052 STATIC_ASSERT(kHeapObjectTag != 0);
4053 __ bind(&return_not_equal);
4054 __ ret(0);
4055
4056 __ bind(&first_non_object);
4057 // Check for oddballs: true, false, null, undefined.
4058 __ CmpInstanceType(ecx, ODDBALL_TYPE);
4059 __ j(equal, &return_not_equal);
4060
ricow@chromium.orgd2be9012011-06-01 06:00:58 +00004061 __ CmpObjectType(edx, FIRST_SPEC_OBJECT_TYPE, ecx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004062 __ j(above_equal, &return_not_equal);
4063
4064 // Check for oddballs: true, false, null, undefined.
4065 __ CmpInstanceType(ecx, ODDBALL_TYPE);
4066 __ j(equal, &return_not_equal);
4067
4068 // Fall through to the general case.
4069 __ bind(&slow);
4070 }
4071
4072 // Generate the number comparison code.
4073 if (include_number_compare_) {
4074 Label non_number_comparison;
4075 Label unordered;
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00004076 if (CpuFeatures::IsSupported(SSE2)) {
ricow@chromium.org65fae842010-08-25 15:26:24 +00004077 CpuFeatures::Scope use_sse2(SSE2);
4078 CpuFeatures::Scope use_cmov(CMOV);
4079
4080 FloatingPointHelper::LoadSSE2Operands(masm, &non_number_comparison);
4081 __ ucomisd(xmm0, xmm1);
4082
4083 // Don't base result on EFLAGS when a NaN is involved.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004084 __ j(parity_even, &unordered, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004085 // Return a result of -1, 0, or 1, based on EFLAGS.
4086 __ mov(eax, 0); // equal
4087 __ mov(ecx, Immediate(Smi::FromInt(1)));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004088 __ cmov(above, eax, ecx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004089 __ mov(ecx, Immediate(Smi::FromInt(-1)));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004090 __ cmov(below, eax, ecx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004091 __ ret(0);
4092 } else {
4093 FloatingPointHelper::CheckFloatOperands(
4094 masm, &non_number_comparison, ebx);
4095 FloatingPointHelper::LoadFloatOperand(masm, eax);
4096 FloatingPointHelper::LoadFloatOperand(masm, edx);
4097 __ FCmp();
4098
4099 // Don't base result on EFLAGS when a NaN is involved.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004100 __ j(parity_even, &unordered, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004101
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004102 Label below_label, above_label;
ricow@chromium.org65fae842010-08-25 15:26:24 +00004103 // Return a result of -1, 0, or 1, based on EFLAGS.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004104 __ j(below, &below_label, Label::kNear);
4105 __ j(above, &above_label, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004106
lrn@chromium.org5d00b602011-01-05 09:51:43 +00004107 __ Set(eax, Immediate(0));
ricow@chromium.org65fae842010-08-25 15:26:24 +00004108 __ ret(0);
4109
4110 __ bind(&below_label);
4111 __ mov(eax, Immediate(Smi::FromInt(-1)));
4112 __ ret(0);
4113
4114 __ bind(&above_label);
4115 __ mov(eax, Immediate(Smi::FromInt(1)));
4116 __ ret(0);
4117 }
4118
4119 // If one of the numbers was NaN, then the result is always false.
4120 // The cc is never not-equal.
4121 __ bind(&unordered);
4122 ASSERT(cc_ != not_equal);
4123 if (cc_ == less || cc_ == less_equal) {
4124 __ mov(eax, Immediate(Smi::FromInt(1)));
4125 } else {
4126 __ mov(eax, Immediate(Smi::FromInt(-1)));
4127 }
4128 __ ret(0);
4129
4130 // The number comparison code did not provide a valid result.
4131 __ bind(&non_number_comparison);
4132 }
4133
4134 // Fast negative check for symbol-to-symbol equality.
4135 Label check_for_strings;
4136 if (cc_ == equal) {
4137 BranchIfNonSymbol(masm, &check_for_strings, eax, ecx);
4138 BranchIfNonSymbol(masm, &check_for_strings, edx, ecx);
4139
4140 // We've already checked for object identity, so if both operands
4141 // are symbols they aren't equal. Register eax already holds a
4142 // non-zero value, which indicates not equal, so just return.
4143 __ ret(0);
4144 }
4145
4146 __ bind(&check_for_strings);
4147
4148 __ JumpIfNotBothSequentialAsciiStrings(edx, eax, ecx, ebx,
4149 &check_unequal_objects);
4150
4151 // Inline comparison of ascii strings.
lrn@chromium.org1c092762011-05-09 09:42:16 +00004152 if (cc_ == equal) {
4153 StringCompareStub::GenerateFlatAsciiStringEquals(masm,
ricow@chromium.org65fae842010-08-25 15:26:24 +00004154 edx,
4155 eax,
4156 ecx,
lrn@chromium.org1c092762011-05-09 09:42:16 +00004157 ebx);
4158 } else {
4159 StringCompareStub::GenerateCompareFlatAsciiStrings(masm,
4160 edx,
4161 eax,
4162 ecx,
4163 ebx,
4164 edi);
4165 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00004166#ifdef DEBUG
4167 __ Abort("Unexpected fall-through from string comparison");
4168#endif
4169
4170 __ bind(&check_unequal_objects);
4171 if (cc_ == equal && !strict_) {
4172 // Non-strict equality. Objects are unequal if
4173 // they are both JSObjects and not undetectable,
4174 // and their pointers are different.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004175 Label not_both_objects;
4176 Label return_unequal;
ricow@chromium.org65fae842010-08-25 15:26:24 +00004177 // At most one is a smi, so we can test for smi by adding the two.
4178 // A smi plus a heap object has the low bit set, a heap object plus
4179 // a heap object has the low bit clear.
4180 STATIC_ASSERT(kSmiTag == 0);
4181 STATIC_ASSERT(kSmiTagMask == 1);
4182 __ lea(ecx, Operand(eax, edx, times_1, 0));
4183 __ test(ecx, Immediate(kSmiTagMask));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004184 __ j(not_zero, &not_both_objects, Label::kNear);
ricow@chromium.orgd2be9012011-06-01 06:00:58 +00004185 __ CmpObjectType(eax, FIRST_SPEC_OBJECT_TYPE, ecx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004186 __ j(below, &not_both_objects, Label::kNear);
ricow@chromium.orgd2be9012011-06-01 06:00:58 +00004187 __ CmpObjectType(edx, FIRST_SPEC_OBJECT_TYPE, ebx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004188 __ j(below, &not_both_objects, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004189 // We do not bail out after this point. Both are JSObjects, and
4190 // they are equal if and only if both are undetectable.
4191 // The and of the undetectable flags is 1 if and only if they are equal.
4192 __ test_b(FieldOperand(ecx, Map::kBitFieldOffset),
4193 1 << Map::kIsUndetectable);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004194 __ j(zero, &return_unequal, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004195 __ test_b(FieldOperand(ebx, Map::kBitFieldOffset),
4196 1 << Map::kIsUndetectable);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004197 __ j(zero, &return_unequal, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004198 // The objects are both undetectable, so they both compare as the value
4199 // undefined, and are equal.
4200 __ Set(eax, Immediate(EQUAL));
4201 __ bind(&return_unequal);
4202 // Return non-equal by returning the non-zero object pointer in eax,
4203 // or return equal if we fell through to here.
4204 __ ret(0); // rax, rdx were pushed
4205 __ bind(&not_both_objects);
4206 }
4207
4208 // Push arguments below the return address.
4209 __ pop(ecx);
4210 __ push(edx);
4211 __ push(eax);
4212
4213 // Figure out which native to call and setup the arguments.
4214 Builtins::JavaScript builtin;
4215 if (cc_ == equal) {
4216 builtin = strict_ ? Builtins::STRICT_EQUALS : Builtins::EQUALS;
4217 } else {
4218 builtin = Builtins::COMPARE;
4219 __ push(Immediate(Smi::FromInt(NegativeComparisonResult(cc_))));
4220 }
4221
4222 // Restore return address on the stack.
4223 __ push(ecx);
4224
4225 // Call the native; it returns -1 (less), 0 (equal), or 1 (greater)
4226 // tagged as a small integer.
4227 __ InvokeBuiltin(builtin, JUMP_FUNCTION);
4228}
4229
4230
4231void CompareStub::BranchIfNonSymbol(MacroAssembler* masm,
4232 Label* label,
4233 Register object,
4234 Register scratch) {
whesse@chromium.org7b260152011-06-20 15:33:18 +00004235 __ JumpIfSmi(object, label);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004236 __ mov(scratch, FieldOperand(object, HeapObject::kMapOffset));
4237 __ movzx_b(scratch, FieldOperand(scratch, Map::kInstanceTypeOffset));
4238 __ and_(scratch, kIsSymbolMask | kIsNotStringMask);
4239 __ cmp(scratch, kSymbolTag | kStringTag);
4240 __ j(not_equal, label);
4241}
4242
4243
4244void StackCheckStub::Generate(MacroAssembler* masm) {
whesse@chromium.org4a5224e2010-10-20 12:37:07 +00004245 __ TailCallRuntime(Runtime::kStackGuard, 0, 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004246}
4247
4248
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004249void CallFunctionStub::FinishCode(Code* code) {
4250 code->set_has_function_cache(RecordCallTarget());
4251}
4252
4253
4254void CallFunctionStub::Clear(Heap* heap, Address address) {
4255 ASSERT(Memory::uint8_at(address + kPointerSize) == Assembler::kTestEaxByte);
4256 // 1 ~ size of the test eax opcode.
4257 Object* cell = Memory::Object_at(address + kPointerSize + 1);
4258 // Low-level because clearing happens during GC.
4259 reinterpret_cast<JSGlobalPropertyCell*>(cell)->set_value(
4260 RawUninitializedSentinel(heap));
4261}
4262
4263
4264Object* CallFunctionStub::GetCachedValue(Address address) {
4265 ASSERT(Memory::uint8_at(address + kPointerSize) == Assembler::kTestEaxByte);
4266 // 1 ~ size of the test eax opcode.
4267 Object* cell = Memory::Object_at(address + kPointerSize + 1);
4268 return JSGlobalPropertyCell::cast(cell)->value();
4269}
4270
4271
ricow@chromium.org65fae842010-08-25 15:26:24 +00004272void CallFunctionStub::Generate(MacroAssembler* masm) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004273 Isolate* isolate = masm->isolate();
lrn@chromium.org34e60782011-09-15 07:25:40 +00004274 Label slow, non_function;
ricow@chromium.org65fae842010-08-25 15:26:24 +00004275
danno@chromium.org40cb8782011-05-25 07:58:50 +00004276 // The receiver might implicitly be the global object. This is
4277 // indicated by passing the hole as the receiver to the call
4278 // function stub.
4279 if (ReceiverMightBeImplicit()) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004280 Label receiver_ok;
ricow@chromium.org65fae842010-08-25 15:26:24 +00004281 // Get the receiver from the stack.
4282 // +1 ~ return address
ricow@chromium.org65fae842010-08-25 15:26:24 +00004283 __ mov(eax, Operand(esp, (argc_ + 1) * kPointerSize));
danno@chromium.org40cb8782011-05-25 07:58:50 +00004284 // Call as function is indicated with the hole.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004285 __ cmp(eax, isolate->factory()->the_hole_value());
4286 __ j(not_equal, &receiver_ok, Label::kNear);
danno@chromium.org40cb8782011-05-25 07:58:50 +00004287 // Patch the receiver on the stack with the global receiver object.
4288 __ mov(ebx, GlobalObjectOperand());
4289 __ mov(ebx, FieldOperand(ebx, GlobalObject::kGlobalReceiverOffset));
4290 __ mov(Operand(esp, (argc_ + 1) * kPointerSize), ebx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004291 __ bind(&receiver_ok);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004292 }
4293
4294 // Get the function to call from the stack.
4295 // +2 ~ receiver, return address
4296 __ mov(edi, Operand(esp, (argc_ + 2) * kPointerSize));
4297
4298 // Check that the function really is a JavaScript function.
lrn@chromium.org34e60782011-09-15 07:25:40 +00004299 __ JumpIfSmi(edi, &non_function);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004300 // Goto slow case if we do not have a function.
4301 __ CmpObjectType(edi, JS_FUNCTION_TYPE, ecx);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00004302 __ j(not_equal, &slow);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004303
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004304 if (RecordCallTarget()) {
4305 // Cache the called function in a global property cell in the
4306 // instruction stream after the call. Cache states are uninitialized,
4307 // monomorphic (indicated by a JSFunction), and megamorphic.
4308 Label initialize, call;
4309 // Load the cache cell address into ebx and the cache state into ecx.
4310 __ mov(ebx, Operand(esp, 0)); // Return address.
4311 __ mov(ebx, Operand(ebx, 1)); // 1 ~ sizeof 'test eax' opcode in bytes.
4312 __ mov(ecx, FieldOperand(ebx, JSGlobalPropertyCell::kValueOffset));
4313
4314 // A monomorphic cache hit or an already megamorphic state: invoke the
4315 // function without changing the state.
4316 __ cmp(ecx, edi);
4317 __ j(equal, &call, Label::kNear);
4318 __ cmp(ecx, Immediate(MegamorphicSentinel(isolate)));
4319 __ j(equal, &call, Label::kNear);
4320
4321 // A monomorphic miss (i.e, here the cache is not uninitialized) goes
4322 // megamorphic.
4323 __ cmp(ecx, Immediate(UninitializedSentinel(isolate)));
4324 __ j(equal, &initialize, Label::kNear);
4325 // MegamorphicSentinel is a root so no write-barrier is needed.
4326 __ mov(FieldOperand(ebx, JSGlobalPropertyCell::kValueOffset),
4327 Immediate(MegamorphicSentinel(isolate)));
4328 __ jmp(&call, Label::kNear);
4329
4330 // An uninitialized cache is patched with the function.
4331 __ bind(&initialize);
4332 __ mov(FieldOperand(ebx, JSGlobalPropertyCell::kValueOffset), edi);
4333 __ mov(ecx, edi);
4334 __ RecordWriteField(ebx,
4335 JSGlobalPropertyCell::kValueOffset,
4336 ecx,
4337 edx,
4338 kDontSaveFPRegs,
4339 OMIT_REMEMBERED_SET, // Cells are rescanned.
4340 OMIT_SMI_CHECK);
4341
4342 __ bind(&call);
4343 }
4344
ricow@chromium.org65fae842010-08-25 15:26:24 +00004345 // Fast-case: Just invoke the function.
4346 ParameterCount actual(argc_);
danno@chromium.org40cb8782011-05-25 07:58:50 +00004347
4348 if (ReceiverMightBeImplicit()) {
4349 Label call_as_function;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004350 __ cmp(eax, isolate->factory()->the_hole_value());
danno@chromium.org40cb8782011-05-25 07:58:50 +00004351 __ j(equal, &call_as_function);
ricow@chromium.orgd2be9012011-06-01 06:00:58 +00004352 __ InvokeFunction(edi,
4353 actual,
4354 JUMP_FUNCTION,
4355 NullCallWrapper(),
4356 CALL_AS_METHOD);
danno@chromium.org40cb8782011-05-25 07:58:50 +00004357 __ bind(&call_as_function);
4358 }
4359 __ InvokeFunction(edi,
4360 actual,
4361 JUMP_FUNCTION,
4362 NullCallWrapper(),
4363 CALL_AS_FUNCTION);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004364
4365 // Slow-case: Non-function called.
4366 __ bind(&slow);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004367 if (RecordCallTarget()) {
4368 // If there is a call target cache, mark it megamorphic in the
4369 // non-function case.
4370 __ mov(ebx, Operand(esp, 0));
4371 __ mov(ebx, Operand(ebx, 1));
4372 __ mov(FieldOperand(ebx, JSGlobalPropertyCell::kValueOffset),
4373 Immediate(MegamorphicSentinel(isolate)));
4374 }
lrn@chromium.org34e60782011-09-15 07:25:40 +00004375 // Check for function proxy.
4376 __ CmpInstanceType(ecx, JS_FUNCTION_PROXY_TYPE);
4377 __ j(not_equal, &non_function);
4378 __ pop(ecx);
4379 __ push(edi); // put proxy as additional argument under return address
4380 __ push(ecx);
4381 __ Set(eax, Immediate(argc_ + 1));
4382 __ Set(ebx, Immediate(0));
4383 __ SetCallKind(ecx, CALL_AS_FUNCTION);
4384 __ GetBuiltinEntry(edx, Builtins::CALL_FUNCTION_PROXY);
4385 {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004386 Handle<Code> adaptor = isolate->builtins()->ArgumentsAdaptorTrampoline();
lrn@chromium.org34e60782011-09-15 07:25:40 +00004387 __ jmp(adaptor, RelocInfo::CODE_TARGET);
4388 }
4389
ricow@chromium.org65fae842010-08-25 15:26:24 +00004390 // CALL_NON_FUNCTION expects the non-function callee as receiver (instead
4391 // of the original receiver from the call site).
lrn@chromium.org34e60782011-09-15 07:25:40 +00004392 __ bind(&non_function);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004393 __ mov(Operand(esp, (argc_ + 1) * kPointerSize), edi);
4394 __ Set(eax, Immediate(argc_));
4395 __ Set(ebx, Immediate(0));
lrn@chromium.org34e60782011-09-15 07:25:40 +00004396 __ SetCallKind(ecx, CALL_AS_METHOD);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004397 __ GetBuiltinEntry(edx, Builtins::CALL_NON_FUNCTION);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004398 Handle<Code> adaptor = isolate->builtins()->ArgumentsAdaptorTrampoline();
ricow@chromium.org65fae842010-08-25 15:26:24 +00004399 __ jmp(adaptor, RelocInfo::CODE_TARGET);
4400}
4401
4402
danno@chromium.org4d3fe4e2011-03-10 10:14:28 +00004403bool CEntryStub::NeedsImmovableCode() {
4404 return false;
4405}
4406
4407
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004408bool CEntryStub::IsPregenerated() {
4409 return (!save_doubles_ || ISOLATE->fp_stubs_generated()) &&
4410 result_size_ == 1;
4411}
4412
4413
4414void CodeStub::GenerateStubsAheadOfTime() {
4415 CEntryStub::GenerateAheadOfTime();
4416 StoreBufferOverflowStub::GenerateFixedRegStubsAheadOfTime();
4417 // It is important that the store buffer overflow stubs are generated first.
4418 RecordWriteStub::GenerateFixedRegStubsAheadOfTime();
4419}
4420
4421
4422void CodeStub::GenerateFPStubs() {
4423 CEntryStub save_doubles(1, kSaveFPRegs);
4424 Handle<Code> code = save_doubles.GetCode();
4425 code->set_is_pregenerated(true);
4426 code->GetIsolate()->set_fp_stubs_generated(true);
4427}
4428
4429
4430void CEntryStub::GenerateAheadOfTime() {
4431 CEntryStub stub(1, kDontSaveFPRegs);
4432 Handle<Code> code = stub.GetCode();
4433 code->set_is_pregenerated(true);
4434}
4435
4436
ricow@chromium.org65fae842010-08-25 15:26:24 +00004437void CEntryStub::GenerateThrowTOS(MacroAssembler* masm) {
kmillikin@chromium.org49edbdf2011-02-16 12:32:18 +00004438 __ Throw(eax);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004439}
4440
4441
ricow@chromium.org65fae842010-08-25 15:26:24 +00004442void CEntryStub::GenerateCore(MacroAssembler* masm,
4443 Label* throw_normal_exception,
4444 Label* throw_termination_exception,
4445 Label* throw_out_of_memory_exception,
4446 bool do_gc,
ager@chromium.org0ee099b2011-01-25 14:06:47 +00004447 bool always_allocate_scope) {
ricow@chromium.org65fae842010-08-25 15:26:24 +00004448 // eax: result parameter for PerformGC, if any
4449 // ebx: pointer to C function (C callee-saved)
4450 // ebp: frame pointer (restored after C call)
4451 // esp: stack pointer (restored after C call)
4452 // edi: number of arguments including receiver (C callee-saved)
4453 // esi: pointer to the first argument (C callee-saved)
4454
4455 // Result returned in eax, or eax+edx if result_size_ is 2.
4456
4457 // Check stack alignment.
4458 if (FLAG_debug_code) {
4459 __ CheckStackAlignment();
4460 }
4461
4462 if (do_gc) {
4463 // Pass failure code returned from last attempt as first argument to
4464 // PerformGC. No need to use PrepareCallCFunction/CallCFunction here as the
4465 // stack alignment is known to be correct. This function takes one argument
4466 // which is passed on the stack, and we know that the stack has been
4467 // prepared to pass at least one argument.
4468 __ mov(Operand(esp, 0 * kPointerSize), eax); // Result.
4469 __ call(FUNCTION_ADDR(Runtime::PerformGC), RelocInfo::RUNTIME_ENTRY);
4470 }
4471
4472 ExternalReference scope_depth =
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004473 ExternalReference::heap_always_allocate_scope_depth(masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00004474 if (always_allocate_scope) {
4475 __ inc(Operand::StaticVariable(scope_depth));
4476 }
4477
4478 // Call C function.
4479 __ mov(Operand(esp, 0 * kPointerSize), edi); // argc.
4480 __ mov(Operand(esp, 1 * kPointerSize), esi); // argv.
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004481 __ mov(Operand(esp, 2 * kPointerSize),
4482 Immediate(ExternalReference::isolate_address()));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004483 __ call(ebx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004484 // Result is in eax or edx:eax - do not destroy these registers!
4485
4486 if (always_allocate_scope) {
4487 __ dec(Operand::StaticVariable(scope_depth));
4488 }
4489
4490 // Make sure we're not trying to return 'the hole' from the runtime
4491 // call as this may lead to crashes in the IC code later.
4492 if (FLAG_debug_code) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004493 Label okay;
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004494 __ cmp(eax, masm->isolate()->factory()->the_hole_value());
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004495 __ j(not_equal, &okay, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004496 __ int3();
4497 __ bind(&okay);
4498 }
4499
4500 // Check for failure result.
4501 Label failure_returned;
4502 STATIC_ASSERT(((kFailureTag + 1) & kFailureTagMask) == 0);
4503 __ lea(ecx, Operand(eax, 1));
4504 // Lower 2 bits of ecx are 0 iff eax has failure tag.
4505 __ test(ecx, Immediate(kFailureTagMask));
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00004506 __ j(zero, &failure_returned);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004507
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004508 ExternalReference pending_exception_address(
kmillikin@chromium.org83e16822011-09-13 08:21:47 +00004509 Isolate::kPendingExceptionAddress, masm->isolate());
erik.corry@gmail.comd91075f2011-02-10 07:45:38 +00004510
4511 // Check that there is no pending exception, otherwise we
4512 // should have returned some failure value.
4513 if (FLAG_debug_code) {
4514 __ push(edx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004515 __ mov(edx, Immediate(masm->isolate()->factory()->the_hole_value()));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004516 Label okay;
erik.corry@gmail.comd91075f2011-02-10 07:45:38 +00004517 __ cmp(edx, Operand::StaticVariable(pending_exception_address));
4518 // Cannot use check here as it attempts to generate call into runtime.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004519 __ j(equal, &okay, Label::kNear);
erik.corry@gmail.comd91075f2011-02-10 07:45:38 +00004520 __ int3();
4521 __ bind(&okay);
4522 __ pop(edx);
4523 }
4524
ricow@chromium.org65fae842010-08-25 15:26:24 +00004525 // Exit the JavaScript to C++ exit frame.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004526 __ LeaveExitFrame(save_doubles_ == kSaveFPRegs);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004527 __ ret(0);
4528
4529 // Handling of failure.
4530 __ bind(&failure_returned);
4531
4532 Label retry;
4533 // If the returned exception is RETRY_AFTER_GC continue at retry label
4534 STATIC_ASSERT(Failure::RETRY_AFTER_GC == 0);
4535 __ test(eax, Immediate(((1 << kFailureTypeTagSize) - 1) << kFailureTagSize));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004536 __ j(zero, &retry, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004537
4538 // Special handling of out of memory exceptions.
4539 __ cmp(eax, reinterpret_cast<int32_t>(Failure::OutOfMemoryException()));
4540 __ j(equal, throw_out_of_memory_exception);
4541
4542 // Retrieve the pending exception and clear the variable.
ricow@chromium.org65fae842010-08-25 15:26:24 +00004543 __ mov(eax, Operand::StaticVariable(pending_exception_address));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004544 __ mov(edx, Immediate(masm->isolate()->factory()->the_hole_value()));
ricow@chromium.org65fae842010-08-25 15:26:24 +00004545 __ mov(Operand::StaticVariable(pending_exception_address), edx);
4546
4547 // Special handling of termination exceptions which are uncatchable
4548 // by javascript code.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004549 __ cmp(eax, masm->isolate()->factory()->termination_exception());
ricow@chromium.org65fae842010-08-25 15:26:24 +00004550 __ j(equal, throw_termination_exception);
4551
4552 // Handle normal exception.
4553 __ jmp(throw_normal_exception);
4554
4555 // Retry.
4556 __ bind(&retry);
4557}
4558
4559
4560void CEntryStub::GenerateThrowUncatchable(MacroAssembler* masm,
4561 UncatchableExceptionType type) {
kmillikin@chromium.org49edbdf2011-02-16 12:32:18 +00004562 __ ThrowUncatchable(type, eax);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004563}
4564
4565
4566void CEntryStub::Generate(MacroAssembler* masm) {
4567 // eax: number of arguments including receiver
4568 // ebx: pointer to C function (C callee-saved)
4569 // ebp: frame pointer (restored after C call)
4570 // esp: stack pointer (restored after C call)
4571 // esi: current context (C callee-saved)
4572 // edi: JS function of the caller (C callee-saved)
4573
4574 // NOTE: Invocations of builtins may return failure objects instead
4575 // of a proper result. The builtin entry handles this by performing
4576 // a garbage collection and retrying the builtin (twice).
4577
4578 // Enter the exit frame that transitions from JavaScript to C++.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004579 __ EnterExitFrame(save_doubles_ == kSaveFPRegs);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004580
4581 // eax: result parameter for PerformGC, if any (setup below)
4582 // ebx: pointer to builtin function (C callee-saved)
4583 // ebp: frame pointer (restored after C call)
4584 // esp: stack pointer (restored after C call)
4585 // edi: number of arguments including receiver (C callee-saved)
4586 // esi: argv pointer (C callee-saved)
4587
4588 Label throw_normal_exception;
4589 Label throw_termination_exception;
4590 Label throw_out_of_memory_exception;
4591
4592 // Call into the runtime system.
4593 GenerateCore(masm,
4594 &throw_normal_exception,
4595 &throw_termination_exception,
4596 &throw_out_of_memory_exception,
4597 false,
4598 false);
4599
4600 // Do space-specific GC and retry runtime call.
4601 GenerateCore(masm,
4602 &throw_normal_exception,
4603 &throw_termination_exception,
4604 &throw_out_of_memory_exception,
4605 true,
4606 false);
4607
4608 // Do full GC and retry runtime call one final time.
4609 Failure* failure = Failure::InternalError();
4610 __ mov(eax, Immediate(reinterpret_cast<int32_t>(failure)));
4611 GenerateCore(masm,
4612 &throw_normal_exception,
4613 &throw_termination_exception,
4614 &throw_out_of_memory_exception,
4615 true,
4616 true);
4617
4618 __ bind(&throw_out_of_memory_exception);
4619 GenerateThrowUncatchable(masm, OUT_OF_MEMORY);
4620
4621 __ bind(&throw_termination_exception);
4622 GenerateThrowUncatchable(masm, TERMINATION);
4623
4624 __ bind(&throw_normal_exception);
4625 GenerateThrowTOS(masm);
4626}
4627
4628
4629void JSEntryStub::GenerateBody(MacroAssembler* masm, bool is_construct) {
4630 Label invoke, exit;
ricow@chromium.org65fae842010-08-25 15:26:24 +00004631 Label not_outermost_js, not_outermost_js_2;
ricow@chromium.org65fae842010-08-25 15:26:24 +00004632
4633 // Setup frame.
4634 __ push(ebp);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004635 __ mov(ebp, esp);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004636
4637 // Push marker in two places.
4638 int marker = is_construct ? StackFrame::ENTRY_CONSTRUCT : StackFrame::ENTRY;
4639 __ push(Immediate(Smi::FromInt(marker))); // context slot
4640 __ push(Immediate(Smi::FromInt(marker))); // function slot
4641 // Save callee-saved registers (C calling conventions).
4642 __ push(edi);
4643 __ push(esi);
4644 __ push(ebx);
4645
4646 // Save copies of the top frame descriptor on the stack.
kmillikin@chromium.org83e16822011-09-13 08:21:47 +00004647 ExternalReference c_entry_fp(Isolate::kCEntryFPAddress, masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00004648 __ push(Operand::StaticVariable(c_entry_fp));
4649
ricow@chromium.org65fae842010-08-25 15:26:24 +00004650 // If this is the outermost JS call, set js_entry_sp value.
kmillikin@chromium.org83e16822011-09-13 08:21:47 +00004651 ExternalReference js_entry_sp(Isolate::kJSEntrySPAddress,
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004652 masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00004653 __ cmp(Operand::StaticVariable(js_entry_sp), Immediate(0));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004654 __ j(not_equal, &not_outermost_js, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004655 __ mov(Operand::StaticVariable(js_entry_sp), ebp);
kmillikin@chromium.orgc53e10d2011-05-18 09:12:58 +00004656 __ push(Immediate(Smi::FromInt(StackFrame::OUTERMOST_JSENTRY_FRAME)));
4657 Label cont;
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004658 __ jmp(&cont, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004659 __ bind(&not_outermost_js);
kmillikin@chromium.orgc53e10d2011-05-18 09:12:58 +00004660 __ push(Immediate(Smi::FromInt(StackFrame::INNER_JSENTRY_FRAME)));
4661 __ bind(&cont);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004662
4663 // Call a faked try-block that does the invoke.
4664 __ call(&invoke);
4665
4666 // Caught exception: Store result (exception) in the pending
4667 // exception field in the JSEnv and return a failure sentinel.
kmillikin@chromium.org83e16822011-09-13 08:21:47 +00004668 ExternalReference pending_exception(Isolate::kPendingExceptionAddress,
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004669 masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00004670 __ mov(Operand::StaticVariable(pending_exception), eax);
4671 __ mov(eax, reinterpret_cast<int32_t>(Failure::Exception()));
4672 __ jmp(&exit);
4673
4674 // Invoke: Link this frame into the handler chain.
4675 __ bind(&invoke);
4676 __ PushTryHandler(IN_JS_ENTRY, JS_ENTRY_HANDLER);
4677
4678 // Clear any pending exceptions.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004679 __ mov(edx, Immediate(masm->isolate()->factory()->the_hole_value()));
ricow@chromium.org65fae842010-08-25 15:26:24 +00004680 __ mov(Operand::StaticVariable(pending_exception), edx);
4681
4682 // Fake a receiver (NULL).
4683 __ push(Immediate(0)); // receiver
4684
4685 // Invoke the function by calling through JS entry trampoline
4686 // builtin and pop the faked function when we return. Notice that we
4687 // cannot store a reference to the trampoline code directly in this
4688 // stub, because the builtin stubs may not have been generated yet.
4689 if (is_construct) {
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004690 ExternalReference construct_entry(
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004691 Builtins::kJSConstructEntryTrampoline,
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004692 masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00004693 __ mov(edx, Immediate(construct_entry));
4694 } else {
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004695 ExternalReference entry(Builtins::kJSEntryTrampoline,
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004696 masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00004697 __ mov(edx, Immediate(entry));
4698 }
4699 __ mov(edx, Operand(edx, 0)); // deref address
4700 __ lea(edx, FieldOperand(edx, Code::kHeaderSize));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004701 __ call(edx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004702
4703 // Unlink this frame from the handler chain.
kmillikin@chromium.orgc53e10d2011-05-18 09:12:58 +00004704 __ PopTryHandler();
ricow@chromium.org65fae842010-08-25 15:26:24 +00004705
kmillikin@chromium.orgc53e10d2011-05-18 09:12:58 +00004706 __ bind(&exit);
kmillikin@chromium.orgc53e10d2011-05-18 09:12:58 +00004707 // Check if the current stack frame is marked as the outermost JS frame.
4708 __ pop(ebx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004709 __ cmp(ebx, Immediate(Smi::FromInt(StackFrame::OUTERMOST_JSENTRY_FRAME)));
ricow@chromium.org65fae842010-08-25 15:26:24 +00004710 __ j(not_equal, &not_outermost_js_2);
4711 __ mov(Operand::StaticVariable(js_entry_sp), Immediate(0));
4712 __ bind(&not_outermost_js_2);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004713
4714 // Restore the top frame descriptor from the stack.
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004715 __ pop(Operand::StaticVariable(ExternalReference(
kmillikin@chromium.org83e16822011-09-13 08:21:47 +00004716 Isolate::kCEntryFPAddress,
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004717 masm->isolate())));
ricow@chromium.org65fae842010-08-25 15:26:24 +00004718
4719 // Restore callee-saved registers (C calling conventions).
4720 __ pop(ebx);
4721 __ pop(esi);
4722 __ pop(edi);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004723 __ add(esp, Immediate(2 * kPointerSize)); // remove markers
ricow@chromium.org65fae842010-08-25 15:26:24 +00004724
4725 // Restore frame pointer and return.
4726 __ pop(ebp);
4727 __ ret(0);
4728}
4729
4730
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004731// Generate stub code for instanceof.
4732// This code can patch a call site inlined cache of the instance of check,
4733// which looks like this.
4734//
4735// 81 ff XX XX XX XX cmp edi, <the hole, patched to a map>
4736// 75 0a jne <some near label>
4737// b8 XX XX XX XX mov eax, <the hole, patched to either true or false>
4738//
4739// If call site patching is requested the stack will have the delta from the
4740// return address to the cmp instruction just below the return address. This
4741// also means that call site patching can only take place with arguments in
4742// registers. TOS looks like this when call site patching is requested
4743//
4744// esp[0] : return address
4745// esp[4] : delta from return address to cmp instruction
4746//
ricow@chromium.org65fae842010-08-25 15:26:24 +00004747void InstanceofStub::Generate(MacroAssembler* masm) {
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004748 // Call site inlining and patching implies arguments in registers.
4749 ASSERT(HasArgsInRegisters() || !HasCallSiteInlineCheck());
4750
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004751 // Fixed register usage throughout the stub.
4752 Register object = eax; // Object (lhs).
4753 Register map = ebx; // Map of the object.
4754 Register function = edx; // Function (rhs).
4755 Register prototype = edi; // Prototype of the function.
4756 Register scratch = ecx;
4757
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004758 // Constants describing the call site code to patch.
4759 static const int kDeltaToCmpImmediate = 2;
4760 static const int kDeltaToMov = 8;
4761 static const int kDeltaToMovImmediate = 9;
4762 static const int8_t kCmpEdiImmediateByte1 = BitCast<int8_t, uint8_t>(0x81);
4763 static const int8_t kCmpEdiImmediateByte2 = BitCast<int8_t, uint8_t>(0xff);
4764 static const int8_t kMovEaxImmediateByte = BitCast<int8_t, uint8_t>(0xb8);
4765
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00004766 ExternalReference roots_address =
4767 ExternalReference::roots_address(masm->isolate());
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004768
4769 ASSERT_EQ(object.code(), InstanceofStub::left().code());
4770 ASSERT_EQ(function.code(), InstanceofStub::right().code());
4771
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004772 // Get the object and function - they are always both needed.
4773 Label slow, not_js_object;
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004774 if (!HasArgsInRegisters()) {
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004775 __ mov(object, Operand(esp, 2 * kPointerSize));
4776 __ mov(function, Operand(esp, 1 * kPointerSize));
4777 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00004778
4779 // Check that the left hand is a JS object.
whesse@chromium.org7b260152011-06-20 15:33:18 +00004780 __ JumpIfSmi(object, &not_js_object);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004781 __ IsObjectJSObjectType(object, map, scratch, &not_js_object);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004782
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004783 // If there is a call site cache don't look in the global cache, but do the
4784 // real lookup and update the call site cache.
4785 if (!HasCallSiteInlineCheck()) {
4786 // Look up the function and the map in the instanceof cache.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004787 Label miss;
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004788 __ mov(scratch, Immediate(Heap::kInstanceofCacheFunctionRootIndex));
4789 __ cmp(function,
4790 Operand::StaticArray(scratch, times_pointer_size, roots_address));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004791 __ j(not_equal, &miss, Label::kNear);
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004792 __ mov(scratch, Immediate(Heap::kInstanceofCacheMapRootIndex));
4793 __ cmp(map, Operand::StaticArray(
4794 scratch, times_pointer_size, roots_address));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004795 __ j(not_equal, &miss, Label::kNear);
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004796 __ mov(scratch, Immediate(Heap::kInstanceofCacheAnswerRootIndex));
4797 __ mov(eax, Operand::StaticArray(
4798 scratch, times_pointer_size, roots_address));
4799 __ ret((HasArgsInRegisters() ? 0 : 2) * kPointerSize);
4800 __ bind(&miss);
4801 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00004802
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004803 // Get the prototype of the function.
4804 __ TryGetFunctionPrototype(function, prototype, scratch, &slow);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004805
4806 // Check that the function prototype is a JS object.
whesse@chromium.org7b260152011-06-20 15:33:18 +00004807 __ JumpIfSmi(prototype, &slow);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004808 __ IsObjectJSObjectType(prototype, scratch, scratch, &slow);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004809
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004810 // Update the global instanceof or call site inlined cache with the current
4811 // map and function. The cached answer will be set when it is known below.
4812 if (!HasCallSiteInlineCheck()) {
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004813 __ mov(scratch, Immediate(Heap::kInstanceofCacheMapRootIndex));
4814 __ mov(Operand::StaticArray(scratch, times_pointer_size, roots_address), map);
4815 __ mov(scratch, Immediate(Heap::kInstanceofCacheFunctionRootIndex));
4816 __ mov(Operand::StaticArray(scratch, times_pointer_size, roots_address),
4817 function);
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004818 } else {
4819 // The constants for the code patching are based on no push instructions
4820 // at the call site.
4821 ASSERT(HasArgsInRegisters());
4822 // Get return address and delta to inlined map check.
4823 __ mov(scratch, Operand(esp, 0 * kPointerSize));
4824 __ sub(scratch, Operand(esp, 1 * kPointerSize));
4825 if (FLAG_debug_code) {
4826 __ cmpb(Operand(scratch, 0), kCmpEdiImmediateByte1);
4827 __ Assert(equal, "InstanceofStub unexpected call site cache (cmp 1)");
4828 __ cmpb(Operand(scratch, 1), kCmpEdiImmediateByte2);
4829 __ Assert(equal, "InstanceofStub unexpected call site cache (cmp 2)");
4830 }
4831 __ mov(Operand(scratch, kDeltaToCmpImmediate), map);
4832 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00004833
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004834 // Loop through the prototype chain of the object looking for the function
4835 // prototype.
4836 __ mov(scratch, FieldOperand(map, Map::kPrototypeOffset));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004837 Label loop, is_instance, is_not_instance;
ricow@chromium.org65fae842010-08-25 15:26:24 +00004838 __ bind(&loop);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004839 __ cmp(scratch, prototype);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004840 __ j(equal, &is_instance, Label::kNear);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004841 Factory* factory = masm->isolate()->factory();
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004842 __ cmp(scratch, Immediate(factory->null_value()));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004843 __ j(equal, &is_not_instance, Label::kNear);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004844 __ mov(scratch, FieldOperand(scratch, HeapObject::kMapOffset));
4845 __ mov(scratch, FieldOperand(scratch, Map::kPrototypeOffset));
ricow@chromium.org65fae842010-08-25 15:26:24 +00004846 __ jmp(&loop);
4847
4848 __ bind(&is_instance);
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004849 if (!HasCallSiteInlineCheck()) {
4850 __ Set(eax, Immediate(0));
4851 __ mov(scratch, Immediate(Heap::kInstanceofCacheAnswerRootIndex));
4852 __ mov(Operand::StaticArray(scratch,
4853 times_pointer_size, roots_address), eax);
4854 } else {
4855 // Get return address and delta to inlined map check.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004856 __ mov(eax, factory->true_value());
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004857 __ mov(scratch, Operand(esp, 0 * kPointerSize));
4858 __ sub(scratch, Operand(esp, 1 * kPointerSize));
4859 if (FLAG_debug_code) {
4860 __ cmpb(Operand(scratch, kDeltaToMov), kMovEaxImmediateByte);
4861 __ Assert(equal, "InstanceofStub unexpected call site cache (mov)");
4862 }
4863 __ mov(Operand(scratch, kDeltaToMovImmediate), eax);
4864 if (!ReturnTrueFalseObject()) {
4865 __ Set(eax, Immediate(0));
4866 }
4867 }
4868 __ ret((HasArgsInRegisters() ? 0 : 2) * kPointerSize);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004869
4870 __ bind(&is_not_instance);
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004871 if (!HasCallSiteInlineCheck()) {
4872 __ Set(eax, Immediate(Smi::FromInt(1)));
4873 __ mov(scratch, Immediate(Heap::kInstanceofCacheAnswerRootIndex));
4874 __ mov(Operand::StaticArray(
4875 scratch, times_pointer_size, roots_address), eax);
4876 } else {
4877 // Get return address and delta to inlined map check.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004878 __ mov(eax, factory->false_value());
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004879 __ mov(scratch, Operand(esp, 0 * kPointerSize));
4880 __ sub(scratch, Operand(esp, 1 * kPointerSize));
4881 if (FLAG_debug_code) {
4882 __ cmpb(Operand(scratch, kDeltaToMov), kMovEaxImmediateByte);
4883 __ Assert(equal, "InstanceofStub unexpected call site cache (mov)");
4884 }
4885 __ mov(Operand(scratch, kDeltaToMovImmediate), eax);
4886 if (!ReturnTrueFalseObject()) {
4887 __ Set(eax, Immediate(Smi::FromInt(1)));
4888 }
4889 }
4890 __ ret((HasArgsInRegisters() ? 0 : 2) * kPointerSize);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004891
4892 Label object_not_null, object_not_null_or_smi;
4893 __ bind(&not_js_object);
4894 // Before null, smi and string value checks, check that the rhs is a function
4895 // as for a non-function rhs an exception needs to be thrown.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004896 __ JumpIfSmi(function, &slow, Label::kNear);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004897 __ CmpObjectType(function, JS_FUNCTION_TYPE, scratch);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004898 __ j(not_equal, &slow, Label::kNear);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004899
4900 // Null is not instance of anything.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004901 __ cmp(object, factory->null_value());
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004902 __ j(not_equal, &object_not_null, Label::kNear);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004903 __ Set(eax, Immediate(Smi::FromInt(1)));
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004904 __ ret((HasArgsInRegisters() ? 0 : 2) * kPointerSize);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004905
4906 __ bind(&object_not_null);
4907 // Smi values is not instance of anything.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004908 __ JumpIfNotSmi(object, &object_not_null_or_smi, Label::kNear);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004909 __ Set(eax, Immediate(Smi::FromInt(1)));
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004910 __ ret((HasArgsInRegisters() ? 0 : 2) * kPointerSize);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004911
4912 __ bind(&object_not_null_or_smi);
4913 // String values is not instance of anything.
4914 Condition is_string = masm->IsObjectStringType(object, scratch, scratch);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00004915 __ j(NegateCondition(is_string), &slow, Label::kNear);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004916 __ Set(eax, Immediate(Smi::FromInt(1)));
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004917 __ ret((HasArgsInRegisters() ? 0 : 2) * kPointerSize);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004918
4919 // Slow-case: Go through the JavaScript implementation.
4920 __ bind(&slow);
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004921 if (!ReturnTrueFalseObject()) {
4922 // Tail call the builtin which returns 0 or 1.
4923 if (HasArgsInRegisters()) {
4924 // Push arguments below return address.
4925 __ pop(scratch);
4926 __ push(object);
4927 __ push(function);
4928 __ push(scratch);
4929 }
4930 __ InvokeBuiltin(Builtins::INSTANCE_OF, JUMP_FUNCTION);
4931 } else {
4932 // Call the builtin and convert 0/1 to true/false.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004933 {
4934 FrameScope scope(masm, StackFrame::INTERNAL);
4935 __ push(object);
4936 __ push(function);
4937 __ InvokeBuiltin(Builtins::INSTANCE_OF, CALL_FUNCTION);
4938 }
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004939 Label true_value, done;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00004940 __ test(eax, eax);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004941 __ j(zero, &true_value, Label::kNear);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004942 __ mov(eax, factory->false_value());
karlklose@chromium.org83a47282011-05-11 11:54:09 +00004943 __ jmp(&done, Label::kNear);
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004944 __ bind(&true_value);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00004945 __ mov(eax, factory->true_value());
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004946 __ bind(&done);
4947 __ ret((HasArgsInRegisters() ? 0 : 2) * kPointerSize);
ager@chromium.org5f0c45f2010-12-17 08:51:21 +00004948 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00004949}
4950
4951
kmillikin@chromium.orgd2c22f02011-01-10 08:15:37 +00004952Register InstanceofStub::left() { return eax; }
4953
4954
4955Register InstanceofStub::right() { return edx; }
4956
4957
ricow@chromium.org65fae842010-08-25 15:26:24 +00004958int CompareStub::MinorKey() {
4959 // Encode the three parameters in a unique 16 bit value. To avoid duplicate
4960 // stubs the never NaN NaN condition is only taken into account if the
4961 // condition is equals.
4962 ASSERT(static_cast<unsigned>(cc_) < (1 << 12));
4963 ASSERT(lhs_.is(no_reg) && rhs_.is(no_reg));
4964 return ConditionField::encode(static_cast<unsigned>(cc_))
4965 | RegisterField::encode(false) // lhs_ and rhs_ are not used
4966 | StrictField::encode(strict_)
4967 | NeverNanNanField::encode(cc_ == equal ? never_nan_nan_ : false)
erik.corry@gmail.comd88afa22010-09-15 12:33:05 +00004968 | IncludeNumberCompareField::encode(include_number_compare_)
4969 | IncludeSmiCompareField::encode(include_smi_compare_);
ricow@chromium.org65fae842010-08-25 15:26:24 +00004970}
4971
4972
4973// Unfortunately you have to run without snapshots to see most of these
4974// names in the profile since most compare stubs end up in the snapshot.
whesse@chromium.org030d38e2011-07-13 13:23:34 +00004975void CompareStub::PrintName(StringStream* stream) {
ricow@chromium.org65fae842010-08-25 15:26:24 +00004976 ASSERT(lhs_.is(no_reg) && rhs_.is(no_reg));
ricow@chromium.org65fae842010-08-25 15:26:24 +00004977 const char* cc_name;
4978 switch (cc_) {
4979 case less: cc_name = "LT"; break;
4980 case greater: cc_name = "GT"; break;
4981 case less_equal: cc_name = "LE"; break;
4982 case greater_equal: cc_name = "GE"; break;
4983 case equal: cc_name = "EQ"; break;
4984 case not_equal: cc_name = "NE"; break;
4985 default: cc_name = "UnknownCondition"; break;
4986 }
whesse@chromium.org030d38e2011-07-13 13:23:34 +00004987 bool is_equality = cc_ == equal || cc_ == not_equal;
4988 stream->Add("CompareStub_%s", cc_name);
4989 if (strict_ && is_equality) stream->Add("_STRICT");
4990 if (never_nan_nan_ && is_equality) stream->Add("_NO_NAN");
4991 if (!include_number_compare_) stream->Add("_NO_NUMBER");
4992 if (!include_smi_compare_) stream->Add("_NO_SMI");
ricow@chromium.org65fae842010-08-25 15:26:24 +00004993}
4994
4995
4996// -------------------------------------------------------------------------
4997// StringCharCodeAtGenerator
4998
4999void StringCharCodeAtGenerator::GenerateFast(MacroAssembler* masm) {
5000 Label flat_string;
5001 Label ascii_string;
5002 Label got_char_code;
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00005003 Label sliced_string;
ricow@chromium.org65fae842010-08-25 15:26:24 +00005004
5005 // If the receiver is a smi trigger the non-string case.
5006 STATIC_ASSERT(kSmiTag == 0);
whesse@chromium.org7b260152011-06-20 15:33:18 +00005007 __ JumpIfSmi(object_, receiver_not_string_);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005008
5009 // Fetch the instance type of the receiver into result register.
5010 __ mov(result_, FieldOperand(object_, HeapObject::kMapOffset));
5011 __ movzx_b(result_, FieldOperand(result_, Map::kInstanceTypeOffset));
5012 // If the receiver is not a string trigger the non-string case.
5013 __ test(result_, Immediate(kIsNotStringMask));
5014 __ j(not_zero, receiver_not_string_);
5015
5016 // If the index is non-smi trigger the non-smi case.
5017 STATIC_ASSERT(kSmiTag == 0);
whesse@chromium.org7b260152011-06-20 15:33:18 +00005018 __ JumpIfNotSmi(index_, &index_not_smi_);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005019
5020 // Put smi-tagged index into scratch register.
5021 __ mov(scratch_, index_);
5022 __ bind(&got_smi_index_);
5023
5024 // Check for index out of range.
5025 __ cmp(scratch_, FieldOperand(object_, String::kLengthOffset));
5026 __ j(above_equal, index_out_of_range_);
5027
5028 // We need special handling for non-flat strings.
5029 STATIC_ASSERT(kSeqStringTag == 0);
5030 __ test(result_, Immediate(kStringRepresentationMask));
5031 __ j(zero, &flat_string);
5032
5033 // Handle non-flat strings.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00005034 __ and_(result_, kStringRepresentationMask);
yangguo@chromium.org80c42ed2011-08-31 09:03:56 +00005035 STATIC_ASSERT(kConsStringTag < kExternalStringTag);
5036 STATIC_ASSERT(kSlicedStringTag > kExternalStringTag);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00005037 __ cmp(result_, kExternalStringTag);
5038 __ j(greater, &sliced_string, Label::kNear);
5039 __ j(equal, &call_runtime_);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005040
5041 // ConsString.
5042 // Check whether the right hand side is the empty string (i.e. if
5043 // this is really a flat string in a cons string). If that is not
5044 // the case we would rather go to the runtime system now to flatten
5045 // the string.
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00005046 Label assure_seq_string;
ricow@chromium.org65fae842010-08-25 15:26:24 +00005047 __ cmp(FieldOperand(object_, ConsString::kSecondOffset),
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005048 Immediate(masm->isolate()->factory()->empty_string()));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005049 __ j(not_equal, &call_runtime_);
5050 // Get the first of the two strings and load its instance type.
5051 __ mov(object_, FieldOperand(object_, ConsString::kFirstOffset));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00005052 __ jmp(&assure_seq_string, Label::kNear);
5053
5054 // SlicedString, unpack and add offset.
5055 __ bind(&sliced_string);
5056 __ add(scratch_, FieldOperand(object_, SlicedString::kOffsetOffset));
5057 __ mov(object_, FieldOperand(object_, SlicedString::kParentOffset));
5058
5059 // Assure that we are dealing with a sequential string. Go to runtime if not.
5060 __ bind(&assure_seq_string);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005061 __ mov(result_, FieldOperand(object_, HeapObject::kMapOffset));
5062 __ movzx_b(result_, FieldOperand(result_, Map::kInstanceTypeOffset));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005063 STATIC_ASSERT(kSeqStringTag == 0);
5064 __ test(result_, Immediate(kStringRepresentationMask));
5065 __ j(not_zero, &call_runtime_);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00005066 __ jmp(&flat_string, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005067
5068 // Check for 1-byte or 2-byte string.
5069 __ bind(&flat_string);
fschneider@chromium.org1805e212011-09-05 10:49:12 +00005070 STATIC_ASSERT((kStringEncodingMask & kAsciiStringTag) != 0);
5071 STATIC_ASSERT((kStringEncodingMask & kTwoByteStringTag) == 0);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005072 __ test(result_, Immediate(kStringEncodingMask));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00005073 __ j(not_zero, &ascii_string, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005074
5075 // 2-byte string.
5076 // Load the 2-byte character code into the result register.
5077 STATIC_ASSERT(kSmiTag == 0 && kSmiTagSize == 1);
5078 __ movzx_w(result_, FieldOperand(object_,
5079 scratch_, times_1, // Scratch is smi-tagged.
5080 SeqTwoByteString::kHeaderSize));
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00005081 __ jmp(&got_char_code, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005082
5083 // ASCII string.
5084 // Load the byte into the result register.
5085 __ bind(&ascii_string);
5086 __ SmiUntag(scratch_);
5087 __ movzx_b(result_, FieldOperand(object_,
5088 scratch_, times_1,
5089 SeqAsciiString::kHeaderSize));
5090 __ bind(&got_char_code);
5091 __ SmiTag(result_);
5092 __ bind(&exit_);
5093}
5094
5095
5096void StringCharCodeAtGenerator::GenerateSlow(
5097 MacroAssembler* masm, const RuntimeCallHelper& call_helper) {
5098 __ Abort("Unexpected fallthrough to CharCodeAt slow case");
5099
5100 // Index is not a smi.
5101 __ bind(&index_not_smi_);
5102 // If index is a heap number, try converting it to an integer.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005103 __ CheckMap(index_,
5104 masm->isolate()->factory()->heap_number_map(),
5105 index_not_number_,
kmillikin@chromium.orgc53e10d2011-05-18 09:12:58 +00005106 DONT_DO_SMI_CHECK);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005107 call_helper.BeforeCall(masm);
5108 __ push(object_);
5109 __ push(index_);
5110 __ push(index_); // Consumed by runtime conversion function.
5111 if (index_flags_ == STRING_INDEX_IS_NUMBER) {
5112 __ CallRuntime(Runtime::kNumberToIntegerMapMinusZero, 1);
5113 } else {
5114 ASSERT(index_flags_ == STRING_INDEX_IS_ARRAY_INDEX);
5115 // NumberToSmi discards numbers that are not exact integers.
5116 __ CallRuntime(Runtime::kNumberToSmi, 1);
5117 }
5118 if (!scratch_.is(eax)) {
5119 // Save the conversion result before the pop instructions below
5120 // have a chance to overwrite it.
5121 __ mov(scratch_, eax);
5122 }
5123 __ pop(index_);
5124 __ pop(object_);
5125 // Reload the instance type.
5126 __ mov(result_, FieldOperand(object_, HeapObject::kMapOffset));
5127 __ movzx_b(result_, FieldOperand(result_, Map::kInstanceTypeOffset));
5128 call_helper.AfterCall(masm);
5129 // If index is still not a smi, it must be out of range.
5130 STATIC_ASSERT(kSmiTag == 0);
whesse@chromium.org7b260152011-06-20 15:33:18 +00005131 __ JumpIfNotSmi(scratch_, index_out_of_range_);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005132 // Otherwise, return to the fast path.
5133 __ jmp(&got_smi_index_);
5134
5135 // Call runtime. We get here when the receiver is a string and the
5136 // index is a number, but the code of getting the actual character
5137 // is too complex (e.g., when the string needs to be flattened).
5138 __ bind(&call_runtime_);
5139 call_helper.BeforeCall(masm);
5140 __ push(object_);
5141 __ push(index_);
5142 __ CallRuntime(Runtime::kStringCharCodeAt, 2);
5143 if (!result_.is(eax)) {
5144 __ mov(result_, eax);
5145 }
5146 call_helper.AfterCall(masm);
5147 __ jmp(&exit_);
5148
5149 __ Abort("Unexpected fallthrough from CharCodeAt slow case");
5150}
5151
5152
5153// -------------------------------------------------------------------------
5154// StringCharFromCodeGenerator
5155
5156void StringCharFromCodeGenerator::GenerateFast(MacroAssembler* masm) {
5157 // Fast case of Heap::LookupSingleCharacterStringFromCode.
5158 STATIC_ASSERT(kSmiTag == 0);
5159 STATIC_ASSERT(kSmiShiftSize == 0);
5160 ASSERT(IsPowerOf2(String::kMaxAsciiCharCode + 1));
5161 __ test(code_,
5162 Immediate(kSmiTagMask |
5163 ((~String::kMaxAsciiCharCode) << kSmiTagSize)));
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00005164 __ j(not_zero, &slow_case_);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005165
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005166 Factory* factory = masm->isolate()->factory();
5167 __ Set(result_, Immediate(factory->single_character_string_cache()));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005168 STATIC_ASSERT(kSmiTag == 0);
5169 STATIC_ASSERT(kSmiTagSize == 1);
5170 STATIC_ASSERT(kSmiShiftSize == 0);
5171 // At this point code register contains smi tagged ascii char code.
5172 __ mov(result_, FieldOperand(result_,
5173 code_, times_half_pointer_size,
5174 FixedArray::kHeaderSize));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005175 __ cmp(result_, factory->undefined_value());
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00005176 __ j(equal, &slow_case_);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005177 __ bind(&exit_);
5178}
5179
5180
5181void StringCharFromCodeGenerator::GenerateSlow(
5182 MacroAssembler* masm, const RuntimeCallHelper& call_helper) {
5183 __ Abort("Unexpected fallthrough to CharFromCode slow case");
5184
5185 __ bind(&slow_case_);
5186 call_helper.BeforeCall(masm);
5187 __ push(code_);
5188 __ CallRuntime(Runtime::kCharFromCode, 1);
5189 if (!result_.is(eax)) {
5190 __ mov(result_, eax);
5191 }
5192 call_helper.AfterCall(masm);
5193 __ jmp(&exit_);
5194
5195 __ Abort("Unexpected fallthrough from CharFromCode slow case");
5196}
5197
5198
5199// -------------------------------------------------------------------------
5200// StringCharAtGenerator
5201
5202void StringCharAtGenerator::GenerateFast(MacroAssembler* masm) {
5203 char_code_at_generator_.GenerateFast(masm);
5204 char_from_code_generator_.GenerateFast(masm);
5205}
5206
5207
5208void StringCharAtGenerator::GenerateSlow(
5209 MacroAssembler* masm, const RuntimeCallHelper& call_helper) {
5210 char_code_at_generator_.GenerateSlow(masm, call_helper);
5211 char_from_code_generator_.GenerateSlow(masm, call_helper);
5212}
5213
5214
5215void StringAddStub::Generate(MacroAssembler* masm) {
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005216 Label string_add_runtime, call_builtin;
5217 Builtins::JavaScript builtin_id = Builtins::ADD;
ricow@chromium.org65fae842010-08-25 15:26:24 +00005218
5219 // Load the two arguments.
5220 __ mov(eax, Operand(esp, 2 * kPointerSize)); // First argument.
5221 __ mov(edx, Operand(esp, 1 * kPointerSize)); // Second argument.
5222
5223 // Make sure that both arguments are strings if not known in advance.
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005224 if (flags_ == NO_STRING_ADD_FLAGS) {
whesse@chromium.org7b260152011-06-20 15:33:18 +00005225 __ JumpIfSmi(eax, &string_add_runtime);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005226 __ CmpObjectType(eax, FIRST_NONSTRING_TYPE, ebx);
5227 __ j(above_equal, &string_add_runtime);
5228
5229 // First argument is a a string, test second.
whesse@chromium.org7b260152011-06-20 15:33:18 +00005230 __ JumpIfSmi(edx, &string_add_runtime);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005231 __ CmpObjectType(edx, FIRST_NONSTRING_TYPE, ebx);
5232 __ j(above_equal, &string_add_runtime);
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005233 } else {
5234 // Here at least one of the arguments is definitely a string.
5235 // We convert the one that is not known to be a string.
5236 if ((flags_ & NO_STRING_CHECK_LEFT_IN_STUB) == 0) {
5237 ASSERT((flags_ & NO_STRING_CHECK_RIGHT_IN_STUB) != 0);
5238 GenerateConvertArgument(masm, 2 * kPointerSize, eax, ebx, ecx, edi,
5239 &call_builtin);
5240 builtin_id = Builtins::STRING_ADD_RIGHT;
5241 } else if ((flags_ & NO_STRING_CHECK_RIGHT_IN_STUB) == 0) {
5242 ASSERT((flags_ & NO_STRING_CHECK_LEFT_IN_STUB) != 0);
5243 GenerateConvertArgument(masm, 1 * kPointerSize, edx, ebx, ecx, edi,
5244 &call_builtin);
5245 builtin_id = Builtins::STRING_ADD_LEFT;
5246 }
ricow@chromium.org65fae842010-08-25 15:26:24 +00005247 }
5248
5249 // Both arguments are strings.
5250 // eax: first string
5251 // edx: second string
5252 // Check if either of the strings are empty. In that case return the other.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005253 Label second_not_zero_length, both_not_zero_length;
ricow@chromium.org65fae842010-08-25 15:26:24 +00005254 __ mov(ecx, FieldOperand(edx, String::kLengthOffset));
5255 STATIC_ASSERT(kSmiTag == 0);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005256 __ test(ecx, ecx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005257 __ j(not_zero, &second_not_zero_length, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005258 // Second string is empty, result is first string which is already in eax.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005259 Counters* counters = masm->isolate()->counters();
5260 __ IncrementCounter(counters->string_add_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005261 __ ret(2 * kPointerSize);
5262 __ bind(&second_not_zero_length);
5263 __ mov(ebx, FieldOperand(eax, String::kLengthOffset));
5264 STATIC_ASSERT(kSmiTag == 0);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005265 __ test(ebx, ebx);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005266 __ j(not_zero, &both_not_zero_length, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005267 // First string is empty, result is second string which is in edx.
5268 __ mov(eax, edx);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005269 __ IncrementCounter(counters->string_add_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005270 __ ret(2 * kPointerSize);
5271
5272 // Both strings are non-empty.
5273 // eax: first string
5274 // ebx: length of first string as a smi
5275 // ecx: length of second string as a smi
5276 // edx: second string
5277 // Look at the length of the result of adding the two strings.
5278 Label string_add_flat_result, longer_than_two;
5279 __ bind(&both_not_zero_length);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005280 __ add(ebx, ecx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005281 STATIC_ASSERT(Smi::kMaxValue == String::kMaxLength);
5282 // Handle exceptionally long strings in the runtime system.
5283 __ j(overflow, &string_add_runtime);
ricow@chromium.orgbadaffc2011-03-17 12:15:27 +00005284 // Use the symbol table when adding two one character strings, as it
5285 // helps later optimizations to return a symbol here.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005286 __ cmp(ebx, Immediate(Smi::FromInt(2)));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005287 __ j(not_equal, &longer_than_two);
5288
5289 // Check that both strings are non-external ascii strings.
5290 __ JumpIfNotBothSequentialAsciiStrings(eax, edx, ebx, ecx,
5291 &string_add_runtime);
5292
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005293 // Get the two characters forming the new string.
ricow@chromium.org65fae842010-08-25 15:26:24 +00005294 __ movzx_b(ebx, FieldOperand(eax, SeqAsciiString::kHeaderSize));
5295 __ movzx_b(ecx, FieldOperand(edx, SeqAsciiString::kHeaderSize));
5296
5297 // Try to lookup two character string in symbol table. If it is not found
5298 // just allocate a new one.
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005299 Label make_two_character_string, make_two_character_string_no_reload;
ricow@chromium.org65fae842010-08-25 15:26:24 +00005300 StringHelper::GenerateTwoCharacterSymbolTableProbe(
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005301 masm, ebx, ecx, eax, edx, edi,
5302 &make_two_character_string_no_reload, &make_two_character_string);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005303 __ IncrementCounter(counters->string_add_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005304 __ ret(2 * kPointerSize);
5305
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005306 // Allocate a two character string.
ricow@chromium.org65fae842010-08-25 15:26:24 +00005307 __ bind(&make_two_character_string);
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005308 // Reload the arguments.
5309 __ mov(eax, Operand(esp, 2 * kPointerSize)); // First argument.
5310 __ mov(edx, Operand(esp, 1 * kPointerSize)); // Second argument.
5311 // Get the two characters forming the new string.
5312 __ movzx_b(ebx, FieldOperand(eax, SeqAsciiString::kHeaderSize));
5313 __ movzx_b(ecx, FieldOperand(edx, SeqAsciiString::kHeaderSize));
5314 __ bind(&make_two_character_string_no_reload);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005315 __ IncrementCounter(counters->string_add_make_two_char(), 1);
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005316 __ AllocateAsciiString(eax, // Result.
5317 2, // Length.
5318 edi, // Scratch 1.
5319 edx, // Scratch 2.
5320 &string_add_runtime);
5321 // Pack both characters in ebx.
5322 __ shl(ecx, kBitsPerByte);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005323 __ or_(ebx, ecx);
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005324 // Set the characters in the new string.
5325 __ mov_w(FieldOperand(eax, SeqAsciiString::kHeaderSize), ebx);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005326 __ IncrementCounter(counters->string_add_native(), 1);
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005327 __ ret(2 * kPointerSize);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005328
5329 __ bind(&longer_than_two);
5330 // Check if resulting string will be flat.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005331 __ cmp(ebx, Immediate(Smi::FromInt(String::kMinNonFlatLength)));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005332 __ j(below, &string_add_flat_result);
5333
5334 // If result is not supposed to be flat allocate a cons string object. If both
5335 // strings are ascii the result is an ascii cons string.
5336 Label non_ascii, allocated, ascii_data;
5337 __ mov(edi, FieldOperand(eax, HeapObject::kMapOffset));
5338 __ movzx_b(ecx, FieldOperand(edi, Map::kInstanceTypeOffset));
5339 __ mov(edi, FieldOperand(edx, HeapObject::kMapOffset));
5340 __ movzx_b(edi, FieldOperand(edi, Map::kInstanceTypeOffset));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005341 __ and_(ecx, edi);
fschneider@chromium.org1805e212011-09-05 10:49:12 +00005342 STATIC_ASSERT((kStringEncodingMask & kAsciiStringTag) != 0);
5343 STATIC_ASSERT((kStringEncodingMask & kTwoByteStringTag) == 0);
5344 __ test(ecx, Immediate(kStringEncodingMask));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005345 __ j(zero, &non_ascii);
5346 __ bind(&ascii_data);
5347 // Allocate an acsii cons string.
5348 __ AllocateAsciiConsString(ecx, edi, no_reg, &string_add_runtime);
5349 __ bind(&allocated);
5350 // Fill the fields of the cons string.
5351 if (FLAG_debug_code) __ AbortIfNotSmi(ebx);
5352 __ mov(FieldOperand(ecx, ConsString::kLengthOffset), ebx);
5353 __ mov(FieldOperand(ecx, ConsString::kHashFieldOffset),
5354 Immediate(String::kEmptyHashField));
5355 __ mov(FieldOperand(ecx, ConsString::kFirstOffset), eax);
5356 __ mov(FieldOperand(ecx, ConsString::kSecondOffset), edx);
5357 __ mov(eax, ecx);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005358 __ IncrementCounter(counters->string_add_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005359 __ ret(2 * kPointerSize);
5360 __ bind(&non_ascii);
5361 // At least one of the strings is two-byte. Check whether it happens
5362 // to contain only ascii characters.
5363 // ecx: first instance type AND second instance type.
5364 // edi: second instance type.
5365 __ test(ecx, Immediate(kAsciiDataHintMask));
5366 __ j(not_zero, &ascii_data);
5367 __ mov(ecx, FieldOperand(eax, HeapObject::kMapOffset));
5368 __ movzx_b(ecx, FieldOperand(ecx, Map::kInstanceTypeOffset));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005369 __ xor_(edi, ecx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005370 STATIC_ASSERT(kAsciiStringTag != 0 && kAsciiDataHintTag != 0);
5371 __ and_(edi, kAsciiStringTag | kAsciiDataHintTag);
5372 __ cmp(edi, kAsciiStringTag | kAsciiDataHintTag);
5373 __ j(equal, &ascii_data);
5374 // Allocate a two byte cons string.
fschneider@chromium.org1805e212011-09-05 10:49:12 +00005375 __ AllocateTwoByteConsString(ecx, edi, no_reg, &string_add_runtime);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005376 __ jmp(&allocated);
5377
5378 // Handle creating a flat result. First check that both strings are not
5379 // external strings.
5380 // eax: first string
5381 // ebx: length of resulting flat string as a smi
5382 // edx: second string
5383 __ bind(&string_add_flat_result);
5384 __ mov(ecx, FieldOperand(eax, HeapObject::kMapOffset));
5385 __ movzx_b(ecx, FieldOperand(ecx, Map::kInstanceTypeOffset));
5386 __ and_(ecx, kStringRepresentationMask);
5387 __ cmp(ecx, kExternalStringTag);
5388 __ j(equal, &string_add_runtime);
5389 __ mov(ecx, FieldOperand(edx, HeapObject::kMapOffset));
5390 __ movzx_b(ecx, FieldOperand(ecx, Map::kInstanceTypeOffset));
5391 __ and_(ecx, kStringRepresentationMask);
5392 __ cmp(ecx, kExternalStringTag);
5393 __ j(equal, &string_add_runtime);
ricow@chromium.org4668a2c2011-08-29 10:41:00 +00005394 // We cannot encounter sliced strings here since:
5395 STATIC_ASSERT(SlicedString::kMinLength >= String::kMinNonFlatLength);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005396 // Now check if both strings are ascii strings.
5397 // eax: first string
5398 // ebx: length of resulting flat string as a smi
5399 // edx: second string
5400 Label non_ascii_string_add_flat_result;
fschneider@chromium.org1805e212011-09-05 10:49:12 +00005401 STATIC_ASSERT((kStringEncodingMask & kAsciiStringTag) != 0);
5402 STATIC_ASSERT((kStringEncodingMask & kTwoByteStringTag) == 0);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005403 __ mov(ecx, FieldOperand(eax, HeapObject::kMapOffset));
fschneider@chromium.org1805e212011-09-05 10:49:12 +00005404 __ test_b(FieldOperand(ecx, Map::kInstanceTypeOffset), kStringEncodingMask);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005405 __ j(zero, &non_ascii_string_add_flat_result);
5406 __ mov(ecx, FieldOperand(edx, HeapObject::kMapOffset));
fschneider@chromium.org1805e212011-09-05 10:49:12 +00005407 __ test_b(FieldOperand(ecx, Map::kInstanceTypeOffset), kStringEncodingMask);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005408 __ j(zero, &string_add_runtime);
5409
ricow@chromium.org65fae842010-08-25 15:26:24 +00005410 // Both strings are ascii strings. As they are short they are both flat.
5411 // ebx: length of resulting flat string as a smi
5412 __ SmiUntag(ebx);
5413 __ AllocateAsciiString(eax, ebx, ecx, edx, edi, &string_add_runtime);
5414 // eax: result string
5415 __ mov(ecx, eax);
5416 // Locate first character of result.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005417 __ add(ecx, Immediate(SeqAsciiString::kHeaderSize - kHeapObjectTag));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005418 // Load first argument and locate first character.
5419 __ mov(edx, Operand(esp, 2 * kPointerSize));
5420 __ mov(edi, FieldOperand(edx, String::kLengthOffset));
5421 __ SmiUntag(edi);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005422 __ add(edx, Immediate(SeqAsciiString::kHeaderSize - kHeapObjectTag));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005423 // eax: result string
5424 // ecx: first character of result
5425 // edx: first char of first argument
5426 // edi: length of first argument
5427 StringHelper::GenerateCopyCharacters(masm, ecx, edx, edi, ebx, true);
5428 // Load second argument and locate first character.
5429 __ mov(edx, Operand(esp, 1 * kPointerSize));
5430 __ mov(edi, FieldOperand(edx, String::kLengthOffset));
5431 __ SmiUntag(edi);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005432 __ add(edx, Immediate(SeqAsciiString::kHeaderSize - kHeapObjectTag));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005433 // eax: result string
5434 // ecx: next character of result
5435 // edx: first char of second argument
5436 // edi: length of second argument
5437 StringHelper::GenerateCopyCharacters(masm, ecx, edx, edi, ebx, true);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005438 __ IncrementCounter(counters->string_add_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005439 __ ret(2 * kPointerSize);
5440
5441 // Handle creating a flat two byte result.
5442 // eax: first string - known to be two byte
5443 // ebx: length of resulting flat string as a smi
5444 // edx: second string
5445 __ bind(&non_ascii_string_add_flat_result);
5446 __ mov(ecx, FieldOperand(edx, HeapObject::kMapOffset));
fschneider@chromium.org1805e212011-09-05 10:49:12 +00005447 __ test_b(FieldOperand(ecx, Map::kInstanceTypeOffset), kStringEncodingMask);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005448 __ j(not_zero, &string_add_runtime);
5449 // Both strings are two byte strings. As they are short they are both
5450 // flat.
5451 __ SmiUntag(ebx);
5452 __ AllocateTwoByteString(eax, ebx, ecx, edx, edi, &string_add_runtime);
5453 // eax: result string
5454 __ mov(ecx, eax);
5455 // Locate first character of result.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005456 __ add(ecx,
ricow@chromium.org65fae842010-08-25 15:26:24 +00005457 Immediate(SeqTwoByteString::kHeaderSize - kHeapObjectTag));
5458 // Load first argument and locate first character.
5459 __ mov(edx, Operand(esp, 2 * kPointerSize));
5460 __ mov(edi, FieldOperand(edx, String::kLengthOffset));
5461 __ SmiUntag(edi);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005462 __ add(edx,
ricow@chromium.org65fae842010-08-25 15:26:24 +00005463 Immediate(SeqTwoByteString::kHeaderSize - kHeapObjectTag));
5464 // eax: result string
5465 // ecx: first character of result
5466 // edx: first char of first argument
5467 // edi: length of first argument
5468 StringHelper::GenerateCopyCharacters(masm, ecx, edx, edi, ebx, false);
5469 // Load second argument and locate first character.
5470 __ mov(edx, Operand(esp, 1 * kPointerSize));
5471 __ mov(edi, FieldOperand(edx, String::kLengthOffset));
5472 __ SmiUntag(edi);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005473 __ add(edx, Immediate(SeqAsciiString::kHeaderSize - kHeapObjectTag));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005474 // eax: result string
5475 // ecx: next character of result
5476 // edx: first char of second argument
5477 // edi: length of second argument
5478 StringHelper::GenerateCopyCharacters(masm, ecx, edx, edi, ebx, false);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005479 __ IncrementCounter(counters->string_add_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005480 __ ret(2 * kPointerSize);
5481
5482 // Just jump to runtime to add the two strings.
5483 __ bind(&string_add_runtime);
5484 __ TailCallRuntime(Runtime::kStringAdd, 2, 1);
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005485
5486 if (call_builtin.is_linked()) {
5487 __ bind(&call_builtin);
5488 __ InvokeBuiltin(builtin_id, JUMP_FUNCTION);
5489 }
5490}
5491
5492
5493void StringAddStub::GenerateConvertArgument(MacroAssembler* masm,
5494 int stack_offset,
5495 Register arg,
5496 Register scratch1,
5497 Register scratch2,
5498 Register scratch3,
5499 Label* slow) {
5500 // First check if the argument is already a string.
5501 Label not_string, done;
whesse@chromium.org7b260152011-06-20 15:33:18 +00005502 __ JumpIfSmi(arg, &not_string);
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005503 __ CmpObjectType(arg, FIRST_NONSTRING_TYPE, scratch1);
5504 __ j(below, &done);
5505
5506 // Check the number to string cache.
5507 Label not_cached;
5508 __ bind(&not_string);
5509 // Puts the cached result into scratch1.
5510 NumberToStringStub::GenerateLookupNumberStringCache(masm,
5511 arg,
5512 scratch1,
5513 scratch2,
5514 scratch3,
5515 false,
5516 &not_cached);
5517 __ mov(arg, scratch1);
5518 __ mov(Operand(esp, stack_offset), arg);
5519 __ jmp(&done);
5520
5521 // Check if the argument is a safe string wrapper.
5522 __ bind(&not_cached);
whesse@chromium.org7b260152011-06-20 15:33:18 +00005523 __ JumpIfSmi(arg, slow);
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005524 __ CmpObjectType(arg, JS_VALUE_TYPE, scratch1); // map -> scratch1.
5525 __ j(not_equal, slow);
5526 __ test_b(FieldOperand(scratch1, Map::kBitField2Offset),
5527 1 << Map::kStringWrapperSafeForDefaultValueOf);
5528 __ j(zero, slow);
5529 __ mov(arg, FieldOperand(arg, JSValue::kValueOffset));
5530 __ mov(Operand(esp, stack_offset), arg);
5531
5532 __ bind(&done);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005533}
5534
5535
5536void StringHelper::GenerateCopyCharacters(MacroAssembler* masm,
5537 Register dest,
5538 Register src,
5539 Register count,
5540 Register scratch,
5541 bool ascii) {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005542 Label loop;
ricow@chromium.org65fae842010-08-25 15:26:24 +00005543 __ bind(&loop);
5544 // This loop just copies one character at a time, as it is only used for very
5545 // short strings.
5546 if (ascii) {
5547 __ mov_b(scratch, Operand(src, 0));
5548 __ mov_b(Operand(dest, 0), scratch);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005549 __ add(src, Immediate(1));
5550 __ add(dest, Immediate(1));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005551 } else {
5552 __ mov_w(scratch, Operand(src, 0));
5553 __ mov_w(Operand(dest, 0), scratch);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005554 __ add(src, Immediate(2));
5555 __ add(dest, Immediate(2));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005556 }
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005557 __ sub(count, Immediate(1));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005558 __ j(not_zero, &loop);
5559}
5560
5561
5562void StringHelper::GenerateCopyCharactersREP(MacroAssembler* masm,
5563 Register dest,
5564 Register src,
5565 Register count,
5566 Register scratch,
5567 bool ascii) {
5568 // Copy characters using rep movs of doublewords.
5569 // The destination is aligned on a 4 byte boundary because we are
5570 // copying to the beginning of a newly allocated string.
5571 ASSERT(dest.is(edi)); // rep movs destination
5572 ASSERT(src.is(esi)); // rep movs source
5573 ASSERT(count.is(ecx)); // rep movs count
5574 ASSERT(!scratch.is(dest));
5575 ASSERT(!scratch.is(src));
5576 ASSERT(!scratch.is(count));
5577
5578 // Nothing to do for zero characters.
5579 Label done;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005580 __ test(count, count);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005581 __ j(zero, &done);
5582
5583 // Make count the number of bytes to copy.
5584 if (!ascii) {
5585 __ shl(count, 1);
5586 }
5587
5588 // Don't enter the rep movs if there are less than 4 bytes to copy.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005589 Label last_bytes;
ricow@chromium.org65fae842010-08-25 15:26:24 +00005590 __ test(count, Immediate(~3));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005591 __ j(zero, &last_bytes, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005592
5593 // Copy from edi to esi using rep movs instruction.
5594 __ mov(scratch, count);
5595 __ sar(count, 2); // Number of doublewords to copy.
5596 __ cld();
5597 __ rep_movs();
5598
5599 // Find number of bytes left.
5600 __ mov(count, scratch);
5601 __ and_(count, 3);
5602
5603 // Check if there are more bytes to copy.
5604 __ bind(&last_bytes);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005605 __ test(count, count);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005606 __ j(zero, &done);
5607
5608 // Copy remaining characters.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005609 Label loop;
ricow@chromium.org65fae842010-08-25 15:26:24 +00005610 __ bind(&loop);
5611 __ mov_b(scratch, Operand(src, 0));
5612 __ mov_b(Operand(dest, 0), scratch);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005613 __ add(src, Immediate(1));
5614 __ add(dest, Immediate(1));
5615 __ sub(count, Immediate(1));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005616 __ j(not_zero, &loop);
5617
5618 __ bind(&done);
5619}
5620
5621
5622void StringHelper::GenerateTwoCharacterSymbolTableProbe(MacroAssembler* masm,
5623 Register c1,
5624 Register c2,
5625 Register scratch1,
5626 Register scratch2,
5627 Register scratch3,
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005628 Label* not_probed,
ricow@chromium.org65fae842010-08-25 15:26:24 +00005629 Label* not_found) {
5630 // Register scratch3 is the general scratch register in this function.
5631 Register scratch = scratch3;
5632
5633 // Make sure that both characters are not digits as such strings has a
5634 // different hash algorithm. Don't try to look for these in the symbol table.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005635 Label not_array_index;
ricow@chromium.org65fae842010-08-25 15:26:24 +00005636 __ mov(scratch, c1);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005637 __ sub(scratch, Immediate(static_cast<int>('0')));
5638 __ cmp(scratch, Immediate(static_cast<int>('9' - '0')));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005639 __ j(above, &not_array_index, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005640 __ mov(scratch, c2);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005641 __ sub(scratch, Immediate(static_cast<int>('0')));
5642 __ cmp(scratch, Immediate(static_cast<int>('9' - '0')));
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005643 __ j(below_equal, not_probed);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005644
5645 __ bind(&not_array_index);
5646 // Calculate the two character string hash.
5647 Register hash = scratch1;
5648 GenerateHashInit(masm, hash, c1, scratch);
5649 GenerateHashAddCharacter(masm, hash, c2, scratch);
5650 GenerateHashGetHash(masm, hash, scratch);
5651
5652 // Collect the two characters in a register.
5653 Register chars = c1;
5654 __ shl(c2, kBitsPerByte);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005655 __ or_(chars, c2);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005656
5657 // chars: two character string, char 1 in byte 0 and char 2 in byte 1.
5658 // hash: hash of two character string.
5659
5660 // Load the symbol table.
5661 Register symbol_table = c2;
sgjesse@chromium.orgea88ce92011-03-23 11:19:56 +00005662 ExternalReference roots_address =
5663 ExternalReference::roots_address(masm->isolate());
ricow@chromium.org65fae842010-08-25 15:26:24 +00005664 __ mov(scratch, Immediate(Heap::kSymbolTableRootIndex));
5665 __ mov(symbol_table,
5666 Operand::StaticArray(scratch, times_pointer_size, roots_address));
5667
5668 // Calculate capacity mask from the symbol table capacity.
5669 Register mask = scratch2;
5670 __ mov(mask, FieldOperand(symbol_table, SymbolTable::kCapacityOffset));
5671 __ SmiUntag(mask);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005672 __ sub(mask, Immediate(1));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005673
5674 // Registers
5675 // chars: two character string, char 1 in byte 0 and char 2 in byte 1.
5676 // hash: hash of two character string
5677 // symbol_table: symbol table
5678 // mask: capacity mask
5679 // scratch: -
5680
5681 // Perform a number of probes in the symbol table.
5682 static const int kProbes = 4;
5683 Label found_in_symbol_table;
5684 Label next_probe[kProbes], next_probe_pop_mask[kProbes];
5685 for (int i = 0; i < kProbes; i++) {
5686 // Calculate entry in symbol table.
5687 __ mov(scratch, hash);
5688 if (i > 0) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005689 __ add(scratch, Immediate(SymbolTable::GetProbeOffset(i)));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005690 }
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005691 __ and_(scratch, mask);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005692
5693 // Load the entry from the symbol table.
5694 Register candidate = scratch; // Scratch register contains candidate.
5695 STATIC_ASSERT(SymbolTable::kEntrySize == 1);
5696 __ mov(candidate,
5697 FieldOperand(symbol_table,
5698 scratch,
5699 times_pointer_size,
5700 SymbolTable::kElementsStartOffset));
5701
5702 // If entry is undefined no string with this hash can be found.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005703 Factory* factory = masm->isolate()->factory();
5704 __ cmp(candidate, factory->undefined_value());
ricow@chromium.org65fae842010-08-25 15:26:24 +00005705 __ j(equal, not_found);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005706 __ cmp(candidate, factory->null_value());
ricow@chromium.orgbadaffc2011-03-17 12:15:27 +00005707 __ j(equal, &next_probe[i]);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005708
5709 // If length is not 2 the string is not a candidate.
5710 __ cmp(FieldOperand(candidate, String::kLengthOffset),
5711 Immediate(Smi::FromInt(2)));
5712 __ j(not_equal, &next_probe[i]);
5713
5714 // As we are out of registers save the mask on the stack and use that
5715 // register as a temporary.
5716 __ push(mask);
5717 Register temp = mask;
5718
5719 // Check that the candidate is a non-external ascii string.
5720 __ mov(temp, FieldOperand(candidate, HeapObject::kMapOffset));
5721 __ movzx_b(temp, FieldOperand(temp, Map::kInstanceTypeOffset));
5722 __ JumpIfInstanceTypeIsNotSequentialAscii(
5723 temp, temp, &next_probe_pop_mask[i]);
5724
5725 // Check if the two characters match.
5726 __ mov(temp, FieldOperand(candidate, SeqAsciiString::kHeaderSize));
5727 __ and_(temp, 0x0000ffff);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005728 __ cmp(chars, temp);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005729 __ j(equal, &found_in_symbol_table);
5730 __ bind(&next_probe_pop_mask[i]);
5731 __ pop(mask);
5732 __ bind(&next_probe[i]);
5733 }
5734
5735 // No matching 2 character string found by probing.
5736 __ jmp(not_found);
5737
5738 // Scratch register contains result when we fall through to here.
5739 Register result = scratch;
5740 __ bind(&found_in_symbol_table);
5741 __ pop(mask); // Pop saved mask from the stack.
5742 if (!result.is(eax)) {
5743 __ mov(eax, result);
5744 }
5745}
5746
5747
5748void StringHelper::GenerateHashInit(MacroAssembler* masm,
5749 Register hash,
5750 Register character,
5751 Register scratch) {
5752 // hash = character + (character << 10);
5753 __ mov(hash, character);
5754 __ shl(hash, 10);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005755 __ add(hash, character);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005756 // hash ^= hash >> 6;
5757 __ mov(scratch, hash);
5758 __ sar(scratch, 6);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005759 __ xor_(hash, scratch);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005760}
5761
5762
5763void StringHelper::GenerateHashAddCharacter(MacroAssembler* masm,
5764 Register hash,
5765 Register character,
5766 Register scratch) {
5767 // hash += character;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005768 __ add(hash, character);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005769 // hash += hash << 10;
5770 __ mov(scratch, hash);
5771 __ shl(scratch, 10);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005772 __ add(hash, scratch);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005773 // hash ^= hash >> 6;
5774 __ mov(scratch, hash);
5775 __ sar(scratch, 6);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005776 __ xor_(hash, scratch);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005777}
5778
5779
5780void StringHelper::GenerateHashGetHash(MacroAssembler* masm,
5781 Register hash,
5782 Register scratch) {
5783 // hash += hash << 3;
5784 __ mov(scratch, hash);
5785 __ shl(scratch, 3);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005786 __ add(hash, scratch);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005787 // hash ^= hash >> 11;
5788 __ mov(scratch, hash);
5789 __ sar(scratch, 11);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005790 __ xor_(hash, scratch);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005791 // hash += hash << 15;
5792 __ mov(scratch, hash);
5793 __ shl(scratch, 15);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005794 __ add(hash, scratch);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005795
5796 // if (hash == 0) hash = 27;
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005797 Label hash_not_zero;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005798 __ test(hash, hash);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00005799 __ j(not_zero, &hash_not_zero, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005800 __ mov(hash, Immediate(27));
5801 __ bind(&hash_not_zero);
5802}
5803
5804
5805void SubStringStub::Generate(MacroAssembler* masm) {
5806 Label runtime;
5807
5808 // Stack frame on entry.
5809 // esp[0]: return address
5810 // esp[4]: to
5811 // esp[8]: from
5812 // esp[12]: string
5813
5814 // Make sure first argument is a string.
5815 __ mov(eax, Operand(esp, 3 * kPointerSize));
5816 STATIC_ASSERT(kSmiTag == 0);
whesse@chromium.org7b260152011-06-20 15:33:18 +00005817 __ JumpIfSmi(eax, &runtime);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005818 Condition is_string = masm->IsObjectStringType(eax, ebx, ebx);
5819 __ j(NegateCondition(is_string), &runtime);
5820
5821 // eax: string
5822 // ebx: instance type
5823
5824 // Calculate length of sub string using the smi values.
5825 Label result_longer_than_two;
5826 __ mov(ecx, Operand(esp, 1 * kPointerSize)); // To index.
whesse@chromium.org7b260152011-06-20 15:33:18 +00005827 __ JumpIfNotSmi(ecx, &runtime);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005828 __ mov(edx, Operand(esp, 2 * kPointerSize)); // From index.
whesse@chromium.org7b260152011-06-20 15:33:18 +00005829 __ JumpIfNotSmi(edx, &runtime);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005830 __ sub(ecx, edx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005831 __ cmp(ecx, FieldOperand(eax, String::kLengthOffset));
5832 Label return_eax;
5833 __ j(equal, &return_eax);
5834 // Special handling of sub-strings of length 1 and 2. One character strings
5835 // are handled in the runtime system (looked up in the single character
5836 // cache). Two character strings are looked for in the symbol cache.
5837 __ SmiUntag(ecx); // Result length is no longer smi.
5838 __ cmp(ecx, 2);
5839 __ j(greater, &result_longer_than_two);
5840 __ j(less, &runtime);
5841
5842 // Sub string of length 2 requested.
5843 // eax: string
5844 // ebx: instance type
5845 // ecx: sub string length (value is 2)
5846 // edx: from index (smi)
5847 __ JumpIfInstanceTypeIsNotSequentialAscii(ebx, ebx, &runtime);
5848
5849 // Get the two characters forming the sub string.
5850 __ SmiUntag(edx); // From index is no longer smi.
5851 __ movzx_b(ebx, FieldOperand(eax, edx, times_1, SeqAsciiString::kHeaderSize));
5852 __ movzx_b(ecx,
5853 FieldOperand(eax, edx, times_1, SeqAsciiString::kHeaderSize + 1));
5854
5855 // Try to lookup two character string in symbol table.
5856 Label make_two_character_string;
5857 StringHelper::GenerateTwoCharacterSymbolTableProbe(
kmillikin@chromium.org3cdd9e12010-09-06 11:39:48 +00005858 masm, ebx, ecx, eax, edx, edi,
5859 &make_two_character_string, &make_two_character_string);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005860 __ ret(3 * kPointerSize);
5861
5862 __ bind(&make_two_character_string);
5863 // Setup registers for allocating the two character string.
5864 __ mov(eax, Operand(esp, 3 * kPointerSize));
5865 __ mov(ebx, FieldOperand(eax, HeapObject::kMapOffset));
5866 __ movzx_b(ebx, FieldOperand(ebx, Map::kInstanceTypeOffset));
5867 __ Set(ecx, Immediate(2));
5868
yangguo@chromium.org80c42ed2011-08-31 09:03:56 +00005869 if (FLAG_string_slices) {
5870 Label copy_routine;
5871 // If coming from the make_two_character_string path, the string
5872 // is too short to be sliced anyways.
5873 STATIC_ASSERT(2 < SlicedString::kMinLength);
5874 __ jmp(&copy_routine);
5875 __ bind(&result_longer_than_two);
5876
5877 // eax: string
5878 // ebx: instance type
5879 // ecx: sub string length
5880 // edx: from index (smi)
5881 Label allocate_slice, sliced_string, seq_string;
5882 __ cmp(ecx, SlicedString::kMinLength);
5883 // Short slice. Copy instead of slicing.
5884 __ j(less, &copy_routine);
5885 STATIC_ASSERT(kSeqStringTag == 0);
5886 __ test(ebx, Immediate(kStringRepresentationMask));
5887 __ j(zero, &seq_string, Label::kNear);
5888 STATIC_ASSERT(kIsIndirectStringMask == (kSlicedStringTag & kConsStringTag));
5889 STATIC_ASSERT(kIsIndirectStringMask != 0);
5890 __ test(ebx, Immediate(kIsIndirectStringMask));
5891 // External string. Jump to runtime.
5892 __ j(zero, &runtime);
5893
5894 Factory* factory = masm->isolate()->factory();
5895 __ test(ebx, Immediate(kSlicedNotConsMask));
5896 __ j(not_zero, &sliced_string, Label::kNear);
5897 // Cons string. Check whether it is flat, then fetch first part.
5898 __ cmp(FieldOperand(eax, ConsString::kSecondOffset),
5899 factory->empty_string());
5900 __ j(not_equal, &runtime);
5901 __ mov(edi, FieldOperand(eax, ConsString::kFirstOffset));
5902 __ jmp(&allocate_slice, Label::kNear);
5903
5904 __ bind(&sliced_string);
5905 // Sliced string. Fetch parent and correct start index by offset.
5906 __ add(edx, FieldOperand(eax, SlicedString::kOffsetOffset));
5907 __ mov(edi, FieldOperand(eax, SlicedString::kParentOffset));
5908 __ jmp(&allocate_slice, Label::kNear);
5909
5910 __ bind(&seq_string);
5911 // Sequential string. Just move string to the right register.
5912 __ mov(edi, eax);
5913
5914 __ bind(&allocate_slice);
5915 // edi: underlying subject string
5916 // ebx: instance type of original subject string
5917 // edx: offset
5918 // ecx: length
5919 // Allocate new sliced string. At this point we do not reload the instance
5920 // type including the string encoding because we simply rely on the info
5921 // provided by the original string. It does not matter if the original
5922 // string's encoding is wrong because we always have to recheck encoding of
5923 // the newly created string's parent anyways due to externalized strings.
5924 Label two_byte_slice, set_slice_header;
fschneider@chromium.org1805e212011-09-05 10:49:12 +00005925 STATIC_ASSERT((kStringEncodingMask & kAsciiStringTag) != 0);
5926 STATIC_ASSERT((kStringEncodingMask & kTwoByteStringTag) == 0);
5927 __ test(ebx, Immediate(kStringEncodingMask));
yangguo@chromium.org80c42ed2011-08-31 09:03:56 +00005928 __ j(zero, &two_byte_slice, Label::kNear);
5929 __ AllocateAsciiSlicedString(eax, ebx, no_reg, &runtime);
5930 __ jmp(&set_slice_header, Label::kNear);
5931 __ bind(&two_byte_slice);
fschneider@chromium.org1805e212011-09-05 10:49:12 +00005932 __ AllocateTwoByteSlicedString(eax, ebx, no_reg, &runtime);
yangguo@chromium.org80c42ed2011-08-31 09:03:56 +00005933 __ bind(&set_slice_header);
5934 __ mov(FieldOperand(eax, SlicedString::kOffsetOffset), edx);
5935 __ SmiTag(ecx);
5936 __ mov(FieldOperand(eax, SlicedString::kLengthOffset), ecx);
5937 __ mov(FieldOperand(eax, SlicedString::kParentOffset), edi);
5938 __ mov(FieldOperand(eax, SlicedString::kHashFieldOffset),
5939 Immediate(String::kEmptyHashField));
5940 __ jmp(&return_eax);
5941
5942 __ bind(&copy_routine);
5943 } else {
5944 __ bind(&result_longer_than_two);
5945 }
5946
ricow@chromium.org65fae842010-08-25 15:26:24 +00005947 // eax: string
5948 // ebx: instance type
5949 // ecx: result string length
5950 // Check for flat ascii string
5951 Label non_ascii_flat;
5952 __ JumpIfInstanceTypeIsNotSequentialAscii(ebx, ebx, &non_ascii_flat);
5953
5954 // Allocate the result.
5955 __ AllocateAsciiString(eax, ecx, ebx, edx, edi, &runtime);
5956
5957 // eax: result string
5958 // ecx: result string length
5959 __ mov(edx, esi); // esi used by following code.
5960 // Locate first character of result.
5961 __ mov(edi, eax);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005962 __ add(edi, Immediate(SeqAsciiString::kHeaderSize - kHeapObjectTag));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005963 // Load string argument and locate character of sub string start.
5964 __ mov(esi, Operand(esp, 3 * kPointerSize));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005965 __ add(esi, Immediate(SeqAsciiString::kHeaderSize - kHeapObjectTag));
ricow@chromium.org65fae842010-08-25 15:26:24 +00005966 __ mov(ebx, Operand(esp, 2 * kPointerSize)); // from
5967 __ SmiUntag(ebx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005968 __ add(esi, ebx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005969
5970 // eax: result string
5971 // ecx: result length
5972 // edx: original value of esi
5973 // edi: first character of result
5974 // esi: character of sub string start
5975 StringHelper::GenerateCopyCharactersREP(masm, edi, esi, ecx, ebx, true);
5976 __ mov(esi, edx); // Restore esi.
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00005977 Counters* counters = masm->isolate()->counters();
5978 __ IncrementCounter(counters->sub_string_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00005979 __ ret(3 * kPointerSize);
5980
5981 __ bind(&non_ascii_flat);
5982 // eax: string
5983 // ebx: instance type & kStringRepresentationMask | kStringEncodingMask
5984 // ecx: result string length
5985 // Check for flat two byte string
5986 __ cmp(ebx, kSeqStringTag | kTwoByteStringTag);
5987 __ j(not_equal, &runtime);
5988
5989 // Allocate the result.
5990 __ AllocateTwoByteString(eax, ecx, ebx, edx, edi, &runtime);
5991
5992 // eax: result string
5993 // ecx: result string length
5994 __ mov(edx, esi); // esi used by following code.
5995 // Locate first character of result.
5996 __ mov(edi, eax);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00005997 __ add(edi,
ricow@chromium.org65fae842010-08-25 15:26:24 +00005998 Immediate(SeqTwoByteString::kHeaderSize - kHeapObjectTag));
5999 // Load string argument and locate character of sub string start.
6000 __ mov(esi, Operand(esp, 3 * kPointerSize));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006001 __ add(esi, Immediate(SeqTwoByteString::kHeaderSize - kHeapObjectTag));
ricow@chromium.org65fae842010-08-25 15:26:24 +00006002 __ mov(ebx, Operand(esp, 2 * kPointerSize)); // from
6003 // As from is a smi it is 2 times the value which matches the size of a two
6004 // byte character.
6005 STATIC_ASSERT(kSmiTag == 0);
6006 STATIC_ASSERT(kSmiTagSize + kSmiShiftSize == 1);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006007 __ add(esi, ebx);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006008
6009 // eax: result string
6010 // ecx: result length
6011 // edx: original value of esi
6012 // edi: first character of result
6013 // esi: character of sub string start
6014 StringHelper::GenerateCopyCharactersREP(masm, edi, esi, ecx, ebx, false);
6015 __ mov(esi, edx); // Restore esi.
6016
6017 __ bind(&return_eax);
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00006018 __ IncrementCounter(counters->sub_string_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006019 __ ret(3 * kPointerSize);
6020
6021 // Just jump to runtime to create the sub string.
6022 __ bind(&runtime);
6023 __ TailCallRuntime(Runtime::kSubString, 3, 1);
6024}
6025
6026
lrn@chromium.org1c092762011-05-09 09:42:16 +00006027void StringCompareStub::GenerateFlatAsciiStringEquals(MacroAssembler* masm,
6028 Register left,
6029 Register right,
6030 Register scratch1,
6031 Register scratch2) {
6032 Register length = scratch1;
6033
6034 // Compare lengths.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006035 Label strings_not_equal, check_zero_length;
lrn@chromium.org1c092762011-05-09 09:42:16 +00006036 __ mov(length, FieldOperand(left, String::kLengthOffset));
6037 __ cmp(length, FieldOperand(right, String::kLengthOffset));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006038 __ j(equal, &check_zero_length, Label::kNear);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006039 __ bind(&strings_not_equal);
6040 __ Set(eax, Immediate(Smi::FromInt(NOT_EQUAL)));
6041 __ ret(0);
6042
6043 // Check if the length is zero.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006044 Label compare_chars;
lrn@chromium.org1c092762011-05-09 09:42:16 +00006045 __ bind(&check_zero_length);
6046 STATIC_ASSERT(kSmiTag == 0);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006047 __ test(length, length);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006048 __ j(not_zero, &compare_chars, Label::kNear);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006049 __ Set(eax, Immediate(Smi::FromInt(EQUAL)));
6050 __ ret(0);
6051
6052 // Compare characters.
6053 __ bind(&compare_chars);
6054 GenerateAsciiCharsCompareLoop(masm, left, right, length, scratch2,
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006055 &strings_not_equal, Label::kNear);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006056
6057 // Characters are equal.
6058 __ Set(eax, Immediate(Smi::FromInt(EQUAL)));
6059 __ ret(0);
6060}
6061
6062
ricow@chromium.org65fae842010-08-25 15:26:24 +00006063void StringCompareStub::GenerateCompareFlatAsciiStrings(MacroAssembler* masm,
6064 Register left,
6065 Register right,
6066 Register scratch1,
6067 Register scratch2,
6068 Register scratch3) {
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00006069 Counters* counters = masm->isolate()->counters();
6070 __ IncrementCounter(counters->string_compare_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006071
6072 // Find minimum length.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006073 Label left_shorter;
ricow@chromium.org65fae842010-08-25 15:26:24 +00006074 __ mov(scratch1, FieldOperand(left, String::kLengthOffset));
6075 __ mov(scratch3, scratch1);
6076 __ sub(scratch3, FieldOperand(right, String::kLengthOffset));
6077
6078 Register length_delta = scratch3;
6079
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006080 __ j(less_equal, &left_shorter, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006081 // Right string is shorter. Change scratch1 to be length of right string.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006082 __ sub(scratch1, length_delta);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006083 __ bind(&left_shorter);
6084
6085 Register min_length = scratch1;
6086
6087 // If either length is zero, just compare lengths.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006088 Label compare_lengths;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006089 __ test(min_length, min_length);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006090 __ j(zero, &compare_lengths, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006091
lrn@chromium.org1c092762011-05-09 09:42:16 +00006092 // Compare characters.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006093 Label result_not_equal;
lrn@chromium.org1c092762011-05-09 09:42:16 +00006094 GenerateAsciiCharsCompareLoop(masm, left, right, min_length, scratch2,
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006095 &result_not_equal, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006096
6097 // Compare lengths - strings up to min-length are equal.
6098 __ bind(&compare_lengths);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006099 __ test(length_delta, length_delta);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006100 __ j(not_zero, &result_not_equal, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006101
6102 // Result is EQUAL.
6103 STATIC_ASSERT(EQUAL == 0);
6104 STATIC_ASSERT(kSmiTag == 0);
6105 __ Set(eax, Immediate(Smi::FromInt(EQUAL)));
6106 __ ret(0);
6107
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006108 Label result_greater;
ricow@chromium.org65fae842010-08-25 15:26:24 +00006109 __ bind(&result_not_equal);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006110 __ j(greater, &result_greater, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006111
6112 // Result is LESS.
6113 __ Set(eax, Immediate(Smi::FromInt(LESS)));
6114 __ ret(0);
6115
6116 // Result is GREATER.
6117 __ bind(&result_greater);
6118 __ Set(eax, Immediate(Smi::FromInt(GREATER)));
6119 __ ret(0);
6120}
6121
6122
lrn@chromium.org1c092762011-05-09 09:42:16 +00006123void StringCompareStub::GenerateAsciiCharsCompareLoop(
6124 MacroAssembler* masm,
6125 Register left,
6126 Register right,
6127 Register length,
6128 Register scratch,
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006129 Label* chars_not_equal,
6130 Label::Distance chars_not_equal_near) {
lrn@chromium.org1c092762011-05-09 09:42:16 +00006131 // Change index to run from -length to -1 by adding length to string
6132 // start. This means that loop ends when index reaches zero, which
6133 // doesn't need an additional compare.
6134 __ SmiUntag(length);
6135 __ lea(left,
6136 FieldOperand(left, length, times_1, SeqAsciiString::kHeaderSize));
6137 __ lea(right,
6138 FieldOperand(right, length, times_1, SeqAsciiString::kHeaderSize));
6139 __ neg(length);
6140 Register index = length; // index = -length;
6141
6142 // Compare loop.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006143 Label loop;
lrn@chromium.org1c092762011-05-09 09:42:16 +00006144 __ bind(&loop);
6145 __ mov_b(scratch, Operand(left, index, times_1, 0));
6146 __ cmpb(scratch, Operand(right, index, times_1, 0));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006147 __ j(not_equal, chars_not_equal, chars_not_equal_near);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006148 __ add(index, Immediate(1));
lrn@chromium.org1c092762011-05-09 09:42:16 +00006149 __ j(not_zero, &loop);
6150}
6151
6152
ricow@chromium.org65fae842010-08-25 15:26:24 +00006153void StringCompareStub::Generate(MacroAssembler* masm) {
6154 Label runtime;
6155
6156 // Stack frame on entry.
6157 // esp[0]: return address
6158 // esp[4]: right string
6159 // esp[8]: left string
6160
6161 __ mov(edx, Operand(esp, 2 * kPointerSize)); // left
6162 __ mov(eax, Operand(esp, 1 * kPointerSize)); // right
6163
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006164 Label not_same;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006165 __ cmp(edx, eax);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006166 __ j(not_equal, &not_same, Label::kNear);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006167 STATIC_ASSERT(EQUAL == 0);
6168 STATIC_ASSERT(kSmiTag == 0);
6169 __ Set(eax, Immediate(Smi::FromInt(EQUAL)));
fschneider@chromium.org7979bbb2011-03-28 10:47:03 +00006170 __ IncrementCounter(masm->isolate()->counters()->string_compare_native(), 1);
ricow@chromium.org65fae842010-08-25 15:26:24 +00006171 __ ret(2 * kPointerSize);
6172
6173 __ bind(&not_same);
6174
6175 // Check that both objects are sequential ascii strings.
6176 __ JumpIfNotBothSequentialAsciiStrings(edx, eax, ecx, ebx, &runtime);
6177
6178 // Compare flat ascii strings.
6179 // Drop arguments from the stack.
6180 __ pop(ecx);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006181 __ add(esp, Immediate(2 * kPointerSize));
ricow@chromium.org65fae842010-08-25 15:26:24 +00006182 __ push(ecx);
6183 GenerateCompareFlatAsciiStrings(masm, edx, eax, ecx, ebx, edi);
6184
6185 // Call the runtime; it returns -1 (less), 0 (equal), or 1 (greater)
6186 // tagged as a small integer.
6187 __ bind(&runtime);
6188 __ TailCallRuntime(Runtime::kStringCompare, 2, 1);
6189}
6190
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006191
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006192void ICCompareStub::GenerateSmis(MacroAssembler* masm) {
6193 ASSERT(state_ == CompareIC::SMIS);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006194 Label miss;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006195 __ mov(ecx, edx);
6196 __ or_(ecx, eax);
whesse@chromium.org7b260152011-06-20 15:33:18 +00006197 __ JumpIfNotSmi(ecx, &miss, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006198
6199 if (GetCondition() == equal) {
6200 // For equality we do not care about the sign of the result.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006201 __ sub(eax, edx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006202 } else {
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006203 Label done;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006204 __ sub(edx, eax);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006205 __ j(no_overflow, &done, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006206 // Correct sign of result in case of overflow.
6207 __ not_(edx);
6208 __ bind(&done);
6209 __ mov(eax, edx);
6210 }
6211 __ ret(0);
6212
6213 __ bind(&miss);
6214 GenerateMiss(masm);
6215}
6216
6217
6218void ICCompareStub::GenerateHeapNumbers(MacroAssembler* masm) {
6219 ASSERT(state_ == CompareIC::HEAP_NUMBERS);
6220
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006221 Label generic_stub;
6222 Label unordered;
6223 Label miss;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006224 __ mov(ecx, edx);
6225 __ and_(ecx, eax);
whesse@chromium.org7b260152011-06-20 15:33:18 +00006226 __ JumpIfSmi(ecx, &generic_stub, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006227
6228 __ CmpObjectType(eax, HEAP_NUMBER_TYPE, ecx);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00006229 __ j(not_equal, &miss, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006230 __ CmpObjectType(edx, HEAP_NUMBER_TYPE, ecx);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00006231 __ j(not_equal, &miss, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006232
6233 // Inlining the double comparison and falling back to the general compare
6234 // stub if NaN is involved or SS2 or CMOV is unsupported.
kmillikin@chromium.orgc36ce6e2011-04-04 08:25:31 +00006235 if (CpuFeatures::IsSupported(SSE2) && CpuFeatures::IsSupported(CMOV)) {
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006236 CpuFeatures::Scope scope1(SSE2);
6237 CpuFeatures::Scope scope2(CMOV);
6238
6239 // Load left and right operand
6240 __ movdbl(xmm0, FieldOperand(edx, HeapNumber::kValueOffset));
6241 __ movdbl(xmm1, FieldOperand(eax, HeapNumber::kValueOffset));
6242
6243 // Compare operands
6244 __ ucomisd(xmm0, xmm1);
6245
6246 // Don't base result on EFLAGS when a NaN is involved.
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00006247 __ j(parity_even, &unordered, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006248
6249 // Return a result of -1, 0, or 1, based on EFLAGS.
6250 // Performing mov, because xor would destroy the flag register.
6251 __ mov(eax, 0); // equal
6252 __ mov(ecx, Immediate(Smi::FromInt(1)));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006253 __ cmov(above, eax, ecx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006254 __ mov(ecx, Immediate(Smi::FromInt(-1)));
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006255 __ cmov(below, eax, ecx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006256 __ ret(0);
6257
6258 __ bind(&unordered);
6259 }
6260
6261 CompareStub stub(GetCondition(), strict(), NO_COMPARE_FLAGS);
6262 __ bind(&generic_stub);
6263 __ jmp(stub.GetCode(), RelocInfo::CODE_TARGET);
6264
6265 __ bind(&miss);
6266 GenerateMiss(masm);
6267}
6268
6269
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006270void ICCompareStub::GenerateSymbols(MacroAssembler* masm) {
6271 ASSERT(state_ == CompareIC::SYMBOLS);
6272 ASSERT(GetCondition() == equal);
6273
6274 // Registers containing left and right operands respectively.
6275 Register left = edx;
6276 Register right = eax;
6277 Register tmp1 = ecx;
6278 Register tmp2 = ebx;
6279
6280 // Check that both operands are heap objects.
6281 Label miss;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006282 __ mov(tmp1, left);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006283 STATIC_ASSERT(kSmiTag == 0);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006284 __ and_(tmp1, right);
whesse@chromium.org7b260152011-06-20 15:33:18 +00006285 __ JumpIfSmi(tmp1, &miss, Label::kNear);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006286
6287 // Check that both operands are symbols.
6288 __ mov(tmp1, FieldOperand(left, HeapObject::kMapOffset));
6289 __ mov(tmp2, FieldOperand(right, HeapObject::kMapOffset));
6290 __ movzx_b(tmp1, FieldOperand(tmp1, Map::kInstanceTypeOffset));
6291 __ movzx_b(tmp2, FieldOperand(tmp2, Map::kInstanceTypeOffset));
6292 STATIC_ASSERT(kSymbolTag != 0);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006293 __ and_(tmp1, tmp2);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006294 __ test(tmp1, Immediate(kIsSymbolMask));
6295 __ j(zero, &miss, Label::kNear);
6296
6297 // Symbols are compared by identity.
6298 Label done;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006299 __ cmp(left, right);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006300 // Make sure eax is non-zero. At this point input operands are
6301 // guaranteed to be non-zero.
6302 ASSERT(right.is(eax));
6303 __ j(not_equal, &done, Label::kNear);
6304 STATIC_ASSERT(EQUAL == 0);
6305 STATIC_ASSERT(kSmiTag == 0);
6306 __ Set(eax, Immediate(Smi::FromInt(EQUAL)));
6307 __ bind(&done);
6308 __ ret(0);
6309
6310 __ bind(&miss);
6311 GenerateMiss(masm);
6312}
6313
6314
lrn@chromium.org1c092762011-05-09 09:42:16 +00006315void ICCompareStub::GenerateStrings(MacroAssembler* masm) {
6316 ASSERT(state_ == CompareIC::STRINGS);
6317 ASSERT(GetCondition() == equal);
6318 Label miss;
6319
6320 // Registers containing left and right operands respectively.
6321 Register left = edx;
6322 Register right = eax;
6323 Register tmp1 = ecx;
6324 Register tmp2 = ebx;
6325 Register tmp3 = edi;
6326
6327 // Check that both operands are heap objects.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006328 __ mov(tmp1, left);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006329 STATIC_ASSERT(kSmiTag == 0);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006330 __ and_(tmp1, right);
whesse@chromium.org7b260152011-06-20 15:33:18 +00006331 __ JumpIfSmi(tmp1, &miss);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006332
6333 // Check that both operands are strings. This leaves the instance
6334 // types loaded in tmp1 and tmp2.
6335 __ mov(tmp1, FieldOperand(left, HeapObject::kMapOffset));
6336 __ mov(tmp2, FieldOperand(right, HeapObject::kMapOffset));
6337 __ movzx_b(tmp1, FieldOperand(tmp1, Map::kInstanceTypeOffset));
6338 __ movzx_b(tmp2, FieldOperand(tmp2, Map::kInstanceTypeOffset));
6339 __ mov(tmp3, tmp1);
6340 STATIC_ASSERT(kNotStringTag != 0);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006341 __ or_(tmp3, tmp2);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006342 __ test(tmp3, Immediate(kIsNotStringMask));
6343 __ j(not_zero, &miss);
6344
6345 // Fast check for identical strings.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006346 Label not_same;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006347 __ cmp(left, right);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006348 __ j(not_equal, &not_same, Label::kNear);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006349 STATIC_ASSERT(EQUAL == 0);
6350 STATIC_ASSERT(kSmiTag == 0);
6351 __ Set(eax, Immediate(Smi::FromInt(EQUAL)));
6352 __ ret(0);
6353
6354 // Handle not identical strings.
6355 __ bind(&not_same);
6356
6357 // Check that both strings are symbols. If they are, we're done
6358 // because we already know they are not identical.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006359 Label do_compare;
lrn@chromium.org1c092762011-05-09 09:42:16 +00006360 STATIC_ASSERT(kSymbolTag != 0);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006361 __ and_(tmp1, tmp2);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006362 __ test(tmp1, Immediate(kIsSymbolMask));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006363 __ j(zero, &do_compare, Label::kNear);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006364 // Make sure eax is non-zero. At this point input operands are
6365 // guaranteed to be non-zero.
6366 ASSERT(right.is(eax));
6367 __ ret(0);
6368
6369 // Check that both strings are sequential ASCII.
6370 Label runtime;
6371 __ bind(&do_compare);
6372 __ JumpIfNotBothSequentialAsciiStrings(left, right, tmp1, tmp2, &runtime);
6373
6374 // Compare flat ASCII strings. Returns when done.
6375 StringCompareStub::GenerateFlatAsciiStringEquals(
6376 masm, left, right, tmp1, tmp2);
6377
6378 // Handle more complex cases in runtime.
6379 __ bind(&runtime);
6380 __ pop(tmp1); // Return address.
6381 __ push(left);
6382 __ push(right);
6383 __ push(tmp1);
6384 __ TailCallRuntime(Runtime::kStringEquals, 2, 1);
6385
6386 __ bind(&miss);
6387 GenerateMiss(masm);
6388}
6389
6390
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006391void ICCompareStub::GenerateObjects(MacroAssembler* masm) {
6392 ASSERT(state_ == CompareIC::OBJECTS);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006393 Label miss;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006394 __ mov(ecx, edx);
6395 __ and_(ecx, eax);
whesse@chromium.org7b260152011-06-20 15:33:18 +00006396 __ JumpIfSmi(ecx, &miss, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006397
6398 __ CmpObjectType(eax, JS_OBJECT_TYPE, ecx);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00006399 __ j(not_equal, &miss, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006400 __ CmpObjectType(edx, JS_OBJECT_TYPE, ecx);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00006401 __ j(not_equal, &miss, Label::kNear);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006402
6403 ASSERT(GetCondition() == equal);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006404 __ sub(eax, edx);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006405 __ ret(0);
6406
6407 __ bind(&miss);
6408 GenerateMiss(masm);
6409}
6410
6411
6412void ICCompareStub::GenerateMiss(MacroAssembler* masm) {
6413 // Save the registers.
6414 __ pop(ecx);
6415 __ push(edx);
6416 __ push(eax);
6417 __ push(ecx);
6418
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006419 {
6420 // Call the runtime system in a fresh internal frame.
6421 ExternalReference miss = ExternalReference(IC_Utility(IC::kCompareIC_Miss),
6422 masm->isolate());
6423 FrameScope scope(masm, StackFrame::INTERNAL);
6424 __ push(edx);
6425 __ push(eax);
6426 __ push(Immediate(Smi::FromInt(op_)));
6427 __ CallExternalReference(miss, 3);
6428 }
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006429
6430 // Compute the entry point of the rewritten stub.
6431 __ lea(edi, FieldOperand(eax, Code::kHeaderSize));
6432
6433 // Restore registers.
6434 __ pop(ecx);
6435 __ pop(eax);
6436 __ pop(edx);
6437 __ push(ecx);
6438
6439 // Do a tail call to the rewritten stub.
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006440 __ jmp(edi);
kasperl@chromium.orga5551262010-12-07 12:49:48 +00006441}
6442
6443
lrn@chromium.org1c092762011-05-09 09:42:16 +00006444// Helper function used to check that the dictionary doesn't contain
6445// the property. This function may return false negatives, so miss_label
6446// must always call a backup property check that is complete.
6447// This function is safe to call if the receiver has fast properties.
6448// Name must be a symbol and receiver must be a heap object.
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006449MaybeObject* StringDictionaryLookupStub::GenerateNegativeLookup(
6450 MacroAssembler* masm,
6451 Label* miss,
6452 Label* done,
6453 Register properties,
6454 String* name,
6455 Register r0) {
lrn@chromium.org1c092762011-05-09 09:42:16 +00006456 ASSERT(name->IsSymbol());
6457
6458 // If names of slots in range from 1 to kProbes - 1 for the hash value are
6459 // not equal to the name and kProbes-th slot is not used (its name is the
6460 // undefined value), it guarantees the hash table doesn't contain the
6461 // property. It's true even if some slots represent deleted properties
6462 // (their names are the null value).
6463 for (int i = 0; i < kInlinedProbes; i++) {
6464 // Compute the masked index: (hash + i + i * i) & mask.
6465 Register index = r0;
6466 // Capacity is smi 2^n.
6467 __ mov(index, FieldOperand(properties, kCapacityOffset));
6468 __ dec(index);
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006469 __ and_(index,
6470 Immediate(Smi::FromInt(name->Hash() +
lrn@chromium.org1c092762011-05-09 09:42:16 +00006471 StringDictionary::GetProbeOffset(i))));
6472
6473 // Scale the index by multiplying by the entry size.
6474 ASSERT(StringDictionary::kEntrySize == 3);
6475 __ lea(index, Operand(index, index, times_2, 0)); // index *= 3.
6476 Register entity_name = r0;
6477 // Having undefined at this place means the name is not contained.
6478 ASSERT_EQ(kSmiTagSize, 1);
6479 __ mov(entity_name, Operand(properties, index, times_half_pointer_size,
6480 kElementsStartOffset - kHeapObjectTag));
6481 __ cmp(entity_name, masm->isolate()->factory()->undefined_value());
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00006482 __ j(equal, done);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006483
6484 // Stop if found the property.
6485 __ cmp(entity_name, Handle<String>(name));
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00006486 __ j(equal, miss);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006487
6488 // Check if the entry name is not a symbol.
6489 __ mov(entity_name, FieldOperand(entity_name, HeapObject::kMapOffset));
6490 __ test_b(FieldOperand(entity_name, Map::kInstanceTypeOffset),
6491 kIsSymbolMask);
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00006492 __ j(zero, miss);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006493 }
6494
6495 StringDictionaryLookupStub stub(properties,
6496 r0,
6497 r0,
6498 StringDictionaryLookupStub::NEGATIVE_LOOKUP);
6499 __ push(Immediate(Handle<Object>(name)));
6500 __ push(Immediate(name->Hash()));
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006501 MaybeObject* result = masm->TryCallStub(&stub);
6502 if (result->IsFailure()) return result;
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006503 __ test(r0, r0);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006504 __ j(not_zero, miss);
6505 __ jmp(done);
karlklose@chromium.org83a47282011-05-11 11:54:09 +00006506 return result;
lrn@chromium.org1c092762011-05-09 09:42:16 +00006507}
6508
6509
6510// Probe the string dictionary in the |elements| register. Jump to the
6511// |done| label if a property with the given name is found leaving the
6512// index into the dictionary in |r0|. Jump to the |miss| label
6513// otherwise.
6514void StringDictionaryLookupStub::GeneratePositiveLookup(MacroAssembler* masm,
6515 Label* miss,
6516 Label* done,
6517 Register elements,
6518 Register name,
6519 Register r0,
6520 Register r1) {
6521 // Assert that name contains a string.
6522 if (FLAG_debug_code) __ AbortIfNotString(name);
6523
6524 __ mov(r1, FieldOperand(elements, kCapacityOffset));
6525 __ shr(r1, kSmiTagSize); // convert smi to int
6526 __ dec(r1);
6527
6528 // Generate an unrolled loop that performs a few probes before
6529 // giving up. Measurements done on Gmail indicate that 2 probes
6530 // cover ~93% of loads from dictionaries.
6531 for (int i = 0; i < kInlinedProbes; i++) {
6532 // Compute the masked index: (hash + i + i * i) & mask.
6533 __ mov(r0, FieldOperand(name, String::kHashFieldOffset));
6534 __ shr(r0, String::kHashShift);
6535 if (i > 0) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006536 __ add(r0, Immediate(StringDictionary::GetProbeOffset(i)));
lrn@chromium.org1c092762011-05-09 09:42:16 +00006537 }
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006538 __ and_(r0, r1);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006539
6540 // Scale the index by multiplying by the entry size.
6541 ASSERT(StringDictionary::kEntrySize == 3);
6542 __ lea(r0, Operand(r0, r0, times_2, 0)); // r0 = r0 * 3
6543
6544 // Check if the key is identical to the name.
6545 __ cmp(name, Operand(elements,
6546 r0,
6547 times_4,
6548 kElementsStartOffset - kHeapObjectTag));
vegorov@chromium.org7304bca2011-05-16 12:14:13 +00006549 __ j(equal, done);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006550 }
6551
6552 StringDictionaryLookupStub stub(elements,
6553 r1,
6554 r0,
6555 POSITIVE_LOOKUP);
6556 __ push(name);
6557 __ mov(r0, FieldOperand(name, String::kHashFieldOffset));
6558 __ shr(r0, String::kHashShift);
6559 __ push(r0);
6560 __ CallStub(&stub);
6561
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006562 __ test(r1, r1);
lrn@chromium.org1c092762011-05-09 09:42:16 +00006563 __ j(zero, miss);
6564 __ jmp(done);
6565}
6566
6567
6568void StringDictionaryLookupStub::Generate(MacroAssembler* masm) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006569 // This stub overrides SometimesSetsUpAFrame() to return false. That means
6570 // we cannot call anything that could cause a GC from this stub.
lrn@chromium.org1c092762011-05-09 09:42:16 +00006571 // Stack frame on entry:
6572 // esp[0 * kPointerSize]: return address.
6573 // esp[1 * kPointerSize]: key's hash.
6574 // esp[2 * kPointerSize]: key.
6575 // Registers:
6576 // dictionary_: StringDictionary to probe.
6577 // result_: used as scratch.
6578 // index_: will hold an index of entry if lookup is successful.
6579 // might alias with result_.
6580 // Returns:
6581 // result_ is zero if lookup failed, non zero otherwise.
6582
6583 Label in_dictionary, maybe_in_dictionary, not_in_dictionary;
6584
6585 Register scratch = result_;
6586
6587 __ mov(scratch, FieldOperand(dictionary_, kCapacityOffset));
6588 __ dec(scratch);
6589 __ SmiUntag(scratch);
6590 __ push(scratch);
6591
6592 // If names of slots in range from 1 to kProbes - 1 for the hash value are
6593 // not equal to the name and kProbes-th slot is not used (its name is the
6594 // undefined value), it guarantees the hash table doesn't contain the
6595 // property. It's true even if some slots represent deleted properties
6596 // (their names are the null value).
6597 for (int i = kInlinedProbes; i < kTotalProbes; i++) {
6598 // Compute the masked index: (hash + i + i * i) & mask.
6599 __ mov(scratch, Operand(esp, 2 * kPointerSize));
6600 if (i > 0) {
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006601 __ add(scratch, Immediate(StringDictionary::GetProbeOffset(i)));
lrn@chromium.org1c092762011-05-09 09:42:16 +00006602 }
6603 __ and_(scratch, Operand(esp, 0));
6604
6605 // Scale the index by multiplying by the entry size.
6606 ASSERT(StringDictionary::kEntrySize == 3);
6607 __ lea(index_, Operand(scratch, scratch, times_2, 0)); // index *= 3.
6608
6609 // Having undefined at this place means the name is not contained.
6610 ASSERT_EQ(kSmiTagSize, 1);
6611 __ mov(scratch, Operand(dictionary_,
6612 index_,
6613 times_pointer_size,
6614 kElementsStartOffset - kHeapObjectTag));
6615 __ cmp(scratch, masm->isolate()->factory()->undefined_value());
6616 __ j(equal, &not_in_dictionary);
6617
6618 // Stop if found the property.
6619 __ cmp(scratch, Operand(esp, 3 * kPointerSize));
6620 __ j(equal, &in_dictionary);
6621
6622 if (i != kTotalProbes - 1 && mode_ == NEGATIVE_LOOKUP) {
6623 // If we hit a non symbol key during negative lookup
6624 // we have to bailout as this key might be equal to the
6625 // key we are looking for.
6626
6627 // Check if the entry name is not a symbol.
6628 __ mov(scratch, FieldOperand(scratch, HeapObject::kMapOffset));
6629 __ test_b(FieldOperand(scratch, Map::kInstanceTypeOffset),
6630 kIsSymbolMask);
6631 __ j(zero, &maybe_in_dictionary);
6632 }
6633 }
6634
6635 __ bind(&maybe_in_dictionary);
6636 // If we are doing negative lookup then probing failure should be
6637 // treated as a lookup success. For positive lookup probing failure
6638 // should be treated as lookup failure.
6639 if (mode_ == POSITIVE_LOOKUP) {
6640 __ mov(result_, Immediate(0));
6641 __ Drop(1);
6642 __ ret(2 * kPointerSize);
6643 }
6644
6645 __ bind(&in_dictionary);
6646 __ mov(result_, Immediate(1));
6647 __ Drop(1);
6648 __ ret(2 * kPointerSize);
6649
6650 __ bind(&not_in_dictionary);
6651 __ mov(result_, Immediate(0));
6652 __ Drop(1);
6653 __ ret(2 * kPointerSize);
6654}
6655
6656
erik.corry@gmail.comc3b670f2011-10-05 21:44:48 +00006657struct AheadOfTimeWriteBarrierStubList {
6658 Register object, value, address;
6659 RememberedSetAction action;
6660};
6661
6662
6663struct AheadOfTimeWriteBarrierStubList kAheadOfTime[] = {
6664 // Used in RegExpExecStub.
6665 { ebx, eax, edi, EMIT_REMEMBERED_SET },
6666 // Used in CompileArrayPushCall.
6667 { ebx, ecx, edx, EMIT_REMEMBERED_SET },
6668 { ebx, edi, edx, OMIT_REMEMBERED_SET },
6669 // Used in CompileStoreGlobal and CallFunctionStub.
6670 { ebx, ecx, edx, OMIT_REMEMBERED_SET },
6671 // Used in StoreStubCompiler::CompileStoreField and
6672 // KeyedStoreStubCompiler::CompileStoreField via GenerateStoreField.
6673 { edx, ecx, ebx, EMIT_REMEMBERED_SET },
6674 // GenerateStoreField calls the stub with two different permutations of
6675 // registers. This is the second.
6676 { ebx, ecx, edx, EMIT_REMEMBERED_SET },
6677 // StoreIC::GenerateNormal via GenerateDictionaryStore
6678 { ebx, edi, edx, EMIT_REMEMBERED_SET },
6679 // KeyedStoreIC::GenerateGeneric.
6680 { ebx, edx, ecx, EMIT_REMEMBERED_SET},
6681 // KeyedStoreStubCompiler::GenerateStoreFastElement.
6682 { edi, edx, ecx, EMIT_REMEMBERED_SET},
6683 // Null termination.
6684 { no_reg, no_reg, no_reg, EMIT_REMEMBERED_SET}
6685};
6686
6687
6688bool RecordWriteStub::IsPregenerated() {
6689 for (AheadOfTimeWriteBarrierStubList* entry = kAheadOfTime;
6690 !entry->object.is(no_reg);
6691 entry++) {
6692 if (object_.is(entry->object) &&
6693 value_.is(entry->value) &&
6694 address_.is(entry->address) &&
6695 remembered_set_action_ == entry->action &&
6696 save_fp_regs_mode_ == kDontSaveFPRegs) {
6697 return true;
6698 }
6699 }
6700 return false;
6701}
6702
6703
6704void StoreBufferOverflowStub::GenerateFixedRegStubsAheadOfTime() {
6705 StoreBufferOverflowStub stub1(kDontSaveFPRegs);
6706 stub1.GetCode()->set_is_pregenerated(true);
6707
6708 CpuFeatures::TryForceFeatureScope scope(SSE2);
6709 if (CpuFeatures::IsSupported(SSE2)) {
6710 StoreBufferOverflowStub stub2(kSaveFPRegs);
6711 stub2.GetCode()->set_is_pregenerated(true);
6712 }
6713}
6714
6715
6716void RecordWriteStub::GenerateFixedRegStubsAheadOfTime() {
6717 for (AheadOfTimeWriteBarrierStubList* entry = kAheadOfTime;
6718 !entry->object.is(no_reg);
6719 entry++) {
6720 RecordWriteStub stub(entry->object,
6721 entry->value,
6722 entry->address,
6723 entry->action,
6724 kDontSaveFPRegs);
6725 stub.GetCode()->set_is_pregenerated(true);
6726 }
6727}
6728
6729
6730// Takes the input in 3 registers: address_ value_ and object_. A pointer to
6731// the value has just been written into the object, now this stub makes sure
6732// we keep the GC informed. The word in the object where the value has been
6733// written is in the address register.
6734void RecordWriteStub::Generate(MacroAssembler* masm) {
6735 Label skip_to_incremental_noncompacting;
6736 Label skip_to_incremental_compacting;
6737
6738 // The first two instructions are generated with labels so as to get the
6739 // offset fixed up correctly by the bind(Label*) call. We patch it back and
6740 // forth between a compare instructions (a nop in this position) and the
6741 // real branch when we start and stop incremental heap marking.
6742 __ jmp(&skip_to_incremental_noncompacting, Label::kNear);
6743 __ jmp(&skip_to_incremental_compacting, Label::kFar);
6744
6745 if (remembered_set_action_ == EMIT_REMEMBERED_SET) {
6746 __ RememberedSetHelper(object_,
6747 address_,
6748 value_,
6749 save_fp_regs_mode_,
6750 MacroAssembler::kReturnAtEnd);
6751 } else {
6752 __ ret(0);
6753 }
6754
6755 __ bind(&skip_to_incremental_noncompacting);
6756 GenerateIncremental(masm, INCREMENTAL);
6757
6758 __ bind(&skip_to_incremental_compacting);
6759 GenerateIncremental(masm, INCREMENTAL_COMPACTION);
6760
6761 // Initial mode of the stub is expected to be STORE_BUFFER_ONLY.
6762 // Will be checked in IncrementalMarking::ActivateGeneratedStub.
6763 masm->set_byte_at(0, kTwoByteNopInstruction);
6764 masm->set_byte_at(2, kFiveByteNopInstruction);
6765}
6766
6767
6768void RecordWriteStub::GenerateIncremental(MacroAssembler* masm, Mode mode) {
6769 regs_.Save(masm);
6770
6771 if (remembered_set_action_ == EMIT_REMEMBERED_SET) {
6772 Label dont_need_remembered_set;
6773
6774 __ mov(regs_.scratch0(), Operand(regs_.address(), 0));
6775 __ JumpIfNotInNewSpace(regs_.scratch0(), // Value.
6776 regs_.scratch0(),
6777 &dont_need_remembered_set);
6778
6779 __ CheckPageFlag(regs_.object(),
6780 regs_.scratch0(),
6781 1 << MemoryChunk::SCAN_ON_SCAVENGE,
6782 not_zero,
6783 &dont_need_remembered_set);
6784
6785 // First notify the incremental marker if necessary, then update the
6786 // remembered set.
6787 CheckNeedsToInformIncrementalMarker(
6788 masm,
6789 kUpdateRememberedSetOnNoNeedToInformIncrementalMarker,
6790 mode);
6791 InformIncrementalMarker(masm, mode);
6792 regs_.Restore(masm);
6793 __ RememberedSetHelper(object_,
6794 address_,
6795 value_,
6796 save_fp_regs_mode_,
6797 MacroAssembler::kReturnAtEnd);
6798
6799 __ bind(&dont_need_remembered_set);
6800 }
6801
6802 CheckNeedsToInformIncrementalMarker(
6803 masm,
6804 kReturnOnNoNeedToInformIncrementalMarker,
6805 mode);
6806 InformIncrementalMarker(masm, mode);
6807 regs_.Restore(masm);
6808 __ ret(0);
6809}
6810
6811
6812void RecordWriteStub::InformIncrementalMarker(MacroAssembler* masm, Mode mode) {
6813 regs_.SaveCallerSaveRegisters(masm, save_fp_regs_mode_);
6814 int argument_count = 3;
6815 __ PrepareCallCFunction(argument_count, regs_.scratch0());
6816 __ mov(Operand(esp, 0 * kPointerSize), regs_.object());
6817 if (mode == INCREMENTAL_COMPACTION) {
6818 __ mov(Operand(esp, 1 * kPointerSize), regs_.address()); // Slot.
6819 } else {
6820 ASSERT(mode == INCREMENTAL);
6821 __ mov(regs_.scratch0(), Operand(regs_.address(), 0));
6822 __ mov(Operand(esp, 1 * kPointerSize), regs_.scratch0()); // Value.
6823 }
6824 __ mov(Operand(esp, 2 * kPointerSize),
6825 Immediate(ExternalReference::isolate_address()));
6826
6827 AllowExternalCallThatCantCauseGC scope(masm);
6828 if (mode == INCREMENTAL_COMPACTION) {
6829 __ CallCFunction(
6830 ExternalReference::incremental_evacuation_record_write_function(
6831 masm->isolate()),
6832 argument_count);
6833 } else {
6834 ASSERT(mode == INCREMENTAL);
6835 __ CallCFunction(
6836 ExternalReference::incremental_marking_record_write_function(
6837 masm->isolate()),
6838 argument_count);
6839 }
6840 regs_.RestoreCallerSaveRegisters(masm, save_fp_regs_mode_);
6841}
6842
6843
6844void RecordWriteStub::CheckNeedsToInformIncrementalMarker(
6845 MacroAssembler* masm,
6846 OnNoNeedToInformIncrementalMarker on_no_need,
6847 Mode mode) {
6848 Label object_is_black, need_incremental, need_incremental_pop_object;
6849
6850 // Let's look at the color of the object: If it is not black we don't have
6851 // to inform the incremental marker.
6852 __ JumpIfBlack(regs_.object(),
6853 regs_.scratch0(),
6854 regs_.scratch1(),
6855 &object_is_black,
6856 Label::kNear);
6857
6858 regs_.Restore(masm);
6859 if (on_no_need == kUpdateRememberedSetOnNoNeedToInformIncrementalMarker) {
6860 __ RememberedSetHelper(object_,
6861 address_,
6862 value_,
6863 save_fp_regs_mode_,
6864 MacroAssembler::kReturnAtEnd);
6865 } else {
6866 __ ret(0);
6867 }
6868
6869 __ bind(&object_is_black);
6870
6871 // Get the value from the slot.
6872 __ mov(regs_.scratch0(), Operand(regs_.address(), 0));
6873
6874 if (mode == INCREMENTAL_COMPACTION) {
6875 Label ensure_not_white;
6876
6877 __ CheckPageFlag(regs_.scratch0(), // Contains value.
6878 regs_.scratch1(), // Scratch.
6879 MemoryChunk::kEvacuationCandidateMask,
6880 zero,
6881 &ensure_not_white,
6882 Label::kNear);
6883
6884 __ CheckPageFlag(regs_.object(),
6885 regs_.scratch1(), // Scratch.
6886 MemoryChunk::kSkipEvacuationSlotsRecordingMask,
6887 not_zero,
6888 &ensure_not_white,
6889 Label::kNear);
6890
6891 __ jmp(&need_incremental);
6892
6893 __ bind(&ensure_not_white);
6894 }
6895
6896 // We need an extra register for this, so we push the object register
6897 // temporarily.
6898 __ push(regs_.object());
6899 __ EnsureNotWhite(regs_.scratch0(), // The value.
6900 regs_.scratch1(), // Scratch.
6901 regs_.object(), // Scratch.
6902 &need_incremental_pop_object,
6903 Label::kNear);
6904 __ pop(regs_.object());
6905
6906 regs_.Restore(masm);
6907 if (on_no_need == kUpdateRememberedSetOnNoNeedToInformIncrementalMarker) {
6908 __ RememberedSetHelper(object_,
6909 address_,
6910 value_,
6911 save_fp_regs_mode_,
6912 MacroAssembler::kReturnAtEnd);
6913 } else {
6914 __ ret(0);
6915 }
6916
6917 __ bind(&need_incremental_pop_object);
6918 __ pop(regs_.object());
6919
6920 __ bind(&need_incremental);
6921
6922 // Fall through when we need to inform the incremental marker.
6923}
6924
6925
ricow@chromium.org65fae842010-08-25 15:26:24 +00006926#undef __
6927
6928} } // namespace v8::internal
6929
6930#endif // V8_TARGET_ARCH_IA32