7f741adf5d7981e395de1394f54354f727a39376
[WebKit-https.git] / Source / JavaScriptCore / runtime / JSGlobalObject.cpp
1 /*
2  * Copyright (C) 2007, 2008, 2009, 2014, 2015 Apple Inc. All rights reserved.
3  * Copyright (C) 2008 Cameron Zwarich (cwzwarich@uwaterloo.ca)
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  *
9  * 1.  Redistributions of source code must retain the above copyright
10  *     notice, this list of conditions and the following disclaimer.
11  * 2.  Redistributions in binary form must reproduce the above copyright
12  *     notice, this list of conditions and the following disclaimer in the
13  *     documentation and/or other materials provided with the distribution.
14  * 3.  Neither the name of Apple Inc. ("Apple") nor the names of
15  *     its contributors may be used to endorse or promote products derived
16  *     from this software without specific prior written permission.
17  *
18  * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY
19  * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
20  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
21  * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
22  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
23  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
24  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
25  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
26  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
27  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
28  */
29
30 #include "config.h"
31 #include "JSGlobalObject.h"
32
33 #include "ArrayConstructor.h"
34 #include "ArrayIteratorPrototype.h"
35 #include "ArrayPrototype.h"
36 #include "BooleanConstructor.h"
37 #include "BooleanPrototype.h"
38 #include "BuiltinNames.h"
39 #include "ClonedArguments.h"
40 #include "CodeBlock.h"
41 #include "CodeCache.h"
42 #include "ConsolePrototype.h"
43 #include "DateConstructor.h"
44 #include "DatePrototype.h"
45 #include "Debugger.h"
46 #include "DebuggerScope.h"
47 #include "DirectArguments.h"
48 #include "Error.h"
49 #include "ErrorConstructor.h"
50 #include "ErrorPrototype.h"
51 #include "FunctionConstructor.h"
52 #include "FunctionPrototype.h"
53 #include "GetterSetter.h"
54 #include "HeapIterationScope.h"
55 #include "Interpreter.h"
56 #include "IteratorPrototype.h"
57 #include "JSAPIWrapperObject.h"
58 #include "JSArrayBuffer.h"
59 #include "JSArrayBufferConstructor.h"
60 #include "JSArrayBufferPrototype.h"
61 #include "JSArrayIterator.h"
62 #include "JSBoundFunction.h"
63 #include "JSCInlines.h"
64 #include "JSCallbackConstructor.h"
65 #include "JSCallbackFunction.h"
66 #include "JSCallbackObject.h"
67 #include "JSCatchScope.h"
68 #include "JSConsole.h"
69 #include "JSDataView.h"
70 #include "JSDataViewPrototype.h"
71 #include "JSDollarVM.h"
72 #include "JSDollarVMPrototype.h"
73 #include "JSFunction.h"
74 #include "JSFunctionNameScope.h"
75 #include "JSGenericTypedArrayViewConstructorInlines.h"
76 #include "JSGenericTypedArrayViewInlines.h"
77 #include "JSGenericTypedArrayViewPrototypeInlines.h"
78 #include "JSGlobalObjectFunctions.h"
79 #include "JSJob.h"
80 #include "JSLexicalEnvironment.h"
81 #include "JSLock.h"
82 #include "JSMap.h"
83 #include "JSMapIterator.h"
84 #include "JSONObject.h"
85 #include "JSPromise.h"
86 #include "JSPromiseConstructor.h"
87 #include "JSPromisePrototype.h"
88 #include "JSSet.h"
89 #include "JSSetIterator.h"
90 #include "JSStringIterator.h"
91 #include "JSTemplateRegistryKey.h"
92 #include "JSTypedArrayConstructors.h"
93 #include "JSTypedArrayPrototypes.h"
94 #include "JSTypedArrays.h"
95 #include "JSWeakMap.h"
96 #include "JSWeakSet.h"
97 #include "JSWithScope.h"
98 #include "LegacyProfiler.h"
99 #include "Lookup.h"
100 #include "MapConstructor.h"
101 #include "MapIteratorPrototype.h"
102 #include "MapPrototype.h"
103 #include "MathObject.h"
104 #include "Microtask.h"
105 #include "NativeErrorConstructor.h"
106 #include "NativeErrorPrototype.h"
107 #include "NullGetterFunction.h"
108 #include "NullSetterFunction.h"
109 #include "NumberConstructor.h"
110 #include "NumberPrototype.h"
111 #include "ObjCCallbackFunction.h"
112 #include "ObjectConstructor.h"
113 #include "ObjectPrototype.h"
114 #include "ParserError.h"
115 #include "RegExpConstructor.h"
116 #include "RegExpMatchesArray.h"
117 #include "RegExpObject.h"
118 #include "RegExpPrototype.h"
119 #include "ScopedArguments.h"
120 #include "SetConstructor.h"
121 #include "SetIteratorPrototype.h"
122 #include "SetPrototype.h"
123 #include "StrictEvalActivation.h"
124 #include "StringConstructor.h"
125 #include "StringIteratorPrototype.h"
126 #include "StringPrototype.h"
127 #include "Symbol.h"
128 #include "SymbolConstructor.h"
129 #include "SymbolPrototype.h"
130 #include "VariableWriteFireDetail.h"
131 #include "WeakGCMapInlines.h"
132 #include "WeakMapConstructor.h"
133 #include "WeakMapPrototype.h"
134 #include "WeakSetConstructor.h"
135 #include "WeakSetPrototype.h"
136
137 #if ENABLE(INTL)
138 #include "IntlObject.h"
139 #endif // ENABLE(INTL)
140
141 #if ENABLE(REMOTE_INSPECTOR)
142 #include "JSGlobalObjectDebuggable.h"
143 #include "JSGlobalObjectInspectorController.h"
144 #endif
145
146 #if ENABLE(WEB_REPLAY)
147 #include "EmptyInputCursor.h"
148 #include "JSReplayInputs.h"
149 #endif
150
151 #include "JSGlobalObject.lut.h"
152
153 namespace JSC {
154
155 const ClassInfo JSGlobalObject::s_info = { "GlobalObject", &Base::s_info, &globalObjectTable, CREATE_METHOD_TABLE(JSGlobalObject) };
156
157 const GlobalObjectMethodTable JSGlobalObject::s_globalObjectMethodTable = { &allowsAccessFrom, &supportsProfiling, &supportsRichSourceInfo, &shouldInterruptScript, &javaScriptRuntimeFlags, nullptr, &shouldInterruptScriptBeforeTimeout };
158
159 /* Source for JSGlobalObject.lut.h
160 @begin globalObjectTable
161   parseFloat            globalFuncParseFloat            DontEnum|Function 1
162   isNaN                 globalFuncIsNaN                 DontEnum|Function 1
163   isFinite              globalFuncIsFinite              DontEnum|Function 1
164   escape                globalFuncEscape                DontEnum|Function 1
165   unescape              globalFuncUnescape              DontEnum|Function 1
166   decodeURI             globalFuncDecodeURI             DontEnum|Function 1
167   decodeURIComponent    globalFuncDecodeURIComponent    DontEnum|Function 1
168   encodeURI             globalFuncEncodeURI             DontEnum|Function 1
169   encodeURIComponent    globalFuncEncodeURIComponent    DontEnum|Function 1
170 @end
171 */
172
173 static EncodedJSValue JSC_HOST_CALL getTemplateObject(ExecState* exec)
174 {
175     JSValue thisValue = exec->thisValue();
176     ASSERT(thisValue.inherits(JSTemplateRegistryKey::info()));
177     return JSValue::encode(exec->lexicalGlobalObject()->templateRegistry().getTemplateObject(exec, jsCast<JSTemplateRegistryKey*>(thisValue)->templateRegistryKey()));
178 }
179
180
181 static EncodedJSValue JSC_HOST_CALL enqueueJob(ExecState* exec)
182 {
183     VM& vm = exec->vm();
184     JSGlobalObject* globalObject = exec->lexicalGlobalObject();
185
186     JSValue job = exec->argument(0);
187     JSValue arguments = exec->argument(1);
188     ASSERT(arguments.inherits(JSArray::info()));
189
190     globalObject->queueMicrotask(createJSJob(vm, job, jsCast<JSArray*>(arguments)));
191
192     return JSValue::encode(jsUndefined());
193 }
194
195 JSGlobalObject::JSGlobalObject(VM& vm, Structure* structure, const GlobalObjectMethodTable* globalObjectMethodTable)
196     : Base(vm, structure, 0)
197     , m_vm(vm)
198 #if ENABLE(WEB_REPLAY)
199     , m_inputCursor(EmptyInputCursor::create())
200 #endif
201     , m_masqueradesAsUndefinedWatchpoint(adoptRef(new WatchpointSet(IsWatched)))
202     , m_havingABadTimeWatchpoint(adoptRef(new WatchpointSet(IsWatched)))
203     , m_varInjectionWatchpoint(adoptRef(new WatchpointSet(IsWatched)))
204     , m_weakRandom(Options::forceWeakRandomSeed() ? Options::forcedWeakRandomSeed() : static_cast<unsigned>(randomNumber() * (std::numeric_limits<unsigned>::max() + 1.0)))
205     , m_templateRegistry(vm)
206     , m_evalEnabled(true)
207     , m_runtimeFlags()
208     , m_consoleClient(nullptr)
209     , m_globalObjectMethodTable(globalObjectMethodTable ? globalObjectMethodTable : &s_globalObjectMethodTable)
210 {
211 }
212
213 JSGlobalObject::~JSGlobalObject()
214 {
215 #if ENABLE(REMOTE_INSPECTOR)
216     m_inspectorController->globalObjectDestroyed();
217 #endif
218
219     if (m_debugger)
220         m_debugger->detach(this, Debugger::GlobalObjectIsDestructing);
221
222     if (LegacyProfiler* profiler = vm().enabledProfiler())
223         profiler->stopProfiling(this);
224 }
225
226 void JSGlobalObject::destroy(JSCell* cell)
227 {
228     static_cast<JSGlobalObject*>(cell)->JSGlobalObject::~JSGlobalObject();
229 }
230
231 void JSGlobalObject::setGlobalThis(VM& vm, JSObject* globalThis)
232 {
233     m_globalThis.set(vm, this, globalThis);
234 }
235
236 void JSGlobalObject::init(VM& vm)
237 {
238     ASSERT(vm.currentThreadIsHoldingAPILock());
239
240     JSGlobalObject::globalExec()->init(0, 0, CallFrame::noCaller(), 0, 0);
241
242     m_debugger = 0;
243
244 #if ENABLE(REMOTE_INSPECTOR)
245     m_inspectorController = std::make_unique<Inspector::JSGlobalObjectInspectorController>(*this);
246     m_inspectorDebuggable = std::make_unique<JSGlobalObjectDebuggable>(*this);
247     m_inspectorDebuggable->init();
248     m_consoleClient = m_inspectorController->consoleClient();
249 #endif
250
251     ExecState* exec = JSGlobalObject::globalExec();
252
253     m_functionPrototype.set(vm, this, FunctionPrototype::create(vm, FunctionPrototype::createStructure(vm, this, jsNull()))); // The real prototype will be set once ObjectPrototype is created.
254     m_calleeStructure.set(vm, this, JSCallee::createStructure(vm, this, jsNull()));
255
256     // Need to create the callee structure (above) before creating the callee.
257     m_globalCallee.set(vm, this, JSCallee::create(vm, this, this));
258     exec->setCallee(m_globalCallee.get());
259
260     m_functionStructure.set(vm, this, JSFunction::createStructure(vm, this, m_functionPrototype.get()));
261     m_boundFunctionStructure.set(vm, this, JSBoundFunction::createStructure(vm, this, m_functionPrototype.get()));
262     m_namedFunctionStructure.set(vm, this, Structure::addPropertyTransition(vm, m_functionStructure.get(), vm.propertyNames->name, DontDelete | ReadOnly | DontEnum, m_functionNameOffset));
263     m_internalFunctionStructure.set(vm, this, InternalFunction::createStructure(vm, this, m_functionPrototype.get()));
264     JSFunction* callFunction = 0;
265     JSFunction* applyFunction = 0;
266     m_functionPrototype->addFunctionProperties(exec, this, &callFunction, &applyFunction);
267     m_callFunction.set(vm, this, callFunction);
268     m_applyFunction.set(vm, this, applyFunction);
269     m_arrayProtoValuesFunction.set(vm, this, JSFunction::create(vm, this, 0, vm.propertyNames->values.string(), arrayProtoFuncValues));
270     m_initializePromiseFunction.set(vm, this, JSFunction::createBuiltinFunction(vm, operationsPromiseInitializePromiseCodeGenerator(vm), this));
271     m_newPromiseDeferredFunction.set(vm, this, JSFunction::createBuiltinFunction(vm, operationsPromiseNewPromiseDeferredCodeGenerator(vm), this));
272     m_nullGetterFunction.set(vm, this, NullGetterFunction::create(vm, NullGetterFunction::createStructure(vm, this, m_functionPrototype.get())));
273     m_nullSetterFunction.set(vm, this, NullSetterFunction::create(vm, NullSetterFunction::createStructure(vm, this, m_functionPrototype.get())));
274     m_objectPrototype.set(vm, this, ObjectPrototype::create(vm, this, ObjectPrototype::createStructure(vm, this, jsNull())));
275     GetterSetter* protoAccessor = GetterSetter::create(vm, this);
276     protoAccessor->setGetter(vm, this, JSFunction::create(vm, this, 0, String(), globalFuncProtoGetter));
277     protoAccessor->setSetter(vm, this, JSFunction::create(vm, this, 0, String(), globalFuncProtoSetter));
278     m_objectPrototype->putDirectNonIndexAccessor(vm, vm.propertyNames->underscoreProto, protoAccessor, Accessor | DontEnum);
279     m_functionPrototype->structure()->setPrototypeWithoutTransition(vm, m_objectPrototype.get());
280     
281     m_typedArrays[toIndex(TypeInt8)].prototype.set(vm, this, JSInt8ArrayPrototype::create(vm, this, JSInt8ArrayPrototype::createStructure(vm, this, m_objectPrototype.get())));
282     m_typedArrays[toIndex(TypeInt16)].prototype.set(vm, this, JSInt16ArrayPrototype::create(vm, this, JSInt16ArrayPrototype::createStructure(vm, this, m_objectPrototype.get())));
283     m_typedArrays[toIndex(TypeInt32)].prototype.set(vm, this, JSInt32ArrayPrototype::create(vm, this, JSInt32ArrayPrototype::createStructure(vm, this, m_objectPrototype.get())));
284     m_typedArrays[toIndex(TypeUint8)].prototype.set(vm, this, JSUint8ArrayPrototype::create(vm, this, JSUint8ArrayPrototype::createStructure(vm, this, m_objectPrototype.get())));
285     m_typedArrays[toIndex(TypeUint8Clamped)].prototype.set(vm, this, JSUint8ClampedArrayPrototype::create(vm, this, JSUint8ClampedArrayPrototype::createStructure(vm, this, m_objectPrototype.get())));
286     m_typedArrays[toIndex(TypeUint16)].prototype.set(vm, this, JSUint16ArrayPrototype::create(vm, this, JSUint16ArrayPrototype::createStructure(vm, this, m_objectPrototype.get())));
287     m_typedArrays[toIndex(TypeUint32)].prototype.set(vm, this, JSUint32ArrayPrototype::create(vm, this, JSUint32ArrayPrototype::createStructure(vm, this, m_objectPrototype.get())));
288     m_typedArrays[toIndex(TypeFloat32)].prototype.set(vm, this, JSFloat32ArrayPrototype::create(vm, this, JSFloat32ArrayPrototype::createStructure(vm, this, m_objectPrototype.get())));
289     m_typedArrays[toIndex(TypeFloat64)].prototype.set(vm, this, JSFloat64ArrayPrototype::create(vm, this, JSFloat64ArrayPrototype::createStructure(vm, this, m_objectPrototype.get())));
290     m_typedArrays[toIndex(TypeDataView)].prototype.set(vm, this, JSDataViewPrototype::create(vm, JSDataViewPrototype::createStructure(vm, this, m_objectPrototype.get())));
291     
292     m_typedArrays[toIndex(TypeInt8)].structure.set(vm, this, JSInt8Array::createStructure(vm, this, m_typedArrays[toIndex(TypeInt8)].prototype.get()));
293     m_typedArrays[toIndex(TypeInt16)].structure.set(vm, this, JSInt16Array::createStructure(vm, this, m_typedArrays[toIndex(TypeInt16)].prototype.get()));
294     m_typedArrays[toIndex(TypeInt32)].structure.set(vm, this, JSInt32Array::createStructure(vm, this, m_typedArrays[toIndex(TypeInt32)].prototype.get()));
295     m_typedArrays[toIndex(TypeUint8)].structure.set(vm, this, JSUint8Array::createStructure(vm, this, m_typedArrays[toIndex(TypeUint8)].prototype.get()));
296     m_typedArrays[toIndex(TypeUint8Clamped)].structure.set(vm, this, JSUint8ClampedArray::createStructure(vm, this, m_typedArrays[toIndex(TypeUint8Clamped)].prototype.get()));
297     m_typedArrays[toIndex(TypeUint16)].structure.set(vm, this, JSUint16Array::createStructure(vm, this, m_typedArrays[toIndex(TypeUint16)].prototype.get()));
298     m_typedArrays[toIndex(TypeUint32)].structure.set(vm, this, JSUint32Array::createStructure(vm, this, m_typedArrays[toIndex(TypeUint32)].prototype.get()));
299     m_typedArrays[toIndex(TypeFloat32)].structure.set(vm, this, JSFloat32Array::createStructure(vm, this, m_typedArrays[toIndex(TypeFloat32)].prototype.get()));
300     m_typedArrays[toIndex(TypeFloat64)].structure.set(vm, this, JSFloat64Array::createStructure(vm, this, m_typedArrays[toIndex(TypeFloat64)].prototype.get()));
301     m_typedArrays[toIndex(TypeDataView)].structure.set(vm, this, JSDataView::createStructure(vm, this, m_typedArrays[toIndex(TypeDataView)].prototype.get()));
302     
303     m_catchScopeStructure.set(vm, this, JSCatchScope::createStructure(vm, this, jsNull()));
304     m_functionNameScopeStructure.set(vm, this, JSFunctionNameScope::createStructure(vm, this, jsNull()));
305     m_lexicalEnvironmentStructure.set(vm, this, JSLexicalEnvironment::createStructure(vm, this));
306     m_strictEvalActivationStructure.set(vm, this, StrictEvalActivation::createStructure(vm, this, jsNull()));
307     m_debuggerScopeStructure.set(m_vm, this, DebuggerScope::createStructure(m_vm, this));
308     m_withScopeStructure.set(vm, this, JSWithScope::createStructure(vm, this, jsNull()));
309     
310     m_nullPrototypeObjectStructure.set(vm, this, JSFinalObject::createStructure(vm, this, jsNull(), JSFinalObject::defaultInlineCapacity()));
311     
312     m_callbackFunctionStructure.set(vm, this, JSCallbackFunction::createStructure(vm, this, m_functionPrototype.get()));
313     m_directArgumentsStructure.set(vm, this, DirectArguments::createStructure(vm, this, m_objectPrototype.get()));
314     m_scopedArgumentsStructure.set(vm, this, ScopedArguments::createStructure(vm, this, m_objectPrototype.get()));
315     m_outOfBandArgumentsStructure.set(vm, this, ClonedArguments::createStructure(vm, this, m_objectPrototype.get()));
316     m_callbackConstructorStructure.set(vm, this, JSCallbackConstructor::createStructure(vm, this, m_objectPrototype.get()));
317     m_callbackObjectStructure.set(vm, this, JSCallbackObject<JSDestructibleObject>::createStructure(vm, this, m_objectPrototype.get()));
318 #if JSC_OBJC_API_ENABLED
319     m_objcCallbackFunctionStructure.set(vm, this, ObjCCallbackFunction::createStructure(vm, this, m_functionPrototype.get()));
320     m_objcWrapperObjectStructure.set(vm, this, JSCallbackObject<JSAPIWrapperObject>::createStructure(vm, this, m_objectPrototype.get()));
321 #endif
322     
323     m_arrayPrototype.set(vm, this, ArrayPrototype::create(vm, this, ArrayPrototype::createStructure(vm, this, m_objectPrototype.get())));
324     
325     m_originalArrayStructureForIndexingShape[UndecidedShape >> IndexingShapeShift].set(vm, this, JSArray::createStructure(vm, this, m_arrayPrototype.get(), ArrayWithUndecided));
326     m_originalArrayStructureForIndexingShape[Int32Shape >> IndexingShapeShift].set(vm, this, JSArray::createStructure(vm, this, m_arrayPrototype.get(), ArrayWithInt32));
327     m_originalArrayStructureForIndexingShape[DoubleShape >> IndexingShapeShift].set(vm, this, JSArray::createStructure(vm, this, m_arrayPrototype.get(), ArrayWithDouble));
328     m_originalArrayStructureForIndexingShape[ContiguousShape >> IndexingShapeShift].set(vm, this, JSArray::createStructure(vm, this, m_arrayPrototype.get(), ArrayWithContiguous));
329     m_originalArrayStructureForIndexingShape[ArrayStorageShape >> IndexingShapeShift].set(vm, this, JSArray::createStructure(vm, this, m_arrayPrototype.get(), ArrayWithArrayStorage));
330     m_originalArrayStructureForIndexingShape[SlowPutArrayStorageShape >> IndexingShapeShift].set(vm, this, JSArray::createStructure(vm, this, m_arrayPrototype.get(), ArrayWithSlowPutArrayStorage));
331     for (unsigned i = 0; i < NumberOfIndexingShapes; ++i)
332         m_arrayStructureForIndexingShapeDuringAllocation[i] = m_originalArrayStructureForIndexingShape[i];
333
334     RegExp* emptyRegex = RegExp::create(vm, "", NoFlags);
335     
336     m_regExpPrototype.set(vm, this, RegExpPrototype::create(vm, RegExpPrototype::createStructure(vm, this, m_objectPrototype.get()), emptyRegex));
337     m_regExpStructure.set(vm, this, RegExpObject::createStructure(vm, this, m_regExpPrototype.get()));
338     m_regExpMatchesArrayStructure.set(vm, this, createRegExpMatchesArrayStructure(vm, *this));
339     
340     m_promisePrototype.set(vm, this, JSPromisePrototype::create(exec, this, JSPromisePrototype::createStructure(vm, this, m_objectPrototype.get())));
341     m_promiseStructure.set(vm, this, JSPromise::createStructure(vm, this, m_promisePrototype.get()));
342
343     m_parseIntFunction.set(vm, this, JSFunction::create(vm, this, 2, vm.propertyNames->parseInt.string(), globalFuncParseInt, NoIntrinsic));
344     putDirectWithoutTransition(vm, vm.propertyNames->parseInt, m_parseIntFunction.get(), DontEnum | Function);
345
346 #define CREATE_PROTOTYPE_FOR_SIMPLE_TYPE(capitalName, lowerName, properName, instanceType, jsName) \
347 m_ ## lowerName ## Prototype.set(vm, this, capitalName##Prototype::create(vm, this, capitalName##Prototype::createStructure(vm, this, m_objectPrototype.get()))); \
348 m_ ## properName ## Structure.set(vm, this, instanceType::createStructure(vm, this, m_ ## lowerName ## Prototype.get()));
349     
350     FOR_EACH_SIMPLE_BUILTIN_TYPE(CREATE_PROTOTYPE_FOR_SIMPLE_TYPE)
351     
352 #undef CREATE_PROTOTYPE_FOR_SIMPLE_TYPE
353
354     m_iteratorPrototype.set(vm, this, IteratorPrototype::create(vm, this, IteratorPrototype::createStructure(vm, this, m_objectPrototype.get())));
355
356 #define CREATE_PROTOTYPE_FOR_DERIVED_ITERATOR_TYPE(capitalName, lowerName, properName, instanceType, jsName) \
357 m_ ## lowerName ## Prototype.set(vm, this, capitalName##Prototype::create(vm, this, capitalName##Prototype::createStructure(vm, this, m_iteratorPrototype.get()))); \
358 m_ ## properName ## Structure.set(vm, this, instanceType::createStructure(vm, this, m_ ## lowerName ## Prototype.get()));
359     
360     FOR_EACH_BUILTIN_DERIVED_ITERATOR_TYPE(CREATE_PROTOTYPE_FOR_DERIVED_ITERATOR_TYPE)
361     
362 #undef CREATE_PROTOTYPE_FOR_DERIVED_ITERATOR_TYPE
363
364     // Constructors
365     
366     ObjectConstructor* objectConstructor = ObjectConstructor::create(vm, this, ObjectConstructor::createStructure(vm, this, m_functionPrototype.get()), m_objectPrototype.get());
367     m_objectConstructor.set(vm, this, objectConstructor);
368
369     JSFunction* definePropertyFunction = m_objectConstructor->addDefineProperty(exec, this);
370     m_definePropertyFunction.set(vm, this, definePropertyFunction);
371
372     JSCell* functionConstructor = FunctionConstructor::create(vm, FunctionConstructor::createStructure(vm, this, m_functionPrototype.get()), m_functionPrototype.get());
373     JSCell* arrayConstructor = ArrayConstructor::create(vm, ArrayConstructor::createStructure(vm, this, m_functionPrototype.get()), m_arrayPrototype.get());
374     
375     m_regExpConstructor.set(vm, this, RegExpConstructor::create(vm, RegExpConstructor::createStructure(vm, this, m_functionPrototype.get()), m_regExpPrototype.get()));
376     
377 #define CREATE_CONSTRUCTOR_FOR_SIMPLE_TYPE(capitalName, lowerName, properName, instanceType, jsName) \
378 capitalName ## Constructor* lowerName ## Constructor = capitalName ## Constructor::create(vm, capitalName ## Constructor::createStructure(vm, this, m_functionPrototype.get()), m_ ## lowerName ## Prototype.get()); \
379 m_ ## lowerName ## Prototype->putDirectWithoutTransition(vm, vm.propertyNames->constructor, lowerName ## Constructor, DontEnum); \
380
381     FOR_EACH_SIMPLE_BUILTIN_TYPE(CREATE_CONSTRUCTOR_FOR_SIMPLE_TYPE)
382     
383 #undef CREATE_CONSTRUCTOR_FOR_SIMPLE_TYPE
384     
385     m_errorConstructor.set(vm, this, errorConstructor);
386     
387     Structure* nativeErrorPrototypeStructure = NativeErrorPrototype::createStructure(vm, this, m_errorPrototype.get());
388     Structure* nativeErrorStructure = NativeErrorConstructor::createStructure(vm, this, m_functionPrototype.get());
389     m_evalErrorConstructor.set(vm, this, NativeErrorConstructor::create(vm, this, nativeErrorStructure, nativeErrorPrototypeStructure, ASCIILiteral("EvalError")));
390     m_rangeErrorConstructor.set(vm, this, NativeErrorConstructor::create(vm, this, nativeErrorStructure, nativeErrorPrototypeStructure, ASCIILiteral("RangeError")));
391     m_referenceErrorConstructor.set(vm, this, NativeErrorConstructor::create(vm, this, nativeErrorStructure, nativeErrorPrototypeStructure, ASCIILiteral("ReferenceError")));
392     m_syntaxErrorConstructor.set(vm, this, NativeErrorConstructor::create(vm, this, nativeErrorStructure, nativeErrorPrototypeStructure, ASCIILiteral("SyntaxError")));
393     m_typeErrorConstructor.set(vm, this, NativeErrorConstructor::create(vm, this, nativeErrorStructure, nativeErrorPrototypeStructure, ASCIILiteral("TypeError")));
394     m_URIErrorConstructor.set(vm, this, NativeErrorConstructor::create(vm, this, nativeErrorStructure, nativeErrorPrototypeStructure, ASCIILiteral("URIError")));
395     m_promiseConstructor.set(vm, this, JSPromiseConstructor::create(vm, JSPromiseConstructor::createStructure(vm, this, m_functionPrototype.get()), m_promisePrototype.get()));
396     
397     m_objectPrototype->putDirectWithoutTransition(vm, vm.propertyNames->constructor, objectConstructor, DontEnum);
398     m_functionPrototype->putDirectWithoutTransition(vm, vm.propertyNames->constructor, functionConstructor, DontEnum);
399     m_arrayPrototype->putDirectWithoutTransition(vm, vm.propertyNames->constructor, arrayConstructor, DontEnum);
400     m_regExpPrototype->putDirectWithoutTransition(vm, vm.propertyNames->constructor, m_regExpConstructor.get(), DontEnum);
401     m_promisePrototype->putDirectWithoutTransition(vm, vm.propertyNames->constructor, m_promiseConstructor.get(), DontEnum);
402     
403     putDirectWithoutTransition(vm, vm.propertyNames->Object, objectConstructor, DontEnum);
404     putDirectWithoutTransition(vm, vm.propertyNames->Function, functionConstructor, DontEnum);
405     putDirectWithoutTransition(vm, vm.propertyNames->Array, arrayConstructor, DontEnum);
406     putDirectWithoutTransition(vm, vm.propertyNames->RegExp, m_regExpConstructor.get(), DontEnum);
407     putDirectWithoutTransition(vm, vm.propertyNames->EvalError, m_evalErrorConstructor.get(), DontEnum);
408     putDirectWithoutTransition(vm, vm.propertyNames->RangeError, m_rangeErrorConstructor.get(), DontEnum);
409     putDirectWithoutTransition(vm, vm.propertyNames->ReferenceError, m_referenceErrorConstructor.get(), DontEnum);
410     putDirectWithoutTransition(vm, vm.propertyNames->SyntaxError, m_syntaxErrorConstructor.get(), DontEnum);
411     putDirectWithoutTransition(vm, vm.propertyNames->TypeError, m_typeErrorConstructor.get(), DontEnum);
412     putDirectWithoutTransition(vm, vm.propertyNames->URIError, m_URIErrorConstructor.get(), DontEnum);
413     putDirectWithoutTransition(vm, vm.propertyNames->Promise, m_promiseConstructor.get(), DontEnum);
414     
415     
416 #define PUT_CONSTRUCTOR_FOR_SIMPLE_TYPE(capitalName, lowerName, properName, instanceType, jsName) \
417 putDirectWithoutTransition(vm, vm.propertyNames-> jsName, lowerName ## Constructor, DontEnum); \
418
419     FOR_EACH_SIMPLE_BUILTIN_TYPE_WITH_CONSTRUCTOR(PUT_CONSTRUCTOR_FOR_SIMPLE_TYPE)
420
421 #undef PUT_CONSTRUCTOR_FOR_SIMPLE_TYPE
422     PrototypeMap& prototypeMap = vm.prototypeMap;
423     Structure* iteratorResultStructure = prototypeMap.emptyObjectStructureForPrototype(m_objectPrototype.get(), JSFinalObject::defaultInlineCapacity());
424     PropertyOffset offset;
425     iteratorResultStructure = Structure::addPropertyTransition(vm, iteratorResultStructure, vm.propertyNames->done, 0, offset);
426     iteratorResultStructure = Structure::addPropertyTransition(vm, iteratorResultStructure, vm.propertyNames->value, 0, offset);
427     m_iteratorResultStructure.set(vm, this, iteratorResultStructure);
428     
429     m_evalFunction.set(vm, this, JSFunction::create(vm, this, 1, vm.propertyNames->eval.string(), globalFuncEval));
430     putDirectWithoutTransition(vm, vm.propertyNames->eval, m_evalFunction.get(), DontEnum);
431     
432 #if ENABLE(INTL)
433     putDirectWithoutTransition(vm, vm.propertyNames->Intl, IntlObject::create(vm, IntlObject::createStructure(vm, this, m_objectPrototype.get())), DontEnum);
434 #endif // ENABLE(INTL)
435     putDirectWithoutTransition(vm, vm.propertyNames->JSON, JSONObject::create(vm, JSONObject::createStructure(vm, this, m_objectPrototype.get())), DontEnum);
436     putDirectWithoutTransition(vm, vm.propertyNames->Math, MathObject::create(vm, this, MathObject::createStructure(vm, this, m_objectPrototype.get())), DontEnum);
437     
438     std::array<InternalFunction*, NUMBER_OF_TYPED_ARRAY_TYPES> typedArrayConstructors;
439     typedArrayConstructors[toIndex(TypeInt8)] = JSInt8ArrayConstructor::create(vm, JSInt8ArrayConstructor::createStructure(vm, this, m_functionPrototype.get()), m_typedArrays[toIndex(TypeInt8)].prototype.get(), ASCIILiteral("Int8Array"));
440     typedArrayConstructors[toIndex(TypeInt16)] = JSInt16ArrayConstructor::create(vm, JSInt16ArrayConstructor::createStructure(vm, this, m_functionPrototype.get()), m_typedArrays[toIndex(TypeInt16)].prototype.get(), ASCIILiteral("Int16Array"));
441     typedArrayConstructors[toIndex(TypeInt32)] = JSInt32ArrayConstructor::create(vm, JSInt32ArrayConstructor::createStructure(vm, this, m_functionPrototype.get()), m_typedArrays[toIndex(TypeInt32)].prototype.get(), ASCIILiteral("Int32Array"));
442     typedArrayConstructors[toIndex(TypeUint8)] = JSUint8ArrayConstructor::create(vm, JSUint8ArrayConstructor::createStructure(vm, this, m_functionPrototype.get()), m_typedArrays[toIndex(TypeUint8)].prototype.get(), ASCIILiteral("Uint8Array"));
443     typedArrayConstructors[toIndex(TypeUint8Clamped)] = JSUint8ClampedArrayConstructor::create(vm, JSUint8ClampedArrayConstructor::createStructure(vm, this, m_functionPrototype.get()), m_typedArrays[toIndex(TypeUint8Clamped)].prototype.get(), ASCIILiteral("Uint8ClampedArray"));
444     typedArrayConstructors[toIndex(TypeUint16)] = JSUint16ArrayConstructor::create(vm, JSUint16ArrayConstructor::createStructure(vm, this, m_functionPrototype.get()), m_typedArrays[toIndex(TypeUint16)].prototype.get(), ASCIILiteral("Uint16Array"));
445     typedArrayConstructors[toIndex(TypeUint32)] = JSUint32ArrayConstructor::create(vm, JSUint32ArrayConstructor::createStructure(vm, this, m_functionPrototype.get()), m_typedArrays[toIndex(TypeUint32)].prototype.get(), ASCIILiteral("Uint32Array"));
446     typedArrayConstructors[toIndex(TypeFloat32)] = JSFloat32ArrayConstructor::create(vm, JSFloat32ArrayConstructor::createStructure(vm, this, m_functionPrototype.get()), m_typedArrays[toIndex(TypeFloat32)].prototype.get(), ASCIILiteral("Float32Array"));
447     typedArrayConstructors[toIndex(TypeFloat64)] = JSFloat64ArrayConstructor::create(vm, JSFloat64ArrayConstructor::createStructure(vm, this, m_functionPrototype.get()), m_typedArrays[toIndex(TypeFloat64)].prototype.get(), ASCIILiteral("Float64Array"));
448     typedArrayConstructors[toIndex(TypeDataView)] = JSDataViewConstructor::create(vm, JSDataViewConstructor::createStructure(vm, this, m_functionPrototype.get()), m_typedArrays[toIndex(TypeDataView)].prototype.get(), ASCIILiteral("DataView"));
449     
450     for (unsigned typedArrayIndex = NUMBER_OF_TYPED_ARRAY_TYPES; typedArrayIndex--;) {
451         m_typedArrays[typedArrayIndex].prototype->putDirectWithoutTransition(vm, vm.propertyNames->constructor, typedArrayConstructors[typedArrayIndex], DontEnum);
452         putDirectWithoutTransition(vm, Identifier::fromString(exec, typedArrayConstructors[typedArrayIndex]->name(exec)), typedArrayConstructors[typedArrayIndex], DontEnum);
453     }
454     
455     JSFunction* builtinLog = JSFunction::create(vm, this, 1, vm.propertyNames->emptyIdentifier.string(), globalFuncBuiltinLog);
456
457     JSFunction* privateFuncAbs = JSFunction::create(vm, this, 0, String(), mathProtoFuncAbs, AbsIntrinsic);
458     JSFunction* privateFuncFloor = JSFunction::create(vm, this, 0, String(), mathProtoFuncFloor, FloorIntrinsic);
459     JSFunction* privateFuncIsFinite = JSFunction::create(vm, this, 0, String(), globalFuncIsFinite);
460
461     JSFunction* privateFuncGetTemplateObject = JSFunction::create(vm, this, 0, String(), getTemplateObject);
462     JSFunction* privateFuncToLength = JSFunction::createBuiltinFunction(vm, globalObjectToLengthCodeGenerator(vm), this);
463     JSFunction* privateFuncToInteger = JSFunction::createBuiltinFunction(vm, globalObjectToIntegerCodeGenerator(vm), this);
464
465     GlobalPropertyInfo staticGlobals[] = {
466         GlobalPropertyInfo(vm.propertyNames->NaN, jsNaN(), DontEnum | DontDelete | ReadOnly),
467         GlobalPropertyInfo(vm.propertyNames->Infinity, jsNumber(std::numeric_limits<double>::infinity()), DontEnum | DontDelete | ReadOnly),
468         GlobalPropertyInfo(vm.propertyNames->undefinedKeyword, jsUndefined(), DontEnum | DontDelete | ReadOnly),
469         GlobalPropertyInfo(vm.propertyNames->undefinedPrivateName, jsUndefined(), DontEnum | DontDelete | ReadOnly),
470         GlobalPropertyInfo(vm.propertyNames->ObjectPrivateName, objectConstructor, DontEnum | DontDelete | ReadOnly),
471         GlobalPropertyInfo(vm.propertyNames->ownEnumerablePropertyKeysPrivateName, JSFunction::create(vm, this, 0, String(), ownEnumerablePropertyKeys), DontEnum | DontDelete | ReadOnly),
472         GlobalPropertyInfo(vm.propertyNames->getTemplateObjectPrivateName, privateFuncGetTemplateObject, DontEnum | DontDelete | ReadOnly),
473         GlobalPropertyInfo(vm.propertyNames->enqueueJobPrivateName, JSFunction::create(vm, this, 0, String(), enqueueJob), DontEnum | DontDelete | ReadOnly),
474         GlobalPropertyInfo(vm.propertyNames->TypeErrorPrivateName, m_typeErrorConstructor.get(), DontEnum | DontDelete | ReadOnly),
475         GlobalPropertyInfo(vm.propertyNames->BuiltinLogPrivateName, builtinLog, DontEnum | DontDelete | ReadOnly),
476         GlobalPropertyInfo(vm.propertyNames->ArrayPrivateName, arrayConstructor, DontEnum | DontDelete | ReadOnly),
477         GlobalPropertyInfo(vm.propertyNames->NumberPrivateName, numberConstructor, DontEnum | DontDelete | ReadOnly),
478         GlobalPropertyInfo(vm.propertyNames->StringPrivateName, stringConstructor, DontEnum | DontDelete | ReadOnly),
479         GlobalPropertyInfo(vm.propertyNames->absPrivateName, privateFuncAbs, DontEnum | DontDelete | ReadOnly),
480         GlobalPropertyInfo(vm.propertyNames->floorPrivateName, privateFuncFloor, DontEnum | DontDelete | ReadOnly),
481         GlobalPropertyInfo(vm.propertyNames->getPrototypeOfPrivateName, privateFuncFloor, DontEnum | DontDelete | ReadOnly),
482         GlobalPropertyInfo(vm.propertyNames->getOwnPropertyNamesPrivateName, privateFuncFloor, DontEnum | DontDelete | ReadOnly),
483         GlobalPropertyInfo(vm.propertyNames->isFinitePrivateName, privateFuncIsFinite, DontEnum | DontDelete | ReadOnly),
484         GlobalPropertyInfo(vm.propertyNames->arrayIterationKindKeyPrivateName, jsNumber(ArrayIterateKey), DontEnum | DontDelete | ReadOnly),
485         GlobalPropertyInfo(vm.propertyNames->arrayIterationKindValuePrivateName, jsNumber(ArrayIterateValue), DontEnum | DontDelete | ReadOnly),
486         GlobalPropertyInfo(vm.propertyNames->arrayIterationKindKeyValuePrivateName, jsNumber(ArrayIterateKeyValue), DontEnum | DontDelete | ReadOnly),
487         GlobalPropertyInfo(vm.propertyNames->builtinNames().symbolIteratorPrivateName(), Symbol::create(vm, static_cast<SymbolImpl&>(*vm.propertyNames->iteratorSymbol.impl())), DontEnum | DontDelete | ReadOnly),
488         GlobalPropertyInfo(vm.propertyNames->PromisePrivateName, m_promiseConstructor.get(), DontEnum | DontDelete | ReadOnly),
489         GlobalPropertyInfo(vm.propertyNames->promisePendingPrivateName, jsNumber(static_cast<unsigned>(JSPromise::Status::Pending)), DontEnum | DontDelete | ReadOnly),
490         GlobalPropertyInfo(vm.propertyNames->promiseFulfilledPrivateName, jsNumber(static_cast<unsigned>(JSPromise::Status::Fulfilled)), DontEnum | DontDelete | ReadOnly),
491         GlobalPropertyInfo(vm.propertyNames->promiseRejectedPrivateName, jsNumber(static_cast<unsigned>(JSPromise::Status::Rejected)), DontEnum | DontDelete | ReadOnly),
492         GlobalPropertyInfo(vm.propertyNames->builtinNames().toLengthPrivateName(), privateFuncToLength, DontEnum | DontDelete | ReadOnly),
493         GlobalPropertyInfo(vm.propertyNames->builtinNames().toIntegerPrivateName(), privateFuncToInteger, DontEnum | DontDelete | ReadOnly),
494         GlobalPropertyInfo(vm.propertyNames->builtinNames().isObjectPrivateName(), JSFunction::createBuiltinFunction(vm, globalObjectIsObjectCodeGenerator(vm), this), DontEnum | DontDelete | ReadOnly),
495         GlobalPropertyInfo(vm.propertyNames->builtinNames().isPromisePrivateName(), JSFunction::createBuiltinFunction(vm, operationsPromiseIsPromiseCodeGenerator(vm), this), DontEnum | DontDelete | ReadOnly),
496         GlobalPropertyInfo(vm.propertyNames->builtinNames().newPromiseReactionPrivateName(), JSFunction::createBuiltinFunction(vm, operationsPromiseNewPromiseReactionCodeGenerator(vm), this), DontEnum | DontDelete | ReadOnly),
497         GlobalPropertyInfo(vm.propertyNames->builtinNames().newPromiseCapabilityPrivateName(), JSFunction::createBuiltinFunction(vm, operationsPromiseNewPromiseCapabilityCodeGenerator(vm), this), DontEnum | DontDelete | ReadOnly),
498         GlobalPropertyInfo(vm.propertyNames->builtinNames().triggerPromiseReactionsPrivateName(), JSFunction::createBuiltinFunction(vm, operationsPromiseTriggerPromiseReactionsCodeGenerator(vm), this), DontEnum | DontDelete | ReadOnly),
499         GlobalPropertyInfo(vm.propertyNames->builtinNames().rejectPromisePrivateName(), JSFunction::createBuiltinFunction(vm, operationsPromiseRejectPromiseCodeGenerator(vm), this), DontEnum | DontDelete | ReadOnly),
500         GlobalPropertyInfo(vm.propertyNames->builtinNames().fulfillPromisePrivateName(), JSFunction::createBuiltinFunction(vm, operationsPromiseFulfillPromiseCodeGenerator(vm), this), DontEnum | DontDelete | ReadOnly),
501         GlobalPropertyInfo(vm.propertyNames->builtinNames().createResolvingFunctionsPrivateName(), JSFunction::createBuiltinFunction(vm, operationsPromiseCreateResolvingFunctionsCodeGenerator(vm), this), DontEnum | DontDelete | ReadOnly),
502         GlobalPropertyInfo(vm.propertyNames->builtinNames().promiseReactionJobPrivateName(), JSFunction::createBuiltinFunction(vm, operationsPromisePromiseReactionJobCodeGenerator(vm), this), DontEnum | DontDelete | ReadOnly),
503         GlobalPropertyInfo(vm.propertyNames->builtinNames().promiseResolveThenableJobPrivateName(), JSFunction::createBuiltinFunction(vm, operationsPromisePromiseResolveThenableJobCodeGenerator(vm), this), DontEnum | DontDelete | ReadOnly),
504     };
505     addStaticGlobals(staticGlobals, WTF_ARRAY_LENGTH(staticGlobals));
506     
507     m_specialPointers[Special::CallFunction] = m_callFunction.get();
508     m_specialPointers[Special::ApplyFunction] = m_applyFunction.get();
509     m_specialPointers[Special::ObjectConstructor] = objectConstructor;
510     m_specialPointers[Special::ArrayConstructor] = arrayConstructor;
511
512     m_linkTimeConstants[static_cast<unsigned>(LinkTimeConstant::DefinePropertyFunction)] = m_definePropertyFunction.get();
513
514     ConsolePrototype* consolePrototype = ConsolePrototype::create(vm, this, ConsolePrototype::createStructure(vm, this, m_objectPrototype.get()));
515     m_consoleStructure.set(vm, this, JSConsole::createStructure(vm, this, consolePrototype));
516     JSConsole* consoleObject = JSConsole::create(vm, m_consoleStructure.get());
517     putDirectWithoutTransition(vm, Identifier::fromString(exec, "console"), consoleObject, DontEnum);
518
519     if (UNLIKELY(Options::enableDollarVM())) {
520         JSDollarVMPrototype* dollarVMPrototype = JSDollarVMPrototype::create(vm, this, JSDollarVMPrototype::createStructure(vm, this, m_objectPrototype.get()));
521         m_dollarVMStructure.set(vm, this, JSDollarVM::createStructure(vm, this, dollarVMPrototype));
522         JSDollarVM* dollarVM = JSDollarVM::create(vm, m_dollarVMStructure.get());
523         putDirectWithoutTransition(vm, Identifier::fromString(exec, "$vm"), dollarVM, DontEnum);
524     }
525
526     resetPrototype(vm, prototype());
527 }
528
529 void JSGlobalObject::put(JSCell* cell, ExecState* exec, PropertyName propertyName, JSValue value, PutPropertySlot& slot)
530 {
531     JSGlobalObject* thisObject = jsCast<JSGlobalObject*>(cell);
532     ASSERT(!Heap::heap(value) || Heap::heap(value) == Heap::heap(thisObject));
533
534     if (symbolTablePut(thisObject, exec, propertyName, value, slot.isStrictMode()))
535         return;
536     Base::put(thisObject, exec, propertyName, value, slot);
537 }
538
539 bool JSGlobalObject::defineOwnProperty(JSObject* object, ExecState* exec, PropertyName propertyName, const PropertyDescriptor& descriptor, bool shouldThrow)
540 {
541     JSGlobalObject* thisObject = jsCast<JSGlobalObject*>(object);
542     PropertySlot slot(thisObject);
543     // silently ignore attempts to add accessors aliasing vars.
544     if (descriptor.isAccessorDescriptor() && symbolTableGet(thisObject, propertyName, slot))
545         return false;
546     return Base::defineOwnProperty(thisObject, exec, propertyName, descriptor, shouldThrow);
547 }
548
549 void JSGlobalObject::addGlobalVar(const Identifier& ident)
550 {
551     ConcurrentJITLocker locker(symbolTable()->m_lock);
552     SymbolTableEntry entry = symbolTable()->get(locker, ident.impl());
553     if (!entry.isNull())
554         return;
555     
556     ScopeOffset offset = symbolTable()->takeNextScopeOffset(locker);
557     SymbolTableEntry newEntry(VarOffset(offset), 0);
558     newEntry.prepareToWatch();
559     symbolTable()->add(locker, ident.impl(), newEntry);
560     
561     ScopeOffset offsetForAssert = addVariables(1);
562     RELEASE_ASSERT(offsetForAssert == offset);
563 }
564
565 void JSGlobalObject::addFunction(ExecState* exec, const Identifier& propertyName)
566 {
567     VM& vm = exec->vm();
568     removeDirect(vm, propertyName); // Newly declared functions overwrite existing properties.
569     addGlobalVar(propertyName);
570 }
571
572 static inline JSObject* lastInPrototypeChain(JSObject* object)
573 {
574     JSObject* o = object;
575     while (o->prototype().isObject())
576         o = asObject(o->prototype());
577     return o;
578 }
579
580 // Private namespace for helpers for JSGlobalObject::haveABadTime()
581 namespace {
582
583 class ObjectsWithBrokenIndexingFinder : public MarkedBlock::VoidFunctor {
584 public:
585     ObjectsWithBrokenIndexingFinder(MarkedArgumentBuffer&, JSGlobalObject*);
586     IterationStatus operator()(JSCell*);
587
588 private:
589     void visit(JSCell*);
590
591     MarkedArgumentBuffer& m_foundObjects;
592     JSGlobalObject* m_globalObject;
593 };
594
595 ObjectsWithBrokenIndexingFinder::ObjectsWithBrokenIndexingFinder(
596     MarkedArgumentBuffer& foundObjects, JSGlobalObject* globalObject)
597     : m_foundObjects(foundObjects)
598     , m_globalObject(globalObject)
599 {
600 }
601
602 inline bool hasBrokenIndexing(JSObject* object)
603 {
604     // This will change if we have more indexing types.
605     IndexingType type = object->indexingType();
606     // This could be made obviously more efficient, but isn't made so right now, because
607     // we expect this to be an unlikely slow path anyway.
608     return hasUndecided(type) || hasInt32(type) || hasDouble(type) || hasContiguous(type) || hasArrayStorage(type);
609 }
610
611 inline void ObjectsWithBrokenIndexingFinder::visit(JSCell* cell)
612 {
613     if (!cell->isObject())
614         return;
615     
616     JSObject* object = asObject(cell);
617
618     // Run this filter first, since it's cheap, and ought to filter out a lot of objects.
619     if (!hasBrokenIndexing(object))
620         return;
621     
622     // We only want to have a bad time in the affected global object, not in the entire
623     // VM. But we have to be careful, since there may be objects that claim to belong to
624     // a different global object that have prototypes from our global object.
625     bool foundGlobalObject = false;
626     for (JSObject* current = object; ;) {
627         if (current->globalObject() == m_globalObject) {
628             foundGlobalObject = true;
629             break;
630         }
631         
632         JSValue prototypeValue = current->prototype();
633         if (prototypeValue.isNull())
634             break;
635         current = asObject(prototypeValue);
636     }
637     if (!foundGlobalObject)
638         return;
639     
640     m_foundObjects.append(object);
641 }
642
643 IterationStatus ObjectsWithBrokenIndexingFinder::operator()(JSCell* cell)
644 {
645     visit(cell);
646     return IterationStatus::Continue;
647 }
648
649 } // end private namespace for helpers for JSGlobalObject::haveABadTime()
650
651 void JSGlobalObject::haveABadTime(VM& vm)
652 {
653     ASSERT(&vm == &this->vm());
654     
655     if (isHavingABadTime())
656         return;
657     
658     // Make sure that all allocations or indexed storage transitions that are inlining
659     // the assumption that it's safe to transition to a non-SlowPut array storage don't
660     // do so anymore.
661     m_havingABadTimeWatchpoint->fireAll("Having a bad time");
662     ASSERT(isHavingABadTime()); // The watchpoint is what tells us that we're having a bad time.
663     
664     // Make sure that all JSArray allocations that load the appropriate structure from
665     // this object now load a structure that uses SlowPut.
666     for (unsigned i = 0; i < NumberOfIndexingShapes; ++i)
667         m_arrayStructureForIndexingShapeDuringAllocation[i].set(vm, this, originalArrayStructureForIndexingType(ArrayWithSlowPutArrayStorage));
668     
669     // Make sure that all objects that have indexed storage switch to the slow kind of
670     // indexed storage.
671     MarkedArgumentBuffer foundObjects; // Use MarkedArgumentBuffer because switchToSlowPutArrayStorage() may GC.
672     ObjectsWithBrokenIndexingFinder finder(foundObjects, this);
673     {
674         HeapIterationScope iterationScope(vm.heap);
675         vm.heap.objectSpace().forEachLiveCell(iterationScope, finder);
676     }
677     while (!foundObjects.isEmpty()) {
678         JSObject* object = asObject(foundObjects.last());
679         foundObjects.removeLast();
680         ASSERT(hasBrokenIndexing(object));
681         object->switchToSlowPutArrayStorage(vm);
682     }
683 }
684
685 bool JSGlobalObject::objectPrototypeIsSane()
686 {
687     return !hasIndexedProperties(m_objectPrototype->indexingType())
688         && m_objectPrototype->prototype().isNull();
689 }
690
691 bool JSGlobalObject::arrayPrototypeChainIsSane()
692 {
693     return !hasIndexedProperties(m_arrayPrototype->indexingType())
694         && m_arrayPrototype->prototype() == m_objectPrototype.get()
695         && objectPrototypeIsSane();
696 }
697
698 bool JSGlobalObject::stringPrototypeChainIsSane()
699 {
700     return !hasIndexedProperties(m_stringPrototype->indexingType())
701         && m_stringPrototype->prototype() == m_objectPrototype.get()
702         && objectPrototypeIsSane();
703 }
704
705 void JSGlobalObject::createThrowTypeError(VM& vm)
706 {
707     JSFunction* thrower = JSFunction::create(vm, this, 0, String(), globalFuncThrowTypeError);
708     GetterSetter* getterSetter = GetterSetter::create(vm, this);
709     getterSetter->setGetter(vm, this, thrower);
710     getterSetter->setSetter(vm, this, thrower);
711     m_throwTypeErrorGetterSetter.set(vm, this, getterSetter);
712 }
713
714 // Set prototype, and also insert the object prototype at the end of the chain.
715 void JSGlobalObject::resetPrototype(VM& vm, JSValue prototype)
716 {
717     setPrototype(vm, prototype);
718
719     JSObject* oldLastInPrototypeChain = lastInPrototypeChain(this);
720     JSObject* objectPrototype = m_objectPrototype.get();
721     if (oldLastInPrototypeChain != objectPrototype)
722         oldLastInPrototypeChain->setPrototype(vm, objectPrototype);
723
724     // Whenever we change the prototype of the global object, we need to create a new JSProxy with the correct prototype.
725     setGlobalThis(vm, JSProxy::create(vm, JSProxy::createStructure(vm, this, prototype, PureForwardingProxyType), this));
726 }
727
728 void JSGlobalObject::visitChildren(JSCell* cell, SlotVisitor& visitor)
729
730     JSGlobalObject* thisObject = jsCast<JSGlobalObject*>(cell);
731     ASSERT_GC_OBJECT_INHERITS(thisObject, info());
732     Base::visitChildren(thisObject, visitor);
733
734     visitor.append(&thisObject->m_globalThis);
735
736     visitor.append(&thisObject->m_globalCallee);
737     visitor.append(&thisObject->m_regExpConstructor);
738     visitor.append(&thisObject->m_errorConstructor);
739     visitor.append(&thisObject->m_evalErrorConstructor);
740     visitor.append(&thisObject->m_rangeErrorConstructor);
741     visitor.append(&thisObject->m_referenceErrorConstructor);
742     visitor.append(&thisObject->m_syntaxErrorConstructor);
743     visitor.append(&thisObject->m_typeErrorConstructor);
744     visitor.append(&thisObject->m_URIErrorConstructor);
745     visitor.append(&thisObject->m_objectConstructor);
746     visitor.append(&thisObject->m_promiseConstructor);
747
748     visitor.append(&thisObject->m_nullGetterFunction);
749     visitor.append(&thisObject->m_nullSetterFunction);
750
751     visitor.append(&thisObject->m_parseIntFunction);
752     visitor.append(&thisObject->m_evalFunction);
753     visitor.append(&thisObject->m_callFunction);
754     visitor.append(&thisObject->m_applyFunction);
755     visitor.append(&thisObject->m_definePropertyFunction);
756     visitor.append(&thisObject->m_arrayProtoValuesFunction);
757     visitor.append(&thisObject->m_initializePromiseFunction);
758     visitor.append(&thisObject->m_newPromiseDeferredFunction);
759     visitor.append(&thisObject->m_throwTypeErrorGetterSetter);
760
761     visitor.append(&thisObject->m_objectPrototype);
762     visitor.append(&thisObject->m_functionPrototype);
763     visitor.append(&thisObject->m_arrayPrototype);
764     visitor.append(&thisObject->m_errorPrototype);
765     visitor.append(&thisObject->m_iteratorPrototype);
766     visitor.append(&thisObject->m_promisePrototype);
767
768     visitor.append(&thisObject->m_debuggerScopeStructure);
769     visitor.append(&thisObject->m_withScopeStructure);
770     visitor.append(&thisObject->m_strictEvalActivationStructure);
771     visitor.append(&thisObject->m_lexicalEnvironmentStructure);
772     visitor.append(&thisObject->m_catchScopeStructure);
773     visitor.append(&thisObject->m_functionNameScopeStructure);
774     visitor.append(&thisObject->m_directArgumentsStructure);
775     visitor.append(&thisObject->m_scopedArgumentsStructure);
776     visitor.append(&thisObject->m_outOfBandArgumentsStructure);
777     for (unsigned i = 0; i < NumberOfIndexingShapes; ++i)
778         visitor.append(&thisObject->m_originalArrayStructureForIndexingShape[i]);
779     for (unsigned i = 0; i < NumberOfIndexingShapes; ++i)
780         visitor.append(&thisObject->m_arrayStructureForIndexingShapeDuringAllocation[i]);
781     visitor.append(&thisObject->m_booleanObjectStructure);
782     visitor.append(&thisObject->m_callbackConstructorStructure);
783     visitor.append(&thisObject->m_callbackFunctionStructure);
784     visitor.append(&thisObject->m_callbackObjectStructure);
785 #if JSC_OBJC_API_ENABLED
786     visitor.append(&thisObject->m_objcCallbackFunctionStructure);
787     visitor.append(&thisObject->m_objcWrapperObjectStructure);
788 #endif
789     visitor.append(&thisObject->m_nullPrototypeObjectStructure);
790     visitor.append(&thisObject->m_errorStructure);
791     visitor.append(&thisObject->m_calleeStructure);
792     visitor.append(&thisObject->m_functionStructure);
793     visitor.append(&thisObject->m_boundFunctionStructure);
794     visitor.append(&thisObject->m_namedFunctionStructure);
795     visitor.append(&thisObject->m_symbolObjectStructure);
796     visitor.append(&thisObject->m_regExpStructure);
797     visitor.append(&thisObject->m_regExpMatchesArrayStructure);
798     visitor.append(&thisObject->m_consoleStructure);
799     visitor.append(&thisObject->m_dollarVMStructure);
800     visitor.append(&thisObject->m_internalFunctionStructure);
801     visitor.append(&thisObject->m_promiseStructure);
802
803 #define VISIT_SIMPLE_TYPE(CapitalName, lowerName, properName, instanceType, jsName) \
804     visitor.append(&thisObject->m_ ## lowerName ## Prototype); \
805     visitor.append(&thisObject->m_ ## properName ## Structure); \
806
807     FOR_EACH_SIMPLE_BUILTIN_TYPE(VISIT_SIMPLE_TYPE)
808     FOR_EACH_BUILTIN_DERIVED_ITERATOR_TYPE(VISIT_SIMPLE_TYPE)
809
810 #undef VISIT_SIMPLE_TYPE
811
812     for (unsigned i = NUMBER_OF_TYPED_ARRAY_TYPES; i--;) {
813         visitor.append(&thisObject->m_typedArrays[i].prototype);
814         visitor.append(&thisObject->m_typedArrays[i].structure);
815     }
816 }
817
818 JSValue JSGlobalObject::toThis(JSCell*, ExecState* exec, ECMAMode ecmaMode)
819 {
820     if (ecmaMode == StrictMode)
821         return jsUndefined();
822     return exec->globalThisValue();
823 }
824
825 ExecState* JSGlobalObject::globalExec()
826 {
827     return CallFrame::create(m_globalCallFrame);
828 }
829
830 void JSGlobalObject::addStaticGlobals(GlobalPropertyInfo* globals, int count)
831 {
832     ScopeOffset startOffset = addVariables(count);
833
834     for (int i = 0; i < count; ++i) {
835         GlobalPropertyInfo& global = globals[i];
836         ASSERT(global.attributes & DontDelete);
837         
838         ScopeOffset offset;
839         {
840             ConcurrentJITLocker locker(symbolTable()->m_lock);
841             offset = symbolTable()->takeNextScopeOffset(locker);
842             RELEASE_ASSERT(offset = startOffset + i);
843             SymbolTableEntry newEntry(VarOffset(offset), global.attributes);
844             symbolTable()->add(locker, global.identifier.impl(), newEntry);
845         }
846         variableAt(offset).set(vm(), this, global.value);
847     }
848 }
849
850 bool JSGlobalObject::getOwnPropertySlot(JSObject* object, ExecState* exec, PropertyName propertyName, PropertySlot& slot)
851 {
852     JSGlobalObject* thisObject = jsCast<JSGlobalObject*>(object);
853     if (getStaticFunctionSlot<Base>(exec, globalObjectTable, thisObject, propertyName, slot))
854         return true;
855     return symbolTableGet(thisObject, propertyName, slot);
856 }
857
858 void JSGlobalObject::clearRareData(JSCell* cell)
859 {
860     jsCast<JSGlobalObject*>(cell)->m_rareData = nullptr;
861 }
862
863 void slowValidateCell(JSGlobalObject* globalObject)
864 {
865     RELEASE_ASSERT(globalObject->isGlobalObject());
866     ASSERT_GC_OBJECT_INHERITS(globalObject, JSGlobalObject::info());
867 }
868
869 UnlinkedProgramCodeBlock* JSGlobalObject::createProgramCodeBlock(CallFrame* callFrame, ProgramExecutable* executable, JSObject** exception)
870 {
871     ParserError error;
872     JSParserStrictMode strictMode = executable->isStrictMode() ? JSParserStrictMode::Strict : JSParserStrictMode::NotStrict;
873     DebuggerMode debuggerMode = hasDebugger() ? DebuggerOn : DebuggerOff;
874     ProfilerMode profilerMode = hasProfiler() ? ProfilerOn : ProfilerOff;
875     UnlinkedProgramCodeBlock* unlinkedCodeBlock = vm().codeCache()->getProgramCodeBlock(
876         vm(), executable, executable->source(), JSParserBuiltinMode::NotBuiltin, strictMode, 
877         debuggerMode, profilerMode, error);
878
879     if (hasDebugger())
880         debugger()->sourceParsed(callFrame, executable->source().provider(), error.line(), error.message());
881
882     if (error.isValid()) {
883         *exception = error.toErrorObject(this, executable->source());
884         return nullptr;
885     }
886     
887     return unlinkedCodeBlock;
888 }
889
890 UnlinkedEvalCodeBlock* JSGlobalObject::createEvalCodeBlock(CallFrame* callFrame, EvalExecutable* executable, ThisTDZMode thisTDZMode, const VariableEnvironment* variablesUnderTDZ)
891 {
892     ParserError error;
893     JSParserStrictMode strictMode = executable->isStrictMode() ? JSParserStrictMode::Strict : JSParserStrictMode::NotStrict;
894     DebuggerMode debuggerMode = hasDebugger() ? DebuggerOn : DebuggerOff;
895     ProfilerMode profilerMode = hasProfiler() ? ProfilerOn : ProfilerOff;
896     UnlinkedEvalCodeBlock* unlinkedCodeBlock = vm().codeCache()->getEvalCodeBlock(
897         vm(), executable, executable->source(), JSParserBuiltinMode::NotBuiltin, strictMode, thisTDZMode, debuggerMode, profilerMode, error, variablesUnderTDZ);
898
899     if (hasDebugger())
900         debugger()->sourceParsed(callFrame, executable->source().provider(), error.line(), error.message());
901
902     if (error.isValid()) {
903         throwVMError(callFrame, error.toErrorObject(this, executable->source()));
904         return nullptr;
905     }
906
907     return unlinkedCodeBlock;
908 }
909
910 void JSGlobalObject::setRemoteDebuggingEnabled(bool enabled)
911 {
912 #if ENABLE(REMOTE_INSPECTOR)
913     m_inspectorDebuggable->setRemoteDebuggingAllowed(enabled);
914 #else
915     UNUSED_PARAM(enabled);
916 #endif
917 }
918
919 bool JSGlobalObject::remoteDebuggingEnabled() const
920 {
921 #if ENABLE(REMOTE_INSPECTOR)
922     return m_inspectorDebuggable->remoteDebuggingAllowed();
923 #else
924     return false;
925 #endif
926 }
927
928 #if ENABLE(WEB_REPLAY)
929 void JSGlobalObject::setInputCursor(PassRefPtr<InputCursor> prpCursor)
930 {
931     m_inputCursor = prpCursor;
932     ASSERT(m_inputCursor);
933
934     InputCursor& cursor = inputCursor();
935     // Save or set the random seed. This performed here rather than the constructor
936     // to avoid threading the input cursor through all the abstraction layers.
937     if (cursor.isCapturing())
938         cursor.appendInput<SetRandomSeed>(m_weakRandom.seedUnsafe());
939     else if (cursor.isReplaying()) {
940         if (SetRandomSeed* input = cursor.fetchInput<SetRandomSeed>())
941             m_weakRandom.initializeSeed(static_cast<unsigned>(input->randomSeed()));
942     }
943 }
944 #endif
945
946 void JSGlobalObject::setName(const String& name)
947 {
948     m_name = name;
949
950 #if ENABLE(REMOTE_INSPECTOR)
951     m_inspectorDebuggable->update();
952 #endif
953 }
954
955 void JSGlobalObject::queueMicrotask(PassRefPtr<Microtask> task)
956 {
957     if (globalObjectMethodTable()->queueTaskToEventLoop) {
958         globalObjectMethodTable()->queueTaskToEventLoop(this, task);
959         return;
960     }
961
962     vm().queueMicrotask(this, task);
963 }
964
965 } // namespace JSC