/* * Copyright (C) 2011, 2016 Apple Inc. All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ #include "config.h" #include "JSBoundFunction.h" #include "GetterSetter.h" #include "JSGlobalObject.h" #include "JSCInlines.h" namespace JSC { const ClassInfo JSBoundFunction::s_info = { "Function", &Base::s_info, 0, CREATE_METHOD_TABLE(JSBoundFunction) }; EncodedJSValue JSC_HOST_CALL boundThisNoArgsFunctionCall(ExecState* exec) { JSBoundFunction* boundFunction = jsCast(exec->callee()); MarkedArgumentBuffer args; for (unsigned i = 0; i < exec->argumentCount(); ++i) args.append(exec->uncheckedArgument(i)); JSFunction* targetFunction = jsCast(boundFunction->targetFunction()); ExecutableBase* executable = targetFunction->executable(); if (executable->hasJITCodeForCall()) { // Force the executable to cache its arity entrypoint. executable->entrypointFor(CodeForCall, MustCheckArity); } CallData callData; CallType callType = getCallData(targetFunction, callData); ASSERT(callType != CallType::None); return JSValue::encode(call(exec, targetFunction, callType, callData, boundFunction->boundThis(), args)); } EncodedJSValue JSC_HOST_CALL boundFunctionCall(ExecState* exec) { JSBoundFunction* boundFunction = jsCast(exec->callee()); JSArray* boundArgs = boundFunction->boundArgs(); MarkedArgumentBuffer args; if (boundArgs) { for (unsigned i = 0; i < boundArgs->length(); ++i) args.append(boundArgs->getIndexQuickly(i)); } for (unsigned i = 0; i < exec->argumentCount(); ++i) args.append(exec->uncheckedArgument(i)); JSObject* targetFunction = boundFunction->targetFunction(); CallData callData; CallType callType = getCallData(targetFunction, callData); ASSERT(callType != CallType::None); return JSValue::encode(call(exec, targetFunction, callType, callData, boundFunction->boundThis(), args)); } EncodedJSValue JSC_HOST_CALL boundThisNoArgsFunctionConstruct(ExecState* exec) { JSBoundFunction* boundFunction = jsCast(exec->callee()); MarkedArgumentBuffer args; for (unsigned i = 0; i < exec->argumentCount(); ++i) args.append(exec->uncheckedArgument(i)); JSFunction* targetFunction = jsCast(boundFunction->targetFunction()); ConstructData constructData; ConstructType constructType = getConstructData(targetFunction, constructData); ASSERT(constructType != ConstructType::None); return JSValue::encode(construct(exec, targetFunction, constructType, constructData, args)); } EncodedJSValue JSC_HOST_CALL boundFunctionConstruct(ExecState* exec) { JSBoundFunction* boundFunction = jsCast(exec->callee()); JSArray* boundArgs = boundFunction->boundArgs(); MarkedArgumentBuffer args; if (boundArgs) { for (unsigned i = 0; i < boundArgs->length(); ++i) args.append(boundArgs->getIndexQuickly(i)); } for (unsigned i = 0; i < exec->argumentCount(); ++i) args.append(exec->uncheckedArgument(i)); JSObject* targetFunction = boundFunction->targetFunction(); ConstructData constructData; ConstructType constructType = getConstructData(targetFunction, constructData); ASSERT(constructType != ConstructType::None); return JSValue::encode(construct(exec, targetFunction, constructType, constructData, args)); } EncodedJSValue JSC_HOST_CALL isBoundFunction(ExecState* exec) { return JSValue::encode(JSValue(static_cast(jsDynamicCast(exec->uncheckedArgument(0))))); } EncodedJSValue JSC_HOST_CALL hasInstanceBoundFunction(ExecState* exec) { JSBoundFunction* boundObject = jsCast(exec->uncheckedArgument(0)); JSValue value = exec->uncheckedArgument(1); return JSValue::encode(jsBoolean(boundObject->targetFunction()->hasInstance(exec, value))); } inline Structure* getBoundFunctionStructure(VM& vm, ExecState* exec, JSGlobalObject* globalObject, JSObject* targetFunction) { JSValue prototype = targetFunction->getPrototype(vm, exec); if (UNLIKELY(vm.exception())) return nullptr; JSFunction* targetJSFunction = jsDynamicCast(targetFunction); // We only cache the structure of the bound function if the bindee is a JSFunction since there // isn't any good place to put the structure on Internal Functions. if (targetJSFunction) { Structure* structure = targetJSFunction->rareData(vm)->getBoundFunctionStructure(); if (structure && structure->storedPrototype() == prototype && structure->globalObject() == globalObject) return structure; } Structure* result = globalObject->boundFunctionStructure(); // It would be nice if the structure map was keyed global objects in addition to the other things. Unfortunately, it is not // currently. Whoever works on caching structure changes for prototype transistions should consider this problem as well. // See: https://bugs.webkit.org/show_bug.cgi?id=152738 if (prototype.isObject() && prototype.getObject()->globalObject() == globalObject) { result = vm.prototypeMap.emptyStructureForPrototypeFromBaseStructure(prototype.getObject(), result); ASSERT_WITH_SECURITY_IMPLICATION(result->globalObject() == globalObject); } else result = Structure::create(vm, globalObject, prototype, result->typeInfo(), result->classInfo()); if (targetJSFunction) targetJSFunction->rareData(vm)->setBoundFunctionStructure(vm, result); return result; } JSBoundFunction* JSBoundFunction::create(VM& vm, ExecState* exec, JSGlobalObject* globalObject, JSObject* targetFunction, JSValue boundThis, JSArray* boundArgs, int length, const String& name) { ConstructData constructData; ConstructType constructType = JSC::getConstructData(targetFunction, constructData); bool canConstruct = constructType != ConstructType::None; bool slowCase = boundArgs || !getJSFunction(targetFunction); NativeExecutable* executable = vm.getHostFunction( slowCase ? boundFunctionCall : boundThisNoArgsFunctionCall, slowCase ? NoIntrinsic : BoundThisNoArgsFunctionCallIntrinsic, canConstruct ? (slowCase ? boundFunctionConstruct : boundThisNoArgsFunctionConstruct) : callHostFunctionAsConstructor, name); Structure* structure = getBoundFunctionStructure(vm, exec, globalObject, targetFunction); if (UNLIKELY(vm.exception())) return nullptr; JSBoundFunction* function = new (NotNull, allocateCell(vm.heap)) JSBoundFunction(vm, globalObject, structure, targetFunction, boundThis, boundArgs); function->finishCreation(vm, executable, length, makeString("bound ", name)); return function; } bool JSBoundFunction::customHasInstance(JSObject* object, ExecState* exec, JSValue value) { return jsCast(object)->m_targetFunction->hasInstance(exec, value); } JSBoundFunction::JSBoundFunction(VM& vm, JSGlobalObject* globalObject, Structure* structure, JSObject* targetFunction, JSValue boundThis, JSArray* boundArgs) : Base(vm, globalObject, structure) , m_targetFunction(vm, this, targetFunction) , m_boundThis(vm, this, boundThis) , m_boundArgs(vm, this, boundArgs, WriteBarrier::MayBeNull) { } void JSBoundFunction::finishCreation(VM& vm, NativeExecutable* executable, int length, const String& name) { Base::finishCreation(vm, executable, length, name); ASSERT(inherits(info())); putDirectNonIndexAccessor(vm, vm.propertyNames->arguments, globalObject()->throwTypeErrorArgumentsCalleeAndCallerGetterSetter(), DontDelete | DontEnum | Accessor); putDirectNonIndexAccessor(vm, vm.propertyNames->caller, globalObject()->throwTypeErrorArgumentsCalleeAndCallerGetterSetter(), DontDelete | DontEnum | Accessor); } void JSBoundFunction::visitChildren(JSCell* cell, SlotVisitor& visitor) { JSBoundFunction* thisObject = jsCast(cell); ASSERT_GC_OBJECT_INHERITS(thisObject, info()); Base::visitChildren(thisObject, visitor); visitor.append(&thisObject->m_targetFunction); visitor.append(&thisObject->m_boundThis); visitor.append(&thisObject->m_boundArgs); } } // namespace JSC