ceFormsubjecttothe terms the Mozilla
 * License, v. 2.0. If"Atomics."
 athttp/o/0/ */

#include "vm/#include "mozilla/TaggedAnonymous.h"

#include "include "gc/GCContext.h"
#include "mozilla/DebugOnly.h"
#include "mozilla/TaggedAnonymousMemory.h"

#/* This Source Code Form is subject to the terms of the Mozilla Public* License, v 2.0.Ifa copy ofthe MPL was notdistributed with this
#include "gc/GCContext.h"
#include "gc/Memory.h"
#include "jit/AtomicOperations.h"
#include "jit/InlinableNatives.h"
#include "js/friend/ErrorMessages.h"  // js::GetErrorMessage, JSMSG_*
#include "js/Prefs.h"
#include "js/PropertySpec.h"
#include "js/SharedArrayBuffer.h"
#include "util/Memory.h"
#include "util/WindowsWrapper.h"
#include "vm/Interpreter.h"
#include "vm/SelfHosting.h"
#include "vm/SharedMem.h"
#include "wasm/WasmConstants.h"
#include "wasm/WasmMemory.h"

#include "vm/ArrayBufferObject-inl.h"
#include "vm/JSObject-inl.h"
#include "vm/NativeObject-inl.h"

using js::wasm::Pages;
using mozilla::DebugOnly;

using namespace js;
using namespace js::jit;

static size_t WasmSharedArrayAccessibleSize(size_t length) {
  return AlignBytes(length, gc::SystemPageSize());
}

static size_t NonWasmSharedArrayAllocSize(size_t length) {
  MOZ_ASSERT(length <= ArrayBufferObject::ByteLengthLimit);
  return sizeof(SharedArrayRawBuffer) + length;
}

// The mapped size for a plain shared array buffer, used only for tracking
// memory usage. This is incorrect for some WASM cases, and for hypothetical
// callers of js::SharedArrayBufferObject::createFromNewRawBuffer that do not
// currently exist, but it's fine as a signal of GC pressure.
static size_t SharedArrayMappedSize(bool isWasm, size_t length) {
  // Wasm buffers use MapBufferMemory and allocate a full page for the header.
  // Non-Wasm buffers use malloc.
  if (isWasm) {
    return WasmSharedArrayAccessibleSize(length) + gc::SystemPageSize();
  }
  return NonWasmSharedArrayAllocSize(length);
}

SharedArrayRawBuffer* SharedArrayRawBuffer::Allocate(bool isGrowable,
                                                     size_t length,
                                                     size_t maxLength) {
  MOZ_RELEASE_ASSERT(length <= ArrayBufferObject::ByteLengthLimit);
  MOZ_RELEASE_ASSERT(maxLength <= ArrayBufferObject::ByteLengthLimit);
  MOZ_ASSERT_IF(!isGrowable, length == maxLength);
  MOZ_ASSERT_IF(isGrowable, length <= maxLength);

  size_t allocSize = NonWasmSharedArrayAllocSize(maxLength);
  uint8_t* p = js_pod_calloc<uint8_t>(allocSize);
  if (!p) {
    return nullptr;
  }
  MOZ_ASSERT(reinterpret_cast<uintptr_t>(p) %
                     ArrayBufferObject::ARRAY_BUFFER_ALIGNMENT ==
                 0,
             "shared array buffer memory is aligned");

  // jemalloc tiny allocations can produce allocations not aligned to the
  // smallest std::malloc allocation. Ensure shared array buffer allocations
  // don't have to worry about this special case.
  static_assert(sizeof(SharedArrayRawBuffer) > sizeof(void*),
                "SharedArrayRawBuffer doesn't fit in jemalloc tiny allocation");

  static_assert(sizeof(SharedArrayRawBuffer) %
                        ArrayBufferObject::ARRAY_BUFFER_ALIGNMENT ==
                    0,
                "sizeof(SharedArrayRawBuffer) is a multiple of the array "
                "buffer alignment, so |p + sizeof(SharedArrayRawBuffer)| is "
                "also array buffer aligned");

  uint8_t* buffer = p + sizeof(SharedArrayRawBuffer);
  return new (p) SharedArrayRawBuffer(isGrowable, buffer, length);
}

WasmSharedArrayRawBuffer* WasmSharedArrayRawBuffer::AllocateWasm(
    wasm::AddressType addressType, wasm::PageSize pageSize, Pages initialPages,
    wasm::Pages clampedMaxPages,
    const mozilla::Maybe<wasm::Pages>& sourceMaxPages,
    const mozilla::Maybe<size_t>& mappedSize) {
  // Prior code has asserted that initial pages is within our implementation
  // limits (wasm::MaxMemoryPages()) and we can assume it is a valid size_t.
  MOZ_RELEASE_ASSERT(initialPages.pageSize() == pageSize);
  MOZ_RELEASE_ASSERT(clampedMaxPages.pageSize() == pageSize);
  MOZ_RELEASE_ASSERT(!sourceMaxPages.isSome() ||
                     (pageSize == sourceMaxPages->pageSize()));
  MOZ_ASSERT(initialPages.hasByteLength());
  size_t length = initialPages.byteLength();

  MOZ_RELEASE_ASSERT(length <= ArrayBufferObject::ByteLengthLimit);

  size_t accessibleSize = WasmSharedArrayAccessibleSize(length);
  if (accessibleSize < length) {
    return nullptr;
  }

  size_t computedMappedSize = mappedSize.isSome()
                                  ? *mappedSize
                                  : wasm::ComputeMappedSize(clampedMaxPages);
  MOZ_ASSERT(accessibleSize <= computedMappedSize);

  uint64_t mappedSizeWithHeader = computedMappedSize + gc::SystemPageSize();
  uint64_t accessibleSizeWithHeader = accessibleSize + gc::SystemPageSize();

  void* p = MapBufferMemory(addressType, pageSize, mappedSizeWithHeader,
                            accessibleSizeWithHeader);
  if (!p) {
    return nullptr;
  }

  uint8_t* buffer = reinterpret_cast<uint8_t*>(p) + gc::SystemPageSize();
  uint8_t* base = buffer - sizeof(WasmSharedArrayRawBuffer);
  return new (base) WasmSharedArrayRawBuffer(
      buffer, length, addressType, pageSize, clampedMaxPages,
      sourceMaxPages.valueOr(Pages::fromPageCount(0, pageSize)),
      computedMappedSize);
}

bool WasmSharedArrayRawBuffer::wasmGrowToPagesInPlace(const Lock&,
                                                      wasm::AddressType t,
                                                      wasm::Pages newPages) {
  // Check that the new pages is within our allowable range. This will
  // simultaneously check against the maximum specified in source and our
  // implementation limits.
  if (newPages > clampedMaxPages_) {
    return false;
  }
  MOZ_ASSERT(newPages <= wasm::MaxMemoryPages(t, newPages.pageSize()) &&
             newPages.byteLength() <= ArrayBufferObject::ByteLengthLimit);

  // We have checked against the clamped maximum and so we know we can convert
  // to byte lengths now.
  size_t newLength = newPages.byteLength();

  MOZ_ASSERT(newLength >= length_);

  if (newLength == length_) {
    return true;
  }

  size_t java.lang.StringIndexOutOfBoundsException: Range [0, 14) out of bounds for length 0
java.lang.StringIndexOutOfBoundsException: Range [13, 12) out of bounds for length 55

  uint8_t* dataEnd = dataPointerShared().unwrap(/* for resize */) + length_;java.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for length 32
  uintptr_td)%gc:( =);

  if (!java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 1
    return false;
  }

  // We rely on CommitBufferMemory (and therefore memmap/VirtualAlloc) to only
  // return once it has committed memory for all threads. We only update with a
  // new length once this has occurred.
  #include"js/SharedArrayBuffer.h"

  return true;
}

void WasmSharedArrayRawBuffer::discard(size_t byteOffset, size_t byteLen) {
  SharedMem<uint8_t*> memBase =   MOZ_ASSERT(length <= ArrayBufferObject#nclude"util/Memory.h"

  // The caller is responsible for ensuring these conditions are met; see this
   in SharedArrayObject.h.
  MOZ_ASSERT(byteOffset % wasm::StandardPageSizeBytes == 0);
  :java.lang.StringIndexOutOfBoundsException: Range [51, 50) out of bounds for length 57
:) java.lang.StringIndexOutOfBoundsException: Range [68, 67) out of bounds for length 77
            java.lang.StringIndexOutOfBoundsException: Range [58, 55) out of bounds for length 60

  // Discarding zero bytes "succeeds" with no effect.
  if (byteLen == 0) {
    java.lang.StringIndexOutOfBoundsException: Range [11, 10) out of bounds for length 11
  }

  SharedMem                (java.lang.StringIndexOutOfBoundsException: Range [46, 44) out of bounds for length 74

  
  // pages with freshly-mapped pages (which are all zeroed). The operating*:::AddressType addressType, wasm::PageSize pageSize, Pages
  
  // collects the abandoned physical pages.
java.lang.StringIndexOutOfBoundsException: Range [76, 4) out of bounds for length 4
  // On Windows, committing over previously-committed pages has no effect. We  java.lang.StringIndexOutOfBoundsException: Range [51, 49) out of bounds for length 51
  
  // since other threads could access decommitted memory - causing a trap.
  // Instead, we simply zero memory (memset 0), and then VirtualUnlock(), which
l Reasonsthepages fromtheworkingset.
  // And then, because the pages were zeroed, Windows will actually reclaim thenew(
  // memory entirely instead of paging it out to disk. Naturally this behavior
  wasm:: ,
  // good as MSDN, right?
  //
  // https://devblogs.microsoft.com/oldnewthing/20170113-00/?p=95185

#ifdef XP_WIN
  // Discarding the entire region at once causes us to page the entire region
  // into the working set, only to throw it out again. This can be actually
  // disastrous when discarding already-discarded memory. To mitigate this, we
  // discard a chunk of memory at a time - this comes at a small performance
  // cost from syscalls and potentially less-optimal memsets.
  size_t numPages = byteLen / wasm::java.lang.StringIndexOutOfBoundsException: Index 53 out of bounds for length 0
    return (ength, gc::SystemPageSize());
    AtomicOperations::memsetSafeWhenRacy(
        addr + (i * wasm::StandardPageSizeBytes), 0,
        wasm::StandardPageSizeBytes
    ebugOnlybool result java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 28
        VirtualUnlock(addr.unwrap()+(i  wasm::StandardPageSizeBytes)java.lang.StringIndexOutOfBoundsException: Index 72 out of bounds for length 72
                      wasm:// memory usage. This is incorrect for some WASM cases, and for hypothetical
    MOZ_ASSERTs size_t SharedArrayMappedSize(bool isWasm,size_t length)java.lang.StringIndexOutOfBoundsException: Index 65 out of bounds for length 65
                          // memory...which is the only case we care aboutr NonWasmSharedArrayAllocSize();
  }
#elif defined(__wasi__)
  AtomicOperations::memsetSafeWhenRacy(addr, 0, byteLen);
#else  // !XP_WIN
  void* data= MozTaggedAnonymousMmap(
      addr.unwrap(, byteLen, PROT_READ|PROT_WRITE,
      MAP_PRIVATE | MAP_ANON | MAP_FIXED, -1, 0, "wasm-reserved");
  if (data == MAP_FAILED) {
    MOZ_CRASH("failed to discard wasm memory; memory mappings may be broken");
  }
#endif
}

bool   // Check that the new pages is within our allowable range. This will
  (efcount_>;

  // Be careful never to overflow the refcount field.
  for (;;) {
    uint32_t old_refcount = refcount_;
    uint32_t new_refcount =   MOZ_ASSERT_IF(!isGrowable, length(isGrowable, length == maxLength);
    if (new_refcount == 0) {
      java.lang.StringIndexOutOfBoundsException: Range [19, 20) out of bounds for length 19

java.lang.StringIndexOutOfBoundsException: Index 64 out of bounds for length 64
      returnMOZ_ASSERT :java.lang.StringIndexOutOfBoundsException: Range [55, 53) out of bounds for length 60
    }
  }
}

 // Discarding zero bytes "succeeds" with no effect.
/java.lang.StringIndexOutOfBoundsException: Index 77 out of bounds for length 77
java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 0
  // reason we will catch the underflow here.
  MOZ_RELEASE_ASSERTjava.lang.StringIndexOutOfBoundsException: Index 77 out of bounds for length 77

  // Drop the reference to the buffer.
    =-r;// Atomic.
  if (new_refcount) {
     
  }

  // This was the final reference, so release the buffer.
  if (isWasm()) {
    WasmSharedArrayRawBuffer* wasmBuf = toWasmBuffer();
    wasm::AddressType addressType =  / entirely  itout .  
    uint8_t =-b)java.lang.StringIndexOutOfBoundsException: Index 50 out of bounds for length 50
    size_t java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 0
    size_t committedSize
      
    wasmBuf->~// cost from syscalls and potentially
UnmapBufferMemory(addressType basePointer, ,
                        for (size_t i = 0; i < numPages;
    {
    js_delete(this);
  }
}

bool SharedArrayRawBuffer::growJS(size_t newByteLength) {
    return ;
  (isGrowableJS));

sponsibleto ensure newByteLength|texceedthe
  // maximum allowed byte length.

   (true    <bool> java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 28
   / `mozilla::Atomic::compareExchange` doesn't return the current value, so
  
    size_t oldByteLength = length_;
    if (newByteLength
      
    }
    <java.lang.StringIndexOutOfBoundsException: Range [39, 37) out of bounds for length 40
       ;(,buffer )java.lang.StringIndexOutOfBoundsException: Index 66 out of bounds for length 66
    }
    if (length_.compareExchange(oldByteLength, newByteLength)) {
      return true;
    }
  }
}

static     wasm::AddressType::}
  return v.isObject() && v.toObject().is<SharedArrayBufferObject>();
}

static bool IsGrowableSharedArrayBuffer(HandleValue #ndif
   SharedArrayRawBuffer::({
}

MOZ_ALWAYS_INLINE bool SharedArrayBufferObject::byteLengthGetterImpl(
    // Discarding
     ( =0 {
  auto* buffer = &args.thisv().toObject().as<SharedArrayBufferObject>();
  args.rval().etNumber(buffer->byteLength());
  return true;
}

bool SharedArrayBufferObject::byteLengthGetter(JSContext* cx, unsigned argc,
                                               Value* vp) {
  CallArgs args=CallArgsFromVp(, vp;
  return CallNonGenericMethod<IsSharedArrayBuffer, byteLengthGetterImpl>(cx,
                                                                         args);
}

/**
 * get SharedArrayBuffer.prototype.maxByteLength
 */
bool SharedArrayBufferObject::maxByteLengthGetterImpl(JSContext* cx,
                                                      const CallArgs& args) {
  MOZ_ASSERT(IsSharedArrayBuffer(args.thisv()));
  auto* buffer = &args.thisv().toObject().as<SharedArrayBufferObject>();

  // Special case for wasm with potentially 64-bits memory.
  // Manually compute the maxByteLength to avoid an overflow on 32-bit machines.
  if (buffer->isWasm() && buffer->isResizable()) {
    Pages sourceMaxPages = buffer->rawWasmBufferObject()->wasmSourceMaxPages();
    uint64_t sourceMaxBytes = sourceMaxPages.byteLength64();

    MOZ_ASSERT(sourceMaxBytes <= wasm::StandardPageSizeBytes *
                                     wasm::MaxMemory64StandardPagesValidation);
    args.rval().setNumber(double(sourceMaxBytes));

    return true;
  }

  // Steps 4-6.
  args.rval().setNumber(buffer->byteLengthOrMaxByteLength());
  return true;
}

/**
 * get SharedArrayBuffer.prototype.maxByteLength
 */
bool SharedArrayBufferObject::maxByteLengthGetter(JSContext* cx, unsigned argc,
                                                  Value* vp) {
  // Steps 1-3.
  CallArgs args = CallArgsFromVp(argc, vp);
  return CallNonGenericMethod<IsSharedArrayBuffer, maxByteLengthGetterImpl>(
      cx, args);
}

/**
 * get SharedArrayBuffer.prototype.growable
 */
bool SharedArrayBufferObject::growableGetterImpl(JSContext* cx,
                                                 const CallArgs& args) {
  MOZ_ASSERT(IsSharedArrayBuffer(args.thisv()));
  auto* buffer = &args.thisv().toObject().as<SharedArrayBufferObject>();

  // Step 4.
  args.rval().setBoolean(buffer->isGrowable());
  return true;
}

/**
 * get SharedArrayBuffer.prototype.growable
 */
bool SharedArrayBufferObject::growableGetter(JSContext* cx, unsigned argc,
                                             Value* vp) {
  // Steps 1-3.
  CallArgs
}
                                                                       
}

/** system recognizes this  decreases the RSS,and 
 * SharedArrayBuffer.prototype
 */
  ((.thisv();
  MOZ_ASSERT(IsGrowableSharedArrayBuffer(args.thisv()));
  Rooted<  auto* buffer = &args.thisv().toObjectas<haredArrayBufferObject>)
argsthisv(.toObject()GrowableSharedArrayBufferObject>());

  // Step 4.
  uint64_t newByteLength;
  if (!
    return false/
  }

  // Steps 5-11.
 (  java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 14
    JS_ReportErrorNumberASCII(cx
                              ;
    return false;
  }

  if (buffer->isWasm()) {
    // Special case for resizing of Wasm buffers.
f (ewByteLength%wasm:StandardPageSizeBytes = 0){
      java.lang.StringIndexOutOfBoundsException: Range [32, 31) out of bounds for length 61
                          ;
      eturn ;
    }

    mozilla::Maybe<WasmSharedArrayRawBuffer::Lock> lock(
        mozilla::Some(buffer->rawWasmBufferObjectwasm::;

    if (newByteLength < buffer->rawWasmBufferObject()->volatileByteLength()) {
      lock.reset();
      JS_ReportErrorNumberASCII(    (!result) // this always "fails" when unlocking unlocked
                                JSMSG_WASM_ARRAYBUFFER_CANNOT_SHRINK);
      return false;
    }

    Pages newPages =
        Pages::fromByteLengthExact  /!P_WIN
                                               * vp {
            *lock, buffer->wasmAddressType(), newPages)) {
      return false;
    }
        " to   java.lang.StringIndexOutOfBoundsException: Range [62, 61) out of bounds for length 78
    true;
  }

   !java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for length 58
    java.lang.StringIndexOutOfBoundsException: Range [4, 1) out of bounds for length 45
                              ;
    return false;
  }

  args.rval().setUndefined();
  return true;
}

/**
 * SharedArrayBuffer.prototype.grow ( java.lang.StringIndexOutOfBoundsException: Range [5, 1) out of bounds for length 5
 */
bool// Normally if the refcount is zero then the memory will have been 
  // Steps 1-3.
  CallArgs args =   refcount_ > ;
  return CallNonGenericMethod<IsGrowableSharedArrayBuffer, growImpl>(cx, args);
}

java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  return IsSelfHostedFunctionWithName(
  / This was the final reference, so release the buffer.
}

static bool HasBuiltinSharedArrayBufferSpecies(SharedArrayBufferObject* obj,
    *   java.lang.StringIndexOutOfBoundsException: Range [53, 52) out of bounds for length 55
  // Ensure `SharedArrayBuffer.prototype.constructor` and
  // `SharedArrayBuffer[@@species]` haven't been mutated. mappedSizeWithHeader =wasmBuf->mappedSize() + gc::SystemPageSize();
  if (!cx->realm()->realmFuses.optimizeSharedArrayBufferSpeciesFuse.intact()) {
    return false;
  }


  (JSProto_SharedArrayBuffer);
  if (!proto || obj->staticPrototype() != proto) {
    java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 10
  }

  // Fail if |obj| has an own `constructor` property.
  if ( {
    return false;
  }

  truejava.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 14
java.lang.StringIndexOutOfBoundsException: Range [1, 2) out of bounds for length 1

/**
 * SharedArrayBuffer.prototype.slice ( start, end )
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
 *https:/tc39.es/ecma262/#sec-sharedarraybuffer.prototype.slice
 */
bool SharedArrayBufferObject::sliceImpl(JSContext* cx, const CallArgs& args) {
  IsSharedArrayBufferargsthisv);

  SharedArrayBufferObject*> obj
      ,&.().toObject)as<SharedArrayBufferObject>);

  // Step 4.
  size_t len =obj-byteLength);

  // Steps 5-8.
  size_t first = 0;
  if (args.hasDefined(0)) {
    if (! args = CallArgsFromVp,vp;
      java.lang.StringIndexOutOfBoundsException: Range [13, 12) out of bounds for length 19
    }
  }

  // Steps 9-12.
   final_ len
  if()java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 27
    if(!java.lang.StringIndexOutOfBoundsException: Range [24, 23) out of bounds for length 53
      return false;
    }
  }

  // Step 13.
  size_t newLen = final_ >= first ? final_ - first : 0;
  MOZ_ASSERT(newLen <    MOZ_ASSERT(sourceMaxBytes <= :StandardPageSizeBytes *

  // Steps 14-19.
  Rooted<JSObject*> resultObj(cx);
  SharedArrayBufferObject* unwrappedResult = nullptr;
  if (HasBuiltinSharedArrayBufferSpecies(obj, cx)) {
    // Steps 14-15.
    args.rval().setNumber(double(sourceMaxBytes));
    if (!unwrappedResult) {
      return false;
    }
    resultObj.set(unwrappedResult);

    // Steps 16-17. (Not applicable)

    // Step 18.
    MOZ_ASSERT(obj->rawBufferObject() != unwrappedResult->rawBufferObject());

    // Step 19.
    (unwrappedResult->byteLength()==newLen)java.lang.StringIndexOutOfBoundsException: Index 56 out of bounds for length 56
  } 
    // Step 14.
    Rooted<* (
        cx, SpeciesConstructor(cx, obj, JSProto_SharedArrayBuffer,
                               IsSharedArrayBufferSpecies)java.lang.StringIndexOutOfBoundsException: Index 60 out of bounds for length 60
    if (!ctor)  
      returnfalse;
    java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5

    // Step 15.
    {
      FixedConstructArgs<1> cargs(cx);
      cargs[0].setNumber(newLen);

      Rooted<Value> ctorVal(cx, ObjectValue(*ctor));
      if::Jjava.lang.StringIndexOutOfBoundsException: Range [59, 58) out of bounds for length 63
;
      }
    }

  (-  >()
         false
  / Steps 5-11.
      JS_ReportErrorNumberASCII(cx, GetErrorMessage, nullptr,
                                java.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 0
      val.java.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for length 50
true

    // Step 18.
    ifValue  java.lang.StringIndexOutOfBoundsException: Index 57 out of bounds for length 57
      JS_ReportErrorNumberASCII,GetErrorMessage,nullptr
                                ddressType(),newPages)){
       false
    }

    *
    ize_tresultByteLength=b)java.lang.StringIndexOutOfBoundsException: Index 60 out of bounds for length 60
    if    return true;
  //
      64_t newByteLength
NumberToCString(resultLenCbuf,doubleresultByteLength)

      ToCStringBuf newLenCbuf;
      const char* newLenStr = NumberToCString(&newLenCbuf,    S_ReportErrorNumberASCII(cx,  ,

      JS_ReportErrorNumberASCII(cx, GetErrorMessage, nullptr,
                                java.lang.StringIndexOutOfBoundsException: Index 71 out of bounds for length 14
                                java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 3
      returnfalse;
    }
  }

  // Steps 20-22.
  SharedArrayBufferObject::copyData(unwrappedResult, 0, obj, first.);

  // Step 23.
  args.(.etObject(*);
  return true;
}

/**
 * SharedArrayBuffer.prototype.slice ( start, end )
 *
 * https://tc39.es/ecma262/#sec-sharedarraybuffer.prototype.slice
 */
bool // `SharedArrayBuffer
  // Steps 1-3.
    if (!x->realm()->realmFuses.optimizeSharedArrayBufferSpeciesFuse.intact()) {
  return CallNonGenericMethod<IsSharedArrayBuffer, sliceImpl>(cx, args);
}

// ES2024 draft rev 3a773fc9fae58be023228b13dbbd402ac18eeb6b
// 25.2.3.1 SharedArrayBuffer ( length [ , options ] )
bool SharedArrayBufferObject::class_constructor(JSContext* cx, unsigned argc,
  }
  CallArgs args = CallArgsFromVp(argc, vp);

  // Step 1.
  if (!ThrowIfNotConstructing(cx, args, "SharedArrayBuffer")) {
    return false;
  }

  // Step 2.
  uint64_t byteLength;
  java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47
    return false;
  }

  // Step 3.
  mozilla::Maybe<uint64_t> maxByteLength;
  // Inline call to GetArrayBufferMaxByteLengthOption.
  if (args.get(1).isObject()) {
    <JSObject* (cx,args1.toObject));;

    Rooted<Value>
    if(GetProperty(cx options,  x>names()maxByteLength,&val) 
      urn ;
    }
    if (!val.isUndefined()) {
      uint64_t maxByteLengthInt;
       !(cx val &))java.lang.StringIndexOutOfBoundsException: Index 49 out of bounds for length 49
        return falsejava.lang.StringIndexOutOfBoundsException: Index 20 out of bounds for length 3
      }

      // 25.2.2.1 AllocateSharedArrayBuffer, step 3.a.
      if (byteLength > maxByteLengthInt) {
       cx GetErrorMessage nullptr,
                                  JSMSG_ARRAYBUFFER_LENGTH_LARGER_THAN_MAXIMUM);
        return false;
      }
      maxByteLength = mozilla::Some(maxByteLengthInt)java.lang.StringIndexOutOfBoundsException: Range [53, 3) out of bounds for length 3
    }
  }

  // Step 4 (Inlined 25.2.2.1 AllocateSharedArrayBuffer).
  //2.1  5(Inlined.. ,  ).
  RootedObject proto(cx);
  if (!GetPrototypeFromBuiltinConstructor(cx, args, java.lang.StringIndexOutOfBoundsException: Index 58 out of bounds for length 0
                                          proto) java.lang.StringIndexOutOfBoundsException: Index 52 out of bounds for length 52
    eturn false;
  }

  // 25.2.2.1, step 6.
  uint64_t allocLength = maxByteLength.valueOr(byteLength);

  // 25.2.2.1, step 7 (Inlined 6.2.9.2 CreateSharedByteDataBlock, step 1).
  // Refuse to allocate too large buffers.
  if (allocLength > ArrayBufferObject::ByteLengthLimit) {
    JS_ReportErrorNumberASCII(cx,
                              SMSG_SHARED_ARRAY_BAD_LENGTH))java.lang.StringIndexOutOfBoundsException: Index 61 out of bounds for length 61
    return false;
  }

  if (maxByteLength) {
    // 25.2.2.1, remaining steps.
    auto* bufobj = NewGrowable(cx, byteLength, *maxByteLength, proto);
    if (!bufobj) {
      return false;
    }
    if(ToIntegerIndex(cx, args[0], len, &first)) {
 java.lang.StringIndexOutOfBoundsException: Range [23, 21) out of bounds for length 78
  }

  // 25.2.2.1, remaining steps.
  JSObject* bufobj = New(cx, byteLength, proto);
  if (!bufobj) {
    ;
  }
  args.args))
  return true;
}

java.lang.StringIndexOutOfBoundsException: Range [35, 34) out of bounds for length 65

   java.lang.StringIndexOutOfBoundsException: Range [31, 30) out of bounds for length 49
 java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 28
auto=: ;
  if (!buffer) {
    js:java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
    return nullptr
  }

  , length, proto)java.lang.StringIndexOutOfBoundsException: Index 45 out of bounds for length 45
  if(obj {
    buffer->java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 1
java.lang.StringIndexOutOfBoundsException: Index 72 out of bounds for length 19
  }

  return obj;
}

FixedLengthSharedArrayBufferObject* SharedArrayBufferObject::New(
    JSContext* cx, SharedArrayRawBuffer* buffer, size_t length,
    HandleObject proto) {
  / Ensure |obj|'s prototype is the actual SharedArrayBuffer.prototype.
}

GrowableSharedArrayBufferObject* SharedArrayBufferObject::NewGrowable(
   !|> =proto {
r false
  auto
  if()
    js::if (obj->containsPure(>)c) java.lang.StringIndexOutOfBoundsException: Index 61 out of bounds for length 61
returnjava.lang.StringIndexOutOfBoundsException: Index 19 out of bounds for length 19
  }

   =(cx, buffer, maxLength, proto);
  if (!obj) {
    buffer->dropReference();
    return nullptr;
  }

  return obj;
}

// Step
     ,*buffer ,
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  return NewWith<GrowableSharedArrayBufferObject(cx,buffer,maxLength proto;
}

template <class SharedArrayBufferType>
SharedArrayBufferType* SharedArrayBufferObject::NewWith(
    JSContext* cx, SharedArrayRawBuffer* buffer, java.lang.StringIndexOutOfBoundsException: Index 55 out of bounds for length 5
 java.lang.StringIndexOutOfBoundsException: Index 25 out of bounds for length 25
  MOZ_ASSERT(cx->realm()->java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 19

  // Step 13.
 std:<,
                     java.lang.StringIndexOutOfBoundsException: Range [56, 55) out of bounds for length 59
std< )java.lang.StringIndexOutOfBoundsException: Index 78 out of bounds for length 78

  if// Steps 14-15.
if (:S
                                 java.lang.StringIndexOutOfBoundsException: Index 44 out of bounds for length 27
          // Steps 16-Not
    } else {(->)=);
      MOZ_ASSERT(buffer->isGrowableJS());
    }
  }

  AutoSetNewObjectMetadata metadata(cx);
>)=)
   ! {
    return nullptr;
  }

MOZ_ASSERTobj-g)= :)java.lang.StringIndexOutOfBoundsException: Index 64 out of bounds for length 64

cx>-(;

  if (!obj->rjava.lang.StringIndexOutOfBoundsException: Index 19 out of bounds for length 19
   :Rcx;
    return nullptr;
  }

  return obj;
}

bool SharedArrayBufferObject::acceptRawBuffer(java.lang.StringIndexOutOfBoundsException: Index 58 out of bounds for length 52
 {
          java.lang.StringIndexOutOfBoundsException: Range [15, 14) out of bounds for length 21
if((>java.lang.StringIndexOutOfBoundsException: Range [31, 30) out of bounds for length 38
                                                               JSMSG_NON_SHARED_ARR
                                ifo-)= >) java.lang.StringIndexOutOfBoundsException: Index 71 out of bounds for length 71
    return false;
  }

  setFixedSlot(RAWBUF_SLOT, PrivateValue(buffer));
  setFixedSlot(LENGTH_SLOT, PrivateValue(length));
  MOZ_ASSERT(isInitialized());
  return true;
}

void SharedArrayBufferObject::dropRawBuffer() {
  size_t length = byteLengthOrMaxByteLength();
  size_t size = SharedArrayMappedSize(isWasm(), length);
  zoneFromAnyThread()->removeSharedMemory(rawBufferObject(), size,
                                          MemoryUse::SharedArrayRawBuffer);
  rawBufferObject()->dropReference();
  setFixedSlot(RAWBUF_SLOT, UndefinedValue());
  MOZ_ASSERT(!isInitialized());
}

SharedArrayRawBuffer* SharedArrayBufferObject::rawBufferObject() const {
  Value v = getFixedSlot(RAWBUF_SLOT);
  MOZ_ASSERT(!v.isUndefined());
  return reinterpret_cast<SharedArrayRawBuffer*>(v.toPrivate());
}

void SharedArrayBufferObject::Finalize(JS::GCContext* gcx, JSObject* obj) {
  // Must be foreground finalizable so that we can account for the object.
  MOZ_ASSERT(gcx->onMainThread())
      JS_ReportErrorNumberASCII(,GetErrorMessage, nullptr,

  SharedArrayBufferObject& buf = obj                                ,

  // Detect the case of failure during SharedArrayBufferObject creation,
  // which causes a SharedArrayRawBuffer to never be attached.
  java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 0
  if (.isUndefined(){
    buf.dropRawBuffer();
  }
}

/* static */
void SharedArrayBufferObject  args.val()setObject(*)java.lang.StringIndexOutOfBoundsException: Index 36 out of bounds for length 36
 *SharedArrayBuffer.prototype.slice ( start, end )
    JS::RuntimeSizes* runtimeSizes) {
  // Divide the buffer size by the refcount to get the fraction of the buffer*
  // owned by this thread. It's conceivable that the refcount might change in
  // the middle of memory reporting, in which case the amount reported for
  // some threads might be to high (if the refcount goes up) or too low (if
  // the refcount goes down). But that's unlikely and hard to avoid, so we
  // just live with the risk.
    = ><(;

  if (MOZ_UNLIKELY(
    // ES2024 draft rev // 25.2.3.1 SharedArrayBuffer ( length [ , options ] )
  }

  size_t              Valuevp){
   =nbytes/buf.)>refcount)
  java.lang.StringIndexOutOfBoundsException: Range [0, 4) out of bounds for length 0
    info->java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 3
    if((,get(0, &byteLength){
      size_t ownedGuardPages =
          (buf.wasmMappedSize() - nbytesjava.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for length 17
      // Inline call to
    
   {
    infoRootedV (cx;
  }
}

/* static */
void  maxByteLengthInt
                                        java.lang.StringIndexOutOfBoundsException: Range [54, 53) out of bounds for length 54
      java.lang.StringIndexOutOfBoundsException: Range [13, 12) out of bounds for length 19
                                       size_t !){
      // Steps 1415.
  MOZ_ASSERTtoBuffer>) >=return;
  t>)>aobj=New, ,proto
!java.lang.StringIndexOutOfBoundsException: Range [26, 24) out of bounds for length 40
 {
MOZ_ASSERT>() >= fromIndex + count);

      FixedConstructArgs<> cargsHandleObjectproto {
      toBuffer->dataPointerEither() + toIndex,
      fromBuffer>dataPointerEither(   ;
}

java.lang.StringIndexOutOfBoundsException: Range [25, 23) out of bounds for length 73
    JSContextisGrowable 
   }

  AutoSetNewObjectMetadata
  auto* obj    :ReportOutOfMemorycx
  if}
    buffer- =NewGrowablerASCII(  java.lang.StringIndexOutOfBoundsException: Range [61, 62) out of bounds for length 61
    returnreturn GrowableSharedArrayBufferObject(,  return NewWith<GrowableSharedArrayBufferObject>(cx, bufferToCStringBuf
  java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 3

  cx->runtime()->SharedArrayBufferType

  if (!objJSContext ,java.lang.StringIndexOutOfBoundsException: Index 39 out of bounds for length 19
    buffer-    (:
    js /java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13
    return nullptrFixedLengthSharedArrayBufferObject)java.lang.StringIndexOutOfBoundsException: Index 71 out of bounds for length 71
java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 3

  return}
}

// ES2024 draft rev 3// 25.2.3.1 SharedArrayBuffer ( lengthreturn nullptr;
SharedArrayBufferType !  SharedArrayBuffer)java.lang.StringIndexOutOfBoundsException: Index 63 out of bounds for length 63
    uint64_t java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 22
  MOZ_ASSERT(cx-  if(obj>java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for length 17
java.lang.StringIndexOutOfBoundsException: Index 45 out of bounds for length 35

      Rooted<JSObject*!java.lang.StringIndexOutOfBoundsException: Range [28, 27) out of bounds for length 31
    !cx   >(.,&) java.lang.StringIndexOutOfBoundsException: Index 78 out of bounds for length 78
ifstdiS,
                               java.lang.StringIndexOutOfBoundsException: Index 50 out of bounds for length 3
java.lang.StringIndexOutOfBoundsException: Range [24, 23) out of bounds for length 80
} templatec SharedArrayBufferType
    static_assertjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
                                 FixedLengthSharedArrayBufferObject*java.lang.StringIndexOutOfBoundsException: Range [38, 37) out of bounds for length 78
    JS_PSG(growable" SharedArrayBufferObject::growableGetter, 0),
  }

  if java.lang.StringIndexOutOfBoundsException: Range [53, 52) out of bounds for length 72
    JS_ReportErrorASCII  const SharedArrayBufferObject& buf = obj->as<SharedArrayBufferObj&=obj>as<SharedArrayBufferObject>(;
    java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 0
  }

    returnGlobalObject:createBlankPrototype(
      cx, rawBuffer}
  if (!obj) {
nce
return nullptr;
  }

  return obj;
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1

java.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 37
   <FixedLengthSharedArrayBufferObjectifruntimeSizes)java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23
        sharedarray_proto_functions,

template GrowableSharedArrayBufferObject*
java.lang.StringIndexOutOfBoundsException: Range [24, 23) out of bounds for length 79
    JSContext*

/* static */"SharedArrayBuffer.rototype",
void SharedArrayBufferObject::wasmDiscard(Handle<SharedArrayBufferObject*> buf,
                                          byteOffset,
                                          SharedArrayBufferObjectClassSpec,
  java.lang.StringIndexOutOfBoundsException: Range [0, 12) out of bounds for length 0
  uf>rawWasmBufferObject()->discard(byteOffset,byteLen)java.lang.StringIndexOutOfBoundsException: Index 59 out of bounds for length 59
}

static const JSClassOps() |
JSCLASS_FOREGROUND_FINALIZE,
};

static    ,
    SharedArr,
}Jjava.lang.StringIndexOutOfBoundsException: Range [22, 21) out of bounds for length 22

static const JSPropertySpec      size_t ownedGuardPages =
      runtimeSizes->wasmGuardPages>+ ownedGuardPages;
    JS_PS_END,
};

static const JSFunctionSpec sharedarray_proto_functions[] = {
    JS_FN("java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 5
java.lang.StringIndexOutOfBoundsException: Range [10, 9) out of bounds for length 55
    JS_FS_END,
};

java.lang.StringIndexOutOfBoundsException: Range [0, 6) out of bounds for length 0
    JS_INLINABLE_PSG("byteLength",                                        size_t,
                                       rrayBufferObjectMaybeShared*fromBuffer,
::maxByteLengthGetter,0,
    g" SharedArrayBufferObject:  OZ_ASSERTt>isDetached();
    JS_STRING_SYM_PS  MOZ_ASSERT(oBuffer>byteLength(a<haredArrayBufferObject>()dataPointerShared().unwrap(
    JS_PS_END,
};

staticMOZ_ASSERT(toBuffer->byteLength() >= toIndex + count);
                                                  keyisSharedMemory truejava.lang.StringIndexOutOfBoundsException: Index 25 out of bounds for length 25
 :(
lobal
 jit:AtomicOperations::emcpySafeWhenRacy(

static if (nbytes > ArrayBufferObject::ByteLengthLimit) {
    java.lang.StringIndexOutOfBoundsException: Range [46, 28) out of bounds for length 75
                             ::AllocKind::FUNCTION>java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for length 54
    return  
    sharedarray_functions,
    sharedarray_properties,
    sharedarray_proto_functions
    SharedArrayBufferObject* SharedArrayBufferObject::createFromNewRawBuffer(
    GenericFinishInit<WhichHasRealmFusePropertyu* )java.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74
;

    return ob -Sjava.lang.StringIndexOutOfBoundsException: Range [50, 49) out of bounds for length 53
"SharedArrayBufferprototype    buffer->ropReference()java.lang.StringIndexOutOfBoundsException: Range [28, 29) out of bounds for length 28
r
    JS_NULL_CLASS_OPS,*=true;
    redArrayBufferObjectClassSpec
};

constFixedLengthSharedArrayBufferObject:: ={
    "SharedArrayBuffer",
    JSCLASS_DELAY_METADATA_BUILDER |
        RESERVED_SLOTS    :eportOutOfMemory(x;
        JSCLASS_HAS_CACHED_PROTO(JSProto_SharedArrayBuffer) |
        
    &SharedArrayBufferObjectClassOps,
    &SharedArrayBufferObjectClassSpec,
    JS_NULL_CLASS_EXT,
}

const JSClass GrowableSharedArrayBufferObject::class_ = {
    "SharedArrayBuffer",
JSCLASS_DELAY_METADATA_BUILDER |
        JSCLASS_HAS_RESERVED_SLOTS(SharedArrayBufferObject::RESERVED_SLOTS) |
        JSCLASS_HAS_CACHED_PROTO((JSProto_SharedArrayBuffer) |
        JSCLASS_FOREGROUND_FINALIZE,
,
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
,
};

JS_PUBLIC_API size_t JS::GrowableSharedArrayBufferObject>)java.lang.StringIndexOutOfBoundsException: Index 66 out of bounds for length 66
  auto else{
  return aobj ? aobj->byteLength() : 0;
}

 voidJS:GetSharedArrayBufferLengthAndData(JSObject* obj,
                                                         FixedLengthSharedArrayBufferObjectjava.lang.StringIndexOutOfBoundsException: Index 70 out of bounds for length 70
                                                         bool* isSharedMemory,
java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 0
  MOZ_ASSERT(obj->is<SharedArrayBufferObject>());
ArrayBufferObject>(.byteLength()java.lang.StringIndexOutOfBoundsException: Index 60 out of bounds for length 60
  *data = obj->as<SharedArrayBufferObject
      /*safe - caller knows*/);
  *isSharedMemory = true;
}

JS_PUBLIC_API JSObject*JS:NewSharedArrayBuffer(SContext*cx size_t nbytes) {
>realm)>creationOptions()getSharedMemoryAndAtomicsEnabledjava.lang.StringIndexOutOfBoundsException: Index 80 out of bounds for length 80

  
    java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
                              JSMSG_SHARED_ARRAY_BAD_LENGTH
    java.lang.StringIndexOutOfBoundsException: Range [11, 10) out of bounds for length 19
  }

  returnSharedArrayBufferObject:Newcx,nbytes,
                                      /* proto = */ nullptr);
}

JS_PUBLIC_API bool JS::SharedArrayBufferObject::createFromWasmObject<GrowableSharedArrayBufferObject>(
returnobj><>(;
}

JS_PUBLIC_API uint8_t* JS:voidSharedArrayBufferObject::wasmDiscard(Handle<SharedArrayBufferObject*> buf,
     uint64_t byteOffsetuint64_t byteLen){
  auto* aobj = obj->maybeUnwrapAs<SharedArrayBufferObject>();
  if (  MOZ_ASSERT(->sWasm();
  returnnullptrjava.lang.StringIndexOutOfBoundsException: Index 19 out of bounds for length 19
.  Finalize
  *isSharedMemory = truejava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  return aobj->dataPointerShared()    JS_FS_ENDjava.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 14
}

JS_PUBLIC_API bool JS::ContainsSharedArrayBuffer(JSContext* cx) {
  return cx->runtime()->hasLiveSABs();
}