v8::internal::compiler::JSBinopReduction Class Reference

Collaboration diagram for v8::internal::compiler::JSBinopReduction:

Public Member Functions
	JSBinopReduction (JSTypedLowering *lowering, Node *node)
void	ConvertInputsToNumber ()
void	ConvertInputsToInt32 (bool left_signed, bool right_signed)
void	ConvertInputsToString ()
void	ConvertInputsForShift (bool left_signed)
void	SwapInputs ()
Reduction	ChangeToPureOperator (const Operator *op, bool invert=false)
bool	OneInputIs (Type *t)
bool	BothInputsAre (Type *t)
bool	OneInputCannotBe (Type *t)
bool	NeitherInputCanBe (Type *t)
Node *	effect ()
Node *	control ()
Node *	context ()
Node *	left ()
Node *	right ()
Type *	left_type ()
Type *	right_type ()
SimplifiedOperatorBuilder *	simplified ()
Graph *	graph ()
JSGraph *	jsgraph ()
JSOperatorBuilder *	javascript ()
MachineOperatorBuilder *	machine ()

Private Member Functions
Node *	ConvertToString (Node *node)
Node *	ConvertToNumber (Node *node)
bool	TryNarrowingToI32 (Type *type, Node *node)
Node *	ConvertToI32 (bool is_signed, Node *node)
void	update_effect (Node *effect)

Private Attributes
JSTypedLowering *	lowering_
Node *	node_
Type *	left_type_
Type *	right_type_

Detailed Description

Definition at line 45 of file js-typed-lowering.cc.

Constructor & Destructor Documentation

JSBinopReduction()

v8::internal::compiler::JSBinopReduction::JSBinopReduction ( JSTypedLowering *  lowering, Node *  node  )

inline

Definition at line 47 of file js-typed-lowering.cc.

      : lowering_(lowering),
        node_(node),
        left_type_(NodeProperties::GetBounds(node->InputAt(0)).upper),
        right_type_(NodeProperties::GetBounds(node->InputAt(1)).upper) {}

Member Function Documentation

BothInputsAre()

bool v8::internal::compiler::JSBinopReduction::BothInputsAre ( Type *  t )

inline

Definition at line 114 of file js-typed-lowering.cc.

                              {
    return left_type_->Is(t) && right_type_->Is(t);
  }

References v8::internal::TypeImpl< Config >::Is(), left_type_, and right_type_.

Referenced by TryNarrowingToI32().

Here is the call graph for this function:

Here is the caller graph for this function:

ChangeToPureOperator()

Reduction v8::internal::compiler::JSBinopReduction::ChangeToPureOperator ( const Operator *  op, bool  invert = false  )

inline

Definition at line 86 of file js-typed-lowering.cc.

                                                                          {
    DCHECK_EQ(0, OperatorProperties::GetEffectInputCount(op));
    DCHECK_EQ(false, OperatorProperties::HasContextInput(op));
    DCHECK_EQ(0, OperatorProperties::GetControlInputCount(op));
    DCHECK_EQ(2, OperatorProperties::GetValueInputCount(op));
 
    // Remove the effects from the node, if any, and update its effect usages.
    if (OperatorProperties::GetEffectInputCount(node_->op()) > 0) {
      RelaxEffects(node_);
    }
    // Remove the inputs corresponding to context, effect, and control.
    NodeProperties::RemoveNonValueInputs(node_);
    // Finally, update the operator to the new one.
    node_->set_op(op);
 
    if (invert) {
      // Insert an boolean not to invert the value.
      Node* value = graph()->NewNode(simplified()->BooleanNot(), node_);
      node_->ReplaceUses(value);
      // Note: ReplaceUses() smashes all uses, so smash it back here.
      value->ReplaceInput(0, node_);
      return lowering_->ReplaceWith(value);
    }
    return lowering_->Changed(node_);
  }

References DCHECK_EQ, v8::internal::compiler::OperatorProperties::GetControlInputCount(), v8::internal::compiler::OperatorProperties::GetEffectInputCount(), v8::internal::compiler::OperatorProperties::GetValueInputCount(), graph(), v8::internal::compiler::OperatorProperties::HasContextInput(), lowering_, v8::internal::compiler::Graph::NewNode(), node_, v8::internal::compiler::RelaxEffects(), v8::internal::compiler::NodeProperties::RemoveNonValueInputs(), and simplified().

Here is the call graph for this function:

context()

Node* v8::internal::compiler::JSBinopReduction::context ( )

inline

Definition at line 128 of file js-typed-lowering.cc.

{ return NodeProperties::GetContextInput(node_); }

References v8::internal::compiler::NodeProperties::GetContextInput(), and node_.

Referenced by ConvertToNumber(), and ConvertToString().

Here is the call graph for this function:

Here is the caller graph for this function:

control()

Node* v8::internal::compiler::JSBinopReduction::control ( )

inline

Definition at line 127 of file js-typed-lowering.cc.

{ return NodeProperties::GetControlInput(node_); }

References v8::internal::compiler::NodeProperties::GetControlInput(), and node_.

Referenced by ConvertToNumber(), and ConvertToString().

Here is the call graph for this function:

Here is the caller graph for this function:

ConvertInputsForShift()

void v8::internal::compiler::JSBinopReduction::ConvertInputsForShift ( bool  left_signed )

inline

Definition at line 69 of file js-typed-lowering.cc.

                                               {
    node_->ReplaceInput(0, ConvertToI32(left_signed, left()));
    Node* rnum = ConvertToI32(false, right());
    node_->ReplaceInput(1, graph()->NewNode(machine()->Word32And(), rnum,
                                            jsgraph()->Int32Constant(0x1F)));
  }

References ConvertToI32(), graph(), jsgraph(), left(), machine(), node_, and right().

Here is the call graph for this function:

ConvertInputsToInt32()

void v8::internal::compiler::JSBinopReduction::ConvertInputsToInt32 ( bool  left_signed, bool  right_signed  )

inline

Definition at line 58 of file js-typed-lowering.cc.

                                                                 {
    node_->ReplaceInput(0, ConvertToI32(left_signed, left()));
    node_->ReplaceInput(1, ConvertToI32(right_signed, right()));
  }

References ConvertToI32(), left(), node_, and right().

Here is the call graph for this function:

ConvertInputsToNumber()

void v8::internal::compiler::JSBinopReduction::ConvertInputsToNumber ( )

inline

Definition at line 53 of file js-typed-lowering.cc.

                               {
    node_->ReplaceInput(0, ConvertToNumber(left()));
    node_->ReplaceInput(1, ConvertToNumber(right()));
  }

References ConvertToNumber(), left(), node_, and right().

Here is the call graph for this function:

ConvertInputsToString()

void v8::internal::compiler::JSBinopReduction::ConvertInputsToString ( )

inline

Definition at line 63 of file js-typed-lowering.cc.

                               {
    node_->ReplaceInput(0, ConvertToString(left()));
    node_->ReplaceInput(1, ConvertToString(right()));
  }

References ConvertToString(), left(), node_, and right().

Here is the call graph for this function:

ConvertToI32()

Node* v8::internal::compiler::JSBinopReduction::ConvertToI32 ( bool  is_signed, Node *  node  )

inlineprivate

Definition at line 194 of file js-typed-lowering.cc.

                                                 {
    Type* type = is_signed ? Type::Signed32() : Type::Unsigned32();
    if (node->OwnedBy(node_)) {
      // If this node {node_} has the only edge to {node}, then try narrowing
      // its operation to an Int32 add or subtract.
      if (TryNarrowingToI32(type, node)) return node;
    } else {
      // Otherwise, {node} has multiple uses. Leave it as is and let the
      // further lowering passes deal with it, which use a full backwards
      // fixpoint.
    }
 
    // Avoid introducing too many eager NumberToXXnt32() operations.
    node = ConvertToNumber(node);
    Type* input_type = NodeProperties::GetBounds(node).upper;
 
    if (input_type->Is(type)) return node;  // already in the value range.
 
    const Operator* op = is_signed ? simplified()->NumberToInt32()
                                   : simplified()->NumberToUint32();
    Node* n = graph()->NewNode(op, node);
    return n;
  }

References ConvertToNumber(), v8::internal::compiler::NodeProperties::GetBounds(), graph(), v8::internal::TypeImpl< Config >::Is(), v8::internal::compiler::Graph::NewNode(), node_, simplified(), TryNarrowingToI32(), and v8::internal::BoundsImpl< Config >::upper.

Referenced by ConvertInputsForShift(), and ConvertInputsToInt32().

Here is the call graph for this function:

Here is the caller graph for this function:

ConvertToNumber()

Node* v8::internal::compiler::JSBinopReduction::ConvertToNumber ( Node *  node )

inlineprivate

Definition at line 156 of file js-typed-lowering.cc.

                                    {
    // Avoid introducing too many eager ToNumber() operations.
    Reduction reduced = lowering_->ReduceJSToNumberInput(node);
    if (reduced.Changed()) return reduced.replacement();
    Node* n = graph()->NewNode(javascript()->ToNumber(), node, context(),
                               effect(), control());
    update_effect(n);
    return n;
  }

References context(), control(), effect(), graph(), javascript(), lowering_, v8::internal::compiler::Graph::NewNode(), v8::internal::ToNumber(), and update_effect().

Referenced by ConvertInputsToNumber(), and ConvertToI32().

Here is the call graph for this function:

Here is the caller graph for this function:

ConvertToString()

Node* v8::internal::compiler::JSBinopReduction::ConvertToString ( Node *  node )

inlineprivate

Definition at line 146 of file js-typed-lowering.cc.

                                    {
    // Avoid introducing too many eager ToString() operations.
    Reduction reduced = lowering_->ReduceJSToStringInput(node);
    if (reduced.Changed()) return reduced.replacement();
    Node* n = graph()->NewNode(javascript()->ToString(), node, context(),
                               effect(), control());
    update_effect(n);
    return n;
  }

References context(), control(), effect(), graph(), javascript(), lowering_, v8::internal::compiler::Graph::NewNode(), and update_effect().

Referenced by ConvertInputsToString().

Here is the call graph for this function:

Here is the caller graph for this function:

effect()

Node* v8::internal::compiler::JSBinopReduction::effect ( )

inline

Definition at line 126 of file js-typed-lowering.cc.

{ return NodeProperties::GetEffectInput(node_); }

References v8::internal::compiler::NodeProperties::GetEffectInput(), and node_.

Referenced by ConvertToNumber(), ConvertToString(), and update_effect().

Here is the call graph for this function:

Here is the caller graph for this function:

graph()

Graph* v8::internal::compiler::JSBinopReduction::graph ( )

inline

Definition at line 135 of file js-typed-lowering.cc.

{ return lowering_->graph(); }

References lowering_.

Referenced by ChangeToPureOperator(), ConvertInputsForShift(), ConvertToI32(), ConvertToNumber(), and ConvertToString().

Here is the caller graph for this function:

javascript()

JSOperatorBuilder* v8::internal::compiler::JSBinopReduction::javascript ( )

inline

Definition at line 137 of file js-typed-lowering.cc.

{ return lowering_->javascript(); }

References lowering_.

Referenced by ConvertToNumber(), and ConvertToString().

Here is the caller graph for this function:

jsgraph()

JSGraph* v8::internal::compiler::JSBinopReduction::jsgraph ( )

inline

Definition at line 136 of file js-typed-lowering.cc.

{ return lowering_->jsgraph(); }

References lowering_.

Referenced by ConvertInputsForShift().

Here is the caller graph for this function:

left()

Node* v8::internal::compiler::JSBinopReduction::left ( )

inline

Definition at line 129 of file js-typed-lowering.cc.

{ return NodeProperties::GetValueInput(node_, 0); }

References v8::internal::compiler::NodeProperties::GetValueInput(), and node_.

Referenced by ConvertInputsForShift(), ConvertInputsToInt32(), ConvertInputsToNumber(), ConvertInputsToString(), and SwapInputs().

Here is the call graph for this function:

Here is the caller graph for this function:

left_type()

Type* v8::internal::compiler::JSBinopReduction::left_type ( )

inline

Definition at line 131 of file js-typed-lowering.cc.

{ return left_type_; }

References left_type_.

machine()

MachineOperatorBuilder* v8::internal::compiler::JSBinopReduction::machine ( )

inline

Definition at line 138 of file js-typed-lowering.cc.

{ return lowering_->machine(); }

References lowering_.

Referenced by ConvertInputsForShift().

Here is the caller graph for this function:

NeitherInputCanBe()

bool v8::internal::compiler::JSBinopReduction::NeitherInputCanBe ( Type *  t )

inline

Definition at line 122 of file js-typed-lowering.cc.

                                  {
    return !left_type_->Maybe(t) && !right_type_->Maybe(t);
  }

References left_type_, v8::internal::TypeImpl< Config >::Maybe(), and right_type_.

Here is the call graph for this function:

OneInputCannotBe()

bool v8::internal::compiler::JSBinopReduction::OneInputCannotBe ( Type *  t )

inline

Definition at line 118 of file js-typed-lowering.cc.

                                 {
    return !left_type_->Maybe(t) || !right_type_->Maybe(t);
  }

References left_type_, v8::internal::TypeImpl< Config >::Maybe(), and right_type_.

Here is the call graph for this function:

OneInputIs()

bool v8::internal::compiler::JSBinopReduction::OneInputIs ( Type *  t )

inline

Definition at line 112 of file js-typed-lowering.cc.

{ return left_type_->Is(t) || right_type_->Is(t); }

References v8::internal::TypeImpl< Config >::Is(), left_type_, and right_type_.

Here is the call graph for this function:

right()

Node* v8::internal::compiler::JSBinopReduction::right ( )

inline

Definition at line 130 of file js-typed-lowering.cc.

{ return NodeProperties::GetValueInput(node_, 1); }

References v8::internal::compiler::NodeProperties::GetValueInput(), and node_.

Referenced by ConvertInputsForShift(), ConvertInputsToInt32(), ConvertInputsToNumber(), ConvertInputsToString(), and SwapInputs().

Here is the call graph for this function:

Here is the caller graph for this function:

right_type()

Type* v8::internal::compiler::JSBinopReduction::right_type ( )

inline

Definition at line 132 of file js-typed-lowering.cc.

{ return right_type_; }

References right_type_.

simplified()

SimplifiedOperatorBuilder* v8::internal::compiler::JSBinopReduction::simplified ( )

inline

Definition at line 134 of file js-typed-lowering.cc.

{ return lowering_->simplified(); }

References lowering_.

Referenced by ChangeToPureOperator(), and ConvertToI32().

Here is the caller graph for this function:

SwapInputs()

void v8::internal::compiler::JSBinopReduction::SwapInputs ( )

inline

Definition at line 76 of file js-typed-lowering.cc.

                    {
    Node* l = left();
    Node* r = right();
    node_->ReplaceInput(0, r);
    node_->ReplaceInput(1, l);
    std::swap(left_type_, right_type_);
  }

References left(), left_type_, node_, right(), and right_type_.

Here is the call graph for this function:

TryNarrowingToI32()

bool v8::internal::compiler::JSBinopReduction::TryNarrowingToI32 ( Type *  type, Node *  node  )

inlineprivate

Definition at line 167 of file js-typed-lowering.cc.

                                                 {
    switch (node->opcode()) {
      case IrOpcode::kFloat64Add:
      case IrOpcode::kNumberAdd: {
        JSBinopReduction r(lowering_, node);
        if (r.BothInputsAre(Type::Integral32())) {
          node->set_op(lowering_->machine()->Int32Add());
          // TODO(titzer): narrow bounds instead of overwriting.
          NodeProperties::SetBounds(node, Bounds(type));
          return true;
        }
      }
      case IrOpcode::kFloat64Sub:
      case IrOpcode::kNumberSubtract: {
        JSBinopReduction r(lowering_, node);
        if (r.BothInputsAre(Type::Integral32())) {
          node->set_op(lowering_->machine()->Int32Sub());
          // TODO(titzer): narrow bounds instead of overwriting.
          NodeProperties::SetBounds(node, Bounds(type));
          return true;
        }
      }
      default:
        return false;
    }
  }

References BothInputsAre(), lowering_, and v8::internal::compiler::NodeProperties::SetBounds().

Referenced by ConvertToI32().

Here is the call graph for this function:

Here is the caller graph for this function:

update_effect()

void v8::internal::compiler::JSBinopReduction::update_effect ( Node *  effect )

inlineprivate

Definition at line 218 of file js-typed-lowering.cc.

                                   {
    NodeProperties::ReplaceEffectInput(node_, effect);
  }

References effect(), node_, and v8::internal::compiler::NodeProperties::ReplaceEffectInput().

Referenced by ConvertToNumber(), and ConvertToString().

Here is the call graph for this function:

Here is the caller graph for this function:

Member Data Documentation

left_type_

Type* v8::internal::compiler::JSBinopReduction::left_type_

private

Definition at line 143 of file js-typed-lowering.cc.

Referenced by BothInputsAre(), left_type(), NeitherInputCanBe(), OneInputCannotBe(), OneInputIs(), and SwapInputs().

lowering_

JSTypedLowering* v8::internal::compiler::JSBinopReduction::lowering_

private

Definition at line 141 of file js-typed-lowering.cc.

Referenced by ChangeToPureOperator(), ConvertToNumber(), ConvertToString(), graph(), javascript(), jsgraph(), machine(), simplified(), and TryNarrowingToI32().

node_

Node* v8::internal::compiler::JSBinopReduction::node_

private

Definition at line 142 of file js-typed-lowering.cc.

Referenced by ChangeToPureOperator(), context(), control(), ConvertInputsForShift(), ConvertInputsToInt32(), ConvertInputsToNumber(), ConvertInputsToString(), ConvertToI32(), effect(), left(), right(), SwapInputs(), and update_effect().

right_type_

Type* v8::internal::compiler::JSBinopReduction::right_type_

private

Definition at line 144 of file js-typed-lowering.cc.

Referenced by BothInputsAre(), NeitherInputCanBe(), OneInputCannotBe(), OneInputIs(), right_type(), and SwapInputs().

---

The documentation for this class was generated from the following file:

• /mnt/V8SourceCode/src/compiler/js-typed-lowering.cc