| 1 | /* |
| 2 | * Copyright (C) 2012, 2014-2016 Apple Inc. All rights reserved. |
| 3 | * |
| 4 | * Redistribution and use in source and binary forms, with or without |
| 5 | * modification, are permitted provided that the following conditions |
| 6 | * are met: |
| 7 | * |
| 8 | * 1. Redistributions of source code must retain the above copyright |
| 9 | * notice, this list of conditions and the following disclaimer. |
| 10 | * 2. Redistributions in binary form must reproduce the above copyright |
| 11 | * notice, this list of conditions and the following disclaimer in the |
| 12 | * documentation and/or other materials provided with the distribution. |
| 13 | * 3. Neither the name of Apple Inc. ("Apple") nor the names of |
| 14 | * its contributors may be used to endorse or promote products derived |
| 15 | * from this software without specific prior written permission. |
| 16 | * |
| 17 | * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY |
| 18 | * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED |
| 19 | * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE |
| 20 | * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY |
| 21 | * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES |
| 22 | * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; |
| 23 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND |
| 24 | * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| 25 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
| 26 | * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| 27 | */ |
| 28 | |
| 29 | #pragma once |
| 30 | |
| 31 | #include "JSScope.h" |
| 32 | #include "PropertyDescriptor.h" |
| 33 | #include "SymbolTable.h" |
| 34 | #include "ThrowScope.h" |
| 35 | #include "VariableWriteFireDetail.h" |
| 36 | |
| 37 | namespace JSC { |
| 38 | |
| 39 | class JSSymbolTableObject : public JSScope { |
| 40 | public: |
| 41 | typedef JSScope Base; |
| 42 | static const unsigned StructureFlags = Base::StructureFlags | OverridesGetPropertyNames; |
| 43 | |
| 44 | SymbolTable* symbolTable() const { return m_symbolTable.get(); } |
| 45 | |
| 46 | JS_EXPORT_PRIVATE static bool deleteProperty(JSCell*, ExecState*, PropertyName); |
| 47 | JS_EXPORT_PRIVATE static void getOwnNonIndexPropertyNames(JSObject*, ExecState*, PropertyNameArray&, EnumerationMode); |
| 48 | |
| 49 | static ptrdiff_t offsetOfSymbolTable() { return OBJECT_OFFSETOF(JSSymbolTableObject, m_symbolTable); } |
| 50 | |
| 51 | DECLARE_EXPORT_INFO; |
| 52 | |
| 53 | protected: |
| 54 | JSSymbolTableObject(VM& vm, Structure* structure, JSScope* scope) |
| 55 | : Base(vm, structure, scope) |
| 56 | { |
| 57 | } |
| 58 | |
| 59 | JSSymbolTableObject(VM& vm, Structure* structure, JSScope* scope, SymbolTable* symbolTable) |
| 60 | : Base(vm, structure, scope) |
| 61 | { |
| 62 | ASSERT(symbolTable); |
| 63 | setSymbolTable(vm, symbolTable); |
| 64 | } |
| 65 | |
| 66 | void setSymbolTable(VM& vm, SymbolTable* symbolTable) |
| 67 | { |
| 68 | ASSERT(!m_symbolTable); |
| 69 | if (auto* singletonScope = symbolTable->singletonScope()) |
| 70 | singletonScope->notifyWrite(vm, this, "Allocated a scope" ); |
| 71 | m_symbolTable.set(vm, this, symbolTable); |
| 72 | } |
| 73 | |
| 74 | static void visitChildren(JSCell*, SlotVisitor&); |
| 75 | |
| 76 | private: |
| 77 | WriteBarrier<SymbolTable> m_symbolTable; |
| 78 | }; |
| 79 | |
| 80 | template<typename SymbolTableObjectType> |
| 81 | inline bool symbolTableGet( |
| 82 | SymbolTableObjectType* object, PropertyName propertyName, PropertySlot& slot) |
| 83 | { |
| 84 | SymbolTable& symbolTable = *object->symbolTable(); |
| 85 | ConcurrentJSLocker locker(symbolTable.m_lock); |
| 86 | SymbolTable::Map::iterator iter = symbolTable.find(locker, propertyName.uid()); |
| 87 | if (iter == symbolTable.end(locker)) |
| 88 | return false; |
| 89 | SymbolTableEntry::Fast entry = iter->value; |
| 90 | ASSERT(!entry.isNull()); |
| 91 | |
| 92 | ScopeOffset offset = entry.scopeOffset(); |
| 93 | // Defend against the inspector asking for a var after it has been optimized out. |
| 94 | if (!object->isValidScopeOffset(offset)) |
| 95 | return false; |
| 96 | |
| 97 | slot.setValue(object, entry.getAttributes() | PropertyAttribute::DontDelete, object->variableAt(offset).get()); |
| 98 | return true; |
| 99 | } |
| 100 | |
| 101 | template<typename SymbolTableObjectType> |
| 102 | inline bool symbolTableGet( |
| 103 | SymbolTableObjectType* object, PropertyName propertyName, PropertyDescriptor& descriptor) |
| 104 | { |
| 105 | SymbolTable& symbolTable = *object->symbolTable(); |
| 106 | ConcurrentJSLocker locker(symbolTable.m_lock); |
| 107 | SymbolTable::Map::iterator iter = symbolTable.find(locker, propertyName.uid()); |
| 108 | if (iter == symbolTable.end(locker)) |
| 109 | return false; |
| 110 | SymbolTableEntry::Fast entry = iter->value; |
| 111 | ASSERT(!entry.isNull()); |
| 112 | |
| 113 | ScopeOffset offset = entry.scopeOffset(); |
| 114 | // Defend against the inspector asking for a var after it has been optimized out. |
| 115 | if (!object->isValidScopeOffset(offset)) |
| 116 | return false; |
| 117 | |
| 118 | descriptor.setDescriptor(object->variableAt(offset).get(), entry.getAttributes() | PropertyAttribute::DontDelete); |
| 119 | return true; |
| 120 | } |
| 121 | |
| 122 | template<typename SymbolTableObjectType> |
| 123 | inline bool symbolTableGet( |
| 124 | SymbolTableObjectType* object, PropertyName propertyName, PropertySlot& slot, |
| 125 | bool& slotIsWriteable) |
| 126 | { |
| 127 | SymbolTable& symbolTable = *object->symbolTable(); |
| 128 | ConcurrentJSLocker locker(symbolTable.m_lock); |
| 129 | SymbolTable::Map::iterator iter = symbolTable.find(locker, propertyName.uid()); |
| 130 | if (iter == symbolTable.end(locker)) |
| 131 | return false; |
| 132 | SymbolTableEntry::Fast entry = iter->value; |
| 133 | ASSERT(!entry.isNull()); |
| 134 | |
| 135 | ScopeOffset offset = entry.scopeOffset(); |
| 136 | // Defend against the inspector asking for a var after it has been optimized out. |
| 137 | if (!object->isValidScopeOffset(offset)) |
| 138 | return false; |
| 139 | |
| 140 | slot.setValue(object, entry.getAttributes() | PropertyAttribute::DontDelete, object->variableAt(offset).get()); |
| 141 | slotIsWriteable = !entry.isReadOnly(); |
| 142 | return true; |
| 143 | } |
| 144 | |
| 145 | template<typename SymbolTableObjectType> |
| 146 | ALWAYS_INLINE void symbolTablePutTouchWatchpointSet(VM& vm, SymbolTableObjectType* object, PropertyName propertyName, JSValue value, WriteBarrierBase<Unknown>* reg, WatchpointSet* set) |
| 147 | { |
| 148 | reg->set(vm, object, value); |
| 149 | if (set) |
| 150 | VariableWriteFireDetail::touch(vm, set, object, propertyName); |
| 151 | } |
| 152 | |
| 153 | template<typename SymbolTableObjectType> |
| 154 | ALWAYS_INLINE void symbolTablePutInvalidateWatchpointSet(VM& vm, SymbolTableObjectType* object, PropertyName propertyName, JSValue value, WriteBarrierBase<Unknown>* reg, WatchpointSet* set) |
| 155 | { |
| 156 | reg->set(vm, object, value); |
| 157 | if (set) |
| 158 | set->invalidate(vm, VariableWriteFireDetail(object, propertyName)); // Don't mess around - if we had found this statically, we would have invalidated it. |
| 159 | } |
| 160 | |
| 161 | enum class SymbolTablePutMode { |
| 162 | Touch, |
| 163 | Invalidate |
| 164 | }; |
| 165 | |
| 166 | template<SymbolTablePutMode symbolTablePutMode, typename SymbolTableObjectType> |
| 167 | inline bool symbolTablePut(SymbolTableObjectType* object, ExecState* exec, PropertyName propertyName, JSValue value, bool shouldThrowReadOnlyError, bool ignoreReadOnlyErrors, bool& putResult) |
| 168 | { |
| 169 | VM& vm = exec->vm(); |
| 170 | auto scope = DECLARE_THROW_SCOPE(vm); |
| 171 | |
| 172 | WatchpointSet* set = nullptr; |
| 173 | WriteBarrierBase<Unknown>* reg; |
| 174 | { |
| 175 | SymbolTable& symbolTable = *object->symbolTable(); |
| 176 | // FIXME: This is very suspicious. We shouldn't need a GC-safe lock here. |
| 177 | // https://bugs.webkit.org/show_bug.cgi?id=134601 |
| 178 | GCSafeConcurrentJSLocker locker(symbolTable.m_lock, vm.heap); |
| 179 | SymbolTable::Map::iterator iter = symbolTable.find(locker, propertyName.uid()); |
| 180 | if (iter == symbolTable.end(locker)) |
| 181 | return false; |
| 182 | bool wasFat; |
| 183 | SymbolTableEntry::Fast fastEntry = iter->value.getFast(wasFat); |
| 184 | ASSERT(!fastEntry.isNull()); |
| 185 | if (fastEntry.isReadOnly() && !ignoreReadOnlyErrors) { |
| 186 | if (shouldThrowReadOnlyError) |
| 187 | throwTypeError(exec, scope, ReadonlyPropertyWriteError); |
| 188 | putResult = false; |
| 189 | return true; |
| 190 | } |
| 191 | |
| 192 | ScopeOffset offset = fastEntry.scopeOffset(); |
| 193 | |
| 194 | // Defend against the inspector asking for a var after it has been optimized out. |
| 195 | if (!object->isValidScopeOffset(offset)) |
| 196 | return false; |
| 197 | |
| 198 | set = iter->value.watchpointSet(); |
| 199 | reg = &object->variableAt(offset); |
| 200 | } |
| 201 | // I'd prefer we not hold lock while executing barriers, since I prefer to reserve |
| 202 | // the right for barriers to be able to trigger GC. And I don't want to hold VM |
| 203 | // locks while GC'ing. |
| 204 | if (symbolTablePutMode == SymbolTablePutMode::Invalidate) |
| 205 | symbolTablePutInvalidateWatchpointSet(vm, object, propertyName, value, reg, set); |
| 206 | else |
| 207 | symbolTablePutTouchWatchpointSet(vm, object, propertyName, value, reg, set); |
| 208 | putResult = true; |
| 209 | return true; |
| 210 | } |
| 211 | |
| 212 | template<typename SymbolTableObjectType> |
| 213 | inline bool symbolTablePutTouchWatchpointSet( |
| 214 | SymbolTableObjectType* object, ExecState* exec, PropertyName propertyName, JSValue value, |
| 215 | bool shouldThrowReadOnlyError, bool ignoreReadOnlyErrors, bool& putResult) |
| 216 | { |
| 217 | ASSERT(!Heap::heap(value) || Heap::heap(value) == Heap::heap(object)); |
| 218 | return symbolTablePut<SymbolTablePutMode::Touch>(object, exec, propertyName, value, shouldThrowReadOnlyError, ignoreReadOnlyErrors, putResult); |
| 219 | } |
| 220 | |
| 221 | template<typename SymbolTableObjectType> |
| 222 | inline bool symbolTablePutInvalidateWatchpointSet( |
| 223 | SymbolTableObjectType* object, ExecState* exec, PropertyName propertyName, JSValue value, |
| 224 | bool shouldThrowReadOnlyError, bool ignoreReadOnlyErrors, bool& putResult) |
| 225 | { |
| 226 | ASSERT(!Heap::heap(value) || Heap::heap(value) == Heap::heap(object)); |
| 227 | return symbolTablePut<SymbolTablePutMode::Invalidate>(object, exec, propertyName, value, shouldThrowReadOnlyError, ignoreReadOnlyErrors, putResult); |
| 228 | } |
| 229 | |
| 230 | } // namespace JSC |
| 231 | |