Revision: 14760
Author: [email protected]
Date: Wed May 22 14:27:00 2013
Log: Revert "Make Object.freeze fast"
and "Fix Object.freeze on dictionary-backed arrays to properly freeze
elements"
This reverts r14758 and r14759 due to introducing failures in Test262
[email protected]
Review URL: https://codereview.chromium.org/15681004
http://code.google.com/p/v8/source/detail?r=14760
Modified:
/branches/bleeding_edge/include/v8.h
/branches/bleeding_edge/src/heap.cc
/branches/bleeding_edge/src/heap.h
/branches/bleeding_edge/src/objects-inl.h
/branches/bleeding_edge/src/objects.cc
/branches/bleeding_edge/src/objects.h
/branches/bleeding_edge/src/property-details.h
/branches/bleeding_edge/src/runtime.cc
/branches/bleeding_edge/src/runtime.h
/branches/bleeding_edge/src/v8natives.js
/branches/bleeding_edge/test/mjsunit/object-freeze.js
=======================================
--- /branches/bleeding_edge/include/v8.h Wed May 22 11:53:58 2013
+++ /branches/bleeding_edge/include/v8.h Wed May 22 14:27:00 2013
@@ -5231,7 +5231,7 @@
static const int kNullValueRootIndex = 7;
static const int kTrueValueRootIndex = 8;
static const int kFalseValueRootIndex = 9;
- static const int kEmptyStringRootIndex = 129;
+ static const int kEmptyStringRootIndex = 127;
static const int kNodeClassIdOffset = 1 * kApiPointerSize;
static const int kNodeFlagsOffset = 1 * kApiPointerSize + 3;
=======================================
--- /branches/bleeding_edge/src/heap.cc Wed May 22 11:53:58 2013
+++ /branches/bleeding_edge/src/heap.cc Wed May 22 14:27:00 2013
@@ -2964,17 +2964,6 @@
}
set_observation_state(JSObject::cast(obj));
- { MaybeObject* maybe_obj = AllocateSymbol();
- if (!maybe_obj->ToObject(&obj)) return false;
- }
- set_frozen_symbol(Symbol::cast(obj));
-
- { MaybeObject* maybe_obj = SeededNumberDictionary::Allocate(this, 0,
TENURED);
- if (!maybe_obj->ToObject(&obj)) return false;
- }
- SeededNumberDictionary::cast(obj)->set_requires_slow_elements();
- set_empty_slow_element_dictionary(SeededNumberDictionary::cast(obj));
-
// Handling of script id generation is in FACTORY->NewScript.
set_last_script_id(undefined_value());
=======================================
--- /branches/bleeding_edge/src/heap.h Wed May 22 11:53:58 2013
+++ /branches/bleeding_edge/src/heap.h Wed May 22 14:27:00 2013
@@ -181,10 +181,7 @@
V(Smi, getter_stub_deopt_pc_offset,
GetterStubDeoptPCOffset) \
V(Smi, setter_stub_deopt_pc_offset,
SetterStubDeoptPCOffset) \
V(JSObject, observation_state,
ObservationState) \
- V(Map, external_map,
ExternalMap) \
- V(Symbol, frozen_symbol,
FrozenSymbol) \
- V(SeededNumberDictionary,
empty_slow_element_dictionary, \
- EmptySlowElementDictionary)
+ V(Map, external_map, ExternalMap)
#define ROOT_LIST(V) \
STRONG_ROOT_LIST(V) \
=======================================
--- /branches/bleeding_edge/src/objects-inl.h Wed May 22 11:53:58 2013
+++ /branches/bleeding_edge/src/objects-inl.h Wed May 22 14:27:00 2013
@@ -3590,16 +3590,6 @@
if (!FLAG_track_fields) return false;
return Deprecated::decode(bit_field3());
}
-
-
-void Map::freeze() {
- set_bit_field3(IsFrozen::update(bit_field3(), true));
-}
-
-
-bool Map::is_frozen() {
- return IsFrozen::decode(bit_field3());
-}
bool Map::CanBeDeprecated() {
=======================================
--- /branches/bleeding_edge/src/objects.cc Wed May 22 13:40:04 2013
+++ /branches/bleeding_edge/src/objects.cc Wed May 22 14:27:00 2013
@@ -4505,42 +4505,6 @@
return property_dictionary()->
TransformPropertiesToFastFor(this, unused_property_fields);
}
-
-
-static MUST_USE_RESULT MaybeObject* CopyFastElementsToDictionary(
- Isolate* isolate,
- FixedArrayBase* array,
- int length,
- SeededNumberDictionary* dictionary) {
- Heap* heap = isolate->heap();
- bool has_double_elements = array->IsFixedDoubleArray();
- for (int i = 0; i < length; i++) {
- Object* value = NULL;
- if (has_double_elements) {
- FixedDoubleArray* double_array = FixedDoubleArray::cast(array);
- if (double_array->is_the_hole(i)) {
- value = isolate->heap()->the_hole_value();
- } else {
- // Objects must be allocated in the old object space, since the
- // overall number of HeapNumbers needed for the conversion might
- // exceed the capacity of new space, and we would fail repeatedly
- // trying to convert the FixedDoubleArray.
- MaybeObject* maybe_value_object =
- heap->AllocateHeapNumber(double_array->get_scalar(i), TENURED);
- if (!maybe_value_object->ToObject(&value)) return
maybe_value_object;
- }
- } else {
- value = FixedArray::cast(array)->get(i);
- }
- if (!value->IsTheHole()) {
- PropertyDetails details = PropertyDetails(NONE, NORMAL, 0);
- MaybeObject* maybe_result =
- dictionary->AddNumberEntry(i, value, details);
- if (!maybe_result->To(&dictionary)) return maybe_result;
- }
- }
- return dictionary;
-}
Handle<SeededNumberDictionary> JSObject::NormalizeElements(
@@ -4574,14 +4538,44 @@
int old_capacity = 0;
int used_elements = 0;
GetElementsCapacityAndUsage(&old_capacity, &used_elements);
- SeededNumberDictionary* dictionary;
- MaybeObject* maybe_dictionary =
- SeededNumberDictionary::Allocate(GetHeap(), used_elements);
- if (!maybe_dictionary->To(&dictionary)) return maybe_dictionary;
+ SeededNumberDictionary* dictionary = NULL;
+ { Object* object;
+ MaybeObject* maybe =
+ SeededNumberDictionary::Allocate(GetHeap(), used_elements);
+ if (!maybe->ToObject(&object)) return maybe;
+ dictionary = SeededNumberDictionary::cast(object);
+ }
- maybe_dictionary = CopyFastElementsToDictionary(
- GetIsolate(), array, length, dictionary);
- if (!maybe_dictionary->To(&dictionary)) return maybe_dictionary;
+ // Copy the elements to the new backing store.
+ bool has_double_elements = array->IsFixedDoubleArray();
+ for (int i = 0; i < length; i++) {
+ Object* value = NULL;
+ if (has_double_elements) {
+ FixedDoubleArray* double_array = FixedDoubleArray::cast(array);
+ if (double_array->is_the_hole(i)) {
+ value = GetIsolate()->heap()->the_hole_value();
+ } else {
+ // Objects must be allocated in the old object space, since the
+ // overall number of HeapNumbers needed for the conversion might
+ // exceed the capacity of new space, and we would fail repeatedly
+ // trying to convert the FixedDoubleArray.
+ MaybeObject* maybe_value_object =
+ GetHeap()->AllocateHeapNumber(double_array->get_scalar(i),
TENURED);
+ if (!maybe_value_object->ToObject(&value)) return
maybe_value_object;
+ }
+ } else {
+ ASSERT(old_map->has_fast_smi_or_object_elements());
+ value = FixedArray::cast(array)->get(i);
+ }
+ PropertyDetails details = PropertyDetails(NONE, NORMAL, 0);
+ if (!value->IsTheHole()) {
+ Object* result;
+ MaybeObject* maybe_result =
+ dictionary->AddNumberEntry(i, value, details);
+ if (!maybe_result->ToObject(&result)) return maybe_result;
+ dictionary = SeededNumberDictionary::cast(result);
+ }
+ }
// Switch to using the dictionary as the backing storage for elements.
if (is_arguments) {
@@ -4589,11 +4583,11 @@
} else {
// Set the new map first to satify the elements type assert in
// set_elements().
- Map* new_map;
+ Object* new_map;
MaybeObject* maybe = GetElementsTransitionMap(GetIsolate(),
DICTIONARY_ELEMENTS);
- if (!maybe->To(&new_map)) return maybe;
- set_map(new_map);
+ if (!maybe->ToObject(&new_map)) return maybe;
+ set_map(Map::cast(new_map));
set_elements(dictionary);
}
@@ -5337,7 +5331,6 @@
// Do a map transition, other objects with this map may still
// be extensible.
- // TODO(adamk): Extend the NormalizedMapCache to handle non-extensible
maps.
Map* new_map;
MaybeObject* maybe = map()->Copy();
if (!maybe->To(&new_map)) return maybe;
@@ -5347,138 +5340,6 @@
ASSERT(!map()->is_extensible());
return new_map;
}
-
-
-template<typename Dictionary>
-static void FreezeDictionary(Dictionary* dictionary) {
- int capacity = dictionary->Capacity();
- for (int i = 0; i < capacity; i++) {
- Object* k = dictionary->KeyAt(i);
- if (dictionary->IsKey(k)) {
- PropertyDetails details = dictionary->DetailsAt(i);
- details = details.CopyAddAttributes(FROZEN);
- dictionary->DetailsAtPut(i, details);
- }
- }
-}
-
-
-MUST_USE_RESULT MaybeObject* JSObject::Freeze(Isolate* isolate) {
- // Freezing non-strict arguments should be handled elsewhere.
- ASSERT(!HasNonStrictArgumentsElements());
-
- Heap* heap = isolate->heap();
-
- if (map()->is_frozen()) return this;
-
- if (IsAccessCheckNeeded() &&
- !isolate->MayNamedAccess(this,
- heap->undefined_value(),
- v8::ACCESS_KEYS)) {
- isolate->ReportFailedAccessCheck(this, v8::ACCESS_KEYS);
- return heap->false_value();
- }
-
- if (IsJSGlobalProxy()) {
- Object* proto = GetPrototype();
- if (proto->IsNull()) return this;
- ASSERT(proto->IsJSGlobalObject());
- return JSObject::cast(proto)->Freeze(isolate);
- }
-
- // It's not possible to freeze objects with external array elements
- if (HasExternalArrayElements()) {
- HandleScope scope(isolate);
- Handle<Object> object(this, isolate);
- Handle<Object> error =
- isolate->factory()->NewTypeError(
- "cant_prevent_ext_external_array_elements",
- HandleVector(&object, 1));
- return isolate->Throw(*error);
- }
-
- SeededNumberDictionary* new_element_dictionary = NULL;
- if (!elements()->IsDictionary()) {
- int length = IsJSArray()
- ? Smi::cast(JSArray::cast(this)->length())->value()
- : elements()->length();
- if (length > 0) {
- int capacity = 0;
- int used = 0;
- GetElementsCapacityAndUsage(&capacity, &used);
- MaybeObject* maybe_dict = SeededNumberDictionary::Allocate(heap,
used);
- if (!maybe_dict->To(&new_element_dictionary)) return maybe_dict;
-
- // Move elements to a dictionary; avoid calling NormalizeElements to
avoid
- // unnecessary transitions.
- maybe_dict = CopyFastElementsToDictionary(isolate, elements(),
length,
- new_element_dictionary);
- if (!maybe_dict->To(&new_element_dictionary)) return maybe_dict;
- } else {
- // No existing elements, use a pre-allocated empty backing store
- new_element_dictionary = heap->empty_slow_element_dictionary();
- }
- }
-
- LookupResult result(isolate);
- map()->LookupTransition(this, heap->frozen_symbol(), &result);
- if (result.IsTransition()) {
- Map* transition_map = result.GetTransitionTarget();
- ASSERT(transition_map->has_dictionary_elements());
- ASSERT(transition_map->is_frozen());
- ASSERT(!transition_map->is_extensible());
- set_map(transition_map);
- } else if (HasFastProperties() && map()->CanHaveMoreTransitions()) {
- // Create a new descriptor array with fully-frozen properties
- int num_descriptors = map()->NumberOfOwnDescriptors();
- DescriptorArray* new_descriptors;
- MaybeObject* maybe_descriptors =
-
map()->instance_descriptors()->CopyUpToAddAttributes(num_descriptors,
- FROZEN);
- if (!maybe_descriptors->To(&new_descriptors)) return maybe_descriptors;
-
- Map* new_map;
- MaybeObject* maybe_new_map = map()->CopyReplaceDescriptors(
- new_descriptors, INSERT_TRANSITION, heap->frozen_symbol());
- if (!maybe_new_map->To(&new_map)) return maybe_new_map;
- new_map->freeze();
- new_map->set_is_extensible(false);
- new_map->set_elements_kind(DICTIONARY_ELEMENTS);
- set_map(new_map);
- } else {
- // Slow path: need to normalize properties for safety
- MaybeObject* maybe = NormalizeProperties(CLEAR_INOBJECT_PROPERTIES, 0);
- if (maybe->IsFailure()) return maybe;
-
- // Create a new map, since other objects with this map may be
extensible.
- // TODO(adamk): Extend the NormalizedMapCache to handle non-extensible
maps.
- Map* new_map;
- MaybeObject* maybe_copy = map()->Copy();
- if (!maybe_copy->To(&new_map)) return maybe_copy;
- new_map->freeze();
- new_map->set_is_extensible(false);
- new_map->set_elements_kind(DICTIONARY_ELEMENTS);
- set_map(new_map);
-
- // Freeze dictionary-mode properties
- FreezeDictionary(property_dictionary());
- }
-
- ASSERT(map()->has_dictionary_elements());
- if (new_element_dictionary != NULL) {
- set_elements(new_element_dictionary);
- }
-
- if (elements() != heap->empty_slow_element_dictionary()) {
- SeededNumberDictionary* dictionary = element_dictionary();
- // Make sure we never go back to the fast case
- dictionary->set_requires_slow_elements();
- // Freeze all elements in the dictionary
- FreezeDictionary(dictionary);
- }
-
- return this;
-}
MUST_USE_RESULT MaybeObject* JSObject::DeepCopy(Isolate* isolate) {
@@ -6505,9 +6366,9 @@
MaybeObject* Map::CopyReplaceDescriptors(DescriptorArray* descriptors,
- TransitionFlag flag,
Name* name,
- SimpleTransitionFlag simple_flag)
{
+ TransitionFlag flag,
+ int descriptor_index) {
ASSERT(descriptors->IsSortedNoDuplicates());
Map* result;
@@ -6518,8 +6379,14 @@
if (flag == INSERT_TRANSITION && CanHaveMoreTransitions()) {
TransitionArray* transitions;
+ SimpleTransitionFlag simple_flag =
+ (descriptor_index == descriptors->number_of_descriptors() - 1)
+ ? SIMPLE_TRANSITION
+ : FULL_TRANSITION;
+ ASSERT(name == descriptors->GetKey(descriptor_index));
MaybeObject* maybe_transitions = AddTransition(name, result,
simple_flag);
if (!maybe_transitions->To(&transitions)) return maybe_transitions;
+
set_transitions(transitions);
result->SetBackPointer(this);
} else if (flag != OMIT_TRANSITION_KEEP_REPRESENTATIONS) {
@@ -6635,7 +6502,7 @@
descriptors->CopyUpTo(number_of_own_descriptors);
if (!maybe_descriptors->To(&new_descriptors)) return maybe_descriptors;
- return CopyReplaceDescriptors(new_descriptors, OMIT_TRANSITION);
+ return CopyReplaceDescriptors(new_descriptors, NULL, OMIT_TRANSITION, 0);
}
@@ -6647,7 +6514,7 @@
descriptors->CopyUpTo(number_of_own_descriptors);
if (!maybe_descriptors->To(&new_descriptors)) return maybe_descriptors;
- return CopyReplaceDescriptors(new_descriptors, OMIT_TRANSITION);
+ return CopyReplaceDescriptors(new_descriptors, NULL, OMIT_TRANSITION, 0);
}
@@ -6688,7 +6555,9 @@
}
Name* key = descriptor->GetKey();
- return CopyReplaceDescriptors(new_descriptors, flag, key,
SIMPLE_TRANSITION);
+ int insertion_index = new_descriptors->number_of_descriptors() - 1;
+
+ return CopyReplaceDescriptors(new_descriptors, key, flag,
insertion_index);
}
@@ -6709,8 +6578,7 @@
}
-MaybeObject* DescriptorArray::CopyUpToAddAttributes(
- int enumeration_index, PropertyAttributes attributes) {
+MaybeObject* DescriptorArray::CopyUpTo(int enumeration_index) {
if (enumeration_index == 0) return GetHeap()->empty_descriptor_array();
int size = enumeration_index;
@@ -6720,16 +6588,8 @@
if (!maybe_descriptors->To(&descriptors)) return maybe_descriptors;
DescriptorArray::WhitenessWitness witness(descriptors);
- if (attributes != NONE) {
- for (int i = 0; i < size; ++i) {
- PropertyDetails details =
GetDetails(i).CopyAddAttributes(attributes);
- Descriptor desc(GetKey(i), GetValue(i), details);
- descriptors->Set(i, &desc, witness);
- }
- } else {
- for (int i = 0; i < size; ++i) {
- descriptors->CopyFrom(i, this, i, witness);
- }
+ for (int i = 0; i < size; ++i) {
+ descriptors->CopyFrom(i, this, i, witness);
}
if (number_of_descriptors() != enumeration_index) descriptors->Sort();
@@ -6770,11 +6630,7 @@
// Re-sort if descriptors were removed.
if (new_size != descriptors->length()) new_descriptors->Sort();
- SimpleTransitionFlag simple_flag =
- (insertion_index == descriptors->number_of_descriptors() - 1)
- ? SIMPLE_TRANSITION
- : FULL_TRANSITION;
- return CopyReplaceDescriptors(new_descriptors, flag, key, simple_flag);
+ return CopyReplaceDescriptors(new_descriptors, key, flag,
insertion_index);
}
@@ -13527,13 +13383,13 @@
template class Dictionary<UnseededNumberDictionaryShape, uint32_t>;
template MaybeObject* Dictionary<SeededNumberDictionaryShape, uint32_t>::
- Allocate(Heap* heap, int at_least_space_for, PretenureFlag pretenure);
+ Allocate(Heap* heap, int at_least_space_for);
template MaybeObject* Dictionary<UnseededNumberDictionaryShape, uint32_t>::
- Allocate(Heap* heap, int at_least_space_for, PretenureFlag pretenure);
+ Allocate(Heap* heap, int at_least_space_for);
template MaybeObject* Dictionary<NameDictionaryShape, Name*>::
- Allocate(Heap* heap, int n, PretenureFlag pretenure);
+ Allocate(Heap* heap, int n);
template MaybeObject* Dictionary<SeededNumberDictionaryShape,
uint32_t>::AtPut(
uint32_t, Object*);
@@ -14477,15 +14333,10 @@
template<typename Shape, typename Key>
MaybeObject* Dictionary<Shape, Key>::Allocate(Heap* heap,
- int at_least_space_for,
- PretenureFlag pretenure) {
+ int at_least_space_for) {
Object* obj;
{ MaybeObject* maybe_obj =
- HashTable<Shape, Key>::Allocate(
- heap,
- at_least_space_for,
- HashTable<Shape, Key>::USE_DEFAULT_MINIMUM_CAPACITY,
- pretenure);
+ HashTable<Shape, Key>::Allocate(heap, at_least_space_for);
if (!maybe_obj->ToObject(&obj)) return maybe_obj;
}
// Initialize the next enumeration index.
=======================================
--- /branches/bleeding_edge/src/objects.h Wed May 22 11:53:58 2013
+++ /branches/bleeding_edge/src/objects.h Wed May 22 14:27:00 2013
@@ -2297,9 +2297,6 @@
static Handle<Object> PreventExtensions(Handle<JSObject> object);
MUST_USE_RESULT MaybeObject* PreventExtensions();
- // ES5 Object.freeze
- MUST_USE_RESULT MaybeObject* Freeze(Isolate* isolate);
-
// Copy object
MUST_USE_RESULT MaybeObject* DeepCopy(Isolate* isolate);
@@ -2837,13 +2834,7 @@
int new_size,
DescriptorArray* other);
- MUST_USE_RESULT MaybeObject* CopyUpTo(int enumeration_index) {
- return CopyUpToAddAttributes(enumeration_index, NONE);
- }
-
- MUST_USE_RESULT MaybeObject* CopyUpToAddAttributes(
- int enumeration_index,
- PropertyAttributes attributes);
+ MUST_USE_RESULT MaybeObject* CopyUpTo(int enumeration_index);
// Sort the instance descriptors by the hash codes of their keys.
void Sort();
@@ -3378,10 +3369,8 @@
}
// Returns a new array for dictionary usage. Might return Failure.
- MUST_USE_RESULT static MaybeObject* Allocate(
- Heap* heap,
- int at_least_space_for,
- PretenureFlag pretenure = NOT_TENURED);
+ MUST_USE_RESULT static MaybeObject* Allocate(Heap* heap,
+ int at_least_space_for);
// Ensure enough space for n additional elements.
MUST_USE_RESULT MaybeObject* EnsureCapacity(int n, Key key);
@@ -5082,7 +5071,6 @@
class OwnsDescriptors: public BitField<bool, 25, 1> {};
class IsObserved: public BitField<bool, 26, 1> {};
class Deprecated: public BitField<bool, 27, 1> {};
- class IsFrozen: public BitField<bool, 28, 1> {};
// Tells whether the object in the prototype property will be used
// for instances created from this function. If the prototype
@@ -5385,8 +5373,6 @@
inline void set_owns_descriptors(bool is_shared);
inline bool is_observed();
inline void set_is_observed(bool is_observed);
- inline void freeze();
- inline bool is_frozen();
inline void deprecate();
inline bool is_deprecated();
inline bool CanBeDeprecated();
@@ -5401,9 +5387,9 @@
MUST_USE_RESULT MaybeObject* CopyDropDescriptors();
MUST_USE_RESULT MaybeObject* CopyReplaceDescriptors(
DescriptorArray* descriptors,
+ Name* name,
TransitionFlag flag,
- Name* name = NULL,
- SimpleTransitionFlag simple_flag = FULL_TRANSITION);
+ int descriptor_index);
MUST_USE_RESULT MaybeObject* CopyInstallDescriptors(
int new_descriptor,
DescriptorArray* descriptors);
=======================================
--- /branches/bleeding_edge/src/property-details.h Wed May 22 11:53:58 2013
+++ /branches/bleeding_edge/src/property-details.h Wed May 22 14:27:00 2013
@@ -39,7 +39,7 @@
DONT_ENUM = v8::DontEnum,
DONT_DELETE = v8::DontDelete,
- SEALED = DONT_DELETE,
+ SEALED = DONT_ENUM | DONT_DELETE,
FROZEN = SEALED | READ_ONLY,
SYMBOLIC = 8, // Used to filter symbol names
@@ -180,11 +180,6 @@
PropertyDetails CopyWithRepresentation(Representation representation) {
return PropertyDetails(value_, representation);
}
- PropertyDetails CopyAddAttributes(PropertyAttributes new_attributes) {
- new_attributes =
- static_cast<PropertyAttributes>(attributes() | new_attributes);
- return PropertyDetails(value_, new_attributes);
- }
// Conversion for storing details as Object*.
explicit inline PropertyDetails(Smi* smi);
@@ -242,9 +237,6 @@
value_ = RepresentationField::update(
value, EncodeRepresentation(representation));
}
- PropertyDetails(int value, PropertyAttributes attributes) {
- value_ = AttributesField::update(value, attributes);
- }
uint32_t value_;
};
=======================================
--- /branches/bleeding_edge/src/runtime.cc Wed May 22 11:53:58 2013
+++ /branches/bleeding_edge/src/runtime.cc Wed May 22 14:27:00 2013
@@ -2690,14 +2690,6 @@
Handle<Object> error = isolate->factory()->NewError(message, argv);
return isolate->Throw(*error);
}
-
-
-RUNTIME_FUNCTION(MaybeObject*, Runtime_ObjectFreeze) {
- NoHandleAllocation ha(isolate);
- ASSERT(args.length() == 1);
- CONVERT_ARG_CHECKED(JSObject, object, 0);
- return object->Freeze(isolate);
-}
MUST_USE_RESULT static MaybeObject* CharFromCode(Isolate* isolate,
@@ -13313,7 +13305,6 @@
ELEMENTS_KIND_CHECK_RUNTIME_FUNCTION(FastDoubleElements)
ELEMENTS_KIND_CHECK_RUNTIME_FUNCTION(FastHoleyElements)
ELEMENTS_KIND_CHECK_RUNTIME_FUNCTION(DictionaryElements)
-ELEMENTS_KIND_CHECK_RUNTIME_FUNCTION(NonStrictArgumentsElements)
ELEMENTS_KIND_CHECK_RUNTIME_FUNCTION(ExternalPixelElements)
ELEMENTS_KIND_CHECK_RUNTIME_FUNCTION(ExternalArrayElements)
ELEMENTS_KIND_CHECK_RUNTIME_FUNCTION(ExternalByteElements)
=======================================
--- /branches/bleeding_edge/src/runtime.h Wed May 22 11:53:58 2013
+++ /branches/bleeding_edge/src/runtime.h Wed May 22 14:27:00 2013
@@ -303,9 +303,6 @@
F(ResumeJSGeneratorObject, 3, 1) \
F(ThrowGeneratorStateError, 1, 1) \
\
- /* ES5 */ \
- F(ObjectFreeze, 1, 1) \
- \
/* Harmony modules */ \
F(IsJSModule, 1, 1) \
\
@@ -426,7 +423,6 @@
F(HasFastDoubleElements, 1, 1) \
F(HasFastHoleyElements, 1, 1) \
F(HasDictionaryElements, 1, 1) \
- F(HasNonStrictArgumentsElements, 1, 1) \
F(HasExternalPixelElements, 1, 1) \
F(HasExternalArrayElements, 1, 1) \
F(HasExternalByteElements, 1, 1) \
=======================================
--- /branches/bleeding_edge/src/v8natives.js Wed May 22 11:53:58 2013
+++ /branches/bleeding_edge/src/v8natives.js Wed May 22 14:27:00 2013
@@ -1225,27 +1225,20 @@
if (!IS_SPEC_OBJECT(obj)) {
throw MakeTypeError("called_on_non_object", ["Object.freeze"]);
}
- var isProxy = %IsJSProxy(obj);
- if (isProxy || %HasNonStrictArgumentsElements(obj)) {
- if (isProxy) {
- ProxyFix(obj);
+ if (%IsJSProxy(obj)) {
+ ProxyFix(obj);
+ }
+ var names = ObjectGetOwnPropertyNames(obj);
+ for (var i = 0; i < names.length; i++) {
+ var name = names[i];
+ var desc = GetOwnProperty(obj, name);
+ if (desc.isWritable() || desc.isConfigurable()) {
+ if (IsDataDescriptor(desc)) desc.setWritable(false);
+ desc.setConfigurable(false);
+ DefineOwnProperty(obj, name, desc, true);
}
- var names = ObjectGetOwnPropertyNames(obj);
- for (var i = 0; i < names.length; i++) {
- var name = names[i];
- var desc = GetOwnProperty(obj, name);
- if (desc.isWritable() || desc.isConfigurable()) {
- if (IsDataDescriptor(desc)) desc.setWritable(false);
- desc.setConfigurable(false);
- DefineOwnProperty(obj, name, desc, true);
- }
- }
- %PreventExtensions(obj);
- } else {
- // TODO(adamk): Is it worth going to this fast path if the
- // object's properties are already in dictionary mode?
- %ObjectFreeze(obj);
}
+ %PreventExtensions(obj);
return obj;
}
=======================================
--- /branches/bleeding_edge/test/mjsunit/object-freeze.js Wed May 22
13:40:04 2013
+++ /branches/bleeding_edge/test/mjsunit/object-freeze.js Wed May 22
14:27:00 2013
@@ -28,7 +28,6 @@
// Tests the Object.freeze and Object.isFrozen methods - ES 15.2.3.9 and
// ES 15.2.3.12
-// Flags: --allow-natives-syntax
// Test that we throw an error if an object is not passed as argument.
var non_objects = new Array(undefined, null, 1, -1, 0, 42.43);
@@ -192,70 +191,3 @@
// Make sure that Object.freeze returns the frozen object.
var obj6 = {}
assertTrue(obj6 === Object.freeze(obj6))
-
-// Test that the enumerable attribute is unperturbed by freezing.
-obj = { x: 42, y: 'foo' };
-Object.defineProperty(obj, 'y', {enumerable: false});
-Object.freeze(obj);
-desc = Object.getOwnPropertyDescriptor(obj, 'x');
-assertTrue(desc.enumerable);
-desc = Object.getOwnPropertyDescriptor(obj, 'y');
-assertFalse(desc.enumerable);
-
-// Fast properties should remain fast
-obj = { x: 42, y: 'foo' };
-assertTrue(%HasFastProperties(obj));
-Object.freeze(obj);
-assertTrue(%HasFastProperties(obj));
-
-// Frozen objects should share maps where possible
-obj = { prop1: 1, prop2: 2 };
-obj2 = { prop1: 3, prop2: 4 };
-assertTrue(%HaveSameMap(obj, obj2));
-Object.freeze(obj);
-Object.freeze(obj2);
-assertTrue(%HaveSameMap(obj, obj2));
-
-// Frozen objects should share maps even when they have elements
-obj = { prop1: 1, prop2: 2, 75: 'foo' };
-obj2 = { prop1: 3, prop2: 4, 150: 'bar' };
-assertTrue(%HaveSameMap(obj, obj2));
-Object.freeze(obj);
-Object.freeze(obj2);
-assertTrue(%HaveSameMap(obj, obj2));
-
-// Setting elements after freezing should not be allowed
-obj = { prop: 'thing' };
-Object.freeze(obj);
-obj[0] = 'hello';
-assertFalse(obj.hasOwnProperty(0));
-
-// Freezing an object in dictionary mode should work
-obj = { };
-for (var i = 0; i < 100; ++i) {
- obj['x' + i] = i;
-}
-assertFalse(%HasFastProperties(obj));
-Object.freeze(obj);
-assertFalse(%HasFastProperties(obj));
-assertTrue(Object.isFrozen(obj));
-assertFalse(Object.isExtensible(obj));
-for (var i = 0; i < 100; ++i) {
- desc = Object.getOwnPropertyDescriptor(obj, 'x' + i);
- assertFalse(desc.writable);
- assertFalse(desc.configurable);
-}
-
-// Freezing arguments should work
-var func = function(arg) {
- Object.freeze(arguments);
- assertTrue(Object.isFrozen(arguments));
-};
-func('hello', 'world');
-func('goodbye', 'world');
-
-// Freezing sparse arrays
-var sparseArr = [0, 1];
-sparseArr[10000] = 10000;
-Object.freeze(sparseArr);
-assertTrue(Object.isFrozen(sparseArr));
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
