|  | // Copyright 2014 the V8 project authors. All rights reserved. | 
|  | // Use of this source code is governed by a BSD-style license that can be | 
|  | // found in the LICENSE file. | 
|  |  | 
|  | #include "src/bootstrapper.h" | 
|  |  | 
|  | #include "src/accessors.h" | 
|  | #include "src/api-natives.h" | 
|  | #include "src/base/ieee754.h" | 
|  | #include "src/code-stubs.h" | 
|  | #include "src/extensions/externalize-string-extension.h" | 
|  | #include "src/extensions/free-buffer-extension.h" | 
|  | #include "src/extensions/gc-extension.h" | 
|  | #include "src/extensions/ignition-statistics-extension.h" | 
|  | #include "src/extensions/statistics-extension.h" | 
|  | #include "src/extensions/trigger-failure-extension.h" | 
|  | #include "src/heap/heap.h" | 
|  | #include "src/isolate-inl.h" | 
|  | #include "src/snapshot/natives.h" | 
|  | #include "src/snapshot/snapshot.h" | 
|  | #include "src/wasm/wasm-js.h" | 
|  |  | 
|  | namespace v8 { | 
|  | namespace internal { | 
|  |  | 
|  | Bootstrapper::Bootstrapper(Isolate* isolate) | 
|  | : isolate_(isolate), | 
|  | nesting_(0), | 
|  | extensions_cache_(Script::TYPE_EXTENSION) {} | 
|  |  | 
|  | template <class Source> | 
|  | Handle<String> Bootstrapper::SourceLookup(int index) { | 
|  | DCHECK(0 <= index && index < Source::GetBuiltinsCount()); | 
|  | Heap* heap = isolate_->heap(); | 
|  | if (Source::GetSourceCache(heap)->get(index)->IsUndefined(isolate_)) { | 
|  | // We can use external strings for the natives. | 
|  | Vector<const char> source = Source::GetScriptSource(index); | 
|  | NativesExternalStringResource* resource = | 
|  | new NativesExternalStringResource(source.start(), source.length()); | 
|  | Handle<ExternalOneByteString> source_code = | 
|  | isolate_->factory()->NewNativeSourceString(resource); | 
|  | // Mark this external string with a special map. | 
|  | DCHECK(source_code->is_short()); | 
|  | Source::GetSourceCache(heap)->set(index, *source_code); | 
|  | } | 
|  | Handle<Object> cached_source(Source::GetSourceCache(heap)->get(index), | 
|  | isolate_); | 
|  | return Handle<String>::cast(cached_source); | 
|  | } | 
|  |  | 
|  |  | 
|  | template Handle<String> Bootstrapper::SourceLookup<Natives>(int index); | 
|  | template Handle<String> Bootstrapper::SourceLookup<ExperimentalNatives>( | 
|  | int index); | 
|  | template Handle<String> Bootstrapper::SourceLookup<ExperimentalExtraNatives>( | 
|  | int index); | 
|  | template Handle<String> Bootstrapper::SourceLookup<ExtraNatives>(int index); | 
|  |  | 
|  |  | 
|  | void Bootstrapper::Initialize(bool create_heap_objects) { | 
|  | extensions_cache_.Initialize(isolate_, create_heap_objects); | 
|  | } | 
|  |  | 
|  |  | 
|  | static const char* GCFunctionName() { | 
|  | bool flag_given = FLAG_expose_gc_as != NULL && strlen(FLAG_expose_gc_as) != 0; | 
|  | return flag_given ? FLAG_expose_gc_as : "gc"; | 
|  | } | 
|  |  | 
|  |  | 
|  | v8::Extension* Bootstrapper::free_buffer_extension_ = NULL; | 
|  | v8::Extension* Bootstrapper::gc_extension_ = NULL; | 
|  | v8::Extension* Bootstrapper::externalize_string_extension_ = NULL; | 
|  | v8::Extension* Bootstrapper::statistics_extension_ = NULL; | 
|  | v8::Extension* Bootstrapper::trigger_failure_extension_ = NULL; | 
|  | v8::Extension* Bootstrapper::ignition_statistics_extension_ = NULL; | 
|  |  | 
|  | void Bootstrapper::InitializeOncePerProcess() { | 
|  | free_buffer_extension_ = new FreeBufferExtension; | 
|  | v8::RegisterExtension(free_buffer_extension_); | 
|  | gc_extension_ = new GCExtension(GCFunctionName()); | 
|  | v8::RegisterExtension(gc_extension_); | 
|  | externalize_string_extension_ = new ExternalizeStringExtension; | 
|  | v8::RegisterExtension(externalize_string_extension_); | 
|  | statistics_extension_ = new StatisticsExtension; | 
|  | v8::RegisterExtension(statistics_extension_); | 
|  | trigger_failure_extension_ = new TriggerFailureExtension; | 
|  | v8::RegisterExtension(trigger_failure_extension_); | 
|  | ignition_statistics_extension_ = new IgnitionStatisticsExtension; | 
|  | v8::RegisterExtension(ignition_statistics_extension_); | 
|  | } | 
|  |  | 
|  |  | 
|  | void Bootstrapper::TearDownExtensions() { | 
|  | delete free_buffer_extension_; | 
|  | free_buffer_extension_ = NULL; | 
|  | delete gc_extension_; | 
|  | gc_extension_ = NULL; | 
|  | delete externalize_string_extension_; | 
|  | externalize_string_extension_ = NULL; | 
|  | delete statistics_extension_; | 
|  | statistics_extension_ = NULL; | 
|  | delete trigger_failure_extension_; | 
|  | trigger_failure_extension_ = NULL; | 
|  | delete ignition_statistics_extension_; | 
|  | ignition_statistics_extension_ = NULL; | 
|  | } | 
|  |  | 
|  |  | 
|  | void DeleteNativeSources(Object* maybe_array) { | 
|  | if (maybe_array->IsFixedArray()) { | 
|  | FixedArray* array = FixedArray::cast(maybe_array); | 
|  | Isolate* isolate = array->GetIsolate(); | 
|  | for (int i = 0; i < array->length(); i++) { | 
|  | Object* natives_source = array->get(i); | 
|  | if (!natives_source->IsUndefined(isolate)) { | 
|  | const NativesExternalStringResource* resource = | 
|  | reinterpret_cast<const NativesExternalStringResource*>( | 
|  | ExternalOneByteString::cast(natives_source)->resource()); | 
|  | delete resource; | 
|  | } | 
|  | } | 
|  | } | 
|  | } | 
|  |  | 
|  |  | 
|  | void Bootstrapper::TearDown() { | 
|  | DeleteNativeSources(Natives::GetSourceCache(isolate_->heap())); | 
|  | DeleteNativeSources(ExperimentalNatives::GetSourceCache(isolate_->heap())); | 
|  | DeleteNativeSources(ExtraNatives::GetSourceCache(isolate_->heap())); | 
|  | DeleteNativeSources( | 
|  | ExperimentalExtraNatives::GetSourceCache(isolate_->heap())); | 
|  |  | 
|  | extensions_cache_.Initialize(isolate_, false);  // Yes, symmetrical | 
|  | } | 
|  |  | 
|  |  | 
|  | class Genesis BASE_EMBEDDED { | 
|  | public: | 
|  | Genesis(Isolate* isolate, MaybeHandle<JSGlobalProxy> maybe_global_proxy, | 
|  | v8::Local<v8::ObjectTemplate> global_proxy_template, | 
|  | v8::ExtensionConfiguration* extensions, size_t context_snapshot_index, | 
|  | GlobalContextType context_type); | 
|  | ~Genesis() { } | 
|  |  | 
|  | Isolate* isolate() const { return isolate_; } | 
|  | Factory* factory() const { return isolate_->factory(); } | 
|  | Heap* heap() const { return isolate_->heap(); } | 
|  |  | 
|  | Handle<Context> result() { return result_; } | 
|  |  | 
|  | private: | 
|  | Handle<Context> native_context() { return native_context_; } | 
|  |  | 
|  | // Creates some basic objects. Used for creating a context from scratch. | 
|  | void CreateRoots(); | 
|  | // Creates the empty function.  Used for creating a context from scratch. | 
|  | Handle<JSFunction> CreateEmptyFunction(Isolate* isolate); | 
|  | // Creates the ThrowTypeError function. ECMA 5th Ed. 13.2.3 | 
|  | Handle<JSFunction> GetRestrictedFunctionPropertiesThrower(); | 
|  | Handle<JSFunction> GetStrictArgumentsPoisonFunction(); | 
|  | Handle<JSFunction> GetThrowTypeErrorIntrinsic(Builtins::Name builtin_name); | 
|  |  | 
|  | void CreateStrictModeFunctionMaps(Handle<JSFunction> empty); | 
|  | void CreateIteratorMaps(Handle<JSFunction> empty); | 
|  | void CreateAsyncFunctionMaps(Handle<JSFunction> empty); | 
|  | void CreateJSProxyMaps(); | 
|  |  | 
|  | // Make the "arguments" and "caller" properties throw a TypeError on access. | 
|  | void AddRestrictedFunctionProperties(Handle<JSFunction> empty); | 
|  |  | 
|  | // Creates the global objects using the global proxy and the template passed | 
|  | // in through the API.  We call this regardless of whether we are building a | 
|  | // context from scratch or using a deserialized one from the partial snapshot | 
|  | // but in the latter case we don't use the objects it produces directly, as | 
|  | // we have to used the deserialized ones that are linked together with the | 
|  | // rest of the context snapshot. | 
|  | Handle<JSGlobalObject> CreateNewGlobals( | 
|  | v8::Local<v8::ObjectTemplate> global_proxy_template, | 
|  | Handle<JSGlobalProxy> global_proxy); | 
|  | // Hooks the given global proxy into the context.  If the context was created | 
|  | // by deserialization then this will unhook the global proxy that was | 
|  | // deserialized, leaving the GC to pick it up. | 
|  | void HookUpGlobalProxy(Handle<JSGlobalObject> global_object, | 
|  | Handle<JSGlobalProxy> global_proxy); | 
|  | // Similarly, we want to use the global that has been created by the templates | 
|  | // passed through the API.  The global from the snapshot is detached from the | 
|  | // other objects in the snapshot. | 
|  | void HookUpGlobalObject(Handle<JSGlobalObject> global_object); | 
|  | // The native context has a ScriptContextTable that store declarative bindings | 
|  | // made in script scopes.  Add a "this" binding to that table pointing to the | 
|  | // global proxy. | 
|  | void InstallGlobalThisBinding(); | 
|  | // New context initialization.  Used for creating a context from scratch. | 
|  | void InitializeGlobal(Handle<JSGlobalObject> global_object, | 
|  | Handle<JSFunction> empty_function, | 
|  | GlobalContextType context_type); | 
|  | void InitializeExperimentalGlobal(); | 
|  | // Depending on the situation, expose and/or get rid of the utils object. | 
|  | void ConfigureUtilsObject(GlobalContextType context_type); | 
|  |  | 
|  | #define DECLARE_FEATURE_INITIALIZATION(id, descr) \ | 
|  | void InitializeGlobal_##id(); | 
|  |  | 
|  | HARMONY_INPROGRESS(DECLARE_FEATURE_INITIALIZATION) | 
|  | HARMONY_STAGED(DECLARE_FEATURE_INITIALIZATION) | 
|  | HARMONY_SHIPPING(DECLARE_FEATURE_INITIALIZATION) | 
|  | DECLARE_FEATURE_INITIALIZATION(promise_extra, "") | 
|  | DECLARE_FEATURE_INITIALIZATION(intl_extra, "") | 
|  | #undef DECLARE_FEATURE_INITIALIZATION | 
|  |  | 
|  | Handle<JSFunction> InstallArrayBuffer(Handle<JSObject> target, | 
|  | const char* name); | 
|  | Handle<JSFunction> InstallInternalArray(Handle<JSObject> target, | 
|  | const char* name, | 
|  | ElementsKind elements_kind); | 
|  | bool InstallNatives(GlobalContextType context_type); | 
|  |  | 
|  | void InstallTypedArray(const char* name, ElementsKind elements_kind, | 
|  | Handle<JSFunction>* fun); | 
|  | bool InstallExperimentalNatives(); | 
|  | bool InstallExtraNatives(); | 
|  | bool InstallExperimentalExtraNatives(); | 
|  | bool InstallDebuggerNatives(); | 
|  | void InstallBuiltinFunctionIds(); | 
|  | void InstallExperimentalBuiltinFunctionIds(); | 
|  | void InitializeNormalizedMapCaches(); | 
|  |  | 
|  | enum ExtensionTraversalState { | 
|  | UNVISITED, VISITED, INSTALLED | 
|  | }; | 
|  |  | 
|  | class ExtensionStates { | 
|  | public: | 
|  | ExtensionStates(); | 
|  | ExtensionTraversalState get_state(RegisteredExtension* extension); | 
|  | void set_state(RegisteredExtension* extension, | 
|  | ExtensionTraversalState state); | 
|  | private: | 
|  | base::HashMap map_; | 
|  | DISALLOW_COPY_AND_ASSIGN(ExtensionStates); | 
|  | }; | 
|  |  | 
|  | // Used both for deserialized and from-scratch contexts to add the extensions | 
|  | // provided. | 
|  | static bool InstallExtensions(Handle<Context> native_context, | 
|  | v8::ExtensionConfiguration* extensions); | 
|  | static bool InstallAutoExtensions(Isolate* isolate, | 
|  | ExtensionStates* extension_states); | 
|  | static bool InstallRequestedExtensions(Isolate* isolate, | 
|  | v8::ExtensionConfiguration* extensions, | 
|  | ExtensionStates* extension_states); | 
|  | static bool InstallExtension(Isolate* isolate, | 
|  | const char* name, | 
|  | ExtensionStates* extension_states); | 
|  | static bool InstallExtension(Isolate* isolate, | 
|  | v8::RegisteredExtension* current, | 
|  | ExtensionStates* extension_states); | 
|  | static bool InstallSpecialObjects(Handle<Context> native_context); | 
|  | bool ConfigureApiObject(Handle<JSObject> object, | 
|  | Handle<ObjectTemplateInfo> object_template); | 
|  | bool ConfigureGlobalObjects( | 
|  | v8::Local<v8::ObjectTemplate> global_proxy_template); | 
|  |  | 
|  | // Migrates all properties from the 'from' object to the 'to' | 
|  | // object and overrides the prototype in 'to' with the one from | 
|  | // 'from'. | 
|  | void TransferObject(Handle<JSObject> from, Handle<JSObject> to); | 
|  | void TransferNamedProperties(Handle<JSObject> from, Handle<JSObject> to); | 
|  | void TransferIndexedProperties(Handle<JSObject> from, Handle<JSObject> to); | 
|  |  | 
|  | enum FunctionMode { | 
|  | // With prototype. | 
|  | FUNCTION_WITH_WRITEABLE_PROTOTYPE, | 
|  | FUNCTION_WITH_READONLY_PROTOTYPE, | 
|  | // Without prototype. | 
|  | FUNCTION_WITHOUT_PROTOTYPE | 
|  | }; | 
|  |  | 
|  | static bool IsFunctionModeWithPrototype(FunctionMode function_mode) { | 
|  | return (function_mode == FUNCTION_WITH_WRITEABLE_PROTOTYPE || | 
|  | function_mode == FUNCTION_WITH_READONLY_PROTOTYPE); | 
|  | } | 
|  |  | 
|  | Handle<Map> CreateSloppyFunctionMap(FunctionMode function_mode); | 
|  |  | 
|  | void SetFunctionInstanceDescriptor(Handle<Map> map, | 
|  | FunctionMode function_mode); | 
|  | void MakeFunctionInstancePrototypeWritable(); | 
|  |  | 
|  | Handle<Map> CreateStrictFunctionMap(FunctionMode function_mode, | 
|  | Handle<JSFunction> empty_function); | 
|  |  | 
|  |  | 
|  | void SetStrictFunctionInstanceDescriptor(Handle<Map> map, | 
|  | FunctionMode function_mode); | 
|  |  | 
|  | static bool CallUtilsFunction(Isolate* isolate, const char* name); | 
|  |  | 
|  | static bool CompileExtension(Isolate* isolate, v8::Extension* extension); | 
|  |  | 
|  | Isolate* isolate_; | 
|  | Handle<Context> result_; | 
|  | Handle<Context> native_context_; | 
|  |  | 
|  | // Function maps. Function maps are created initially with a read only | 
|  | // prototype for the processing of JS builtins. Later the function maps are | 
|  | // replaced in order to make prototype writable. These are the final, writable | 
|  | // prototype, maps. | 
|  | Handle<Map> sloppy_function_map_writable_prototype_; | 
|  | Handle<Map> strict_function_map_writable_prototype_; | 
|  | Handle<JSFunction> strict_poison_function_; | 
|  | Handle<JSFunction> restricted_function_properties_thrower_; | 
|  |  | 
|  | BootstrapperActive active_; | 
|  | friend class Bootstrapper; | 
|  | }; | 
|  |  | 
|  |  | 
|  | void Bootstrapper::Iterate(ObjectVisitor* v) { | 
|  | extensions_cache_.Iterate(v); | 
|  | v->Synchronize(VisitorSynchronization::kExtensions); | 
|  | } | 
|  |  | 
|  | Handle<Context> Bootstrapper::CreateEnvironment( | 
|  | MaybeHandle<JSGlobalProxy> maybe_global_proxy, | 
|  | v8::Local<v8::ObjectTemplate> global_proxy_template, | 
|  | v8::ExtensionConfiguration* extensions, size_t context_snapshot_index, | 
|  | GlobalContextType context_type) { | 
|  | HandleScope scope(isolate_); | 
|  | Genesis genesis(isolate_, maybe_global_proxy, global_proxy_template, | 
|  | extensions, context_snapshot_index, context_type); | 
|  | Handle<Context> env = genesis.result(); | 
|  | if (env.is_null() || !InstallExtensions(env, extensions)) { | 
|  | return Handle<Context>(); | 
|  | } | 
|  | return scope.CloseAndEscape(env); | 
|  | } | 
|  |  | 
|  |  | 
|  | static void SetObjectPrototype(Handle<JSObject> object, Handle<Object> proto) { | 
|  | // object.__proto__ = proto; | 
|  | Handle<Map> old_map = Handle<Map>(object->map()); | 
|  | Handle<Map> new_map = Map::Copy(old_map, "SetObjectPrototype"); | 
|  | Map::SetPrototype(new_map, proto, FAST_PROTOTYPE); | 
|  | JSObject::MigrateToMap(object, new_map); | 
|  | } | 
|  |  | 
|  |  | 
|  | void Bootstrapper::DetachGlobal(Handle<Context> env) { | 
|  | env->GetIsolate()->counters()->errors_thrown_per_context()->AddSample( | 
|  | env->GetErrorsThrown()); | 
|  |  | 
|  | Factory* factory = env->GetIsolate()->factory(); | 
|  | Handle<JSGlobalProxy> global_proxy(JSGlobalProxy::cast(env->global_proxy())); | 
|  | global_proxy->set_native_context(*factory->null_value()); | 
|  | SetObjectPrototype(global_proxy, factory->null_value()); | 
|  | global_proxy->map()->SetConstructor(*factory->null_value()); | 
|  | if (FLAG_track_detached_contexts) { | 
|  | env->GetIsolate()->AddDetachedContext(env); | 
|  | } | 
|  | } | 
|  |  | 
|  | namespace { | 
|  |  | 
|  | void InstallFunction(Handle<JSObject> target, Handle<Name> property_name, | 
|  | Handle<JSFunction> function, Handle<String> function_name, | 
|  | PropertyAttributes attributes = DONT_ENUM) { | 
|  | JSObject::AddProperty(target, property_name, function, attributes); | 
|  | if (target->IsJSGlobalObject()) { | 
|  | function->shared()->set_instance_class_name(*function_name); | 
|  | } | 
|  | function->shared()->set_native(true); | 
|  | } | 
|  |  | 
|  | void InstallFunction(Handle<JSObject> target, Handle<JSFunction> function, | 
|  | Handle<Name> name, | 
|  | PropertyAttributes attributes = DONT_ENUM) { | 
|  | Handle<String> name_string = Name::ToFunctionName(name).ToHandleChecked(); | 
|  | InstallFunction(target, name, function, name_string, attributes); | 
|  | } | 
|  |  | 
|  | Handle<JSFunction> InstallGetter(Handle<JSObject> target, | 
|  | Handle<Name> property_name, | 
|  | Handle<JSFunction> getter, | 
|  | PropertyAttributes attributes = DONT_ENUM) { | 
|  | Handle<Object> setter = target->GetIsolate()->factory()->undefined_value(); | 
|  | JSObject::DefineAccessor(target, property_name, getter, setter, attributes) | 
|  | .Check(); | 
|  | return getter; | 
|  | } | 
|  |  | 
|  | Handle<JSFunction> CreateFunction(Isolate* isolate, Handle<String> name, | 
|  | InstanceType type, int instance_size, | 
|  | MaybeHandle<JSObject> maybe_prototype, | 
|  | Builtins::Name call, | 
|  | bool strict_function_map = false) { | 
|  | Factory* factory = isolate->factory(); | 
|  | Handle<Code> call_code(isolate->builtins()->builtin(call)); | 
|  | Handle<JSObject> prototype; | 
|  | return maybe_prototype.ToHandle(&prototype) | 
|  | ? factory->NewFunction(name, call_code, prototype, type, | 
|  | instance_size, strict_function_map) | 
|  | : factory->NewFunctionWithoutPrototype(name, call_code, | 
|  | strict_function_map); | 
|  | } | 
|  |  | 
|  | Handle<JSFunction> InstallFunction(Handle<JSObject> target, Handle<Name> name, | 
|  | InstanceType type, int instance_size, | 
|  | MaybeHandle<JSObject> maybe_prototype, | 
|  | Builtins::Name call, | 
|  | PropertyAttributes attributes, | 
|  | bool strict_function_map = false) { | 
|  | Handle<String> name_string = Name::ToFunctionName(name).ToHandleChecked(); | 
|  | Handle<JSFunction> function = | 
|  | CreateFunction(target->GetIsolate(), name_string, type, instance_size, | 
|  | maybe_prototype, call, strict_function_map); | 
|  | InstallFunction(target, name, function, name_string, attributes); | 
|  | return function; | 
|  | } | 
|  |  | 
|  | Handle<JSFunction> InstallFunction(Handle<JSObject> target, const char* name, | 
|  | InstanceType type, int instance_size, | 
|  | MaybeHandle<JSObject> maybe_prototype, | 
|  | Builtins::Name call, | 
|  | bool strict_function_map = false) { | 
|  | Factory* const factory = target->GetIsolate()->factory(); | 
|  | PropertyAttributes attributes = DONT_ENUM; | 
|  | return InstallFunction(target, factory->InternalizeUtf8String(name), type, | 
|  | instance_size, maybe_prototype, call, attributes, | 
|  | strict_function_map); | 
|  | } | 
|  |  | 
|  | Handle<JSFunction> SimpleCreateFunction(Isolate* isolate, Handle<String> name, | 
|  | Builtins::Name call, int len, | 
|  | bool adapt) { | 
|  | Handle<JSFunction> fun = | 
|  | CreateFunction(isolate, name, JS_OBJECT_TYPE, JSObject::kHeaderSize, | 
|  | MaybeHandle<JSObject>(), call); | 
|  | if (adapt) { | 
|  | fun->shared()->set_internal_formal_parameter_count(len); | 
|  | } else { | 
|  | fun->shared()->DontAdaptArguments(); | 
|  | } | 
|  | fun->shared()->set_length(len); | 
|  | return fun; | 
|  | } | 
|  |  | 
|  | Handle<JSFunction> SimpleInstallFunction(Handle<JSObject> base, | 
|  | Handle<String> name, | 
|  | Builtins::Name call, int len, | 
|  | bool adapt) { | 
|  | Handle<JSFunction> fun = | 
|  | SimpleCreateFunction(base->GetIsolate(), name, call, len, adapt); | 
|  | InstallFunction(base, fun, name, DONT_ENUM); | 
|  | return fun; | 
|  | } | 
|  |  | 
|  | Handle<JSFunction> SimpleInstallFunction(Handle<JSObject> base, | 
|  | const char* name, Builtins::Name call, | 
|  | int len, bool adapt) { | 
|  | Factory* const factory = base->GetIsolate()->factory(); | 
|  | return SimpleInstallFunction(base, factory->InternalizeUtf8String(name), call, | 
|  | len, adapt); | 
|  | } | 
|  |  | 
|  | Handle<JSFunction> SimpleInstallGetter(Handle<JSObject> base, | 
|  | Handle<String> name, Builtins::Name call, | 
|  | bool adapt) { | 
|  | Isolate* const isolate = base->GetIsolate(); | 
|  | Handle<String> fun_name = | 
|  | Name::ToFunctionName(name, isolate->factory()->get_string()) | 
|  | .ToHandleChecked(); | 
|  | Handle<JSFunction> fun = | 
|  | SimpleCreateFunction(isolate, fun_name, call, 0, adapt); | 
|  | InstallGetter(base, name, fun); | 
|  | return fun; | 
|  | } | 
|  |  | 
|  | Handle<JSFunction> SimpleInstallGetter(Handle<JSObject> base, | 
|  | Handle<String> name, Builtins::Name call, | 
|  | bool adapt, BuiltinFunctionId id) { | 
|  | Handle<JSFunction> fun = SimpleInstallGetter(base, name, call, adapt); | 
|  | fun->shared()->set_builtin_function_id(id); | 
|  | return fun; | 
|  | } | 
|  |  | 
|  | }  // namespace | 
|  |  | 
|  | void Genesis::SetFunctionInstanceDescriptor(Handle<Map> map, | 
|  | FunctionMode function_mode) { | 
|  | int size = IsFunctionModeWithPrototype(function_mode) ? 5 : 4; | 
|  | Map::EnsureDescriptorSlack(map, size); | 
|  |  | 
|  | PropertyAttributes ro_attribs = | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | DONT_DELETE | READ_ONLY); | 
|  | PropertyAttributes roc_attribs = | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY); | 
|  |  | 
|  | STATIC_ASSERT(JSFunction::kLengthDescriptorIndex == 0); | 
|  | Handle<AccessorInfo> length = | 
|  | Accessors::FunctionLengthInfo(isolate(), roc_attribs); | 
|  | {  // Add length. | 
|  | AccessorConstantDescriptor d(Handle<Name>(Name::cast(length->name())), | 
|  | length, roc_attribs); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | STATIC_ASSERT(JSFunction::kNameDescriptorIndex == 1); | 
|  | Handle<AccessorInfo> name = | 
|  | Accessors::FunctionNameInfo(isolate(), ro_attribs); | 
|  | {  // Add name. | 
|  | AccessorConstantDescriptor d(Handle<Name>(Name::cast(name->name())), name, | 
|  | roc_attribs); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | Handle<AccessorInfo> args = | 
|  | Accessors::FunctionArgumentsInfo(isolate(), ro_attribs); | 
|  | {  // Add arguments. | 
|  | AccessorConstantDescriptor d(Handle<Name>(Name::cast(args->name())), args, | 
|  | ro_attribs); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | Handle<AccessorInfo> caller = | 
|  | Accessors::FunctionCallerInfo(isolate(), ro_attribs); | 
|  | {  // Add caller. | 
|  | AccessorConstantDescriptor d(Handle<Name>(Name::cast(caller->name())), | 
|  | caller, ro_attribs); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | if (IsFunctionModeWithPrototype(function_mode)) { | 
|  | if (function_mode == FUNCTION_WITH_WRITEABLE_PROTOTYPE) { | 
|  | ro_attribs = static_cast<PropertyAttributes>(ro_attribs & ~READ_ONLY); | 
|  | } | 
|  | Handle<AccessorInfo> prototype = | 
|  | Accessors::FunctionPrototypeInfo(isolate(), ro_attribs); | 
|  | AccessorConstantDescriptor d(Handle<Name>(Name::cast(prototype->name())), | 
|  | prototype, ro_attribs); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | } | 
|  |  | 
|  |  | 
|  | Handle<Map> Genesis::CreateSloppyFunctionMap(FunctionMode function_mode) { | 
|  | Handle<Map> map = factory()->NewMap(JS_FUNCTION_TYPE, JSFunction::kSize); | 
|  | SetFunctionInstanceDescriptor(map, function_mode); | 
|  | map->set_is_constructor(IsFunctionModeWithPrototype(function_mode)); | 
|  | map->set_is_callable(); | 
|  | return map; | 
|  | } | 
|  |  | 
|  |  | 
|  | Handle<JSFunction> Genesis::CreateEmptyFunction(Isolate* isolate) { | 
|  | // Allocate the map for function instances. Maps are allocated first and their | 
|  | // prototypes patched later, once empty function is created. | 
|  |  | 
|  | // Functions with this map will not have a 'prototype' property, and | 
|  | // can not be used as constructors. | 
|  | Handle<Map> function_without_prototype_map = | 
|  | CreateSloppyFunctionMap(FUNCTION_WITHOUT_PROTOTYPE); | 
|  | native_context()->set_sloppy_function_without_prototype_map( | 
|  | *function_without_prototype_map); | 
|  |  | 
|  | // Allocate the function map. This map is temporary, used only for processing | 
|  | // of builtins. | 
|  | // Later the map is replaced with writable prototype map, allocated below. | 
|  | Handle<Map> function_map = | 
|  | CreateSloppyFunctionMap(FUNCTION_WITH_READONLY_PROTOTYPE); | 
|  | native_context()->set_sloppy_function_map(*function_map); | 
|  | native_context()->set_sloppy_function_with_readonly_prototype_map( | 
|  | *function_map); | 
|  |  | 
|  | // The final map for functions. Writeable prototype. | 
|  | // This map is installed in MakeFunctionInstancePrototypeWritable. | 
|  | sloppy_function_map_writable_prototype_ = | 
|  | CreateSloppyFunctionMap(FUNCTION_WITH_WRITEABLE_PROTOTYPE); | 
|  | Factory* factory = isolate->factory(); | 
|  |  | 
|  | Handle<String> object_name = factory->Object_string(); | 
|  |  | 
|  | Handle<JSObject> object_function_prototype; | 
|  |  | 
|  | {  // --- O b j e c t --- | 
|  | Handle<JSFunction> object_fun = factory->NewFunction(object_name); | 
|  | int unused = JSObject::kInitialGlobalObjectUnusedPropertiesCount; | 
|  | int instance_size = JSObject::kHeaderSize + kPointerSize * unused; | 
|  | Handle<Map> object_function_map = | 
|  | factory->NewMap(JS_OBJECT_TYPE, instance_size); | 
|  | object_function_map->SetInObjectProperties(unused); | 
|  | JSFunction::SetInitialMap(object_fun, object_function_map, | 
|  | isolate->factory()->null_value()); | 
|  | object_function_map->set_unused_property_fields(unused); | 
|  |  | 
|  | native_context()->set_object_function(*object_fun); | 
|  |  | 
|  | // Allocate a new prototype for the object function. | 
|  | object_function_prototype = | 
|  | factory->NewJSObject(isolate->object_function(), TENURED); | 
|  | Handle<Map> map = Map::Copy(handle(object_function_prototype->map()), | 
|  | "EmptyObjectPrototype"); | 
|  | map->set_is_prototype_map(true); | 
|  | object_function_prototype->set_map(*map); | 
|  |  | 
|  | native_context()->set_initial_object_prototype(*object_function_prototype); | 
|  | // For bootstrapping set the array prototype to be the same as the object | 
|  | // prototype, otherwise the missing initial_array_prototype will cause | 
|  | // assertions during startup. | 
|  | native_context()->set_initial_array_prototype(*object_function_prototype); | 
|  | Accessors::FunctionSetPrototype(object_fun, object_function_prototype) | 
|  | .Assert(); | 
|  | } | 
|  |  | 
|  | // Allocate the empty function as the prototype for function - ES6 19.2.3 | 
|  | Handle<Code> code(isolate->builtins()->EmptyFunction()); | 
|  | Handle<JSFunction> empty_function = | 
|  | factory->NewFunctionWithoutPrototype(factory->empty_string(), code); | 
|  |  | 
|  | // Allocate the function map first and then patch the prototype later | 
|  | Handle<Map> empty_function_map = | 
|  | CreateSloppyFunctionMap(FUNCTION_WITHOUT_PROTOTYPE); | 
|  | DCHECK(!empty_function_map->is_dictionary_map()); | 
|  | Map::SetPrototype(empty_function_map, object_function_prototype); | 
|  | empty_function_map->set_is_prototype_map(true); | 
|  |  | 
|  | empty_function->set_map(*empty_function_map); | 
|  |  | 
|  | // --- E m p t y --- | 
|  | Handle<String> source = factory->NewStringFromStaticChars("() {}"); | 
|  | Handle<Script> script = factory->NewScript(source); | 
|  | script->set_type(Script::TYPE_NATIVE); | 
|  | empty_function->shared()->set_start_position(0); | 
|  | empty_function->shared()->set_end_position(source->length()); | 
|  | empty_function->shared()->DontAdaptArguments(); | 
|  | SharedFunctionInfo::SetScript(handle(empty_function->shared()), script); | 
|  |  | 
|  | // Set prototypes for the function maps. | 
|  | Handle<Map> sloppy_function_map(native_context()->sloppy_function_map(), | 
|  | isolate); | 
|  | Handle<Map> sloppy_function_without_prototype_map( | 
|  | native_context()->sloppy_function_without_prototype_map(), isolate); | 
|  | Map::SetPrototype(sloppy_function_map, empty_function); | 
|  | Map::SetPrototype(sloppy_function_without_prototype_map, empty_function); | 
|  | Map::SetPrototype(sloppy_function_map_writable_prototype_, empty_function); | 
|  |  | 
|  | return empty_function; | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::SetStrictFunctionInstanceDescriptor(Handle<Map> map, | 
|  | FunctionMode function_mode) { | 
|  | int size = IsFunctionModeWithPrototype(function_mode) ? 3 : 2; | 
|  | Map::EnsureDescriptorSlack(map, size); | 
|  |  | 
|  | PropertyAttributes rw_attribs = | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | DONT_DELETE); | 
|  | PropertyAttributes ro_attribs = | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | DONT_DELETE | READ_ONLY); | 
|  | PropertyAttributes roc_attribs = | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY); | 
|  |  | 
|  | DCHECK(function_mode == FUNCTION_WITH_WRITEABLE_PROTOTYPE || | 
|  | function_mode == FUNCTION_WITH_READONLY_PROTOTYPE || | 
|  | function_mode == FUNCTION_WITHOUT_PROTOTYPE); | 
|  | STATIC_ASSERT(JSFunction::kLengthDescriptorIndex == 0); | 
|  | {  // Add length. | 
|  | Handle<AccessorInfo> length = | 
|  | Accessors::FunctionLengthInfo(isolate(), roc_attribs); | 
|  | AccessorConstantDescriptor d(handle(Name::cast(length->name())), length, | 
|  | roc_attribs); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | STATIC_ASSERT(JSFunction::kNameDescriptorIndex == 1); | 
|  | {  // Add name. | 
|  | Handle<AccessorInfo> name = | 
|  | Accessors::FunctionNameInfo(isolate(), roc_attribs); | 
|  | AccessorConstantDescriptor d(handle(Name::cast(name->name())), name, | 
|  | roc_attribs); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | if (IsFunctionModeWithPrototype(function_mode)) { | 
|  | // Add prototype. | 
|  | PropertyAttributes attribs = | 
|  | function_mode == FUNCTION_WITH_WRITEABLE_PROTOTYPE ? rw_attribs | 
|  | : ro_attribs; | 
|  | Handle<AccessorInfo> prototype = | 
|  | Accessors::FunctionPrototypeInfo(isolate(), attribs); | 
|  | AccessorConstantDescriptor d(Handle<Name>(Name::cast(prototype->name())), | 
|  | prototype, attribs); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | } | 
|  |  | 
|  |  | 
|  | // Creates the %ThrowTypeError% function. | 
|  | Handle<JSFunction> Genesis::GetThrowTypeErrorIntrinsic( | 
|  | Builtins::Name builtin_name) { | 
|  | Handle<String> name = | 
|  | factory()->InternalizeOneByteString(STATIC_CHAR_VECTOR("ThrowTypeError")); | 
|  | Handle<Code> code(isolate()->builtins()->builtin(builtin_name)); | 
|  | Handle<JSFunction> function = | 
|  | factory()->NewFunctionWithoutPrototype(name, code, true); | 
|  | function->shared()->DontAdaptArguments(); | 
|  |  | 
|  | // %ThrowTypeError% must not have a name property. | 
|  | if (JSReceiver::DeleteProperty(function, factory()->name_string()) | 
|  | .IsNothing()) { | 
|  | DCHECK(false); | 
|  | } | 
|  |  | 
|  | // length needs to be non configurable. | 
|  | Handle<Object> value(Smi::FromInt(function->shared()->length()), isolate()); | 
|  | JSObject::SetOwnPropertyIgnoreAttributes( | 
|  | function, factory()->length_string(), value, | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | DONT_DELETE | READ_ONLY)) | 
|  | .Assert(); | 
|  |  | 
|  | if (JSObject::PreventExtensions(function, Object::THROW_ON_ERROR) | 
|  | .IsNothing()) { | 
|  | DCHECK(false); | 
|  | } | 
|  |  | 
|  | return function; | 
|  | } | 
|  |  | 
|  |  | 
|  | // ECMAScript 5th Edition, 13.2.3 | 
|  | Handle<JSFunction> Genesis::GetRestrictedFunctionPropertiesThrower() { | 
|  | if (restricted_function_properties_thrower_.is_null()) { | 
|  | restricted_function_properties_thrower_ = GetThrowTypeErrorIntrinsic( | 
|  | Builtins::kRestrictedFunctionPropertiesThrower); | 
|  | } | 
|  | return restricted_function_properties_thrower_; | 
|  | } | 
|  |  | 
|  |  | 
|  | Handle<JSFunction> Genesis::GetStrictArgumentsPoisonFunction() { | 
|  | if (strict_poison_function_.is_null()) { | 
|  | strict_poison_function_ = GetThrowTypeErrorIntrinsic( | 
|  | Builtins::kRestrictedStrictArgumentsPropertiesThrower); | 
|  | } | 
|  | return strict_poison_function_; | 
|  | } | 
|  |  | 
|  |  | 
|  | Handle<Map> Genesis::CreateStrictFunctionMap( | 
|  | FunctionMode function_mode, Handle<JSFunction> empty_function) { | 
|  | Handle<Map> map = factory()->NewMap(JS_FUNCTION_TYPE, JSFunction::kSize); | 
|  | SetStrictFunctionInstanceDescriptor(map, function_mode); | 
|  | map->set_is_constructor(IsFunctionModeWithPrototype(function_mode)); | 
|  | map->set_is_callable(); | 
|  | Map::SetPrototype(map, empty_function); | 
|  | return map; | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::CreateStrictModeFunctionMaps(Handle<JSFunction> empty) { | 
|  | // Allocate map for the prototype-less strict mode instances. | 
|  | Handle<Map> strict_function_without_prototype_map = | 
|  | CreateStrictFunctionMap(FUNCTION_WITHOUT_PROTOTYPE, empty); | 
|  | native_context()->set_strict_function_without_prototype_map( | 
|  | *strict_function_without_prototype_map); | 
|  |  | 
|  | // Allocate map for the strict mode functions. This map is temporary, used | 
|  | // only for processing of builtins. | 
|  | // Later the map is replaced with writable prototype map, allocated below. | 
|  | Handle<Map> strict_function_map = | 
|  | CreateStrictFunctionMap(FUNCTION_WITH_READONLY_PROTOTYPE, empty); | 
|  | native_context()->set_strict_function_map(*strict_function_map); | 
|  |  | 
|  | // The final map for the strict mode functions. Writeable prototype. | 
|  | // This map is installed in MakeFunctionInstancePrototypeWritable. | 
|  | strict_function_map_writable_prototype_ = | 
|  | CreateStrictFunctionMap(FUNCTION_WITH_WRITEABLE_PROTOTYPE, empty); | 
|  |  | 
|  | // Now that the strict mode function map is available, set up the | 
|  | // restricted "arguments" and "caller" getters. | 
|  | AddRestrictedFunctionProperties(empty); | 
|  | } | 
|  |  | 
|  | void Genesis::CreateIteratorMaps(Handle<JSFunction> empty) { | 
|  | // Create iterator-related meta-objects. | 
|  | Handle<JSObject> iterator_prototype = | 
|  | factory()->NewJSObject(isolate()->object_function(), TENURED); | 
|  | Handle<JSObject> generator_object_prototype = | 
|  | factory()->NewJSObject(isolate()->object_function(), TENURED); | 
|  | native_context()->set_initial_generator_prototype( | 
|  | *generator_object_prototype); | 
|  | SetObjectPrototype(generator_object_prototype, iterator_prototype); | 
|  | Handle<JSObject> generator_function_prototype = | 
|  | factory()->NewJSObject(isolate()->object_function(), TENURED); | 
|  | SetObjectPrototype(generator_function_prototype, empty); | 
|  |  | 
|  | JSObject::AddProperty( | 
|  | generator_function_prototype, factory()->to_string_tag_symbol(), | 
|  | factory()->NewStringFromAsciiChecked("GeneratorFunction"), | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  | JSObject::AddProperty(generator_function_prototype, | 
|  | factory()->prototype_string(), | 
|  | generator_object_prototype, | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  |  | 
|  | JSObject::AddProperty(generator_object_prototype, | 
|  | factory()->constructor_string(), | 
|  | generator_function_prototype, | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  | JSObject::AddProperty(generator_object_prototype, | 
|  | factory()->to_string_tag_symbol(), | 
|  | factory()->NewStringFromAsciiChecked("Generator"), | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  | SimpleInstallFunction(generator_object_prototype, "next", | 
|  | Builtins::kGeneratorPrototypeNext, 1, true); | 
|  | SimpleInstallFunction(generator_object_prototype, "return", | 
|  | Builtins::kGeneratorPrototypeReturn, 1, true); | 
|  | SimpleInstallFunction(generator_object_prototype, "throw", | 
|  | Builtins::kGeneratorPrototypeThrow, 1, true); | 
|  |  | 
|  | // Create maps for generator functions and their prototypes.  Store those | 
|  | // maps in the native context. The "prototype" property descriptor is | 
|  | // writable, non-enumerable, and non-configurable (as per ES6 draft | 
|  | // 04-14-15, section 25.2.4.3). | 
|  | Handle<Map> strict_function_map(strict_function_map_writable_prototype_); | 
|  | // Generator functions do not have "caller" or "arguments" accessors. | 
|  | Handle<Map> sloppy_generator_function_map = | 
|  | Map::Copy(strict_function_map, "SloppyGeneratorFunction"); | 
|  | sloppy_generator_function_map->set_is_constructor(false); | 
|  | Map::SetPrototype(sloppy_generator_function_map, | 
|  | generator_function_prototype); | 
|  | native_context()->set_sloppy_generator_function_map( | 
|  | *sloppy_generator_function_map); | 
|  |  | 
|  | Handle<Map> strict_generator_function_map = | 
|  | Map::Copy(strict_function_map, "StrictGeneratorFunction"); | 
|  | strict_generator_function_map->set_is_constructor(false); | 
|  | Map::SetPrototype(strict_generator_function_map, | 
|  | generator_function_prototype); | 
|  | native_context()->set_strict_generator_function_map( | 
|  | *strict_generator_function_map); | 
|  |  | 
|  | Handle<JSFunction> object_function(native_context()->object_function()); | 
|  | Handle<Map> generator_object_prototype_map = Map::Create(isolate(), 0); | 
|  | Map::SetPrototype(generator_object_prototype_map, generator_object_prototype); | 
|  | native_context()->set_generator_object_prototype_map( | 
|  | *generator_object_prototype_map); | 
|  | } | 
|  |  | 
|  | void Genesis::CreateAsyncFunctionMaps(Handle<JSFunction> empty) { | 
|  | // %AsyncFunctionPrototype% intrinsic | 
|  | Handle<JSObject> async_function_prototype = | 
|  | factory()->NewJSObject(isolate()->object_function(), TENURED); | 
|  | SetObjectPrototype(async_function_prototype, empty); | 
|  |  | 
|  | JSObject::AddProperty(async_function_prototype, | 
|  | factory()->to_string_tag_symbol(), | 
|  | factory()->NewStringFromAsciiChecked("AsyncFunction"), | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  |  | 
|  | Handle<Map> strict_function_map( | 
|  | native_context()->strict_function_without_prototype_map()); | 
|  | Handle<Map> sloppy_async_function_map = | 
|  | Map::Copy(strict_function_map, "SloppyAsyncFunction"); | 
|  | sloppy_async_function_map->set_is_constructor(false); | 
|  | Map::SetPrototype(sloppy_async_function_map, async_function_prototype); | 
|  | native_context()->set_sloppy_async_function_map(*sloppy_async_function_map); | 
|  |  | 
|  | Handle<Map> strict_async_function_map = | 
|  | Map::Copy(strict_function_map, "StrictAsyncFunction"); | 
|  | strict_async_function_map->set_is_constructor(false); | 
|  | Map::SetPrototype(strict_async_function_map, async_function_prototype); | 
|  | native_context()->set_strict_async_function_map(*strict_async_function_map); | 
|  | } | 
|  |  | 
|  | void Genesis::CreateJSProxyMaps() { | 
|  | // Allocate the different maps for all Proxy types. | 
|  | // Next to the default proxy, we need maps indicating callable and | 
|  | // constructable proxies. | 
|  | Handle<Map> proxy_function_map = | 
|  | Map::Copy(isolate()->sloppy_function_without_prototype_map(), "Proxy"); | 
|  | proxy_function_map->set_is_constructor(true); | 
|  | native_context()->set_proxy_function_map(*proxy_function_map); | 
|  |  | 
|  | Handle<Map> proxy_map = | 
|  | factory()->NewMap(JS_PROXY_TYPE, JSProxy::kSize, FAST_ELEMENTS); | 
|  | proxy_map->set_dictionary_map(true); | 
|  | native_context()->set_proxy_map(*proxy_map); | 
|  |  | 
|  | Handle<Map> proxy_callable_map = Map::Copy(proxy_map, "callable Proxy"); | 
|  | proxy_callable_map->set_is_callable(); | 
|  | native_context()->set_proxy_callable_map(*proxy_callable_map); | 
|  | proxy_callable_map->SetConstructor(native_context()->function_function()); | 
|  |  | 
|  | Handle<Map> proxy_constructor_map = | 
|  | Map::Copy(proxy_callable_map, "constructor Proxy"); | 
|  | proxy_constructor_map->set_is_constructor(true); | 
|  | native_context()->set_proxy_constructor_map(*proxy_constructor_map); | 
|  | } | 
|  |  | 
|  | static void ReplaceAccessors(Handle<Map> map, | 
|  | Handle<String> name, | 
|  | PropertyAttributes attributes, | 
|  | Handle<AccessorPair> accessor_pair) { | 
|  | DescriptorArray* descriptors = map->instance_descriptors(); | 
|  | int idx = descriptors->SearchWithCache(map->GetIsolate(), *name, *map); | 
|  | AccessorConstantDescriptor descriptor(name, accessor_pair, attributes); | 
|  | descriptors->Replace(idx, &descriptor); | 
|  | } | 
|  |  | 
|  | void Genesis::AddRestrictedFunctionProperties(Handle<JSFunction> empty) { | 
|  | PropertyAttributes rw_attribs = static_cast<PropertyAttributes>(DONT_ENUM); | 
|  | Handle<JSFunction> thrower = GetRestrictedFunctionPropertiesThrower(); | 
|  | Handle<AccessorPair> accessors = factory()->NewAccessorPair(); | 
|  | accessors->set_getter(*thrower); | 
|  | accessors->set_setter(*thrower); | 
|  |  | 
|  | Handle<Map> map(empty->map()); | 
|  | ReplaceAccessors(map, factory()->arguments_string(), rw_attribs, accessors); | 
|  | ReplaceAccessors(map, factory()->caller_string(), rw_attribs, accessors); | 
|  | } | 
|  |  | 
|  |  | 
|  | static void AddToWeakNativeContextList(Context* context) { | 
|  | DCHECK(context->IsNativeContext()); | 
|  | Isolate* isolate = context->GetIsolate(); | 
|  | Heap* heap = isolate->heap(); | 
|  | #ifdef DEBUG | 
|  | { // NOLINT | 
|  | DCHECK(context->next_context_link()->IsUndefined(isolate)); | 
|  | // Check that context is not in the list yet. | 
|  | for (Object* current = heap->native_contexts_list(); | 
|  | !current->IsUndefined(isolate); | 
|  | current = Context::cast(current)->next_context_link()) { | 
|  | DCHECK(current != context); | 
|  | } | 
|  | } | 
|  | #endif | 
|  | context->set(Context::NEXT_CONTEXT_LINK, heap->native_contexts_list(), | 
|  | UPDATE_WEAK_WRITE_BARRIER); | 
|  | heap->set_native_contexts_list(context); | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::CreateRoots() { | 
|  | // Allocate the native context FixedArray first and then patch the | 
|  | // closure and extension object later (we need the empty function | 
|  | // and the global object, but in order to create those, we need the | 
|  | // native context). | 
|  | native_context_ = factory()->NewNativeContext(); | 
|  | AddToWeakNativeContextList(*native_context()); | 
|  | isolate()->set_context(*native_context()); | 
|  |  | 
|  | // Allocate the message listeners object. | 
|  | { | 
|  | v8::NeanderArray listeners(isolate()); | 
|  | native_context()->set_message_listeners(*listeners.value()); | 
|  | } | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::InstallGlobalThisBinding() { | 
|  | Handle<ScriptContextTable> script_contexts( | 
|  | native_context()->script_context_table()); | 
|  | Handle<ScopeInfo> scope_info = ScopeInfo::CreateGlobalThisBinding(isolate()); | 
|  | Handle<JSFunction> closure(native_context()->closure()); | 
|  | Handle<Context> context = factory()->NewScriptContext(closure, scope_info); | 
|  |  | 
|  | // Go ahead and hook it up while we're at it. | 
|  | int slot = scope_info->ReceiverContextSlotIndex(); | 
|  | DCHECK_EQ(slot, Context::MIN_CONTEXT_SLOTS); | 
|  | context->set(slot, native_context()->global_proxy()); | 
|  |  | 
|  | Handle<ScriptContextTable> new_script_contexts = | 
|  | ScriptContextTable::Extend(script_contexts, context); | 
|  | native_context()->set_script_context_table(*new_script_contexts); | 
|  | } | 
|  |  | 
|  |  | 
|  | Handle<JSGlobalObject> Genesis::CreateNewGlobals( | 
|  | v8::Local<v8::ObjectTemplate> global_proxy_template, | 
|  | Handle<JSGlobalProxy> global_proxy) { | 
|  | // The argument global_proxy_template aka data is an ObjectTemplateInfo. | 
|  | // It has a constructor pointer that points at global_constructor which is a | 
|  | // FunctionTemplateInfo. | 
|  | // The global_proxy_constructor is used to (re)initialize the | 
|  | // global_proxy. The global_proxy_constructor also has a prototype_template | 
|  | // pointer that points at js_global_object_template which is an | 
|  | // ObjectTemplateInfo. | 
|  | // That in turn has a constructor pointer that points at | 
|  | // js_global_object_constructor which is a FunctionTemplateInfo. | 
|  | // js_global_object_constructor is used to make js_global_object_function | 
|  | // js_global_object_function is used to make the new global_object. | 
|  | // | 
|  | // --- G l o b a l --- | 
|  | // Step 1: Create a fresh JSGlobalObject. | 
|  | Handle<JSFunction> js_global_object_function; | 
|  | Handle<ObjectTemplateInfo> js_global_object_template; | 
|  | if (!global_proxy_template.IsEmpty()) { | 
|  | // Get prototype template of the global_proxy_template. | 
|  | Handle<ObjectTemplateInfo> data = | 
|  | v8::Utils::OpenHandle(*global_proxy_template); | 
|  | Handle<FunctionTemplateInfo> global_constructor = | 
|  | Handle<FunctionTemplateInfo>( | 
|  | FunctionTemplateInfo::cast(data->constructor())); | 
|  | Handle<Object> proto_template(global_constructor->prototype_template(), | 
|  | isolate()); | 
|  | if (!proto_template->IsUndefined(isolate())) { | 
|  | js_global_object_template = | 
|  | Handle<ObjectTemplateInfo>::cast(proto_template); | 
|  | } | 
|  | } | 
|  |  | 
|  | if (js_global_object_template.is_null()) { | 
|  | Handle<String> name = Handle<String>(heap()->empty_string()); | 
|  | Handle<Code> code = isolate()->builtins()->Illegal(); | 
|  | Handle<JSObject> prototype = | 
|  | factory()->NewFunctionPrototype(isolate()->object_function()); | 
|  | js_global_object_function = factory()->NewFunction( | 
|  | name, code, prototype, JS_GLOBAL_OBJECT_TYPE, JSGlobalObject::kSize); | 
|  | #ifdef DEBUG | 
|  | LookupIterator it(prototype, factory()->constructor_string(), | 
|  | LookupIterator::OWN_SKIP_INTERCEPTOR); | 
|  | Handle<Object> value = Object::GetProperty(&it).ToHandleChecked(); | 
|  | DCHECK(it.IsFound()); | 
|  | DCHECK_EQ(*isolate()->object_function(), *value); | 
|  | #endif | 
|  | } else { | 
|  | Handle<FunctionTemplateInfo> js_global_object_constructor( | 
|  | FunctionTemplateInfo::cast(js_global_object_template->constructor())); | 
|  | js_global_object_function = ApiNatives::CreateApiFunction( | 
|  | isolate(), js_global_object_constructor, factory()->the_hole_value(), | 
|  | ApiNatives::GlobalObjectType); | 
|  | } | 
|  |  | 
|  | js_global_object_function->initial_map()->set_is_prototype_map(true); | 
|  | js_global_object_function->initial_map()->set_dictionary_map(true); | 
|  | Handle<JSGlobalObject> global_object = | 
|  | factory()->NewJSGlobalObject(js_global_object_function); | 
|  |  | 
|  | // Step 2: (re)initialize the global proxy object. | 
|  | Handle<JSFunction> global_proxy_function; | 
|  | if (global_proxy_template.IsEmpty()) { | 
|  | Handle<String> name = Handle<String>(heap()->empty_string()); | 
|  | Handle<Code> code = isolate()->builtins()->Illegal(); | 
|  | global_proxy_function = factory()->NewFunction( | 
|  | name, code, JS_GLOBAL_PROXY_TYPE, JSGlobalProxy::kSize); | 
|  | } else { | 
|  | Handle<ObjectTemplateInfo> data = | 
|  | v8::Utils::OpenHandle(*global_proxy_template); | 
|  | Handle<FunctionTemplateInfo> global_constructor( | 
|  | FunctionTemplateInfo::cast(data->constructor())); | 
|  | global_proxy_function = ApiNatives::CreateApiFunction( | 
|  | isolate(), global_constructor, factory()->the_hole_value(), | 
|  | ApiNatives::GlobalProxyType); | 
|  | } | 
|  | Handle<String> global_name = factory()->global_string(); | 
|  | global_proxy_function->shared()->set_instance_class_name(*global_name); | 
|  | global_proxy_function->initial_map()->set_is_access_check_needed(true); | 
|  | global_proxy_function->initial_map()->set_has_hidden_prototype(true); | 
|  |  | 
|  | // Set global_proxy.__proto__ to js_global after ConfigureGlobalObjects | 
|  | // Return the global proxy. | 
|  |  | 
|  | factory()->ReinitializeJSGlobalProxy(global_proxy, global_proxy_function); | 
|  | return global_object; | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::HookUpGlobalProxy(Handle<JSGlobalObject> global_object, | 
|  | Handle<JSGlobalProxy> global_proxy) { | 
|  | // Set the native context for the global object. | 
|  | global_object->set_native_context(*native_context()); | 
|  | global_object->set_global_proxy(*global_proxy); | 
|  | global_proxy->set_native_context(*native_context()); | 
|  | // If we deserialized the context, the global proxy is already | 
|  | // correctly set up. Otherwise it's undefined. | 
|  | DCHECK(native_context() | 
|  | ->get(Context::GLOBAL_PROXY_INDEX) | 
|  | ->IsUndefined(isolate()) || | 
|  | native_context()->global_proxy() == *global_proxy); | 
|  | native_context()->set_global_proxy(*global_proxy); | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::HookUpGlobalObject(Handle<JSGlobalObject> global_object) { | 
|  | Handle<JSGlobalObject> global_object_from_snapshot( | 
|  | JSGlobalObject::cast(native_context()->extension())); | 
|  | native_context()->set_extension(*global_object); | 
|  | native_context()->set_security_token(*global_object); | 
|  |  | 
|  | TransferNamedProperties(global_object_from_snapshot, global_object); | 
|  | TransferIndexedProperties(global_object_from_snapshot, global_object); | 
|  | } | 
|  |  | 
|  | static void InstallWithIntrinsicDefaultProto(Isolate* isolate, | 
|  | Handle<JSFunction> function, | 
|  | int context_index) { | 
|  | Handle<Smi> index(Smi::FromInt(context_index), isolate); | 
|  | JSObject::AddProperty( | 
|  | function, isolate->factory()->native_context_index_symbol(), index, NONE); | 
|  | isolate->native_context()->set(context_index, *function); | 
|  | } | 
|  |  | 
|  |  | 
|  | // This is only called if we are not using snapshots.  The equivalent | 
|  | // work in the snapshot case is done in HookUpGlobalObject. | 
|  | void Genesis::InitializeGlobal(Handle<JSGlobalObject> global_object, | 
|  | Handle<JSFunction> empty_function, | 
|  | GlobalContextType context_type) { | 
|  | // --- N a t i v e   C o n t e x t --- | 
|  | // Use the empty function as closure (no scope info). | 
|  | native_context()->set_closure(*empty_function); | 
|  | native_context()->set_previous(NULL); | 
|  | // Set extension and global object. | 
|  | native_context()->set_extension(*global_object); | 
|  | // Security setup: Set the security token of the native context to the global | 
|  | // object. This makes the security check between two different contexts fail | 
|  | // by default even in case of global object reinitialization. | 
|  | native_context()->set_security_token(*global_object); | 
|  |  | 
|  | Isolate* isolate = global_object->GetIsolate(); | 
|  | Factory* factory = isolate->factory(); | 
|  |  | 
|  | Handle<ScriptContextTable> script_context_table = | 
|  | factory->NewScriptContextTable(); | 
|  | native_context()->set_script_context_table(*script_context_table); | 
|  | InstallGlobalThisBinding(); | 
|  |  | 
|  | {  // --- O b j e c t --- | 
|  | Handle<String> object_name = factory->Object_string(); | 
|  | Handle<JSFunction> object_function = isolate->object_function(); | 
|  | JSObject::AddProperty(global_object, object_name, object_function, | 
|  | DONT_ENUM); | 
|  |  | 
|  | SimpleInstallFunction(object_function, factory->assign_string(), | 
|  | Builtins::kObjectAssign, 2, false); | 
|  | SimpleInstallFunction(object_function, factory->create_string(), | 
|  | Builtins::kObjectCreate, 2, false); | 
|  | SimpleInstallFunction(object_function, "getOwnPropertyDescriptor", | 
|  | Builtins::kObjectGetOwnPropertyDescriptor, 2, false); | 
|  | SimpleInstallFunction(object_function, "getOwnPropertyNames", | 
|  | Builtins::kObjectGetOwnPropertyNames, 1, false); | 
|  | SimpleInstallFunction(object_function, "getOwnPropertySymbols", | 
|  | Builtins::kObjectGetOwnPropertySymbols, 1, false); | 
|  | SimpleInstallFunction(object_function, "is", | 
|  | Builtins::kObjectIs, 2, true); | 
|  | SimpleInstallFunction(object_function, "preventExtensions", | 
|  | Builtins::kObjectPreventExtensions, 1, false); | 
|  | SimpleInstallFunction(object_function, "seal", | 
|  | Builtins::kObjectSeal, 1, false); | 
|  |  | 
|  | Handle<JSFunction> object_define_properties = SimpleInstallFunction( | 
|  | object_function, "defineProperties", | 
|  | Builtins::kObjectDefineProperties, 2, true); | 
|  | native_context()->set_object_define_properties(*object_define_properties); | 
|  |  | 
|  | Handle<JSFunction> object_define_property = SimpleInstallFunction( | 
|  | object_function, factory->defineProperty_string(), | 
|  | Builtins::kObjectDefineProperty, 3, true); | 
|  | native_context()->set_object_define_property(*object_define_property); | 
|  |  | 
|  | Handle<JSFunction> object_freeze = SimpleInstallFunction( | 
|  | object_function, "freeze", Builtins::kObjectFreeze, 1, false); | 
|  | native_context()->set_object_freeze(*object_freeze); | 
|  |  | 
|  | Handle<JSFunction> object_get_prototype_of = SimpleInstallFunction( | 
|  | object_function, "getPrototypeOf", Builtins::kObjectGetPrototypeOf, | 
|  | 1, false); | 
|  | native_context()->set_object_get_prototype_of(*object_get_prototype_of); | 
|  |  | 
|  | Handle<JSFunction> object_is_extensible = SimpleInstallFunction( | 
|  | object_function, "isExtensible", Builtins::kObjectIsExtensible, | 
|  | 1, false); | 
|  | native_context()->set_object_is_extensible(*object_is_extensible); | 
|  |  | 
|  | Handle<JSFunction> object_is_frozen = SimpleInstallFunction( | 
|  | object_function, "isFrozen", Builtins::kObjectIsFrozen, 1, false); | 
|  | native_context()->set_object_is_frozen(*object_is_frozen); | 
|  |  | 
|  | Handle<JSFunction> object_is_sealed = SimpleInstallFunction( | 
|  | object_function, "isSealed", Builtins::kObjectIsSealed, 1, false); | 
|  | native_context()->set_object_is_sealed(*object_is_sealed); | 
|  |  | 
|  | Handle<JSFunction> object_keys = SimpleInstallFunction( | 
|  | object_function, "keys", Builtins::kObjectKeys, 1, false); | 
|  | native_context()->set_object_keys(*object_keys); | 
|  |  | 
|  | SimpleInstallFunction(isolate->initial_object_prototype(), | 
|  | "__defineGetter__", Builtins::kObjectDefineGetter, 2, | 
|  | true); | 
|  | SimpleInstallFunction(isolate->initial_object_prototype(), | 
|  | "__defineSetter__", Builtins::kObjectDefineSetter, 2, | 
|  | true); | 
|  | SimpleInstallFunction(isolate->initial_object_prototype(), "hasOwnProperty", | 
|  | Builtins::kObjectHasOwnProperty, 1, true); | 
|  | SimpleInstallFunction(isolate->initial_object_prototype(), | 
|  | "__lookupGetter__", Builtins::kObjectLookupGetter, 1, | 
|  | true); | 
|  | SimpleInstallFunction(isolate->initial_object_prototype(), | 
|  | "__lookupSetter__", Builtins::kObjectLookupSetter, 1, | 
|  | true); | 
|  | } | 
|  |  | 
|  | Handle<JSObject> global(native_context()->global_object()); | 
|  |  | 
|  | {  // --- F u n c t i o n --- | 
|  | Handle<JSFunction> prototype = empty_function; | 
|  | Handle<JSFunction> function_fun = | 
|  | InstallFunction(global, "Function", JS_FUNCTION_TYPE, JSFunction::kSize, | 
|  | prototype, Builtins::kFunctionConstructor); | 
|  | function_fun->set_prototype_or_initial_map( | 
|  | *sloppy_function_map_writable_prototype_); | 
|  | function_fun->shared()->DontAdaptArguments(); | 
|  | function_fun->shared()->set_construct_stub( | 
|  | *isolate->builtins()->FunctionConstructor()); | 
|  | function_fun->shared()->set_length(1); | 
|  | InstallWithIntrinsicDefaultProto(isolate, function_fun, | 
|  | Context::FUNCTION_FUNCTION_INDEX); | 
|  |  | 
|  | // Setup the methods on the %FunctionPrototype%. | 
|  | SimpleInstallFunction(prototype, factory->apply_string(), | 
|  | Builtins::kFunctionPrototypeApply, 2, false); | 
|  |  | 
|  | FastFunctionBindStub bind_stub(isolate); | 
|  | Handle<JSFunction> bind_function = factory->NewFunctionWithoutPrototype( | 
|  | factory->bind_string(), bind_stub.GetCode(), false); | 
|  | bind_function->shared()->DontAdaptArguments(); | 
|  | bind_function->shared()->set_length(1); | 
|  | InstallFunction(prototype, bind_function, factory->bind_string(), | 
|  | DONT_ENUM); | 
|  |  | 
|  | SimpleInstallFunction(prototype, factory->call_string(), | 
|  | Builtins::kFunctionPrototypeCall, 1, false); | 
|  | SimpleInstallFunction(prototype, factory->toString_string(), | 
|  | Builtins::kFunctionPrototypeToString, 0, false); | 
|  |  | 
|  | // Install the @@hasInstance function. | 
|  | Handle<JSFunction> has_instance = InstallFunction( | 
|  | prototype, factory->has_instance_symbol(), JS_OBJECT_TYPE, | 
|  | JSObject::kHeaderSize, MaybeHandle<JSObject>(), | 
|  | Builtins::kFunctionPrototypeHasInstance, | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | DONT_DELETE | READ_ONLY)); | 
|  |  | 
|  | // Set the expected parameters for @@hasInstance to 1; required by builtin. | 
|  | has_instance->shared()->set_internal_formal_parameter_count(1); | 
|  |  | 
|  | // Set the length for the function to satisfy ECMA-262. | 
|  | has_instance->shared()->set_length(1); | 
|  |  | 
|  | // Install the "constructor" property on the %FunctionPrototype%. | 
|  | JSObject::AddProperty(prototype, factory->constructor_string(), | 
|  | function_fun, DONT_ENUM); | 
|  |  | 
|  | sloppy_function_map_writable_prototype_->SetConstructor(*function_fun); | 
|  | strict_function_map_writable_prototype_->SetConstructor(*function_fun); | 
|  | } | 
|  |  | 
|  | {  // --- A r r a y --- | 
|  | Handle<JSFunction> array_function = | 
|  | InstallFunction(global, "Array", JS_ARRAY_TYPE, JSArray::kSize, | 
|  | isolate->initial_object_prototype(), | 
|  | Builtins::kArrayCode); | 
|  | array_function->shared()->DontAdaptArguments(); | 
|  | array_function->shared()->set_builtin_function_id(kArrayCode); | 
|  |  | 
|  | // This seems a bit hackish, but we need to make sure Array.length | 
|  | // is 1. | 
|  | array_function->shared()->set_length(1); | 
|  |  | 
|  | Handle<Map> initial_map(array_function->initial_map()); | 
|  |  | 
|  | // This assert protects an optimization in | 
|  | // HGraphBuilder::JSArrayBuilder::EmitMapCode() | 
|  | DCHECK(initial_map->elements_kind() == GetInitialFastElementsKind()); | 
|  | Map::EnsureDescriptorSlack(initial_map, 1); | 
|  |  | 
|  | PropertyAttributes attribs = static_cast<PropertyAttributes>( | 
|  | DONT_ENUM | DONT_DELETE); | 
|  |  | 
|  | Handle<AccessorInfo> array_length = | 
|  | Accessors::ArrayLengthInfo(isolate, attribs); | 
|  | {  // Add length. | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(array_length->name())), array_length, | 
|  | attribs); | 
|  | initial_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | InstallWithIntrinsicDefaultProto(isolate, array_function, | 
|  | Context::ARRAY_FUNCTION_INDEX); | 
|  |  | 
|  | // Cache the array maps, needed by ArrayConstructorStub | 
|  | CacheInitialJSArrayMaps(native_context(), initial_map); | 
|  | ArrayConstructorStub array_constructor_stub(isolate); | 
|  | Handle<Code> code = array_constructor_stub.GetCode(); | 
|  | array_function->shared()->set_construct_stub(*code); | 
|  |  | 
|  | Handle<JSFunction> is_arraylike = SimpleInstallFunction( | 
|  | array_function, isolate->factory()->InternalizeUtf8String("isArray"), | 
|  | Builtins::kArrayIsArray, 1, true); | 
|  | native_context()->set_is_arraylike(*is_arraylike); | 
|  | } | 
|  |  | 
|  | {  // --- N u m b e r --- | 
|  | Handle<JSFunction> number_fun = InstallFunction( | 
|  | global, "Number", JS_VALUE_TYPE, JSValue::kSize, | 
|  | isolate->initial_object_prototype(), Builtins::kNumberConstructor); | 
|  | number_fun->shared()->DontAdaptArguments(); | 
|  | number_fun->shared()->set_construct_stub( | 
|  | *isolate->builtins()->NumberConstructor_ConstructStub()); | 
|  | number_fun->shared()->set_length(1); | 
|  | InstallWithIntrinsicDefaultProto(isolate, number_fun, | 
|  | Context::NUMBER_FUNCTION_INDEX); | 
|  | } | 
|  |  | 
|  | {  // --- B o o l e a n --- | 
|  | Handle<JSFunction> boolean_fun = | 
|  | InstallFunction(global, "Boolean", JS_VALUE_TYPE, JSValue::kSize, | 
|  | isolate->initial_object_prototype(), | 
|  | Builtins::kBooleanConstructor); | 
|  | boolean_fun->shared()->DontAdaptArguments(); | 
|  | boolean_fun->shared()->set_construct_stub( | 
|  | *isolate->builtins()->BooleanConstructor_ConstructStub()); | 
|  | boolean_fun->shared()->set_length(1); | 
|  | InstallWithIntrinsicDefaultProto(isolate, boolean_fun, | 
|  | Context::BOOLEAN_FUNCTION_INDEX); | 
|  |  | 
|  | // Create the %BooleanPrototype% | 
|  | Handle<JSValue> prototype = | 
|  | Handle<JSValue>::cast(factory->NewJSObject(boolean_fun, TENURED)); | 
|  | prototype->set_value(isolate->heap()->false_value()); | 
|  | Accessors::FunctionSetPrototype(boolean_fun, prototype).Assert(); | 
|  |  | 
|  | // Install the "constructor" property on the {prototype}. | 
|  | JSObject::AddProperty(prototype, factory->constructor_string(), boolean_fun, | 
|  | DONT_ENUM); | 
|  |  | 
|  | // Install the Boolean.prototype methods. | 
|  | SimpleInstallFunction(prototype, "toString", | 
|  | Builtins::kBooleanPrototypeToString, 0, false); | 
|  | SimpleInstallFunction(prototype, "valueOf", | 
|  | Builtins::kBooleanPrototypeValueOf, 0, false); | 
|  | } | 
|  |  | 
|  | {  // --- S t r i n g --- | 
|  | Handle<JSFunction> string_fun = InstallFunction( | 
|  | global, "String", JS_VALUE_TYPE, JSValue::kSize, | 
|  | isolate->initial_object_prototype(), Builtins::kStringConstructor); | 
|  | string_fun->shared()->set_construct_stub( | 
|  | *isolate->builtins()->StringConstructor_ConstructStub()); | 
|  | string_fun->shared()->DontAdaptArguments(); | 
|  | string_fun->shared()->set_length(1); | 
|  | InstallWithIntrinsicDefaultProto(isolate, string_fun, | 
|  | Context::STRING_FUNCTION_INDEX); | 
|  |  | 
|  | Handle<Map> string_map = | 
|  | Handle<Map>(native_context()->string_function()->initial_map()); | 
|  | string_map->set_elements_kind(FAST_STRING_WRAPPER_ELEMENTS); | 
|  | Map::EnsureDescriptorSlack(string_map, 1); | 
|  |  | 
|  | PropertyAttributes attribs = static_cast<PropertyAttributes>( | 
|  | DONT_ENUM | DONT_DELETE | READ_ONLY); | 
|  | Handle<AccessorInfo> string_length( | 
|  | Accessors::StringLengthInfo(isolate, attribs)); | 
|  |  | 
|  | {  // Add length. | 
|  | AccessorConstantDescriptor d(factory->length_string(), string_length, | 
|  | attribs); | 
|  | string_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | // Install the String.fromCharCode function. | 
|  | SimpleInstallFunction(string_fun, "fromCharCode", | 
|  | Builtins::kStringFromCharCode, 1, true); | 
|  |  | 
|  | // Install the String.fromCodePoint function. | 
|  | SimpleInstallFunction(string_fun, "fromCodePoint", | 
|  | Builtins::kStringFromCodePoint, 1, false); | 
|  |  | 
|  | // Create the %StringPrototype% | 
|  | Handle<JSValue> prototype = | 
|  | Handle<JSValue>::cast(factory->NewJSObject(string_fun, TENURED)); | 
|  | prototype->set_value(isolate->heap()->empty_string()); | 
|  | Accessors::FunctionSetPrototype(string_fun, prototype).Assert(); | 
|  |  | 
|  | // Install the "constructor" property on the {prototype}. | 
|  | JSObject::AddProperty(prototype, factory->constructor_string(), string_fun, | 
|  | DONT_ENUM); | 
|  |  | 
|  | // Install the String.prototype methods. | 
|  | SimpleInstallFunction(prototype, "charAt", Builtins::kStringPrototypeCharAt, | 
|  | 1, true); | 
|  | SimpleInstallFunction(prototype, "charCodeAt", | 
|  | Builtins::kStringPrototypeCharCodeAt, 1, true); | 
|  | SimpleInstallFunction(prototype, "trim", Builtins::kStringPrototypeTrim, 0, | 
|  | false); | 
|  | SimpleInstallFunction(prototype, "trimLeft", | 
|  | Builtins::kStringPrototypeTrimLeft, 0, false); | 
|  | SimpleInstallFunction(prototype, "trimRight", | 
|  | Builtins::kStringPrototypeTrimRight, 0, false); | 
|  | } | 
|  |  | 
|  | { | 
|  | // --- S y m b o l --- | 
|  | Handle<JSObject> prototype = | 
|  | factory->NewJSObject(isolate->object_function(), TENURED); | 
|  | Handle<JSFunction> symbol_fun = | 
|  | InstallFunction(global, "Symbol", JS_VALUE_TYPE, JSValue::kSize, | 
|  | prototype, Builtins::kSymbolConstructor); | 
|  | symbol_fun->shared()->set_construct_stub( | 
|  | *isolate->builtins()->SymbolConstructor_ConstructStub()); | 
|  | symbol_fun->shared()->set_length(0); | 
|  | symbol_fun->shared()->DontAdaptArguments(); | 
|  | native_context()->set_symbol_function(*symbol_fun); | 
|  |  | 
|  | // Install the "constructor" property on the {prototype}. | 
|  | JSObject::AddProperty(prototype, factory->constructor_string(), symbol_fun, | 
|  | DONT_ENUM); | 
|  | } | 
|  |  | 
|  | {  // --- D a t e --- | 
|  | // Builtin functions for Date.prototype. | 
|  | Handle<JSObject> prototype = | 
|  | factory->NewJSObject(isolate->object_function(), TENURED); | 
|  | Handle<JSFunction> date_fun = | 
|  | InstallFunction(global, "Date", JS_DATE_TYPE, JSDate::kSize, prototype, | 
|  | Builtins::kDateConstructor); | 
|  | InstallWithIntrinsicDefaultProto(isolate, date_fun, | 
|  | Context::DATE_FUNCTION_INDEX); | 
|  | date_fun->shared()->set_construct_stub( | 
|  | *isolate->builtins()->DateConstructor_ConstructStub()); | 
|  | date_fun->shared()->set_length(7); | 
|  | date_fun->shared()->DontAdaptArguments(); | 
|  |  | 
|  | // Install the Date.now, Date.parse and Date.UTC functions. | 
|  | SimpleInstallFunction(date_fun, "now", Builtins::kDateNow, 0, false); | 
|  | SimpleInstallFunction(date_fun, "parse", Builtins::kDateParse, 1, false); | 
|  | SimpleInstallFunction(date_fun, "UTC", Builtins::kDateUTC, 7, false); | 
|  |  | 
|  | // Install the "constructor" property on the {prototype}. | 
|  | JSObject::AddProperty(prototype, factory->constructor_string(), date_fun, | 
|  | DONT_ENUM); | 
|  |  | 
|  | // Install the Date.prototype methods. | 
|  | SimpleInstallFunction(prototype, "toString", | 
|  | Builtins::kDatePrototypeToString, 0, false); | 
|  | SimpleInstallFunction(prototype, "toDateString", | 
|  | Builtins::kDatePrototypeToDateString, 0, false); | 
|  | SimpleInstallFunction(prototype, "toTimeString", | 
|  | Builtins::kDatePrototypeToTimeString, 0, false); | 
|  | SimpleInstallFunction(prototype, "toISOString", | 
|  | Builtins::kDatePrototypeToISOString, 0, false); | 
|  | Handle<JSFunction> to_utc_string = | 
|  | SimpleInstallFunction(prototype, "toUTCString", | 
|  | Builtins::kDatePrototypeToUTCString, 0, false); | 
|  | InstallFunction(prototype, to_utc_string, | 
|  | factory->InternalizeUtf8String("toGMTString"), DONT_ENUM); | 
|  | SimpleInstallFunction(prototype, "getDate", Builtins::kDatePrototypeGetDate, | 
|  | 0, true); | 
|  | SimpleInstallFunction(prototype, "setDate", Builtins::kDatePrototypeSetDate, | 
|  | 1, false); | 
|  | SimpleInstallFunction(prototype, "getDay", Builtins::kDatePrototypeGetDay, | 
|  | 0, true); | 
|  | SimpleInstallFunction(prototype, "getFullYear", | 
|  | Builtins::kDatePrototypeGetFullYear, 0, true); | 
|  | SimpleInstallFunction(prototype, "setFullYear", | 
|  | Builtins::kDatePrototypeSetFullYear, 3, false); | 
|  | SimpleInstallFunction(prototype, "getHours", | 
|  | Builtins::kDatePrototypeGetHours, 0, true); | 
|  | SimpleInstallFunction(prototype, "setHours", | 
|  | Builtins::kDatePrototypeSetHours, 4, false); | 
|  | SimpleInstallFunction(prototype, "getMilliseconds", | 
|  | Builtins::kDatePrototypeGetMilliseconds, 0, true); | 
|  | SimpleInstallFunction(prototype, "setMilliseconds", | 
|  | Builtins::kDatePrototypeSetMilliseconds, 1, false); | 
|  | SimpleInstallFunction(prototype, "getMinutes", | 
|  | Builtins::kDatePrototypeGetMinutes, 0, true); | 
|  | SimpleInstallFunction(prototype, "setMinutes", | 
|  | Builtins::kDatePrototypeSetMinutes, 3, false); | 
|  | SimpleInstallFunction(prototype, "getMonth", | 
|  | Builtins::kDatePrototypeGetMonth, 0, true); | 
|  | SimpleInstallFunction(prototype, "setMonth", | 
|  | Builtins::kDatePrototypeSetMonth, 2, false); | 
|  | SimpleInstallFunction(prototype, "getSeconds", | 
|  | Builtins::kDatePrototypeGetSeconds, 0, true); | 
|  | SimpleInstallFunction(prototype, "setSeconds", | 
|  | Builtins::kDatePrototypeSetSeconds, 2, false); | 
|  | SimpleInstallFunction(prototype, "getTime", Builtins::kDatePrototypeGetTime, | 
|  | 0, true); | 
|  | SimpleInstallFunction(prototype, "setTime", Builtins::kDatePrototypeSetTime, | 
|  | 1, false); | 
|  | SimpleInstallFunction(prototype, "getTimezoneOffset", | 
|  | Builtins::kDatePrototypeGetTimezoneOffset, 0, true); | 
|  | SimpleInstallFunction(prototype, "getUTCDate", | 
|  | Builtins::kDatePrototypeGetUTCDate, 0, true); | 
|  | SimpleInstallFunction(prototype, "setUTCDate", | 
|  | Builtins::kDatePrototypeSetUTCDate, 1, false); | 
|  | SimpleInstallFunction(prototype, "getUTCDay", | 
|  | Builtins::kDatePrototypeGetUTCDay, 0, true); | 
|  | SimpleInstallFunction(prototype, "getUTCFullYear", | 
|  | Builtins::kDatePrototypeGetUTCFullYear, 0, true); | 
|  | SimpleInstallFunction(prototype, "setUTCFullYear", | 
|  | Builtins::kDatePrototypeSetUTCFullYear, 3, false); | 
|  | SimpleInstallFunction(prototype, "getUTCHours", | 
|  | Builtins::kDatePrototypeGetUTCHours, 0, true); | 
|  | SimpleInstallFunction(prototype, "setUTCHours", | 
|  | Builtins::kDatePrototypeSetUTCHours, 4, false); | 
|  | SimpleInstallFunction(prototype, "getUTCMilliseconds", | 
|  | Builtins::kDatePrototypeGetUTCMilliseconds, 0, true); | 
|  | SimpleInstallFunction(prototype, "setUTCMilliseconds", | 
|  | Builtins::kDatePrototypeSetUTCMilliseconds, 1, false); | 
|  | SimpleInstallFunction(prototype, "getUTCMinutes", | 
|  | Builtins::kDatePrototypeGetUTCMinutes, 0, true); | 
|  | SimpleInstallFunction(prototype, "setUTCMinutes", | 
|  | Builtins::kDatePrototypeSetUTCMinutes, 3, false); | 
|  | SimpleInstallFunction(prototype, "getUTCMonth", | 
|  | Builtins::kDatePrototypeGetUTCMonth, 0, true); | 
|  | SimpleInstallFunction(prototype, "setUTCMonth", | 
|  | Builtins::kDatePrototypeSetUTCMonth, 2, false); | 
|  | SimpleInstallFunction(prototype, "getUTCSeconds", | 
|  | Builtins::kDatePrototypeGetUTCSeconds, 0, true); | 
|  | SimpleInstallFunction(prototype, "setUTCSeconds", | 
|  | Builtins::kDatePrototypeSetUTCSeconds, 2, false); | 
|  | SimpleInstallFunction(prototype, "valueOf", Builtins::kDatePrototypeValueOf, | 
|  | 0, false); | 
|  | SimpleInstallFunction(prototype, "getYear", Builtins::kDatePrototypeGetYear, | 
|  | 0, true); | 
|  | SimpleInstallFunction(prototype, "setYear", Builtins::kDatePrototypeSetYear, | 
|  | 1, false); | 
|  | SimpleInstallFunction(prototype, "toJSON", Builtins::kDatePrototypeToJson, | 
|  | 1, false); | 
|  |  | 
|  | // Install i18n fallback functions. | 
|  | SimpleInstallFunction(prototype, "toLocaleString", | 
|  | Builtins::kDatePrototypeToString, 0, false); | 
|  | SimpleInstallFunction(prototype, "toLocaleDateString", | 
|  | Builtins::kDatePrototypeToDateString, 0, false); | 
|  | SimpleInstallFunction(prototype, "toLocaleTimeString", | 
|  | Builtins::kDatePrototypeToTimeString, 0, false); | 
|  |  | 
|  | // Install the @@toPrimitive function. | 
|  | Handle<JSFunction> to_primitive = InstallFunction( | 
|  | prototype, factory->to_primitive_symbol(), JS_OBJECT_TYPE, | 
|  | JSObject::kHeaderSize, MaybeHandle<JSObject>(), | 
|  | Builtins::kDatePrototypeToPrimitive, | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  |  | 
|  | // Set the expected parameters for @@toPrimitive to 1; required by builtin. | 
|  | to_primitive->shared()->set_internal_formal_parameter_count(1); | 
|  |  | 
|  | // Set the length for the function to satisfy ECMA-262. | 
|  | to_primitive->shared()->set_length(1); | 
|  | } | 
|  |  | 
|  | {  // -- R e g E x p | 
|  | // Builtin functions for RegExp.prototype. | 
|  | Handle<JSFunction> regexp_fun = | 
|  | InstallFunction(global, "RegExp", JS_REGEXP_TYPE, JSRegExp::kSize, | 
|  | isolate->initial_object_prototype(), | 
|  | Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, regexp_fun, | 
|  | Context::REGEXP_FUNCTION_INDEX); | 
|  | regexp_fun->shared()->set_construct_stub( | 
|  | *isolate->builtins()->JSBuiltinsConstructStub()); | 
|  |  | 
|  | DCHECK(regexp_fun->has_initial_map()); | 
|  | Handle<Map> initial_map(regexp_fun->initial_map()); | 
|  |  | 
|  | DCHECK_EQ(0, initial_map->GetInObjectProperties()); | 
|  |  | 
|  | Map::EnsureDescriptorSlack(initial_map, 1); | 
|  |  | 
|  | // ECMA-262, section 15.10.7.5. | 
|  | PropertyAttributes writable = | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | DONT_DELETE); | 
|  | DataDescriptor field(factory->last_index_string(), | 
|  | JSRegExp::kLastIndexFieldIndex, writable, | 
|  | Representation::Tagged()); | 
|  | initial_map->AppendDescriptor(&field); | 
|  |  | 
|  | static const int num_fields = JSRegExp::kInObjectFieldCount; | 
|  | initial_map->SetInObjectProperties(num_fields); | 
|  | initial_map->set_unused_property_fields(0); | 
|  | initial_map->set_instance_size(initial_map->instance_size() + | 
|  | num_fields * kPointerSize); | 
|  | } | 
|  |  | 
|  | {  // -- E r r o r | 
|  | Handle<JSFunction> error_fun = InstallFunction( | 
|  | global, "Error", JS_ERROR_TYPE, JSObject::kHeaderSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, error_fun, | 
|  | Context::ERROR_FUNCTION_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- E v a l E r r o r | 
|  | Handle<JSFunction> eval_error_fun = InstallFunction( | 
|  | global, "EvalError", JS_ERROR_TYPE, JSObject::kHeaderSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, eval_error_fun, | 
|  | Context::EVAL_ERROR_FUNCTION_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- R a n g e E r r o r | 
|  | Handle<JSFunction> range_error_fun = InstallFunction( | 
|  | global, "RangeError", JS_ERROR_TYPE, JSObject::kHeaderSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, range_error_fun, | 
|  | Context::RANGE_ERROR_FUNCTION_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- R e f e r e n c e E r r o r | 
|  | Handle<JSFunction> reference_error_fun = InstallFunction( | 
|  | global, "ReferenceError", JS_ERROR_TYPE, JSObject::kHeaderSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, reference_error_fun, | 
|  | Context::REFERENCE_ERROR_FUNCTION_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- S y n t a x E r r o r | 
|  | Handle<JSFunction> syntax_error_fun = InstallFunction( | 
|  | global, "SyntaxError", JS_ERROR_TYPE, JSObject::kHeaderSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, syntax_error_fun, | 
|  | Context::SYNTAX_ERROR_FUNCTION_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- T y p e E r r o r | 
|  | Handle<JSFunction> type_error_fun = InstallFunction( | 
|  | global, "TypeError", JS_ERROR_TYPE, JSObject::kHeaderSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, type_error_fun, | 
|  | Context::TYPE_ERROR_FUNCTION_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- U R I E r r o r | 
|  | Handle<JSFunction> uri_error_fun = InstallFunction( | 
|  | global, "URIError", JS_ERROR_TYPE, JSObject::kHeaderSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, uri_error_fun, | 
|  | Context::URI_ERROR_FUNCTION_INDEX); | 
|  | } | 
|  |  | 
|  | // Initialize the embedder data slot. | 
|  | Handle<FixedArray> embedder_data = factory->NewFixedArray(3); | 
|  | native_context()->set_embedder_data(*embedder_data); | 
|  |  | 
|  | {  // -- J S O N | 
|  | Handle<String> name = factory->InternalizeUtf8String("JSON"); | 
|  | Handle<JSFunction> cons = factory->NewFunction(name); | 
|  | JSFunction::SetInstancePrototype(cons, | 
|  | Handle<Object>(native_context()->initial_object_prototype(), isolate)); | 
|  | Handle<JSObject> json_object = factory->NewJSObject(cons, TENURED); | 
|  | DCHECK(json_object->IsJSObject()); | 
|  | JSObject::AddProperty(global, name, json_object, DONT_ENUM); | 
|  | SimpleInstallFunction(json_object, "parse", Builtins::kJsonParse, 2, false); | 
|  | SimpleInstallFunction(json_object, "stringify", Builtins::kJsonStringify, 3, | 
|  | true); | 
|  | JSObject::AddProperty( | 
|  | json_object, factory->to_string_tag_symbol(), | 
|  | factory->NewStringFromAsciiChecked("JSON"), | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  | } | 
|  |  | 
|  | {  // -- M a t h | 
|  | Handle<String> name = factory->InternalizeUtf8String("Math"); | 
|  | Handle<JSFunction> cons = factory->NewFunction(name); | 
|  | JSFunction::SetInstancePrototype( | 
|  | cons, | 
|  | Handle<Object>(native_context()->initial_object_prototype(), isolate)); | 
|  | Handle<JSObject> math = factory->NewJSObject(cons, TENURED); | 
|  | DCHECK(math->IsJSObject()); | 
|  | JSObject::AddProperty(global, name, math, DONT_ENUM); | 
|  | SimpleInstallFunction(math, "acos", Builtins::kMathAcos, 1, true); | 
|  | SimpleInstallFunction(math, "asin", Builtins::kMathAsin, 1, true); | 
|  | SimpleInstallFunction(math, "atan", Builtins::kMathAtan, 1, true); | 
|  | SimpleInstallFunction(math, "atan2", Builtins::kMathAtan2, 2, true); | 
|  | SimpleInstallFunction(math, "atanh", Builtins::kMathAtanh, 1, true); | 
|  | SimpleInstallFunction(math, "ceil", Builtins::kMathCeil, 1, true); | 
|  | SimpleInstallFunction(math, "cbrt", Builtins::kMathCbrt, 1, true); | 
|  | SimpleInstallFunction(math, "expm1", Builtins::kMathExpm1, 1, true); | 
|  | SimpleInstallFunction(math, "clz32", Builtins::kMathClz32, 1, true); | 
|  | SimpleInstallFunction(math, "cos", Builtins::kMathCos, 1, true); | 
|  | Handle<JSFunction> math_exp = | 
|  | SimpleInstallFunction(math, "exp", Builtins::kMathExp, 1, true); | 
|  | native_context()->set_math_exp(*math_exp); | 
|  | Handle<JSFunction> math_floor = | 
|  | SimpleInstallFunction(math, "floor", Builtins::kMathFloor, 1, true); | 
|  | native_context()->set_math_floor(*math_floor); | 
|  | SimpleInstallFunction(math, "fround", Builtins::kMathFround, 1, true); | 
|  | SimpleInstallFunction(math, "imul", Builtins::kMathImul, 2, true); | 
|  | Handle<JSFunction> math_log = | 
|  | SimpleInstallFunction(math, "log", Builtins::kMathLog, 1, true); | 
|  | native_context()->set_math_log(*math_log); | 
|  | SimpleInstallFunction(math, "log1p", Builtins::kMathLog1p, 1, true); | 
|  | SimpleInstallFunction(math, "log2", Builtins::kMathLog2, 1, true); | 
|  | SimpleInstallFunction(math, "log10", Builtins::kMathLog10, 1, true); | 
|  | SimpleInstallFunction(math, "max", Builtins::kMathMax, 2, false); | 
|  | SimpleInstallFunction(math, "min", Builtins::kMathMin, 2, false); | 
|  | SimpleInstallFunction(math, "round", Builtins::kMathRound, 1, true); | 
|  | SimpleInstallFunction(math, "sin", Builtins::kMathSin, 1, true); | 
|  | Handle<JSFunction> math_sqrt = | 
|  | SimpleInstallFunction(math, "sqrt", Builtins::kMathSqrt, 1, true); | 
|  | native_context()->set_math_sqrt(*math_sqrt); | 
|  | SimpleInstallFunction(math, "tan", Builtins::kMathTan, 1, true); | 
|  | SimpleInstallFunction(math, "trunc", Builtins::kMathTrunc, 1, true); | 
|  |  | 
|  | // Install math constants. | 
|  | double const kE = base::ieee754::exp(1.0); | 
|  | JSObject::AddProperty( | 
|  | math, factory->NewStringFromAsciiChecked("E"), factory->NewNumber(kE), | 
|  | static_cast<PropertyAttributes>(DONT_DELETE | DONT_ENUM | READ_ONLY)); | 
|  | JSObject::AddProperty( | 
|  | math, factory->NewStringFromAsciiChecked("LN10"), | 
|  | factory->NewNumber(base::ieee754::log(10.0)), | 
|  | static_cast<PropertyAttributes>(DONT_DELETE | DONT_ENUM | READ_ONLY)); | 
|  | JSObject::AddProperty( | 
|  | math, factory->NewStringFromAsciiChecked("LN2"), | 
|  | factory->NewNumber(base::ieee754::log(2.0)), | 
|  | static_cast<PropertyAttributes>(DONT_DELETE | DONT_ENUM | READ_ONLY)); | 
|  | JSObject::AddProperty( | 
|  | math, factory->NewStringFromAsciiChecked("LOG10E"), | 
|  | factory->NewNumber(base::ieee754::log10(kE)), | 
|  | static_cast<PropertyAttributes>(DONT_DELETE | DONT_ENUM | READ_ONLY)); | 
|  | JSObject::AddProperty( | 
|  | math, factory->NewStringFromAsciiChecked("LOG2E"), | 
|  | factory->NewNumber(base::ieee754::log2(kE)), | 
|  | static_cast<PropertyAttributes>(DONT_DELETE | DONT_ENUM | READ_ONLY)); | 
|  | } | 
|  |  | 
|  | {  // -- A r r a y B u f f e r | 
|  | Handle<JSFunction> array_buffer_fun = | 
|  | InstallArrayBuffer(global, "ArrayBuffer"); | 
|  | InstallWithIntrinsicDefaultProto(isolate, array_buffer_fun, | 
|  | Context::ARRAY_BUFFER_FUN_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- T y p e d A r r a y | 
|  | Handle<JSObject> prototype = | 
|  | factory->NewJSObject(isolate->object_function(), TENURED); | 
|  | native_context()->set_typed_array_prototype(*prototype); | 
|  |  | 
|  | Handle<JSFunction> typed_array_fun = | 
|  | CreateFunction(isolate, factory->InternalizeUtf8String("TypedArray"), | 
|  | JS_TYPED_ARRAY_TYPE, JSTypedArray::kSize, prototype, | 
|  | Builtins::kIllegal); | 
|  |  | 
|  | // Install the "constructor" property on the {prototype}. | 
|  | JSObject::AddProperty(prototype, factory->constructor_string(), | 
|  | typed_array_fun, DONT_ENUM); | 
|  | native_context()->set_typed_array_function(*typed_array_fun); | 
|  |  | 
|  | // Install the "buffer", "byteOffset", "byteLength" and "length" | 
|  | // getters on the {prototype}. | 
|  | SimpleInstallGetter(prototype, factory->buffer_string(), | 
|  | Builtins::kTypedArrayPrototypeBuffer, false); | 
|  | SimpleInstallGetter(prototype, factory->byte_length_string(), | 
|  | Builtins::kTypedArrayPrototypeByteLength, true, | 
|  | kTypedArrayByteLength); | 
|  | SimpleInstallGetter(prototype, factory->byte_offset_string(), | 
|  | Builtins::kTypedArrayPrototypeByteOffset, true, | 
|  | kTypedArrayByteOffset); | 
|  | SimpleInstallGetter(prototype, factory->length_string(), | 
|  | Builtins::kTypedArrayPrototypeLength, true, | 
|  | kTypedArrayLength); | 
|  | } | 
|  |  | 
|  | {  // -- T y p e d A r r a y s | 
|  | #define INSTALL_TYPED_ARRAY(Type, type, TYPE, ctype, size)             \ | 
|  | {                                                                    \ | 
|  | Handle<JSFunction> fun;                                            \ | 
|  | InstallTypedArray(#Type "Array", TYPE##_ELEMENTS, &fun);           \ | 
|  | InstallWithIntrinsicDefaultProto(isolate, fun,                     \ | 
|  | Context::TYPE##_ARRAY_FUN_INDEX); \ | 
|  | } | 
|  | TYPED_ARRAYS(INSTALL_TYPED_ARRAY) | 
|  | #undef INSTALL_TYPED_ARRAY | 
|  | } | 
|  |  | 
|  | {  // -- D a t a V i e w | 
|  | Handle<JSObject> prototype = | 
|  | factory->NewJSObject(isolate->object_function(), TENURED); | 
|  | Handle<JSFunction> data_view_fun = | 
|  | InstallFunction(global, "DataView", JS_DATA_VIEW_TYPE, | 
|  | JSDataView::kSizeWithInternalFields, prototype, | 
|  | Builtins::kDataViewConstructor); | 
|  | InstallWithIntrinsicDefaultProto(isolate, data_view_fun, | 
|  | Context::DATA_VIEW_FUN_INDEX); | 
|  | data_view_fun->shared()->set_construct_stub( | 
|  | *isolate->builtins()->DataViewConstructor_ConstructStub()); | 
|  | data_view_fun->shared()->set_length(3); | 
|  | data_view_fun->shared()->DontAdaptArguments(); | 
|  |  | 
|  | // Install the @@toStringTag property on the {prototype}. | 
|  | JSObject::AddProperty( | 
|  | prototype, factory->to_string_tag_symbol(), | 
|  | factory->NewStringFromAsciiChecked("DataView"), | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  |  | 
|  | // Install the "constructor" property on the {prototype}. | 
|  | JSObject::AddProperty(prototype, factory->constructor_string(), | 
|  | data_view_fun, DONT_ENUM); | 
|  |  | 
|  | // Install the "buffer", "byteOffset" and "byteLength" getters | 
|  | // on the {prototype}. | 
|  | SimpleInstallGetter(prototype, factory->buffer_string(), | 
|  | Builtins::kDataViewPrototypeGetBuffer, false, | 
|  | kDataViewBuffer); | 
|  | SimpleInstallGetter(prototype, factory->byte_length_string(), | 
|  | Builtins::kDataViewPrototypeGetByteLength, false, | 
|  | kDataViewByteLength); | 
|  | SimpleInstallGetter(prototype, factory->byte_offset_string(), | 
|  | Builtins::kDataViewPrototypeGetByteOffset, false, | 
|  | kDataViewByteOffset); | 
|  | } | 
|  |  | 
|  | {  // -- M a p | 
|  | Handle<JSFunction> js_map_fun = InstallFunction( | 
|  | global, "Map", JS_MAP_TYPE, JSMap::kSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, js_map_fun, | 
|  | Context::JS_MAP_FUN_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- S e t | 
|  | Handle<JSFunction> js_set_fun = InstallFunction( | 
|  | global, "Set", JS_SET_TYPE, JSSet::kSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, js_set_fun, | 
|  | Context::JS_SET_FUN_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- I t e r a t o r R e s u l t | 
|  | Handle<Map> map = | 
|  | factory->NewMap(JS_OBJECT_TYPE, JSIteratorResult::kSize); | 
|  | Map::SetPrototype(map, isolate->initial_object_prototype()); | 
|  | Map::EnsureDescriptorSlack(map, 2); | 
|  |  | 
|  | {  // value | 
|  | DataDescriptor d(factory->value_string(), JSIteratorResult::kValueIndex, | 
|  | NONE, Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | {  // done | 
|  | DataDescriptor d(factory->done_string(), JSIteratorResult::kDoneIndex, | 
|  | NONE, Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | map->SetConstructor(native_context()->object_function()); | 
|  | map->SetInObjectProperties(2); | 
|  | native_context()->set_iterator_result_map(*map); | 
|  | } | 
|  |  | 
|  | {  // -- W e a k M a p | 
|  | Handle<JSFunction> js_weak_map_fun = InstallFunction( | 
|  | global, "WeakMap", JS_WEAK_MAP_TYPE, JSWeakMap::kSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, js_weak_map_fun, | 
|  | Context::JS_WEAK_MAP_FUN_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- W e a k S e t | 
|  | Handle<JSFunction> js_weak_set_fun = InstallFunction( | 
|  | global, "WeakSet", JS_WEAK_SET_TYPE, JSWeakSet::kSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | InstallWithIntrinsicDefaultProto(isolate, js_weak_set_fun, | 
|  | Context::JS_WEAK_SET_FUN_INDEX); | 
|  | } | 
|  |  | 
|  | {  // -- P r o x y | 
|  | CreateJSProxyMaps(); | 
|  |  | 
|  | Handle<String> name = factory->Proxy_string(); | 
|  | Handle<Code> code(isolate->builtins()->ProxyConstructor()); | 
|  |  | 
|  | Handle<JSFunction> proxy_function = | 
|  | factory->NewFunction(isolate->proxy_function_map(), | 
|  | factory->Proxy_string(), MaybeHandle<Code>(code)); | 
|  |  | 
|  | JSFunction::SetInitialMap( | 
|  | proxy_function, Handle<Map>(native_context()->proxy_map(), isolate), | 
|  | factory->null_value()); | 
|  |  | 
|  | proxy_function->shared()->set_construct_stub( | 
|  | *isolate->builtins()->ProxyConstructor_ConstructStub()); | 
|  | proxy_function->shared()->set_internal_formal_parameter_count(2); | 
|  | proxy_function->shared()->set_length(2); | 
|  |  | 
|  | native_context()->set_proxy_function(*proxy_function); | 
|  | InstallFunction(global, name, proxy_function, factory->Object_string()); | 
|  | } | 
|  |  | 
|  | {  // -- R e f l e c t | 
|  | Handle<String> reflect_string = factory->InternalizeUtf8String("Reflect"); | 
|  | Handle<JSObject> reflect = | 
|  | factory->NewJSObject(isolate->object_function(), TENURED); | 
|  | JSObject::AddProperty(global, reflect_string, reflect, DONT_ENUM); | 
|  |  | 
|  | Handle<JSFunction> define_property = | 
|  | SimpleInstallFunction(reflect, factory->defineProperty_string(), | 
|  | Builtins::kReflectDefineProperty, 3, true); | 
|  | native_context()->set_reflect_define_property(*define_property); | 
|  |  | 
|  | Handle<JSFunction> delete_property = | 
|  | SimpleInstallFunction(reflect, factory->deleteProperty_string(), | 
|  | Builtins::kReflectDeleteProperty, 2, true); | 
|  | native_context()->set_reflect_delete_property(*delete_property); | 
|  |  | 
|  | Handle<JSFunction> apply = SimpleInstallFunction( | 
|  | reflect, factory->apply_string(), Builtins::kReflectApply, 3, false); | 
|  | native_context()->set_reflect_apply(*apply); | 
|  |  | 
|  | Handle<JSFunction> construct = | 
|  | SimpleInstallFunction(reflect, factory->construct_string(), | 
|  | Builtins::kReflectConstruct, 2, false); | 
|  | native_context()->set_reflect_construct(*construct); | 
|  |  | 
|  | SimpleInstallFunction(reflect, factory->get_string(), Builtins::kReflectGet, | 
|  | 2, false); | 
|  | SimpleInstallFunction(reflect, factory->getOwnPropertyDescriptor_string(), | 
|  | Builtins::kReflectGetOwnPropertyDescriptor, 2, true); | 
|  | SimpleInstallFunction(reflect, factory->getPrototypeOf_string(), | 
|  | Builtins::kReflectGetPrototypeOf, 1, true); | 
|  | SimpleInstallFunction(reflect, factory->has_string(), Builtins::kReflectHas, | 
|  | 2, true); | 
|  | SimpleInstallFunction(reflect, factory->isExtensible_string(), | 
|  | Builtins::kReflectIsExtensible, 1, true); | 
|  | SimpleInstallFunction(reflect, factory->ownKeys_string(), | 
|  | Builtins::kReflectOwnKeys, 1, true); | 
|  | SimpleInstallFunction(reflect, factory->preventExtensions_string(), | 
|  | Builtins::kReflectPreventExtensions, 1, true); | 
|  | SimpleInstallFunction(reflect, factory->set_string(), Builtins::kReflectSet, | 
|  | 3, false); | 
|  | SimpleInstallFunction(reflect, factory->setPrototypeOf_string(), | 
|  | Builtins::kReflectSetPrototypeOf, 2, true); | 
|  | } | 
|  |  | 
|  | {  // --- B o u n d F u n c t i o n | 
|  | Handle<Map> map = | 
|  | factory->NewMap(JS_BOUND_FUNCTION_TYPE, JSBoundFunction::kSize); | 
|  | map->set_is_callable(); | 
|  | Map::SetPrototype(map, empty_function); | 
|  |  | 
|  | PropertyAttributes roc_attribs = | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY); | 
|  | Map::EnsureDescriptorSlack(map, 2); | 
|  |  | 
|  | Handle<AccessorInfo> bound_length = | 
|  | Accessors::BoundFunctionLengthInfo(isolate, roc_attribs); | 
|  | {  // length | 
|  | AccessorConstantDescriptor d(factory->length_string(), bound_length, | 
|  | roc_attribs); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | Handle<AccessorInfo> bound_name = | 
|  | Accessors::BoundFunctionNameInfo(isolate, roc_attribs); | 
|  | {  // length | 
|  | AccessorConstantDescriptor d(factory->name_string(), bound_name, | 
|  | roc_attribs); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | map->SetInObjectProperties(0); | 
|  | native_context()->set_bound_function_without_constructor_map(*map); | 
|  |  | 
|  | map = Map::Copy(map, "IsConstructor"); | 
|  | map->set_is_constructor(true); | 
|  | native_context()->set_bound_function_with_constructor_map(*map); | 
|  | } | 
|  |  | 
|  | {  // --- sloppy arguments map | 
|  | // Make sure we can recognize argument objects at runtime. | 
|  | // This is done by introducing an anonymous function with | 
|  | // class_name equals 'Arguments'. | 
|  | Handle<String> arguments_string = factory->Arguments_string(); | 
|  | Handle<Code> code = isolate->builtins()->Illegal(); | 
|  | Handle<JSFunction> function = factory->NewFunctionWithoutPrototype( | 
|  | arguments_string, code); | 
|  | function->shared()->set_instance_class_name(*arguments_string); | 
|  |  | 
|  | Handle<Map> map = factory->NewMap( | 
|  | JS_ARGUMENTS_TYPE, JSSloppyArgumentsObject::kSize, FAST_ELEMENTS); | 
|  | // Create the descriptor array for the arguments object. | 
|  | Map::EnsureDescriptorSlack(map, 2); | 
|  |  | 
|  | {  // length | 
|  | DataDescriptor d(factory->length_string(), | 
|  | JSSloppyArgumentsObject::kLengthIndex, DONT_ENUM, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | {  // callee | 
|  | DataDescriptor d(factory->callee_string(), | 
|  | JSSloppyArgumentsObject::kCalleeIndex, DONT_ENUM, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | // @@iterator method is added later. | 
|  |  | 
|  | map->SetInObjectProperties(2); | 
|  | native_context()->set_sloppy_arguments_map(*map); | 
|  |  | 
|  | DCHECK(!function->has_initial_map()); | 
|  | JSFunction::SetInitialMap(function, map, | 
|  | isolate->initial_object_prototype()); | 
|  |  | 
|  | DCHECK(!map->is_dictionary_map()); | 
|  | DCHECK(IsFastObjectElementsKind(map->elements_kind())); | 
|  | } | 
|  |  | 
|  | {  // --- fast and slow aliased arguments map | 
|  | Handle<Map> map = isolate->sloppy_arguments_map(); | 
|  | map = Map::Copy(map, "FastAliasedArguments"); | 
|  | map->set_elements_kind(FAST_SLOPPY_ARGUMENTS_ELEMENTS); | 
|  | DCHECK_EQ(2, map->GetInObjectProperties()); | 
|  | native_context()->set_fast_aliased_arguments_map(*map); | 
|  |  | 
|  | map = Map::Copy(map, "SlowAliasedArguments"); | 
|  | map->set_elements_kind(SLOW_SLOPPY_ARGUMENTS_ELEMENTS); | 
|  | DCHECK_EQ(2, map->GetInObjectProperties()); | 
|  | native_context()->set_slow_aliased_arguments_map(*map); | 
|  | } | 
|  |  | 
|  | {  // --- strict mode arguments map | 
|  | const PropertyAttributes attributes = | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | DONT_DELETE | READ_ONLY); | 
|  |  | 
|  | // Create the ThrowTypeError functions. | 
|  | Handle<AccessorPair> callee = factory->NewAccessorPair(); | 
|  | Handle<AccessorPair> caller = factory->NewAccessorPair(); | 
|  |  | 
|  | Handle<JSFunction> poison = GetStrictArgumentsPoisonFunction(); | 
|  |  | 
|  | // Install the ThrowTypeError functions. | 
|  | callee->set_getter(*poison); | 
|  | callee->set_setter(*poison); | 
|  | caller->set_getter(*poison); | 
|  | caller->set_setter(*poison); | 
|  |  | 
|  | // Create the map. Allocate one in-object field for length. | 
|  | Handle<Map> map = factory->NewMap( | 
|  | JS_ARGUMENTS_TYPE, JSStrictArgumentsObject::kSize, FAST_ELEMENTS); | 
|  | // Create the descriptor array for the arguments object. | 
|  | Map::EnsureDescriptorSlack(map, 3); | 
|  |  | 
|  | {  // length | 
|  | DataDescriptor d(factory->length_string(), | 
|  | JSStrictArgumentsObject::kLengthIndex, DONT_ENUM, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | {  // callee | 
|  | AccessorConstantDescriptor d(factory->callee_string(), callee, | 
|  | attributes); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | {  // caller | 
|  | AccessorConstantDescriptor d(factory->caller_string(), caller, | 
|  | attributes); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | // @@iterator method is added later. | 
|  |  | 
|  | DCHECK_EQ(native_context()->object_function()->prototype(), | 
|  | *isolate->initial_object_prototype()); | 
|  | Map::SetPrototype(map, isolate->initial_object_prototype()); | 
|  | map->SetInObjectProperties(1); | 
|  |  | 
|  | // Copy constructor from the sloppy arguments boilerplate. | 
|  | map->SetConstructor( | 
|  | native_context()->sloppy_arguments_map()->GetConstructor()); | 
|  |  | 
|  | native_context()->set_strict_arguments_map(*map); | 
|  |  | 
|  | DCHECK(!map->is_dictionary_map()); | 
|  | DCHECK(IsFastObjectElementsKind(map->elements_kind())); | 
|  | } | 
|  |  | 
|  | {  // --- context extension | 
|  | // Create a function for the context extension objects. | 
|  | Handle<Code> code = isolate->builtins()->Illegal(); | 
|  | Handle<JSFunction> context_extension_fun = factory->NewFunction( | 
|  | factory->empty_string(), code, JS_CONTEXT_EXTENSION_OBJECT_TYPE, | 
|  | JSObject::kHeaderSize); | 
|  |  | 
|  | Handle<String> name = factory->InternalizeOneByteString( | 
|  | STATIC_CHAR_VECTOR("context_extension")); | 
|  | context_extension_fun->shared()->set_instance_class_name(*name); | 
|  | native_context()->set_context_extension_function(*context_extension_fun); | 
|  | } | 
|  |  | 
|  |  | 
|  | { | 
|  | // Set up the call-as-function delegate. | 
|  | Handle<Code> code = isolate->builtins()->HandleApiCallAsFunction(); | 
|  | Handle<JSFunction> delegate = factory->NewFunction( | 
|  | factory->empty_string(), code, JS_OBJECT_TYPE, JSObject::kHeaderSize); | 
|  | native_context()->set_call_as_function_delegate(*delegate); | 
|  | delegate->shared()->DontAdaptArguments(); | 
|  | } | 
|  |  | 
|  | { | 
|  | // Set up the call-as-constructor delegate. | 
|  | Handle<Code> code = isolate->builtins()->HandleApiCallAsConstructor(); | 
|  | Handle<JSFunction> delegate = factory->NewFunction( | 
|  | factory->empty_string(), code, JS_OBJECT_TYPE, JSObject::kHeaderSize); | 
|  | native_context()->set_call_as_constructor_delegate(*delegate); | 
|  | delegate->shared()->DontAdaptArguments(); | 
|  | } | 
|  | }  // NOLINT(readability/fn_size) | 
|  |  | 
|  | void Genesis::InstallTypedArray(const char* name, ElementsKind elements_kind, | 
|  | Handle<JSFunction>* fun) { | 
|  | Handle<JSObject> global = Handle<JSObject>(native_context()->global_object()); | 
|  |  | 
|  | Handle<JSObject> typed_array_prototype = | 
|  | Handle<JSObject>(isolate()->typed_array_prototype()); | 
|  | Handle<JSFunction> typed_array_function = | 
|  | Handle<JSFunction>(isolate()->typed_array_function()); | 
|  |  | 
|  | Handle<JSObject> prototype = | 
|  | factory()->NewJSObject(isolate()->object_function(), TENURED); | 
|  | Handle<JSFunction> result = | 
|  | InstallFunction(global, name, JS_TYPED_ARRAY_TYPE, JSTypedArray::kSize, | 
|  | prototype, Builtins::kIllegal); | 
|  |  | 
|  | Handle<Map> initial_map = isolate()->factory()->NewMap( | 
|  | JS_TYPED_ARRAY_TYPE, | 
|  | JSTypedArray::kSizeWithInternalFields, | 
|  | elements_kind); | 
|  | JSFunction::SetInitialMap(result, initial_map, | 
|  | handle(initial_map->prototype(), isolate())); | 
|  |  | 
|  | CHECK(JSObject::SetPrototype(result, typed_array_function, false, | 
|  | Object::DONT_THROW) | 
|  | .FromJust()); | 
|  |  | 
|  | CHECK(JSObject::SetPrototype(prototype, typed_array_prototype, false, | 
|  | Object::DONT_THROW) | 
|  | .FromJust()); | 
|  | *fun = result; | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::InitializeExperimentalGlobal() { | 
|  | #define FEATURE_INITIALIZE_GLOBAL(id, descr) InitializeGlobal_##id(); | 
|  |  | 
|  | HARMONY_INPROGRESS(FEATURE_INITIALIZE_GLOBAL) | 
|  | HARMONY_STAGED(FEATURE_INITIALIZE_GLOBAL) | 
|  | HARMONY_SHIPPING(FEATURE_INITIALIZE_GLOBAL) | 
|  | FEATURE_INITIALIZE_GLOBAL(promise_extra, "") | 
|  | FEATURE_INITIALIZE_GLOBAL(intl_extra, "") | 
|  | #undef FEATURE_INITIALIZE_GLOBAL | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Bootstrapper::CompileBuiltin(Isolate* isolate, int index) { | 
|  | Vector<const char> name = Natives::GetScriptName(index); | 
|  | Handle<String> source_code = | 
|  | isolate->bootstrapper()->SourceLookup<Natives>(index); | 
|  |  | 
|  | // We pass in extras_utils so that builtin code can set it up for later use | 
|  | // by actual extras code, compiled with CompileExtraBuiltin. | 
|  | Handle<Object> global = isolate->global_object(); | 
|  | Handle<Object> utils = isolate->natives_utils_object(); | 
|  | Handle<Object> extras_utils = isolate->extras_utils_object(); | 
|  | Handle<Object> args[] = {global, utils, extras_utils}; | 
|  |  | 
|  | return Bootstrapper::CompileNative(isolate, name, source_code, | 
|  | arraysize(args), args, NATIVES_CODE); | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Bootstrapper::CompileExperimentalBuiltin(Isolate* isolate, int index) { | 
|  | HandleScope scope(isolate); | 
|  | Vector<const char> name = ExperimentalNatives::GetScriptName(index); | 
|  | Handle<String> source_code = | 
|  | isolate->bootstrapper()->SourceLookup<ExperimentalNatives>(index); | 
|  | Handle<Object> global = isolate->global_object(); | 
|  | Handle<Object> utils = isolate->natives_utils_object(); | 
|  | Handle<Object> args[] = {global, utils}; | 
|  | return Bootstrapper::CompileNative(isolate, name, source_code, | 
|  | arraysize(args), args, NATIVES_CODE); | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Bootstrapper::CompileExtraBuiltin(Isolate* isolate, int index) { | 
|  | HandleScope scope(isolate); | 
|  | Vector<const char> name = ExtraNatives::GetScriptName(index); | 
|  | Handle<String> source_code = | 
|  | isolate->bootstrapper()->SourceLookup<ExtraNatives>(index); | 
|  | Handle<Object> global = isolate->global_object(); | 
|  | Handle<Object> binding = isolate->extras_binding_object(); | 
|  | Handle<Object> extras_utils = isolate->extras_utils_object(); | 
|  | Handle<Object> args[] = {global, binding, extras_utils}; | 
|  | return Bootstrapper::CompileNative(isolate, name, source_code, | 
|  | arraysize(args), args, EXTENSION_CODE); | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Bootstrapper::CompileExperimentalExtraBuiltin(Isolate* isolate, | 
|  | int index) { | 
|  | HandleScope scope(isolate); | 
|  | Vector<const char> name = ExperimentalExtraNatives::GetScriptName(index); | 
|  | Handle<String> source_code = | 
|  | isolate->bootstrapper()->SourceLookup<ExperimentalExtraNatives>(index); | 
|  | Handle<Object> global = isolate->global_object(); | 
|  | Handle<Object> binding = isolate->extras_binding_object(); | 
|  | Handle<Object> extras_utils = isolate->extras_utils_object(); | 
|  | Handle<Object> args[] = {global, binding, extras_utils}; | 
|  | return Bootstrapper::CompileNative(isolate, name, source_code, | 
|  | arraysize(args), args, EXTENSION_CODE); | 
|  | } | 
|  |  | 
|  | bool Bootstrapper::CompileNative(Isolate* isolate, Vector<const char> name, | 
|  | Handle<String> source, int argc, | 
|  | Handle<Object> argv[], | 
|  | NativesFlag natives_flag) { | 
|  | SuppressDebug compiling_natives(isolate->debug()); | 
|  | // During genesis, the boilerplate for stack overflow won't work until the | 
|  | // environment has been at least partially initialized. Add a stack check | 
|  | // before entering JS code to catch overflow early. | 
|  | StackLimitCheck check(isolate); | 
|  | if (check.JsHasOverflowed(1 * KB)) { | 
|  | isolate->StackOverflow(); | 
|  | return false; | 
|  | } | 
|  |  | 
|  | Handle<Context> context(isolate->context()); | 
|  |  | 
|  | Handle<String> script_name = | 
|  | isolate->factory()->NewStringFromUtf8(name).ToHandleChecked(); | 
|  | Handle<SharedFunctionInfo> function_info = | 
|  | Compiler::GetSharedFunctionInfoForScript( | 
|  | source, script_name, 0, 0, ScriptOriginOptions(), Handle<Object>(), | 
|  | context, NULL, NULL, ScriptCompiler::kNoCompileOptions, natives_flag, | 
|  | false); | 
|  | if (function_info.is_null()) return false; | 
|  |  | 
|  | DCHECK(context->IsNativeContext()); | 
|  |  | 
|  | Handle<JSFunction> fun = | 
|  | isolate->factory()->NewFunctionFromSharedFunctionInfo(function_info, | 
|  | context); | 
|  | Handle<Object> receiver = isolate->factory()->undefined_value(); | 
|  |  | 
|  | // For non-extension scripts, run script to get the function wrapper. | 
|  | Handle<Object> wrapper; | 
|  | if (!Execution::Call(isolate, fun, receiver, 0, NULL).ToHandle(&wrapper)) { | 
|  | return false; | 
|  | } | 
|  | // Then run the function wrapper. | 
|  | return !Execution::Call(isolate, Handle<JSFunction>::cast(wrapper), receiver, | 
|  | argc, argv).is_null(); | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::CallUtilsFunction(Isolate* isolate, const char* name) { | 
|  | Handle<JSObject> utils = | 
|  | Handle<JSObject>::cast(isolate->natives_utils_object()); | 
|  | Handle<String> name_string = | 
|  | isolate->factory()->NewStringFromAsciiChecked(name); | 
|  | Handle<Object> fun = JSObject::GetDataProperty(utils, name_string); | 
|  | Handle<Object> receiver = isolate->factory()->undefined_value(); | 
|  | Handle<Object> args[] = {utils}; | 
|  | return !Execution::Call(isolate, fun, receiver, 1, args).is_null(); | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::CompileExtension(Isolate* isolate, v8::Extension* extension) { | 
|  | Factory* factory = isolate->factory(); | 
|  | HandleScope scope(isolate); | 
|  | Handle<SharedFunctionInfo> function_info; | 
|  |  | 
|  | Handle<String> source = | 
|  | isolate->factory() | 
|  | ->NewExternalStringFromOneByte(extension->source()) | 
|  | .ToHandleChecked(); | 
|  | DCHECK(source->IsOneByteRepresentation()); | 
|  |  | 
|  | // If we can't find the function in the cache, we compile a new | 
|  | // function and insert it into the cache. | 
|  | Vector<const char> name = CStrVector(extension->name()); | 
|  | SourceCodeCache* cache = isolate->bootstrapper()->extensions_cache(); | 
|  | Handle<Context> context(isolate->context()); | 
|  | DCHECK(context->IsNativeContext()); | 
|  |  | 
|  | if (!cache->Lookup(name, &function_info)) { | 
|  | Handle<String> script_name = | 
|  | factory->NewStringFromUtf8(name).ToHandleChecked(); | 
|  | function_info = Compiler::GetSharedFunctionInfoForScript( | 
|  | source, script_name, 0, 0, ScriptOriginOptions(), Handle<Object>(), | 
|  | context, extension, NULL, ScriptCompiler::kNoCompileOptions, | 
|  | EXTENSION_CODE, false); | 
|  | if (function_info.is_null()) return false; | 
|  | cache->Add(name, function_info); | 
|  | } | 
|  |  | 
|  | // Set up the function context. Conceptually, we should clone the | 
|  | // function before overwriting the context but since we're in a | 
|  | // single-threaded environment it is not strictly necessary. | 
|  | Handle<JSFunction> fun = | 
|  | factory->NewFunctionFromSharedFunctionInfo(function_info, context); | 
|  |  | 
|  | // Call function using either the runtime object or the global | 
|  | // object as the receiver. Provide no parameters. | 
|  | Handle<Object> receiver = isolate->global_object(); | 
|  | return !Execution::Call(isolate, fun, receiver, 0, NULL).is_null(); | 
|  | } | 
|  |  | 
|  |  | 
|  | static Handle<JSObject> ResolveBuiltinIdHolder(Handle<Context> native_context, | 
|  | const char* holder_expr) { | 
|  | Isolate* isolate = native_context->GetIsolate(); | 
|  | Factory* factory = isolate->factory(); | 
|  | Handle<JSGlobalObject> global(native_context->global_object()); | 
|  | const char* period_pos = strchr(holder_expr, '.'); | 
|  | if (period_pos == NULL) { | 
|  | return Handle<JSObject>::cast( | 
|  | Object::GetPropertyOrElement( | 
|  | global, factory->InternalizeUtf8String(holder_expr)) | 
|  | .ToHandleChecked()); | 
|  | } | 
|  | const char* inner = period_pos + 1; | 
|  | DCHECK(!strchr(inner, '.')); | 
|  | Vector<const char> property(holder_expr, | 
|  | static_cast<int>(period_pos - holder_expr)); | 
|  | Handle<String> property_string = factory->InternalizeUtf8String(property); | 
|  | DCHECK(!property_string.is_null()); | 
|  | Handle<JSObject> object = Handle<JSObject>::cast( | 
|  | JSReceiver::GetProperty(global, property_string).ToHandleChecked()); | 
|  | if (strcmp("prototype", inner) == 0) { | 
|  | Handle<JSFunction> function = Handle<JSFunction>::cast(object); | 
|  | return Handle<JSObject>(JSObject::cast(function->prototype())); | 
|  | } | 
|  | Handle<String> inner_string = factory->InternalizeUtf8String(inner); | 
|  | DCHECK(!inner_string.is_null()); | 
|  | Handle<Object> value = | 
|  | JSReceiver::GetProperty(object, inner_string).ToHandleChecked(); | 
|  | return Handle<JSObject>::cast(value); | 
|  | } | 
|  |  | 
|  | void Genesis::ConfigureUtilsObject(GlobalContextType context_type) { | 
|  | switch (context_type) { | 
|  | // We still need the utils object to find debug functions. | 
|  | case DEBUG_CONTEXT: | 
|  | return; | 
|  | // Expose the natives in global if a valid name for it is specified. | 
|  | case FULL_CONTEXT: { | 
|  | // We still need the utils object after deserialization. | 
|  | if (isolate()->serializer_enabled()) return; | 
|  | if (FLAG_expose_natives_as == NULL) break; | 
|  | if (strlen(FLAG_expose_natives_as) == 0) break; | 
|  | HandleScope scope(isolate()); | 
|  | Handle<String> natives_key = | 
|  | factory()->InternalizeUtf8String(FLAG_expose_natives_as); | 
|  | uint32_t dummy_index; | 
|  | if (natives_key->AsArrayIndex(&dummy_index)) break; | 
|  | Handle<Object> utils = isolate()->natives_utils_object(); | 
|  | Handle<JSObject> global = isolate()->global_object(); | 
|  | JSObject::AddProperty(global, natives_key, utils, DONT_ENUM); | 
|  | break; | 
|  | } | 
|  | } | 
|  |  | 
|  | // The utils object can be removed for cases that reach this point. | 
|  | native_context()->set_natives_utils_object(heap()->undefined_value()); | 
|  | } | 
|  |  | 
|  |  | 
|  | void Bootstrapper::ExportFromRuntime(Isolate* isolate, | 
|  | Handle<JSObject> container) { | 
|  | Factory* factory = isolate->factory(); | 
|  | HandleScope scope(isolate); | 
|  | Handle<Context> native_context = isolate->native_context(); | 
|  | #define EXPORT_PRIVATE_SYMBOL(NAME)                                       \ | 
|  | Handle<String> NAME##_name = factory->NewStringFromAsciiChecked(#NAME); \ | 
|  | JSObject::AddProperty(container, NAME##_name, factory->NAME(), NONE); | 
|  | PRIVATE_SYMBOL_LIST(EXPORT_PRIVATE_SYMBOL) | 
|  | #undef EXPORT_PRIVATE_SYMBOL | 
|  |  | 
|  | #define EXPORT_PUBLIC_SYMBOL(NAME, DESCRIPTION)                           \ | 
|  | Handle<String> NAME##_name = factory->NewStringFromAsciiChecked(#NAME); \ | 
|  | JSObject::AddProperty(container, NAME##_name, factory->NAME(), NONE); | 
|  | PUBLIC_SYMBOL_LIST(EXPORT_PUBLIC_SYMBOL) | 
|  | WELL_KNOWN_SYMBOL_LIST(EXPORT_PUBLIC_SYMBOL) | 
|  | #undef EXPORT_PUBLIC_SYMBOL | 
|  |  | 
|  | { | 
|  | Handle<JSFunction> to_string = InstallFunction( | 
|  | container, "object_to_string", JS_OBJECT_TYPE, JSObject::kHeaderSize, | 
|  | MaybeHandle<JSObject>(), Builtins::kObjectProtoToString); | 
|  | to_string->shared()->DontAdaptArguments(); | 
|  | to_string->shared()->set_length(0); | 
|  | native_context->set_object_to_string(*to_string); | 
|  | } | 
|  |  | 
|  | Handle<JSObject> iterator_prototype; | 
|  |  | 
|  | { | 
|  | PrototypeIterator iter(native_context->generator_object_prototype_map()); | 
|  | iter.Advance();  // Advance to the prototype of generator_object_prototype. | 
|  | iterator_prototype = Handle<JSObject>(iter.GetCurrent<JSObject>()); | 
|  |  | 
|  | JSObject::AddProperty(container, | 
|  | factory->InternalizeUtf8String("IteratorPrototype"), | 
|  | iterator_prototype, NONE); | 
|  | } | 
|  |  | 
|  | { | 
|  | PrototypeIterator iter(native_context->sloppy_generator_function_map()); | 
|  | Handle<JSObject> generator_function_prototype(iter.GetCurrent<JSObject>()); | 
|  |  | 
|  | JSObject::AddProperty( | 
|  | container, factory->InternalizeUtf8String("GeneratorFunctionPrototype"), | 
|  | generator_function_prototype, NONE); | 
|  |  | 
|  | static const bool kUseStrictFunctionMap = true; | 
|  | Handle<JSFunction> generator_function_function = InstallFunction( | 
|  | container, "GeneratorFunction", JS_FUNCTION_TYPE, JSFunction::kSize, | 
|  | generator_function_prototype, Builtins::kGeneratorFunctionConstructor, | 
|  | kUseStrictFunctionMap); | 
|  | generator_function_function->set_prototype_or_initial_map( | 
|  | native_context->sloppy_generator_function_map()); | 
|  | generator_function_function->shared()->DontAdaptArguments(); | 
|  | generator_function_function->shared()->set_construct_stub( | 
|  | *isolate->builtins()->GeneratorFunctionConstructor()); | 
|  | generator_function_function->shared()->set_length(1); | 
|  | InstallWithIntrinsicDefaultProto( | 
|  | isolate, generator_function_function, | 
|  | Context::GENERATOR_FUNCTION_FUNCTION_INDEX); | 
|  |  | 
|  | SetObjectPrototype(generator_function_function, | 
|  | isolate->function_function()); | 
|  | JSObject::AddProperty( | 
|  | generator_function_prototype, factory->constructor_string(), | 
|  | generator_function_function, | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  |  | 
|  | native_context->sloppy_generator_function_map()->SetConstructor( | 
|  | *generator_function_function); | 
|  | native_context->strict_generator_function_map()->SetConstructor( | 
|  | *generator_function_function); | 
|  | } | 
|  |  | 
|  | {  // -- S e t I t e r a t o r | 
|  | Handle<JSObject> set_iterator_prototype = | 
|  | isolate->factory()->NewJSObject(isolate->object_function(), TENURED); | 
|  | SetObjectPrototype(set_iterator_prototype, iterator_prototype); | 
|  | Handle<JSFunction> set_iterator_function = InstallFunction( | 
|  | container, "SetIterator", JS_SET_ITERATOR_TYPE, JSSetIterator::kSize, | 
|  | set_iterator_prototype, Builtins::kIllegal); | 
|  | native_context->set_set_iterator_map(set_iterator_function->initial_map()); | 
|  | } | 
|  |  | 
|  | {  // -- M a p I t e r a t o r | 
|  | Handle<JSObject> map_iterator_prototype = | 
|  | isolate->factory()->NewJSObject(isolate->object_function(), TENURED); | 
|  | SetObjectPrototype(map_iterator_prototype, iterator_prototype); | 
|  | Handle<JSFunction> map_iterator_function = InstallFunction( | 
|  | container, "MapIterator", JS_MAP_ITERATOR_TYPE, JSMapIterator::kSize, | 
|  | map_iterator_prototype, Builtins::kIllegal); | 
|  | native_context->set_map_iterator_map(map_iterator_function->initial_map()); | 
|  | } | 
|  |  | 
|  | {  // -- S c r i p t | 
|  | // Builtin functions for Script. | 
|  | Handle<JSFunction> script_fun = InstallFunction( | 
|  | container, "Script", JS_VALUE_TYPE, JSValue::kSize, | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal); | 
|  | Handle<JSObject> prototype = | 
|  | factory->NewJSObject(isolate->object_function(), TENURED); | 
|  | Accessors::FunctionSetPrototype(script_fun, prototype).Assert(); | 
|  | native_context->set_script_function(*script_fun); | 
|  |  | 
|  | Handle<Map> script_map = Handle<Map>(script_fun->initial_map()); | 
|  | Map::EnsureDescriptorSlack(script_map, 15); | 
|  |  | 
|  | PropertyAttributes attribs = | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | DONT_DELETE | READ_ONLY); | 
|  |  | 
|  | Handle<AccessorInfo> script_column = | 
|  | Accessors::ScriptColumnOffsetInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_column->name())), script_column, | 
|  | attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_id = Accessors::ScriptIdInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d(Handle<Name>(Name::cast(script_id->name())), | 
|  | script_id, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  |  | 
|  | Handle<AccessorInfo> script_name = | 
|  | Accessors::ScriptNameInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_name->name())), script_name, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_line = | 
|  | Accessors::ScriptLineOffsetInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_line->name())), script_line, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_source = | 
|  | Accessors::ScriptSourceInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_source->name())), script_source, | 
|  | attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_type = | 
|  | Accessors::ScriptTypeInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_type->name())), script_type, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_compilation_type = | 
|  | Accessors::ScriptCompilationTypeInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_compilation_type->name())), | 
|  | script_compilation_type, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_line_ends = | 
|  | Accessors::ScriptLineEndsInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_line_ends->name())), script_line_ends, | 
|  | attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_context_data = | 
|  | Accessors::ScriptContextDataInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_context_data->name())), | 
|  | script_context_data, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_eval_from_script = | 
|  | Accessors::ScriptEvalFromScriptInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_eval_from_script->name())), | 
|  | script_eval_from_script, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_eval_from_script_position = | 
|  | Accessors::ScriptEvalFromScriptPositionInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_eval_from_script_position->name())), | 
|  | script_eval_from_script_position, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_eval_from_function_name = | 
|  | Accessors::ScriptEvalFromFunctionNameInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_eval_from_function_name->name())), | 
|  | script_eval_from_function_name, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_source_url = | 
|  | Accessors::ScriptSourceUrlInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_source_url->name())), | 
|  | script_source_url, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_source_mapping_url = | 
|  | Accessors::ScriptSourceMappingUrlInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_source_mapping_url->name())), | 
|  | script_source_mapping_url, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Handle<AccessorInfo> script_is_embedder_debug_script = | 
|  | Accessors::ScriptIsEmbedderDebugScriptInfo(isolate, attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d( | 
|  | Handle<Name>(Name::cast(script_is_embedder_debug_script->name())), | 
|  | script_is_embedder_debug_script, attribs); | 
|  | script_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | { | 
|  | // TODO(mvstanton): Remove this when MathSinh, MathCosh and MathTanh are | 
|  | // no longer implemented in fdlibm.js. | 
|  | SimpleInstallFunction(container, "MathExpm1", Builtins::kMathExpm1, 1, | 
|  | true); | 
|  | } | 
|  |  | 
|  | { | 
|  | PrototypeIterator iter(native_context->sloppy_async_function_map()); | 
|  | Handle<JSObject> async_function_prototype(iter.GetCurrent<JSObject>()); | 
|  |  | 
|  | static const bool kUseStrictFunctionMap = true; | 
|  | Handle<JSFunction> async_function_constructor = InstallFunction( | 
|  | container, "AsyncFunction", JS_FUNCTION_TYPE, JSFunction::kSize, | 
|  | async_function_prototype, Builtins::kAsyncFunctionConstructor, | 
|  | kUseStrictFunctionMap); | 
|  | async_function_constructor->set_prototype_or_initial_map( | 
|  | native_context->sloppy_async_function_map()); | 
|  | async_function_constructor->shared()->DontAdaptArguments(); | 
|  | async_function_constructor->shared()->set_construct_stub( | 
|  | *isolate->builtins()->AsyncFunctionConstructor()); | 
|  | async_function_constructor->shared()->set_length(1); | 
|  | InstallWithIntrinsicDefaultProto(isolate, async_function_constructor, | 
|  | Context::ASYNC_FUNCTION_FUNCTION_INDEX); | 
|  |  | 
|  | JSObject::AddProperty( | 
|  | async_function_prototype, factory->constructor_string(), | 
|  | async_function_constructor, | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  |  | 
|  | JSFunction::SetPrototype(async_function_constructor, | 
|  | async_function_prototype); | 
|  |  | 
|  | Handle<JSFunction> async_function_next = | 
|  | SimpleInstallFunction(container, "AsyncFunctionNext", | 
|  | Builtins::kGeneratorPrototypeNext, 1, true); | 
|  | Handle<JSFunction> async_function_throw = | 
|  | SimpleInstallFunction(container, "AsyncFunctionThrow", | 
|  | Builtins::kGeneratorPrototypeThrow, 1, true); | 
|  | async_function_next->shared()->set_native(false); | 
|  | async_function_throw->shared()->set_native(false); | 
|  | } | 
|  | } | 
|  | } | 
|  |  | 
|  |  | 
|  | void Bootstrapper::ExportExperimentalFromRuntime(Isolate* isolate, | 
|  | Handle<JSObject> container) { | 
|  | HandleScope scope(isolate); | 
|  |  | 
|  | #define INITIALIZE_FLAG(FLAG)                                         \ | 
|  | {                                                                   \ | 
|  | Handle<String> name =                                             \ | 
|  | isolate->factory()->NewStringFromAsciiChecked(#FLAG);         \ | 
|  | JSObject::AddProperty(container, name,                            \ | 
|  | isolate->factory()->ToBoolean(FLAG), NONE); \ | 
|  | } | 
|  |  | 
|  | INITIALIZE_FLAG(FLAG_intl_extra) | 
|  |  | 
|  | #undef INITIALIZE_FLAG | 
|  | } | 
|  |  | 
|  |  | 
|  | #define EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(id) \ | 
|  | void Genesis::InitializeGlobal_##id() {} | 
|  |  | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_do_expressions) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_for_in) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_regexp_lookbehind) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_regexp_named_captures) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_regexp_property) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_function_sent) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(promise_extra) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(intl_extra) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_explicit_tailcalls) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_tailcalls) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_restrictive_declarations) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_exponentiation_operator) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_string_padding) | 
|  | #ifdef V8_I18N_SUPPORT | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(icu_case_mapping) | 
|  | #endif | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_async_await) | 
|  | EMPTY_INITIALIZE_GLOBAL_FOR_FEATURE(harmony_restrictive_generators) | 
|  |  | 
|  | void InstallPublicSymbol(Factory* factory, Handle<Context> native_context, | 
|  | const char* name, Handle<Symbol> value) { | 
|  | Handle<JSGlobalObject> global( | 
|  | JSGlobalObject::cast(native_context->global_object())); | 
|  | Handle<String> symbol_string = factory->InternalizeUtf8String("Symbol"); | 
|  | Handle<JSObject> symbol = Handle<JSObject>::cast( | 
|  | JSObject::GetProperty(global, symbol_string).ToHandleChecked()); | 
|  | Handle<String> name_string = factory->InternalizeUtf8String(name); | 
|  | PropertyAttributes attributes = | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | DONT_DELETE | READ_ONLY); | 
|  | JSObject::AddProperty(symbol, name_string, value, attributes); | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::InitializeGlobal_harmony_sharedarraybuffer() { | 
|  | if (!FLAG_harmony_sharedarraybuffer) return; | 
|  |  | 
|  | Handle<JSGlobalObject> global(native_context()->global_object()); | 
|  | Isolate* isolate = global->GetIsolate(); | 
|  | Factory* factory = isolate->factory(); | 
|  |  | 
|  | Handle<JSFunction> shared_array_buffer_fun = | 
|  | InstallArrayBuffer(global, "SharedArrayBuffer"); | 
|  | native_context()->set_shared_array_buffer_fun(*shared_array_buffer_fun); | 
|  |  | 
|  | Handle<String> name = factory->InternalizeUtf8String("Atomics"); | 
|  | Handle<JSFunction> cons = factory->NewFunction(name); | 
|  | JSFunction::SetInstancePrototype( | 
|  | cons, | 
|  | Handle<Object>(native_context()->initial_object_prototype(), isolate)); | 
|  | Handle<JSObject> atomics_object = factory->NewJSObject(cons, TENURED); | 
|  | DCHECK(atomics_object->IsJSObject()); | 
|  | JSObject::AddProperty(global, name, atomics_object, DONT_ENUM); | 
|  |  | 
|  | SimpleInstallFunction(atomics_object, factory->InternalizeUtf8String("load"), | 
|  | Builtins::kAtomicsLoad, 2, true); | 
|  | SimpleInstallFunction(atomics_object, factory->InternalizeUtf8String("store"), | 
|  | Builtins::kAtomicsStore, 3, true); | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::InitializeGlobal_harmony_simd() { | 
|  | if (!FLAG_harmony_simd) return; | 
|  |  | 
|  | Handle<JSGlobalObject> global( | 
|  | JSGlobalObject::cast(native_context()->global_object())); | 
|  | Isolate* isolate = global->GetIsolate(); | 
|  | Factory* factory = isolate->factory(); | 
|  |  | 
|  | Handle<String> name = factory->InternalizeUtf8String("SIMD"); | 
|  | Handle<JSFunction> cons = factory->NewFunction(name); | 
|  | JSFunction::SetInstancePrototype( | 
|  | cons, | 
|  | Handle<Object>(native_context()->initial_object_prototype(), isolate)); | 
|  | cons->shared()->set_instance_class_name(*name); | 
|  | Handle<JSObject> simd_object = factory->NewJSObject(cons, TENURED); | 
|  | DCHECK(simd_object->IsJSObject()); | 
|  | JSObject::AddProperty(global, name, simd_object, DONT_ENUM); | 
|  |  | 
|  | // Install SIMD type functions. Set the instance class names since | 
|  | // InstallFunction only does this when we install on the JSGlobalObject. | 
|  | #define SIMD128_INSTALL_FUNCTION(TYPE, Type, type, lane_count, lane_type) \ | 
|  | Handle<JSFunction> type##_function = InstallFunction(                   \ | 
|  | simd_object, #Type, JS_VALUE_TYPE, JSValue::kSize,                  \ | 
|  | isolate->initial_object_prototype(), Builtins::kIllegal);           \ | 
|  | native_context()->set_##type##_function(*type##_function);              \ | 
|  | type##_function->shared()->set_instance_class_name(*factory->Type##_string()); | 
|  | SIMD128_TYPES(SIMD128_INSTALL_FUNCTION) | 
|  | #undef SIMD128_INSTALL_FUNCTION | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::InitializeGlobal_harmony_object_values_entries() { | 
|  | if (!FLAG_harmony_object_values_entries) return; | 
|  |  | 
|  | Handle<JSGlobalObject> global( | 
|  | JSGlobalObject::cast(native_context()->global_object())); | 
|  | Isolate* isolate = global->GetIsolate(); | 
|  | Factory* factory = isolate->factory(); | 
|  |  | 
|  | Handle<JSFunction> object_function = isolate->object_function(); | 
|  | SimpleInstallFunction(object_function, factory->entries_string(), | 
|  | Builtins::kObjectEntries, 1, false); | 
|  | SimpleInstallFunction(object_function, factory->values_string(), | 
|  | Builtins::kObjectValues, 1, false); | 
|  | } | 
|  |  | 
|  | void Genesis::InitializeGlobal_harmony_object_own_property_descriptors() { | 
|  | if (!FLAG_harmony_object_own_property_descriptors) return; | 
|  |  | 
|  | Handle<JSGlobalObject> global( | 
|  | JSGlobalObject::cast(native_context()->global_object())); | 
|  | Isolate* isolate = global->GetIsolate(); | 
|  | Factory* factory = isolate->factory(); | 
|  |  | 
|  | Handle<JSFunction> object_function = isolate->object_function(); | 
|  | SimpleInstallFunction(object_function, | 
|  | factory->getOwnPropertyDescriptors_string(), | 
|  | Builtins::kObjectGetOwnPropertyDescriptors, 1, false); | 
|  | } | 
|  |  | 
|  | void Genesis::InitializeGlobal_harmony_array_prototype_values() { | 
|  | if (!FLAG_harmony_array_prototype_values) return; | 
|  | Handle<JSFunction> array_constructor(native_context()->array_function()); | 
|  | Handle<JSObject> array_prototype( | 
|  | JSObject::cast(array_constructor->instance_prototype())); | 
|  | Handle<Object> values_iterator = | 
|  | JSObject::GetProperty(array_prototype, factory()->iterator_symbol()) | 
|  | .ToHandleChecked(); | 
|  | DCHECK(values_iterator->IsJSFunction()); | 
|  | JSObject::AddProperty(array_prototype, factory()->values_string(), | 
|  | values_iterator, DONT_ENUM); | 
|  |  | 
|  | Handle<Object> unscopables = | 
|  | JSObject::GetProperty(array_prototype, factory()->unscopables_symbol()) | 
|  | .ToHandleChecked(); | 
|  | DCHECK(unscopables->IsJSObject()); | 
|  | JSObject::AddProperty(Handle<JSObject>::cast(unscopables), | 
|  | factory()->values_string(), factory()->true_value(), | 
|  | NONE); | 
|  | } | 
|  |  | 
|  | Handle<JSFunction> Genesis::InstallArrayBuffer(Handle<JSObject> target, | 
|  | const char* name) { | 
|  | // Setup the {prototype} with the given {name} for @@toStringTag. | 
|  | Handle<JSObject> prototype = | 
|  | factory()->NewJSObject(isolate()->object_function(), TENURED); | 
|  | JSObject::AddProperty(prototype, factory()->to_string_tag_symbol(), | 
|  | factory()->NewStringFromAsciiChecked(name), | 
|  | static_cast<PropertyAttributes>(DONT_ENUM | READ_ONLY)); | 
|  |  | 
|  | // Allocate the constructor with the given {prototype}. | 
|  | Handle<JSFunction> array_buffer_fun = | 
|  | InstallFunction(target, name, JS_ARRAY_BUFFER_TYPE, | 
|  | JSArrayBuffer::kSizeWithInternalFields, prototype, | 
|  | Builtins::kArrayBufferConstructor); | 
|  | array_buffer_fun->shared()->set_construct_stub( | 
|  | *isolate()->builtins()->ArrayBufferConstructor_ConstructStub()); | 
|  | array_buffer_fun->shared()->DontAdaptArguments(); | 
|  | array_buffer_fun->shared()->set_length(1); | 
|  |  | 
|  | // Install the "constructor" property on the {prototype}. | 
|  | JSObject::AddProperty(prototype, factory()->constructor_string(), | 
|  | array_buffer_fun, DONT_ENUM); | 
|  |  | 
|  | SimpleInstallFunction(array_buffer_fun, factory()->isView_string(), | 
|  | Builtins::kArrayBufferIsView, 1, true); | 
|  |  | 
|  | return array_buffer_fun; | 
|  | } | 
|  |  | 
|  |  | 
|  | Handle<JSFunction> Genesis::InstallInternalArray(Handle<JSObject> target, | 
|  | const char* name, | 
|  | ElementsKind elements_kind) { | 
|  | // --- I n t e r n a l   A r r a y --- | 
|  | // An array constructor on the builtins object that works like | 
|  | // the public Array constructor, except that its prototype | 
|  | // doesn't inherit from Object.prototype. | 
|  | // To be used only for internal work by builtins. Instances | 
|  | // must not be leaked to user code. | 
|  | Handle<JSObject> prototype = | 
|  | factory()->NewJSObject(isolate()->object_function(), TENURED); | 
|  | Handle<JSFunction> array_function = | 
|  | InstallFunction(target, name, JS_ARRAY_TYPE, JSArray::kSize, prototype, | 
|  | Builtins::kInternalArrayCode); | 
|  |  | 
|  | InternalArrayConstructorStub internal_array_constructor_stub(isolate()); | 
|  | Handle<Code> code = internal_array_constructor_stub.GetCode(); | 
|  | array_function->shared()->set_construct_stub(*code); | 
|  | array_function->shared()->DontAdaptArguments(); | 
|  |  | 
|  | Handle<Map> original_map(array_function->initial_map()); | 
|  | Handle<Map> initial_map = Map::Copy(original_map, "InternalArray"); | 
|  | initial_map->set_elements_kind(elements_kind); | 
|  | JSFunction::SetInitialMap(array_function, initial_map, prototype); | 
|  |  | 
|  | // Make "length" magic on instances. | 
|  | Map::EnsureDescriptorSlack(initial_map, 1); | 
|  |  | 
|  | PropertyAttributes attribs = static_cast<PropertyAttributes>( | 
|  | DONT_ENUM | DONT_DELETE); | 
|  |  | 
|  | Handle<AccessorInfo> array_length = | 
|  | Accessors::ArrayLengthInfo(isolate(), attribs); | 
|  | {  // Add length. | 
|  | AccessorConstantDescriptor d(Handle<Name>(Name::cast(array_length->name())), | 
|  | array_length, attribs); | 
|  | initial_map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | return array_function; | 
|  | } | 
|  |  | 
|  | bool Genesis::InstallNatives(GlobalContextType context_type) { | 
|  | HandleScope scope(isolate()); | 
|  |  | 
|  | // Set up the utils object as shared container between native scripts. | 
|  | Handle<JSObject> utils = factory()->NewJSObject(isolate()->object_function()); | 
|  | JSObject::NormalizeProperties(utils, CLEAR_INOBJECT_PROPERTIES, 16, | 
|  | "utils container for native scripts"); | 
|  | native_context()->set_natives_utils_object(*utils); | 
|  |  | 
|  | // Set up the extras utils object as a shared container between native | 
|  | // scripts and extras. (Extras consume things added there by native scripts.) | 
|  | Handle<JSObject> extras_utils = | 
|  | factory()->NewJSObject(isolate()->object_function()); | 
|  | native_context()->set_extras_utils_object(*extras_utils); | 
|  |  | 
|  | InstallInternalArray(extras_utils, "InternalPackedArray", FAST_ELEMENTS); | 
|  |  | 
|  | int builtin_index = Natives::GetDebuggerCount(); | 
|  | // Only run prologue.js and runtime.js at this point. | 
|  | DCHECK_EQ(builtin_index, Natives::GetIndex("prologue")); | 
|  | if (!Bootstrapper::CompileBuiltin(isolate(), builtin_index++)) return false; | 
|  | DCHECK_EQ(builtin_index, Natives::GetIndex("runtime")); | 
|  | if (!Bootstrapper::CompileBuiltin(isolate(), builtin_index++)) return false; | 
|  |  | 
|  | { | 
|  | // Builtin function for OpaqueReference -- a JSValue-based object, | 
|  | // that keeps its field isolated from JavaScript code. It may store | 
|  | // objects, that JavaScript code may not access. | 
|  | Handle<JSFunction> opaque_reference_fun = factory()->NewFunction( | 
|  | factory()->empty_string(), isolate()->builtins()->Illegal(), | 
|  | isolate()->initial_object_prototype(), JS_VALUE_TYPE, JSValue::kSize); | 
|  | Handle<JSObject> prototype = | 
|  | factory()->NewJSObject(isolate()->object_function(), TENURED); | 
|  | Accessors::FunctionSetPrototype(opaque_reference_fun, prototype).Assert(); | 
|  | native_context()->set_opaque_reference_function(*opaque_reference_fun); | 
|  | } | 
|  |  | 
|  | // InternalArrays should not use Smi-Only array optimizations. There are too | 
|  | // many places in the C++ runtime code (e.g. RegEx) that assume that | 
|  | // elements in InternalArrays can be set to non-Smi values without going | 
|  | // through a common bottleneck that would make the SMI_ONLY -> FAST_ELEMENT | 
|  | // transition easy to trap. Moreover, they rarely are smi-only. | 
|  | { | 
|  | HandleScope scope(isolate()); | 
|  | Handle<JSObject> utils = | 
|  | Handle<JSObject>::cast(isolate()->natives_utils_object()); | 
|  | Handle<JSFunction> array_function = | 
|  | InstallInternalArray(utils, "InternalArray", FAST_HOLEY_ELEMENTS); | 
|  | native_context()->set_internal_array_function(*array_function); | 
|  | InstallInternalArray(utils, "InternalPackedArray", FAST_ELEMENTS); | 
|  | } | 
|  |  | 
|  | // Run the rest of the native scripts. | 
|  | while (builtin_index < Natives::GetBuiltinsCount()) { | 
|  | if (!Bootstrapper::CompileBuiltin(isolate(), builtin_index++)) return false; | 
|  | } | 
|  |  | 
|  | if (!CallUtilsFunction(isolate(), "PostNatives")) return false; | 
|  |  | 
|  | auto template_instantiations_cache = UnseededNumberDictionary::New( | 
|  | isolate(), ApiNatives::kInitialFunctionCacheSize); | 
|  | native_context()->set_template_instantiations_cache( | 
|  | *template_instantiations_cache); | 
|  |  | 
|  | // Store the map for the %ObjectPrototype% after the natives has been compiled | 
|  | // and the Object function has been set up. | 
|  | Handle<JSFunction> object_function(native_context()->object_function()); | 
|  | DCHECK(JSObject::cast(object_function->initial_map()->prototype()) | 
|  | ->HasFastProperties()); | 
|  | native_context()->set_object_function_prototype_map( | 
|  | HeapObject::cast(object_function->initial_map()->prototype())->map()); | 
|  |  | 
|  | // Set up the map for Object.create(null) instances. | 
|  | Handle<Map> object_with_null_prototype_map = | 
|  | Map::CopyInitialMap(handle(object_function->initial_map(), isolate())); | 
|  | Map::SetPrototype(object_with_null_prototype_map, | 
|  | isolate()->factory()->null_value()); | 
|  | native_context()->set_object_with_null_prototype_map( | 
|  | *object_with_null_prototype_map); | 
|  |  | 
|  | // Store the map for the %StringPrototype% after the natives has been compiled | 
|  | // and the String function has been set up. | 
|  | Handle<JSFunction> string_function(native_context()->string_function()); | 
|  | DCHECK(JSObject::cast( | 
|  | string_function->initial_map()->prototype())->HasFastProperties()); | 
|  | native_context()->set_string_function_prototype_map( | 
|  | HeapObject::cast(string_function->initial_map()->prototype())->map()); | 
|  |  | 
|  | Handle<JSGlobalObject> global_object = | 
|  | handle(native_context()->global_object()); | 
|  |  | 
|  | // Install Global.decodeURI. | 
|  | SimpleInstallFunction(global_object, "decodeURI", Builtins::kGlobalDecodeURI, | 
|  | 1, false); | 
|  |  | 
|  | // Install Global.decodeURIComponent. | 
|  | SimpleInstallFunction(global_object, "decodeURIComponent", | 
|  | Builtins::kGlobalDecodeURIComponent, 1, false); | 
|  |  | 
|  | // Install Global.encodeURI. | 
|  | SimpleInstallFunction(global_object, "encodeURI", Builtins::kGlobalEncodeURI, | 
|  | 1, false); | 
|  |  | 
|  | // Install Global.encodeURIComponent. | 
|  | SimpleInstallFunction(global_object, "encodeURIComponent", | 
|  | Builtins::kGlobalEncodeURIComponent, 1, false); | 
|  |  | 
|  | // Install Global.escape. | 
|  | SimpleInstallFunction(global_object, "escape", Builtins::kGlobalEscape, 1, | 
|  | false); | 
|  |  | 
|  | // Install Global.unescape. | 
|  | SimpleInstallFunction(global_object, "unescape", Builtins::kGlobalUnescape, 1, | 
|  | false); | 
|  |  | 
|  | // Install Global.eval. | 
|  | { | 
|  | Handle<JSFunction> eval = | 
|  | SimpleInstallFunction(global_object, factory()->eval_string(), | 
|  | Builtins::kGlobalEval, 1, false); | 
|  | native_context()->set_global_eval_fun(*eval); | 
|  | } | 
|  |  | 
|  | // Install Array.prototype.concat | 
|  | { | 
|  | Handle<JSFunction> array_constructor(native_context()->array_function()); | 
|  | Handle<JSObject> proto(JSObject::cast(array_constructor->prototype())); | 
|  | Handle<JSFunction> concat = | 
|  | InstallFunction(proto, "concat", JS_OBJECT_TYPE, JSObject::kHeaderSize, | 
|  | MaybeHandle<JSObject>(), Builtins::kArrayConcat); | 
|  |  | 
|  | // Make sure that Array.prototype.concat appears to be compiled. | 
|  | // The code will never be called, but inline caching for call will | 
|  | // only work if it appears to be compiled. | 
|  | concat->shared()->DontAdaptArguments(); | 
|  | DCHECK(concat->is_compiled()); | 
|  | // Set the lengths for the functions to satisfy ECMA-262. | 
|  | concat->shared()->set_length(1); | 
|  | } | 
|  |  | 
|  | // Install InternalArray.prototype.concat | 
|  | { | 
|  | Handle<JSFunction> array_constructor( | 
|  | native_context()->internal_array_function()); | 
|  | Handle<JSObject> proto(JSObject::cast(array_constructor->prototype())); | 
|  | Handle<JSFunction> concat = | 
|  | InstallFunction(proto, "concat", JS_OBJECT_TYPE, JSObject::kHeaderSize, | 
|  | MaybeHandle<JSObject>(), Builtins::kArrayConcat); | 
|  |  | 
|  | // Make sure that InternalArray.prototype.concat appears to be compiled. | 
|  | // The code will never be called, but inline caching for call will | 
|  | // only work if it appears to be compiled. | 
|  | concat->shared()->DontAdaptArguments(); | 
|  | DCHECK(concat->is_compiled()); | 
|  | // Set the lengths for the functions to satisfy ECMA-262. | 
|  | concat->shared()->set_length(1); | 
|  | } | 
|  |  | 
|  | // Set up the Promise constructor. | 
|  | { | 
|  | Handle<String> key = factory()->Promise_string(); | 
|  | Handle<JSFunction> function = Handle<JSFunction>::cast( | 
|  | JSReceiver::GetProperty(global_object, key).ToHandleChecked()); | 
|  | JSFunction::EnsureHasInitialMap(function); | 
|  | function->initial_map()->set_instance_type(JS_PROMISE_TYPE); | 
|  | function->shared()->set_construct_stub( | 
|  | *isolate()->builtins()->JSBuiltinsConstructStub()); | 
|  | InstallWithIntrinsicDefaultProto(isolate(), function, | 
|  | Context::PROMISE_FUNCTION_INDEX); | 
|  | } | 
|  |  | 
|  | InstallBuiltinFunctionIds(); | 
|  |  | 
|  | // Create a map for accessor property descriptors (a variant of JSObject | 
|  | // that predefines four properties get, set, configurable and enumerable). | 
|  | { | 
|  | // AccessorPropertyDescriptor initial map. | 
|  | Handle<Map> map = | 
|  | factory()->NewMap(JS_OBJECT_TYPE, JSAccessorPropertyDescriptor::kSize); | 
|  | // Create the descriptor array for the property descriptor object. | 
|  | Map::EnsureDescriptorSlack(map, 4); | 
|  |  | 
|  | {  // get | 
|  | DataDescriptor d(factory()->get_string(), | 
|  | JSAccessorPropertyDescriptor::kGetIndex, NONE, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | {  // set | 
|  | DataDescriptor d(factory()->set_string(), | 
|  | JSAccessorPropertyDescriptor::kSetIndex, NONE, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | {  // enumerable | 
|  | DataDescriptor d(factory()->enumerable_string(), | 
|  | JSAccessorPropertyDescriptor::kEnumerableIndex, NONE, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | {  // configurable | 
|  | DataDescriptor d(factory()->configurable_string(), | 
|  | JSAccessorPropertyDescriptor::kConfigurableIndex, NONE, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Map::SetPrototype(map, isolate()->initial_object_prototype()); | 
|  | map->SetConstructor(native_context()->object_function()); | 
|  | map->SetInObjectProperties(4); | 
|  | map->set_unused_property_fields(0); | 
|  |  | 
|  | native_context()->set_accessor_property_descriptor_map(*map); | 
|  | } | 
|  |  | 
|  | // Create a map for data property descriptors (a variant of JSObject | 
|  | // that predefines four properties value, writable, configurable and | 
|  | // enumerable). | 
|  | { | 
|  | // DataPropertyDescriptor initial map. | 
|  | Handle<Map> map = | 
|  | factory()->NewMap(JS_OBJECT_TYPE, JSDataPropertyDescriptor::kSize); | 
|  | // Create the descriptor array for the property descriptor object. | 
|  | Map::EnsureDescriptorSlack(map, 4); | 
|  |  | 
|  | {  // value | 
|  | DataDescriptor d(factory()->value_string(), | 
|  | JSDataPropertyDescriptor::kValueIndex, NONE, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | {  // writable | 
|  | DataDescriptor d(factory()->writable_string(), | 
|  | JSDataPropertyDescriptor::kWritableIndex, NONE, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | {  // enumerable | 
|  | DataDescriptor d(factory()->enumerable_string(), | 
|  | JSDataPropertyDescriptor::kEnumerableIndex, NONE, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | {  // configurable | 
|  | DataDescriptor d(factory()->configurable_string(), | 
|  | JSDataPropertyDescriptor::kConfigurableIndex, NONE, | 
|  | Representation::Tagged()); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  |  | 
|  | Map::SetPrototype(map, isolate()->initial_object_prototype()); | 
|  | map->SetConstructor(native_context()->object_function()); | 
|  | map->SetInObjectProperties(4); | 
|  | map->set_unused_property_fields(0); | 
|  |  | 
|  | native_context()->set_data_property_descriptor_map(*map); | 
|  | } | 
|  |  | 
|  | // Create a constructor for RegExp results (a variant of Array that | 
|  | // predefines the two properties index and match). | 
|  | { | 
|  | // RegExpResult initial map. | 
|  |  | 
|  | // Find global.Array.prototype to inherit from. | 
|  | Handle<JSFunction> array_constructor(native_context()->array_function()); | 
|  | Handle<JSObject> array_prototype( | 
|  | JSObject::cast(array_constructor->instance_prototype())); | 
|  |  | 
|  | // Add initial map. | 
|  | Handle<Map> initial_map = | 
|  | factory()->NewMap(JS_ARRAY_TYPE, JSRegExpResult::kSize); | 
|  | initial_map->SetConstructor(*array_constructor); | 
|  |  | 
|  | // Set prototype on map. | 
|  | initial_map->set_non_instance_prototype(false); | 
|  | Map::SetPrototype(initial_map, array_prototype); | 
|  |  | 
|  | // Update map with length accessor from Array and add "index" and "input". | 
|  | Map::EnsureDescriptorSlack(initial_map, 3); | 
|  |  | 
|  | { | 
|  | JSFunction* array_function = native_context()->array_function(); | 
|  | Handle<DescriptorArray> array_descriptors( | 
|  | array_function->initial_map()->instance_descriptors()); | 
|  | Handle<String> length = factory()->length_string(); | 
|  | int old = array_descriptors->SearchWithCache( | 
|  | isolate(), *length, array_function->initial_map()); | 
|  | DCHECK(old != DescriptorArray::kNotFound); | 
|  | AccessorConstantDescriptor desc( | 
|  | length, handle(array_descriptors->GetValue(old), isolate()), | 
|  | array_descriptors->GetDetails(old).attributes()); | 
|  | initial_map->AppendDescriptor(&desc); | 
|  | } | 
|  | { | 
|  | DataDescriptor index_field(factory()->index_string(), | 
|  | JSRegExpResult::kIndexIndex, NONE, | 
|  | Representation::Tagged()); | 
|  | initial_map->AppendDescriptor(&index_field); | 
|  | } | 
|  |  | 
|  | { | 
|  | DataDescriptor input_field(factory()->input_string(), | 
|  | JSRegExpResult::kInputIndex, NONE, | 
|  | Representation::Tagged()); | 
|  | initial_map->AppendDescriptor(&input_field); | 
|  | } | 
|  |  | 
|  | initial_map->SetInObjectProperties(2); | 
|  | initial_map->set_unused_property_fields(0); | 
|  |  | 
|  | native_context()->set_regexp_result_map(*initial_map); | 
|  | } | 
|  |  | 
|  | // Add @@iterator method to the arguments object maps. | 
|  | { | 
|  | PropertyAttributes attribs = DONT_ENUM; | 
|  | Handle<AccessorInfo> arguments_iterator = | 
|  | Accessors::ArgumentsIteratorInfo(isolate(), attribs); | 
|  | { | 
|  | AccessorConstantDescriptor d(factory()->iterator_symbol(), | 
|  | arguments_iterator, attribs); | 
|  | Handle<Map> map(native_context()->sloppy_arguments_map()); | 
|  | Map::EnsureDescriptorSlack(map, 1); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | { | 
|  | AccessorConstantDescriptor d(factory()->iterator_symbol(), | 
|  | arguments_iterator, attribs); | 
|  | Handle<Map> map(native_context()->fast_aliased_arguments_map()); | 
|  | Map::EnsureDescriptorSlack(map, 1); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | { | 
|  | AccessorConstantDescriptor d(factory()->iterator_symbol(), | 
|  | arguments_iterator, attribs); | 
|  | Handle<Map> map(native_context()->slow_aliased_arguments_map()); | 
|  | Map::EnsureDescriptorSlack(map, 1); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | { | 
|  | AccessorConstantDescriptor d(factory()->iterator_symbol(), | 
|  | arguments_iterator, attribs); | 
|  | Handle<Map> map(native_context()->strict_arguments_map()); | 
|  | Map::EnsureDescriptorSlack(map, 1); | 
|  | map->AppendDescriptor(&d); | 
|  | } | 
|  | } | 
|  |  | 
|  | return true; | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::InstallExperimentalNatives() { | 
|  | static const char* harmony_explicit_tailcalls_natives[] = {nullptr}; | 
|  | static const char* harmony_tailcalls_natives[] = {nullptr}; | 
|  | static const char* harmony_sharedarraybuffer_natives[] = { | 
|  | "native harmony-sharedarraybuffer.js", "native harmony-atomics.js", NULL}; | 
|  | static const char* harmony_simd_natives[] = {"native harmony-simd.js", | 
|  | nullptr}; | 
|  | static const char* harmony_do_expressions_natives[] = {nullptr}; | 
|  | static const char* harmony_for_in_natives[] = {nullptr}; | 
|  | static const char* harmony_regexp_lookbehind_natives[] = {nullptr}; | 
|  | static const char* harmony_restrictive_declarations_natives[] = {nullptr}; | 
|  | static const char* harmony_regexp_named_captures_natives[] = {nullptr}; | 
|  | static const char* harmony_regexp_property_natives[] = {nullptr}; | 
|  | static const char* harmony_function_sent_natives[] = {nullptr}; | 
|  | static const char* promise_extra_natives[] = {"native promise-extra.js", | 
|  | nullptr}; | 
|  | static const char* intl_extra_natives[] = {"native intl-extra.js", nullptr}; | 
|  | static const char* harmony_object_values_entries_natives[] = {nullptr}; | 
|  | static const char* harmony_object_own_property_descriptors_natives[] = { | 
|  | nullptr}; | 
|  | static const char* harmony_array_prototype_values_natives[] = {nullptr}; | 
|  | static const char* harmony_exponentiation_operator_natives[] = {nullptr}; | 
|  | static const char* harmony_string_padding_natives[] = { | 
|  | "native harmony-string-padding.js", nullptr}; | 
|  | #ifdef V8_I18N_SUPPORT | 
|  | static const char* icu_case_mapping_natives[] = {"native icu-case-mapping.js", | 
|  | nullptr}; | 
|  | #endif | 
|  | static const char* harmony_async_await_natives[] = { | 
|  | "native harmony-async-await.js", nullptr}; | 
|  | static const char* harmony_restrictive_generators_natives[] = {nullptr}; | 
|  |  | 
|  | for (int i = ExperimentalNatives::GetDebuggerCount(); | 
|  | i < ExperimentalNatives::GetBuiltinsCount(); i++) { | 
|  | #define INSTALL_EXPERIMENTAL_NATIVES(id, desc)                                \ | 
|  | if (FLAG_##id) {                                                            \ | 
|  | for (size_t j = 0; id##_natives[j] != NULL; j++) {                        \ | 
|  | Vector<const char> script_name = ExperimentalNatives::GetScriptName(i); \ | 
|  | if (strncmp(script_name.start(), id##_natives[j],                       \ | 
|  | script_name.length()) == 0) {                               \ | 
|  | if (!Bootstrapper::CompileExperimentalBuiltin(isolate(), i)) {        \ | 
|  | return false;                                                       \ | 
|  | }                                                                     \ | 
|  | }                                                                       \ | 
|  | }                                                                         \ | 
|  | } | 
|  | HARMONY_INPROGRESS(INSTALL_EXPERIMENTAL_NATIVES); | 
|  | HARMONY_STAGED(INSTALL_EXPERIMENTAL_NATIVES); | 
|  | HARMONY_SHIPPING(INSTALL_EXPERIMENTAL_NATIVES); | 
|  | INSTALL_EXPERIMENTAL_NATIVES(intl_extra, ""); | 
|  | INSTALL_EXPERIMENTAL_NATIVES(promise_extra, ""); | 
|  | #undef INSTALL_EXPERIMENTAL_NATIVES | 
|  | } | 
|  |  | 
|  | if (!CallUtilsFunction(isolate(), "PostExperimentals")) return false; | 
|  |  | 
|  | InstallExperimentalBuiltinFunctionIds(); | 
|  | return true; | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::InstallExtraNatives() { | 
|  | HandleScope scope(isolate()); | 
|  |  | 
|  | Handle<JSObject> extras_binding = | 
|  | factory()->NewJSObject(isolate()->object_function()); | 
|  | native_context()->set_extras_binding_object(*extras_binding); | 
|  |  | 
|  | for (int i = ExtraNatives::GetDebuggerCount(); | 
|  | i < ExtraNatives::GetBuiltinsCount(); i++) { | 
|  | if (!Bootstrapper::CompileExtraBuiltin(isolate(), i)) return false; | 
|  | } | 
|  |  | 
|  | return true; | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::InstallExperimentalExtraNatives() { | 
|  | for (int i = ExperimentalExtraNatives::GetDebuggerCount(); | 
|  | i < ExperimentalExtraNatives::GetBuiltinsCount(); i++) { | 
|  | if (!Bootstrapper::CompileExperimentalExtraBuiltin(isolate(), i)) | 
|  | return false; | 
|  | } | 
|  |  | 
|  | return true; | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::InstallDebuggerNatives() { | 
|  | for (int i = 0; i < Natives::GetDebuggerCount(); ++i) { | 
|  | if (!Bootstrapper::CompileBuiltin(isolate(), i)) return false; | 
|  | } | 
|  | return CallUtilsFunction(isolate(), "PostDebug"); | 
|  | } | 
|  |  | 
|  |  | 
|  | static void InstallBuiltinFunctionId(Handle<JSObject> holder, | 
|  | const char* function_name, | 
|  | BuiltinFunctionId id) { | 
|  | Isolate* isolate = holder->GetIsolate(); | 
|  | Handle<Object> function_object = | 
|  | JSReceiver::GetProperty(isolate, holder, function_name).ToHandleChecked(); | 
|  | Handle<JSFunction> function = Handle<JSFunction>::cast(function_object); | 
|  | function->shared()->set_builtin_function_id(id); | 
|  | } | 
|  |  | 
|  |  | 
|  | #define INSTALL_BUILTIN_ID(holder_expr, fun_name, name) \ | 
|  | { #holder_expr, #fun_name, k##name }                  \ | 
|  | , | 
|  |  | 
|  |  | 
|  | void Genesis::InstallBuiltinFunctionIds() { | 
|  | HandleScope scope(isolate()); | 
|  | struct BuiltinFunctionIds { | 
|  | const char* holder_expr; | 
|  | const char* fun_name; | 
|  | BuiltinFunctionId id; | 
|  | }; | 
|  |  | 
|  | const BuiltinFunctionIds builtins[] = { | 
|  | FUNCTIONS_WITH_ID_LIST(INSTALL_BUILTIN_ID)}; | 
|  |  | 
|  | for (const BuiltinFunctionIds& builtin : builtins) { | 
|  | Handle<JSObject> holder = | 
|  | ResolveBuiltinIdHolder(native_context(), builtin.holder_expr); | 
|  | InstallBuiltinFunctionId(holder, builtin.fun_name, builtin.id); | 
|  | } | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::InstallExperimentalBuiltinFunctionIds() { | 
|  | if (FLAG_harmony_sharedarraybuffer) { | 
|  | struct BuiltinFunctionIds { | 
|  | const char* holder_expr; | 
|  | const char* fun_name; | 
|  | BuiltinFunctionId id; | 
|  | }; | 
|  |  | 
|  | const BuiltinFunctionIds atomic_builtins[] = { | 
|  | ATOMIC_FUNCTIONS_WITH_ID_LIST(INSTALL_BUILTIN_ID)}; | 
|  |  | 
|  | for (const BuiltinFunctionIds& builtin : atomic_builtins) { | 
|  | Handle<JSObject> holder = | 
|  | ResolveBuiltinIdHolder(native_context(), builtin.holder_expr); | 
|  | InstallBuiltinFunctionId(holder, builtin.fun_name, builtin.id); | 
|  | } | 
|  | } | 
|  | } | 
|  |  | 
|  |  | 
|  | #undef INSTALL_BUILTIN_ID | 
|  |  | 
|  |  | 
|  | void Genesis::InitializeNormalizedMapCaches() { | 
|  | Handle<NormalizedMapCache> cache = NormalizedMapCache::New(isolate()); | 
|  | native_context()->set_normalized_map_cache(*cache); | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Bootstrapper::InstallExtensions(Handle<Context> native_context, | 
|  | v8::ExtensionConfiguration* extensions) { | 
|  | BootstrapperActive active(this); | 
|  | SaveContext saved_context(isolate_); | 
|  | isolate_->set_context(*native_context); | 
|  | return Genesis::InstallExtensions(native_context, extensions) && | 
|  | Genesis::InstallSpecialObjects(native_context); | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::InstallSpecialObjects(Handle<Context> native_context) { | 
|  | Isolate* isolate = native_context->GetIsolate(); | 
|  | // Don't install extensions into the snapshot. | 
|  | if (isolate->serializer_enabled()) return true; | 
|  |  | 
|  | Factory* factory = isolate->factory(); | 
|  | HandleScope scope(isolate); | 
|  | Handle<JSGlobalObject> global(JSGlobalObject::cast( | 
|  | native_context->global_object())); | 
|  |  | 
|  | Handle<JSObject> Error = isolate->error_function(); | 
|  | Handle<String> name = | 
|  | factory->InternalizeOneByteString(STATIC_CHAR_VECTOR("stackTraceLimit")); | 
|  | Handle<Smi> stack_trace_limit(Smi::FromInt(FLAG_stack_trace_limit), isolate); | 
|  | JSObject::AddProperty(Error, name, stack_trace_limit, NONE); | 
|  |  | 
|  | // Expose the debug global object in global if a name for it is specified. | 
|  | if (FLAG_expose_debug_as != NULL && strlen(FLAG_expose_debug_as) != 0) { | 
|  | // If loading fails we just bail out without installing the | 
|  | // debugger but without tanking the whole context. | 
|  | Debug* debug = isolate->debug(); | 
|  | if (!debug->Load()) return true; | 
|  | Handle<Context> debug_context = debug->debug_context(); | 
|  | // Set the security token for the debugger context to the same as | 
|  | // the shell native context to allow calling between these (otherwise | 
|  | // exposing debug global object doesn't make much sense). | 
|  | debug_context->set_security_token(native_context->security_token()); | 
|  | Handle<String> debug_string = | 
|  | factory->InternalizeUtf8String(FLAG_expose_debug_as); | 
|  | uint32_t index; | 
|  | if (debug_string->AsArrayIndex(&index)) return true; | 
|  | Handle<Object> global_proxy(debug_context->global_proxy(), isolate); | 
|  | JSObject::AddProperty(global, debug_string, global_proxy, DONT_ENUM); | 
|  | } | 
|  |  | 
|  | if (FLAG_expose_wasm) { | 
|  | WasmJs::Install(isolate, global); | 
|  | } | 
|  |  | 
|  | return true; | 
|  | } | 
|  |  | 
|  |  | 
|  | static uint32_t Hash(RegisteredExtension* extension) { | 
|  | return v8::internal::ComputePointerHash(extension); | 
|  | } | 
|  |  | 
|  | Genesis::ExtensionStates::ExtensionStates() | 
|  | : map_(base::HashMap::PointersMatch, 8) {} | 
|  |  | 
|  | Genesis::ExtensionTraversalState Genesis::ExtensionStates::get_state( | 
|  | RegisteredExtension* extension) { | 
|  | base::HashMap::Entry* entry = map_.Lookup(extension, Hash(extension)); | 
|  | if (entry == NULL) { | 
|  | return UNVISITED; | 
|  | } | 
|  | return static_cast<ExtensionTraversalState>( | 
|  | reinterpret_cast<intptr_t>(entry->value)); | 
|  | } | 
|  |  | 
|  | void Genesis::ExtensionStates::set_state(RegisteredExtension* extension, | 
|  | ExtensionTraversalState state) { | 
|  | map_.LookupOrInsert(extension, Hash(extension))->value = | 
|  | reinterpret_cast<void*>(static_cast<intptr_t>(state)); | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::InstallExtensions(Handle<Context> native_context, | 
|  | v8::ExtensionConfiguration* extensions) { | 
|  | Isolate* isolate = native_context->GetIsolate(); | 
|  | ExtensionStates extension_states;  // All extensions have state UNVISITED. | 
|  | return InstallAutoExtensions(isolate, &extension_states) && | 
|  | (!FLAG_expose_free_buffer || | 
|  | InstallExtension(isolate, "v8/free-buffer", &extension_states)) && | 
|  | (!FLAG_expose_gc || | 
|  | InstallExtension(isolate, "v8/gc", &extension_states)) && | 
|  | (!FLAG_expose_externalize_string || | 
|  | InstallExtension(isolate, "v8/externalize", &extension_states)) && | 
|  | (!FLAG_track_gc_object_stats || | 
|  | InstallExtension(isolate, "v8/statistics", &extension_states)) && | 
|  | (!FLAG_expose_trigger_failure || | 
|  | InstallExtension(isolate, "v8/trigger-failure", &extension_states)) && | 
|  | (!(FLAG_ignition && FLAG_trace_ignition_dispatches) || | 
|  | InstallExtension(isolate, "v8/ignition-statistics", | 
|  | &extension_states)) && | 
|  | InstallRequestedExtensions(isolate, extensions, &extension_states); | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::InstallAutoExtensions(Isolate* isolate, | 
|  | ExtensionStates* extension_states) { | 
|  | for (v8::RegisteredExtension* it = v8::RegisteredExtension::first_extension(); | 
|  | it != NULL; | 
|  | it = it->next()) { | 
|  | if (it->extension()->auto_enable() && | 
|  | !InstallExtension(isolate, it, extension_states)) { | 
|  | return false; | 
|  | } | 
|  | } | 
|  | return true; | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::InstallRequestedExtensions(Isolate* isolate, | 
|  | v8::ExtensionConfiguration* extensions, | 
|  | ExtensionStates* extension_states) { | 
|  | for (const char** it = extensions->begin(); it != extensions->end(); ++it) { | 
|  | if (!InstallExtension(isolate, *it, extension_states)) return false; | 
|  | } | 
|  | return true; | 
|  | } | 
|  |  | 
|  |  | 
|  | // Installs a named extension.  This methods is unoptimized and does | 
|  | // not scale well if we want to support a large number of extensions. | 
|  | bool Genesis::InstallExtension(Isolate* isolate, | 
|  | const char* name, | 
|  | ExtensionStates* extension_states) { | 
|  | for (v8::RegisteredExtension* it = v8::RegisteredExtension::first_extension(); | 
|  | it != NULL; | 
|  | it = it->next()) { | 
|  | if (strcmp(name, it->extension()->name()) == 0) { | 
|  | return InstallExtension(isolate, it, extension_states); | 
|  | } | 
|  | } | 
|  | return Utils::ApiCheck(false, | 
|  | "v8::Context::New()", | 
|  | "Cannot find required extension"); | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::InstallExtension(Isolate* isolate, | 
|  | v8::RegisteredExtension* current, | 
|  | ExtensionStates* extension_states) { | 
|  | HandleScope scope(isolate); | 
|  |  | 
|  | if (extension_states->get_state(current) == INSTALLED) return true; | 
|  | // The current node has already been visited so there must be a | 
|  | // cycle in the dependency graph; fail. | 
|  | if (!Utils::ApiCheck(extension_states->get_state(current) != VISITED, | 
|  | "v8::Context::New()", | 
|  | "Circular extension dependency")) { | 
|  | return false; | 
|  | } | 
|  | DCHECK(extension_states->get_state(current) == UNVISITED); | 
|  | extension_states->set_state(current, VISITED); | 
|  | v8::Extension* extension = current->extension(); | 
|  | // Install the extension's dependencies | 
|  | for (int i = 0; i < extension->dependency_count(); i++) { | 
|  | if (!InstallExtension(isolate, | 
|  | extension->dependencies()[i], | 
|  | extension_states)) { | 
|  | return false; | 
|  | } | 
|  | } | 
|  | // We do not expect this to throw an exception. Change this if it does. | 
|  | bool result = CompileExtension(isolate, extension); | 
|  | DCHECK(isolate->has_pending_exception() != result); | 
|  | if (!result) { | 
|  | // We print out the name of the extension that fail to install. | 
|  | // When an error is thrown during bootstrapping we automatically print | 
|  | // the line number at which this happened to the console in the isolate | 
|  | // error throwing functionality. | 
|  | base::OS::PrintError("Error installing extension '%s'.\n", | 
|  | current->extension()->name()); | 
|  | isolate->clear_pending_exception(); | 
|  | } | 
|  | extension_states->set_state(current, INSTALLED); | 
|  | isolate->NotifyExtensionInstalled(); | 
|  | return result; | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::ConfigureGlobalObjects( | 
|  | v8::Local<v8::ObjectTemplate> global_proxy_template) { | 
|  | Handle<JSObject> global_proxy( | 
|  | JSObject::cast(native_context()->global_proxy())); | 
|  | Handle<JSObject> global_object( | 
|  | JSObject::cast(native_context()->global_object())); | 
|  |  | 
|  | if (!global_proxy_template.IsEmpty()) { | 
|  | // Configure the global proxy object. | 
|  | Handle<ObjectTemplateInfo> global_proxy_data = | 
|  | v8::Utils::OpenHandle(*global_proxy_template); | 
|  | if (!ConfigureApiObject(global_proxy, global_proxy_data)) return false; | 
|  |  | 
|  | // Configure the global object. | 
|  | Handle<FunctionTemplateInfo> proxy_constructor( | 
|  | FunctionTemplateInfo::cast(global_proxy_data->constructor())); | 
|  | if (!proxy_constructor->prototype_template()->IsUndefined(isolate())) { | 
|  | Handle<ObjectTemplateInfo> global_object_data( | 
|  | ObjectTemplateInfo::cast(proxy_constructor->prototype_template())); | 
|  | if (!ConfigureApiObject(global_object, global_object_data)) return false; | 
|  | } | 
|  | } | 
|  |  | 
|  | SetObjectPrototype(global_proxy, global_object); | 
|  |  | 
|  | native_context()->set_initial_array_prototype( | 
|  | JSArray::cast(native_context()->array_function()->prototype())); | 
|  | native_context()->set_array_buffer_map( | 
|  | native_context()->array_buffer_fun()->initial_map()); | 
|  | native_context()->set_js_map_map( | 
|  | native_context()->js_map_fun()->initial_map()); | 
|  | native_context()->set_js_set_map( | 
|  | native_context()->js_set_fun()->initial_map()); | 
|  |  | 
|  | return true; | 
|  | } | 
|  |  | 
|  |  | 
|  | bool Genesis::ConfigureApiObject(Handle<JSObject> object, | 
|  | Handle<ObjectTemplateInfo> object_template) { | 
|  | DCHECK(!object_template.is_null()); | 
|  | DCHECK(FunctionTemplateInfo::cast(object_template->constructor()) | 
|  | ->IsTemplateFor(object->map()));; | 
|  |  | 
|  | MaybeHandle<JSObject> maybe_obj = | 
|  | ApiNatives::InstantiateObject(object_template); | 
|  | Handle<JSObject> obj; | 
|  | if (!maybe_obj.ToHandle(&obj)) { | 
|  | DCHECK(isolate()->has_pending_exception()); | 
|  | isolate()->clear_pending_exception(); | 
|  | return false; | 
|  | } | 
|  | TransferObject(obj, object); | 
|  | return true; | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::TransferNamedProperties(Handle<JSObject> from, | 
|  | Handle<JSObject> to) { | 
|  | // If JSObject::AddProperty asserts due to already existing property, | 
|  | // it is likely due to both global objects sharing property name(s). | 
|  | // Merging those two global objects is impossible. | 
|  | // The global template must not create properties that already exist | 
|  | // in the snapshotted global object. | 
|  | if (from->HasFastProperties()) { | 
|  | Handle<DescriptorArray> descs = | 
|  | Handle<DescriptorArray>(from->map()->instance_descriptors()); | 
|  | for (int i = 0; i < from->map()->NumberOfOwnDescriptors(); i++) { | 
|  | PropertyDetails details = descs->GetDetails(i); | 
|  | switch (details.type()) { | 
|  | case DATA: { | 
|  | HandleScope inner(isolate()); | 
|  | Handle<Name> key = Handle<Name>(descs->GetKey(i)); | 
|  | FieldIndex index = FieldIndex::ForDescriptor(from->map(), i); | 
|  | DCHECK(!descs->GetDetails(i).representation().IsDouble()); | 
|  | Handle<Object> value = Handle<Object>(from->RawFastPropertyAt(index), | 
|  | isolate()); | 
|  | JSObject::AddProperty(to, key, value, details.attributes()); | 
|  | break; | 
|  | } | 
|  | case DATA_CONSTANT: { | 
|  | HandleScope inner(isolate()); | 
|  | Handle<Name> key = Handle<Name>(descs->GetKey(i)); | 
|  | Handle<Object> constant(descs->GetConstant(i), isolate()); | 
|  | JSObject::AddProperty(to, key, constant, details.attributes()); | 
|  | break; | 
|  | } | 
|  | case ACCESSOR: | 
|  | UNREACHABLE(); | 
|  | case ACCESSOR_CONSTANT: { | 
|  | Handle<Name> key(descs->GetKey(i)); | 
|  | LookupIterator it(to, key, LookupIterator::OWN_SKIP_INTERCEPTOR); | 
|  | CHECK_NE(LookupIterator::ACCESS_CHECK, it.state()); | 
|  | // If the property is already there we skip it | 
|  | if (it.IsFound()) continue; | 
|  | HandleScope inner(isolate()); | 
|  | DCHECK(!to->HasFastProperties()); | 
|  | // Add to dictionary. | 
|  | Handle<Object> callbacks(descs->GetCallbacksObject(i), isolate()); | 
|  | PropertyDetails d(details.attributes(), ACCESSOR_CONSTANT, i + 1, | 
|  | PropertyCellType::kMutable); | 
|  | JSObject::SetNormalizedProperty(to, key, callbacks, d); | 
|  | break; | 
|  | } | 
|  | } | 
|  | } | 
|  | } else if (from->IsJSGlobalObject()) { | 
|  | Handle<GlobalDictionary> properties = | 
|  | Handle<GlobalDictionary>(from->global_dictionary()); | 
|  | int capacity = properties->Capacity(); | 
|  | for (int i = 0; i < capacity; i++) { | 
|  | Object* raw_key(properties->KeyAt(i)); | 
|  | if (properties->IsKey(isolate(), raw_key)) { | 
|  | DCHECK(raw_key->IsName()); | 
|  | // If the property is already there we skip it. | 
|  | Handle<Name> key(Name::cast(raw_key)); | 
|  | LookupIterator it(to, key, LookupIterator::OWN_SKIP_INTERCEPTOR); | 
|  | CHECK_NE(LookupIterator::ACCESS_CHECK, it.state()); | 
|  | if (it.IsFound()) continue; | 
|  | // Set the property. | 
|  | DCHECK(properties->ValueAt(i)->IsPropertyCell()); | 
|  | Handle<PropertyCell> cell(PropertyCell::cast(properties->ValueAt(i))); | 
|  | Handle<Object> value(cell->value(), isolate()); | 
|  | if (value->IsTheHole(isolate())) continue; | 
|  | PropertyDetails details = cell->property_details(); | 
|  | DCHECK_EQ(kData, details.kind()); | 
|  | JSObject::AddProperty(to, key, value, details.attributes()); | 
|  | } | 
|  | } | 
|  | } else { | 
|  | Handle<NameDictionary> properties = | 
|  | Handle<NameDictionary>(from->property_dictionary()); | 
|  | int capacity = properties->Capacity(); | 
|  | for (int i = 0; i < capacity; i++) { | 
|  | Object* raw_key(properties->KeyAt(i)); | 
|  | if (properties->IsKey(isolate(), raw_key)) { | 
|  | DCHECK(raw_key->IsName()); | 
|  | // If the property is already there we skip it. | 
|  | Handle<Name> key(Name::cast(raw_key)); | 
|  | LookupIterator it(to, key, LookupIterator::OWN_SKIP_INTERCEPTOR); | 
|  | CHECK_NE(LookupIterator::ACCESS_CHECK, it.state()); | 
|  | if (it.IsFound()) continue; | 
|  | // Set the property. | 
|  | Handle<Object> value = Handle<Object>(properties->ValueAt(i), | 
|  | isolate()); | 
|  | DCHECK(!value->IsCell()); | 
|  | DCHECK(!value->IsTheHole(isolate())); | 
|  | PropertyDetails details = properties->DetailsAt(i); | 
|  | DCHECK_EQ(kData, details.kind()); | 
|  | JSObject::AddProperty(to, key, value, details.attributes()); | 
|  | } | 
|  | } | 
|  | } | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::TransferIndexedProperties(Handle<JSObject> from, | 
|  | Handle<JSObject> to) { | 
|  | // Cloning the elements array is sufficient. | 
|  | Handle<FixedArray> from_elements = | 
|  | Handle<FixedArray>(FixedArray::cast(from->elements())); | 
|  | Handle<FixedArray> to_elements = factory()->CopyFixedArray(from_elements); | 
|  | to->set_elements(*to_elements); | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::TransferObject(Handle<JSObject> from, Handle<JSObject> to) { | 
|  | HandleScope outer(isolate()); | 
|  |  | 
|  | DCHECK(!from->IsJSArray()); | 
|  | DCHECK(!to->IsJSArray()); | 
|  |  | 
|  | TransferNamedProperties(from, to); | 
|  | TransferIndexedProperties(from, to); | 
|  |  | 
|  | // Transfer the prototype (new map is needed). | 
|  | Handle<Object> proto(from->map()->prototype(), isolate()); | 
|  | SetObjectPrototype(to, proto); | 
|  | } | 
|  |  | 
|  |  | 
|  | void Genesis::MakeFunctionInstancePrototypeWritable() { | 
|  | // The maps with writable prototype are created in CreateEmptyFunction | 
|  | // and CreateStrictModeFunctionMaps respectively. Initially the maps are | 
|  | // created with read-only prototype for JS builtins processing. | 
|  | DCHECK(!sloppy_function_map_writable_prototype_.is_null()); | 
|  | DCHECK(!strict_function_map_writable_prototype_.is_null()); | 
|  |  | 
|  | // Replace function instance maps to make prototype writable. | 
|  | native_context()->set_sloppy_function_map( | 
|  | *sloppy_function_map_writable_prototype_); | 
|  | native_context()->set_strict_function_map( | 
|  | *strict_function_map_writable_prototype_); | 
|  | } | 
|  |  | 
|  |  | 
|  | class NoTrackDoubleFieldsForSerializerScope { | 
|  | public: | 
|  | explicit NoTrackDoubleFieldsForSerializerScope(Isolate* isolate) | 
|  | : flag_(FLAG_track_double_fields), enabled_(false) { | 
|  | if (isolate->serializer_enabled()) { | 
|  | // Disable tracking double fields because heap numbers treated as | 
|  | // immutable by the serializer. | 
|  | FLAG_track_double_fields = false; | 
|  | enabled_ = true; | 
|  | } | 
|  | } | 
|  |  | 
|  | ~NoTrackDoubleFieldsForSerializerScope() { | 
|  | if (enabled_) { | 
|  | FLAG_track_double_fields = flag_; | 
|  | } | 
|  | } | 
|  |  | 
|  | private: | 
|  | bool flag_; | 
|  | bool enabled_; | 
|  | }; | 
|  |  | 
|  | Genesis::Genesis(Isolate* isolate, | 
|  | MaybeHandle<JSGlobalProxy> maybe_global_proxy, | 
|  | v8::Local<v8::ObjectTemplate> global_proxy_template, | 
|  | v8::ExtensionConfiguration* extensions, | 
|  | size_t context_snapshot_index, GlobalContextType context_type) | 
|  | : isolate_(isolate), active_(isolate->bootstrapper()) { | 
|  | NoTrackDoubleFieldsForSerializerScope disable_scope(isolate); | 
|  | result_ = Handle<Context>::null(); | 
|  | // Before creating the roots we must save the context and restore it | 
|  | // on all function exits. | 
|  | SaveContext saved_context(isolate); | 
|  |  | 
|  | // During genesis, the boilerplate for stack overflow won't work until the | 
|  | // environment has been at least partially initialized. Add a stack check | 
|  | // before entering JS code to catch overflow early. | 
|  | StackLimitCheck check(isolate); | 
|  | if (check.HasOverflowed()) { | 
|  | isolate->StackOverflow(); | 
|  | return; | 
|  | } | 
|  |  | 
|  | // The deserializer needs to hook up references to the global proxy. | 
|  | // Create an uninitialized global proxy now if we don't have one | 
|  | // and initialize it later in CreateNewGlobals. | 
|  | Handle<JSGlobalProxy> global_proxy; | 
|  | if (!maybe_global_proxy.ToHandle(&global_proxy)) { | 
|  | global_proxy = isolate->factory()->NewUninitializedJSGlobalProxy(); | 
|  | } | 
|  |  | 
|  | // We can only de-serialize a context if the isolate was initialized from | 
|  | // a snapshot. Otherwise we have to build the context from scratch. | 
|  | // Also create a context from scratch to expose natives, if required by flag. | 
|  | if (!isolate->initialized_from_snapshot() || | 
|  | !Snapshot::NewContextFromSnapshot(isolate, global_proxy, | 
|  | context_snapshot_index) | 
|  | .ToHandle(&native_context_)) { | 
|  | native_context_ = Handle<Context>(); | 
|  | } | 
|  |  | 
|  | if (!native_context().is_null()) { | 
|  | AddToWeakNativeContextList(*native_context()); | 
|  | isolate->set_context(*native_context()); | 
|  | isolate->counters()->contexts_created_by_snapshot()->Increment(); | 
|  | #if TRACE_MAPS | 
|  | if (FLAG_trace_maps) { | 
|  | Handle<JSFunction> object_fun = isolate->object_function(); | 
|  | PrintF("[TraceMap: InitialMap map= %p SFI= %d_Object ]\n", | 
|  | reinterpret_cast<void*>(object_fun->initial_map()), | 
|  | object_fun->shared()->unique_id()); | 
|  | Map::TraceAllTransitions(object_fun->initial_map()); | 
|  | } | 
|  | #endif | 
|  | Handle<JSGlobalObject> global_object = | 
|  | CreateNewGlobals(global_proxy_template, global_proxy); | 
|  |  | 
|  | HookUpGlobalProxy(global_object, global_proxy); | 
|  | HookUpGlobalObject(global_object); | 
|  |  | 
|  | if (!ConfigureGlobalObjects(global_proxy_template)) return; | 
|  | } else { | 
|  | // We get here if there was no context snapshot. | 
|  | CreateRoots(); | 
|  | Handle<JSFunction> empty_function = CreateEmptyFunction(isolate); | 
|  | CreateStrictModeFunctionMaps(empty_function); | 
|  | CreateIteratorMaps(empty_function); | 
|  | CreateAsyncFunctionMaps(empty_function); | 
|  | Handle<JSGlobalObject> global_object = | 
|  | CreateNewGlobals(global_proxy_template, global_proxy); | 
|  | HookUpGlobalProxy(global_object, global_proxy); | 
|  | InitializeGlobal(global_object, empty_function, context_type); | 
|  | InitializeNormalizedMapCaches(); | 
|  |  | 
|  | if (!InstallNatives(context_type)) return; | 
|  |  | 
|  | MakeFunctionInstancePrototypeWritable(); | 
|  |  | 
|  | if (!InstallExtraNatives()) return; | 
|  | if (!ConfigureGlobalObjects(global_proxy_template)) return; | 
|  |  | 
|  | isolate->counters()->contexts_created_from_scratch()->Increment(); | 
|  | // Re-initialize the counter because it got incremented during snapshot | 
|  | // creation. | 
|  | isolate->native_context()->set_errors_thrown(Smi::FromInt(0)); | 
|  | } | 
|  |  | 
|  | // Install experimental natives. Do not include them into the | 
|  | // snapshot as we should be able to turn them off at runtime. Re-installing | 
|  | // them after they have already been deserialized would also fail. | 
|  | if (context_type == FULL_CONTEXT) { | 
|  | if (!isolate->serializer_enabled()) { | 
|  | InitializeExperimentalGlobal(); | 
|  | if (!InstallExperimentalNatives()) return; | 
|  |  | 
|  | if (FLAG_experimental_extras) { | 
|  | if (!InstallExperimentalExtraNatives()) return; | 
|  | } | 
|  | } | 
|  | // The serializer cannot serialize typed arrays. Reset those typed arrays | 
|  | // for each new context. | 
|  | } else if (context_type == DEBUG_CONTEXT) { | 
|  | DCHECK(!isolate->serializer_enabled()); | 
|  | InitializeExperimentalGlobal(); | 
|  | if (!InstallDebuggerNatives()) return; | 
|  | } | 
|  |  | 
|  | ConfigureUtilsObject(context_type); | 
|  |  | 
|  | // Check that the script context table is empty except for the 'this' binding. | 
|  | // We do not need script contexts for native scripts. | 
|  | if (!FLAG_global_var_shortcuts) { | 
|  | DCHECK_EQ(1, native_context()->script_context_table()->used()); | 
|  | } | 
|  |  | 
|  | result_ = native_context(); | 
|  | } | 
|  |  | 
|  |  | 
|  | // Support for thread preemption. | 
|  |  | 
|  | // Reserve space for statics needing saving and restoring. | 
|  | int Bootstrapper::ArchiveSpacePerThread() { | 
|  | return sizeof(NestingCounterType); | 
|  | } | 
|  |  | 
|  |  | 
|  | // Archive statics that are thread-local. | 
|  | char* Bootstrapper::ArchiveState(char* to) { | 
|  | *reinterpret_cast<NestingCounterType*>(to) = nesting_; | 
|  | nesting_ = 0; | 
|  | return to + sizeof(NestingCounterType); | 
|  | } | 
|  |  | 
|  |  | 
|  | // Restore statics that are thread-local. | 
|  | char* Bootstrapper::RestoreState(char* from) { | 
|  | nesting_ = *reinterpret_cast<NestingCounterType*>(from); | 
|  | return from + sizeof(NestingCounterType); | 
|  | } | 
|  |  | 
|  |  | 
|  | // Called when the top-level V8 mutex is destroyed. | 
|  | void Bootstrapper::FreeThreadResources() { | 
|  | DCHECK(!IsActive()); | 
|  | } | 
|  |  | 
|  | }  // namespace internal | 
|  | }  // namespace v8 |