797435 - IonMonkey: Add rooting of IC stub IonCodes to OOL exit frames for callouts from those stubs.

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Kannan Vijayan [:djvj]]

This is needed so that IC stubs don't get collected when they're on the stack.  The OOLJSNativeGetterExitFrame and OOLPropertyOpExitFrame types need an extra field containing the IonCode they're executing under, so we can mark them during scanning.

Comment 1

[Kannan Vijayan [:djvj]]

Attachment: Add stub IonCode pointer to OOL exit frames.

Some minor additional cleanup on top of just adding the stubCode field:  OOLNativeGetterExitFrames were marking the |this| value (target of the getprop) by just offsetting off of the |vp| value.  Added an explicit method to retrieve the |this| pointer for marking, and changed marking code to do that.

Comment 2

[Kannan Vijayan [:djvj]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/1f6b48dea5fc

Comment 3

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/1f6b48dea5fc