X-Git-Url: https://git.saurik.com/apple/javascriptcore.git/blobdiff_plain/6fe7ccc865dc7d7541b93c5bcaf6368d2c98a174..HEAD:/runtime/StringRecursionChecker.h diff --git a/runtime/StringRecursionChecker.h b/runtime/StringRecursionChecker.h index 127d028..0f1990e 100644 --- a/runtime/StringRecursionChecker.h +++ b/runtime/StringRecursionChecker.h @@ -21,6 +21,8 @@ #define StringRecursionChecker_h #include "Interpreter.h" +#include +#include namespace JSC { @@ -41,14 +43,24 @@ private: ExecState* m_exec; JSObject* m_thisObject; JSValue m_earlyReturnValue; + + StackStats::CheckPoint stackCheckpoint; }; inline JSValue StringRecursionChecker::performCheck() { - int size = m_exec->globalData().stringRecursionCheckVisitedObjects.size(); - if (size >= MaxSmallThreadReentryDepth && size >= m_exec->globalData().maxReentryDepth) + VM& vm = m_exec->vm(); + if (!vm.isSafeToRecurse()) return throwStackOverflowError(); - bool alreadyVisited = !m_exec->globalData().stringRecursionCheckVisitedObjects.add(m_thisObject).isNewEntry; + + bool alreadyVisited = false; + if (!vm.stringRecursionCheckFirstObject) + vm.stringRecursionCheckFirstObject = m_thisObject; + else if (vm.stringRecursionCheckFirstObject == m_thisObject) + alreadyVisited = true; + else + alreadyVisited = !vm.stringRecursionCheckVisitedObjects.add(m_thisObject).isNewEntry; + if (alreadyVisited) return emptyString(); // Return empty string to avoid infinite recursion. return JSValue(); // Indicate success. @@ -70,8 +82,14 @@ inline StringRecursionChecker::~StringRecursionChecker() { if (m_earlyReturnValue) return; - ASSERT(m_exec->globalData().stringRecursionCheckVisitedObjects.contains(m_thisObject)); - m_exec->globalData().stringRecursionCheckVisitedObjects.remove(m_thisObject); + + VM& vm = m_exec->vm(); + if (vm.stringRecursionCheckFirstObject == m_thisObject) + vm.stringRecursionCheckFirstObject = nullptr; + else { + ASSERT(vm.stringRecursionCheckVisitedObjects.contains(m_thisObject)); + vm.stringRecursionCheckVisitedObjects.remove(m_thisObject); + } } }