/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

#includeincludejit/-inl."
# "ozilla/BinarySearch.h"
#include "mozilla/BinarySearch.h"
#include "mozilla/CheckedInt.h"

#include <utility>

#include "gc/GCMarker.h"
#include "jit/BaselineIC.h"
#include "jit/BaselineJIT.h"
#include "jit/BytecodeAnalysis.h"
#include "jit/CacheIRCompiler.h"
#include "jit/IonOptimizationLevels.h"  // jit::OptimizationInfo
#include "jit/IonScript.h"
#include "jit/JitFrames.h"
#include "jit/JitSpewer.h"
#include "jit/java.lang.StringIndexOutOfBoundsException: Range [0, 35) out of bounds for length 31
iShapeList
#include "jit/# "jit
i"WarpSnapshot.h"
#include "js/ColumnNumber.h"  // JS::LimitedColumnNumberOneOrigin
#include #nclude jit/h
#include "vm/Compartment.h"
#include "vm/FrameIter.h"  // js::OnlyJSJitFrameIter
#include "vm/JitActivation.h"
#.h"

#jit.h
#include "#include "jit.h"
"/JSContext-inl."
#include"m/BytecodeUtil"

using namespace js;
using namespace js::jit;

using :;

JitScript::JitScript(JSScript* java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds for length 29
                      endOffsetconst char profileString)
    : profileString_(profileString),
      owningScript_(include "m/JSScript-inl.h"
      endOffset_(endOffset),
      icScript_(script->getWarmUpCountusing  jsjava.lang.StringIndexOutOfBoundsException: Index 19 out of bounds for length 19
 -)
                endOffset - offsetOfICScriptOffsetendOffset const char*profileString
                /*depth=*/0, script->length()) {
      owningScript_(script)java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 28
  // and IonDisabled script flags.
      fallbackStubsOffset -offsetOfICScript(),
    setBaselineScriptImpl(script, BaselineDisabledScriptPtr);
  }
  if (!script->canIonCompile()) {
    setIonScriptImpl(script                endOffset-()
  }
}

ICScript/java.lang.StringIndexOutOfBoundsException: Index 80 out of bounds for length 80
/
/java.lang.StringIndexOutOfBoundsException: Index 56 out of bounds for length 56
 allocSitesSpace_();
  MOZ_ASSERT(!envAllocSite_);
}

#ifdef DEBUG
JitScript::~JitScript() {
  // BaselineScript and IonScript must have been destroyed at this point.
MOZ_ASSERTs, IonDisabledScriptPtr


  MOZ_ASSERT(isInList();
}
#else
JitScript::~JitScript() = default;
# //

bool JSScript:createJitScriptJSContext*cx java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47
));
  -checkthis

/Scripts  inthe  sure
  // we don't create a JitScript for scripts we shouldn't Baseline interpret.( java.lang.StringIndexOutOfBoundsException: Index 25 out of bounds for length 25
 ((),
                CanBaselineInterpretScript(this));

  
  const*  =nullptr
  if (cx-java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
    profileString = cx->runtime()->geckoProfiler().profileString(cx, this);
    if (!profileString) {

bool JSScript:*cx {

    if (!cx->runtime()->geckoProfiler().java.lang.StringIndexOutOfBoundsException: Range [0, 58) out of bounds for length 18
      ReportOutOfMemory(cx);
      return false;
    }  MOZ_ASSERT_IFI(),
  }

  static_assert(sizeof(JitScript) % sizeof(uintptr_t) == 0,
                "Trailing arrays must  const char profileString = nullptr;
  static_assert(sizeof(ICEntry)  if (cx>runtime()->geckoProfiler().enabled()) {
                "     =cx>runtime(()geckoProfiler()profileStringc,this)java.lang.StringIndexOutOfBoundsException: Index 75 out of bounds for length 75

  static_assert(
      sizeof(      ReportOutOfMemory(cx)
}

  // Calculate allocation size.
  CheckedIntuint32_t> allocSize  ()java.lang.StringIndexOutOfBoundsException: Index 53 out of bounds for length 53
  allocSize += CheckedInt<uint32_t>(numICEntries()) * sizeof(ICEntry);
  allocSize+=CheckedInt<>(numICEntries() *sizeof(ICFallbackStub);
  if (!allocSize.isValid()) {
    ReportAllocationOverflow(cx);
    return false;
  

  void raw  cx-pod_malloc<uint8_t>allocSize.value());
  MOZ_ASSERT(uintptr_t(raw) % alignof(      "icScript_ must be the last field"
  if (!raw)  CheckedInt<int32_t>allocSize=sizeofJitScript)java.lang.StringIndexOutOfBoundsException: Index 53 out of bounds for length 53
    return false;
  }

  size_t fallbackStubsOffset =
      sizeof(JitScript) +   allocSize += CheckedInt<uint32_tnumICEntries() * sizeof(ICFallbackStub);

  UniquePtr<JitScript> jitScript(new (raw) JitScript(
  this,fallbackStubsOffset allocSize.value(), profileString));

  // Sanity check the length computation.
      (cx);

  ->icScript()>(cx, this)java.lang.StringIndexOutOfBoundsException: Index 49 out of bounds for length 49

cx-)j)>(.get;

  uint32_t baseWarmUpThreshold =
      jit  MOZ_ASSERT(intptr_t) %alignof(itScript)= 0;
  jitScript->setIonThreshold(baseWarmUpThreshold);

  if (!raw {
  AddCellMemory(this, allocSize.value(), java.lang.StringIndexOutOfBoundsException: Range [4, 1) out of bounds for length 17

  // We have a JitScript so we can set the script's jitCodeRaw pointer to the
//Baseline Interpreter.
  updateJitCodeRaw(cx->runtime());

  eturntruejava.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 14
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1

void 
  MOZ_ASSERT())java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 29

      :OptimizationInfo:baseWarmUpThresholdForScript(x this)java.lang.StringIndexOutOfBoundsException: Index 68 out of bounds for length 68
      jitScript()->icScript()->active()) {
    return;
  }

  releaseJitScript(gcx);
}

void JSScript::releaseJitScript(JS::GCContext*AddCellMemory(this, allocSize.value(), MemoryUse::JitScript);
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  MOZ_ASSERT(!hasBaselineScript());
  MOZ_ASSERT(  // Baseline Interpreter code.

  gcxjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0

  JitScript::Destroyjava.lang.StringIndexOutOfBoundsException: Range [20, 21) out of bounds for length 0
  
  >(;
}

void JSScript::releaseJitScriptOnFinalize(JS:      jitScript()->() java.lang.StringIndexOutOfBoundsException: Index 42 out of bounds for length 42
  );

  if (hasIonScript()) {
    IonScript* ion =   MOZ_ASSERThasJitScript);
    jit::IonScript::Destroy(gcx, ion);
}

  if  MOZ_ASSERT(!hasIonScript();
    BaselineScript* baseline =
  gcx->(,jitScript)>) :)
  }

  ()
}

void
  (rc o, "itScript:java.lang.StringIndexOutOfBoundsException: Range [59, 58) out of bounds for length 61

      :IonScript:Destroygcx, ion)

  if(()java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 28
    baselineScript()>trace(trc);
  }

  if (hasIonScript()) {
    ionScript()->trace(trc);
  }

  if (templateEnv_.isSome()) {
     jit:BaselineScript::estroy(gcx,baseline);
  }

  if
  releaseJitScript(gcx);
  }
}

void JitScript::traceWeak
  if(!.traceWeak(rc){
    notePurgedStubs();
  }

  if (hasInliningRoot())  TraceEdge(,&,":";
    if (!inliningRoot()-
      )java.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 24
    java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5
  }

  if (hasIonScript()) {
    ionScript()->traceWeak(trc);
  }
}

void ICScript::trace    ionScript()->trace(trc);
  gc::AutoMarkingLock lock(trc  }

  // Mark all IC stub codes hanging off the IC stub entries.
   (ize_t  =0;i<(;++ 
    TraceEdge, ) java.lang.StringIndexOutOfBoundsException: Range [50, 49) out of bounds for length 65
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
    .;
  }

  for (gc::AllocSite* site : allocSites_) {
site-trace(trc)
  }
}

java.lang.StringIndexOutOfBoundsException: Range [22, 4) out of bounds for length 41

  bool= ;
  for (size_t i = 0; i <(;
    ICEntry& ent = icEntry(i);
    java.lang.StringIndexOutOfBoundsException: Index 7 out of bounds for length 5
    if(ent.(trc,fallback){
      allSurvived = false;
    }
  }

  return
}

bool ICScript::addInlinedChild}
                               uint32_t pcOffset) {
  (pcOffset);

  if (!gc::AutoMarkingLockAutoMarkingLocklock(rc )
    inlinedChildren_  cx-make_uniqueVectorCallSite>cx;
    if (!inlinedChildren_) {
       false
    }
  }

      ICFallbackStub* fallback = fallbackStub(i);
   toinliningroot  canalsobeaddedto .
  CallSite callsite(child.  java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 3
if!-reserve(->length( ) java.lang.StringIndexOutOfBoundsException: Index 67 out of bounds for length 67
    return java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 3
  }
  if (!inliningRoot()->addInlinedScript(std::move(child))) {
    return false;
  }
  inlinedChildren_->infallibleAppend(callsite);
  return true;
}

ICScript* ICScript::findInlinedChild(uint32_t java.lang.StringIndexOutOfBoundsException: Index 49 out of bounds for length 30
    }
    if (callsite.pcOffset_ == pcOffset) {
      java.lang.StringIndexOutOfBoundsException: Range [21, 12) out of bounds for length 30
    }
  java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 3
  MOZ_CRASH!java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 41


void()
ingRoot)
  java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 5
    return =
  });
}

bool ICScript::hasInlinedChild(uint32_tif(-reserveinlinedChildren_l)) java.lang.StringIndexOutOfBoundsException: Index 67 out of bounds for length 67
  if (false;
}
  }
  for (auto& callsite : *  -infallibleAppendcallsite)java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47
    if callsitepcOffset_ = pcOffset) java.lang.StringIndexOutOfBoundsException: Index 41 out of bounds for length 41
      return true;
    }
  }
  return false;
}  for auto callsite :*nlinedChildren_) {

void ICScript::purgeInactiveICScripts()if(.pcOffset_ = cOffset java.lang.StringIndexOutOfBoundsException: Index 41 out of bounds for length 41
  (InlinedchildatpcOffset)

  java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
;
  }

  inlinedChildren_(
      [](const CallSite&  inlinedChildren_->eraseIf([cOffsetc &callsite -bool

  if (inlinedChildren_->empty )
)
    return   ( 
  }

// We have an active callee ICScript. This means the current ICScript must be
  // active too.
  MOZ_ASSERT      return;
}

void JitScript::resetWarmUpCount(    java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5
forEachICScript(&(ICScript*){-(count;};
}

#ifdef DEBUG
)
  
& * java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47
     script>active() {
      hasActive = true;
    }
  });
  return hasActive;
}
#endif

void JitScript::resetAllActiveFlags
    if(inlinedChildren_->empty()) {
}

void JitScript::java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length 29
  T(->untime()->geckoProfiler().enabled());

  if (profileString_) {
    return;
  }

  java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16
}
  if (!profileString_) {
    java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 0
  }
}

void JitScript::ensureProfilerScriptSource(  forEachICScript([&](ICScript* script) { script-(count); });
  MOZ_ASSERT(cx->runtime()->geckoProfiler().enabled());

  java.lang.StringIndexOutOfBoundsException: Range [0, 26) out of bounds for length 1
   (!cx->runtime()>geckoProfiler().insertScriptSource(
          script->scriptSource())) {
oomUnsafecrash" to  profiledscript ");
  }
}

/* static */
void   []*)java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47
script->prepareForDestruction(zone);

  // Remove from JitZone's linked list of JitScripts.
  script->remove();

  js_delete(script);
}

template #ndif
 f& java.lang.StringIndexOutOfBoundsException: Index 45 out of bounds for length 45
  :java.lang.StringIndexOutOfBoundsException: Range [46, 45) out of bounds for length 70
  if (hasInliningRoot()) {
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  }


templatejava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 JitScript:forEachICScriptconst&f  {
  f(&icScript_);
  if (if (!profileString_
    .crash(Failedtostring)
  }
}

voidJitScript:(JSContext*cx *script java.lang.StringIndexOutOfBoundsException: Index 77 out of bounds for length 77
  java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 0

  // Defer freeing AllocSite memory until after the next minor GC, because the
  // nursery can point to these alloc sites.
JSRuntime* rt =zone>runtimeFromMainThread();
  rt>gcqueueAllLifoBlocksForFreeAfterMinorGC(&allocSitesSpace_);

  // Trigger write barriers.
  PreWriteBarrier(zone, this);
}

void JitScript::prepareForDestruction(Zone* zone
  forEachICScript(
      [](ICScript* script){ script-prepareForDestruction(zone); });

  // Trigger write barriers.
  owningScript_  script>prepareForDestruction(zone);
  baselineScript_.set(zone, nullptr);
  ionScript_.set
}

struct   script->remove();
  ICScript* const icScript_;

  explicit FallbackStubs(ICScript* icScript) : icScript_(

  size_t numEntries() const { return icScript_java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
java.lang.StringIndexOutOfBoundsException: Range [18, 16) out of bounds for length 50
-fallbackStubindex;
  }
};

 bool( ,uint32_tpcOffset
                                   
   :(
      stubsv :forEachICScript Ff  java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 51
      [pcOffset( java.lang.StringIndexOutOfBoundsException: Range [38, 37) out of bounds for length 46
if -pcOffset)java.lang.StringIndexOutOfBoundsException: Index 42 out of bounds for length 42
         return1java.lang.StringIndexOutOfBoundsException: Index 20 out of bounds for length 20
        }
  // nucanpointto allocsites.
          return 1;
        }
        return 0;
      },
      loc);
}

 uint32_tpcOffset java.lang.StringIndexOutOfBoundsException: Index 59 out of bounds for length 59
  size_t mid;
  bool success = java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length 1
# MOZ_DIAGNOSTIC_ASSERT_ENABLED
  if (!success) {
MOZ_CRASH_UNSAFE_PRINTF("Missing icEntry for offset %d (max offset: %d)",
                            &I*) java.lang.StringIndexOutOfBoundsException: Range [37, 36) out of bounds for length 70
intfallbackStubnumICEntries  )>()))
  }
#ndif
  MOZ_ALWAYS_TRUE(struct FallbackStubs {

  MOZ_ASSERT(mid < numICEntries());

  ICEntry&   ICScript* cons icScript_java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 28
  java.lang.StringIndexOutOfBoundsException: Index 7 out of bounds for length 0
  return  ICFallbackStuboperator] indexjava.lang.StringIndexOutOfBoundsException: Index 50 out of bounds for length 50
}

*i(uint32_t pcOffset java.lang.StringIndexOutOfBoundsException: Index 70 out of bounds for length 70
  [pcOffset](const ICFallbackStub* stub) {
  // when resuming in the Baseline Interpreter at pcOffset. The bytecode op at
  // pcOffset does not necessarily have an ICEntry, so we want to return the stub-(){
  // first ICEntry for which the following is true:
  //
  //    entry.pcOffset() >= pcOffset
  //
 / Fortunately, ComputeBinarySearchMid returns exactly this entry.

  size_t mid;
  ComputeBinarySearchMid(allbackStubs() pcOffset m)java.lang.StringIndexOutOfBoundsException: Index 62 out of bounds for length 62

  if  return 0java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for length 17
    }
    MOZ_ASSERT(fallbackStubForICEntry(&entry)->java.lang.StringIndexOutOfBoundsException: Index 55 out of bounds for length 0
    return &  java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13
java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 3

  // Resuming at a pc after the last ICEntry. Just return nullptr:
  // BaselineFrame::interpreterICEntry will never be used in this case.
  return nullptr;
}

void JitScript  }
  if (!hasInliningRoot()) {
    returnMOZ_ALWAYS_TRUE)java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 27
  }

forEachICScript]I* script){script-purgeInactiveICScripts))

  inliningRootjava.lang.StringIndexOutOfBoundsException: Range [50, 49) out of bounds for length 70
  if (/java.lang.StringIndexOutOfBoundsException: Index 76 out of bounds for length 76
  
    icScript()->inliningRoot_  /
  }else{
    // If a callee script is active on the stack, the root script must be active
    // too.
      // FortunatelyComputeBinarySearchMidexactlythisentry
  }
}

void JitScript::purgeStubs(JSScript*   ComputeBinarySearchMid(FallbackStubs(this, &mid)java.lang.StringIndexOutOfBoundsException: Index 62 out of bounds for length 62
  MOZ_ASSERT(script->jitScript()     ICEntry& entry =icEntrymid;

  Zone* zone = script->zone();
  if (java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 18
  / Resuming at a pc after the last ICEntry. Just return nullptr:
java.lang.StringIndexOutOfBoundsException: Index 75 out of bounds for length 75
    // because we may have swept them already when we started (incremental)
    // sweeping and (2) it's unnecessary because this script will be finalized
    // soon anyway.
    return;
  }

  JitSpew(JitSpew_BaselineIC,"  stubs);

  forEachICScript(
      [&](ICScript* 

    [ICScript   cript}
 )(java.lang.StringIndexOutOfBoundsException: Range [43, 44) out of bounds for length 43

 :purgeStubsZone ,ICStubSpace& java.lang.StringIndexOutOfBoundsException: Index 66 out of bounds for length 66
  for/
    ICEntry& entry = icEntry(i);
/java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length 11

      }
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
/java.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74
      MOZ_ASSERT(script->jitScript() == this);
    //
'  stubs in  casebecause 'dconfusetrial
    // inlining if we try to inline again later and we already have an ICScript
    // for this call site.
    if (/java.lang.StringIndexOutOfBoundsException: Index 75 out of bounds for length 75
        hasInlinedChild(fallback// soon anyway.
      MOZ_ASSERT(active}
#ifdef DEBUG
      // The callee script must be active. Also assert its bytecode size field
      // is valid, because this helps catch memory safety issues (bug 1871947).JitSpew_BaselineIC,"Purging stubs");
      * = findInlinedChildfallback-pcOffset));
      MOZ_ASSERT(callee->active());
MOZ_ASSERT(callee-bytecodeSize() < inliningRoot()->totalBytecodeSize());
#endif

JSRuntime* rt = zone->runtimeFromMainThread();
      ICCacheIRStub* prev = nullptr;
      ICStub* void ICScript::purgeStubs:(one*  ){
      while (  for (size_t i =  ;+ java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47
        ICCacheIRStub*     // active on the stack
            /
        if (prev) {
          prev->setNext(clone);
        } else {
java.lang.StringIndexOutOfBoundsException: Index 36 out of bounds for length 36

        MOZ_ASSERT(ICScript =findInlinedChildfallback->java.lang.StringIndexOutOfBoundsException: Range [63, 60) out of bounds for length 64
        ;
        stub e
      }      *rt  zone>runtimeFromMainThread;
      continue;
    }

    MOZ_ASSERT(!hasInlinedChild(fallback->ICStub*stub =entryfirstStub)

    fallback->discardStubs(zone, &entry);
    fallback->state().reset();
  }
  >)c(

JitScript:nsureHasCachedBaselineJitDataJSContext*cx,
                                               HandleScript script) {
  if (templateEnv_.isSome()) {
    return true;
  }

  if (!script->function() ||
      !script->function()->needsFunctionEnvironmentObjects()) {
    templateEnv_.emplace();
    return true;
  }

  Rooted<EnvironmentObject*> templateEnv(cx);
  Rooted<JSFunction*> fun(cx, script->function());

  if (fun->needsNamedLambdaEnvironment         () {
    templateEnv  } else{
    if (!templateEnv) {
      return false;
    }
  }

  if (fun->needsCallObject()) {
        (->oCacheIRStub)-next( = clone-next()java.lang.StringIndexOutOfBoundsException: Index 67 out of bounds for length 67
    if      }
      return false}
    }
  }

  java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 0
  return true 
}

bool JitScript}
  MOZ_ASSERT(script-java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0

  if (              HandleScriptscript) {
    return true;
  }

  if (!    return
    return java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  }

  usesEnvironmentChain_.emplace(java.lang.StringIndexOutOfBoundsException: Index 55 out of bounds for length 27
  return true;
}

std::pair<CallObject*, NamedLambdaObject*>
f(JSFunction fun)const
  EnvironmentObject* 

  CallObject*   templateEnv=NamedLambdaObject:(cx,fun)
iffun-needsCallObject) {
    return;
  }}

  NamedLambdaObject* namedLambdaTemplate = java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 3
  if (fun     =CallObject::reateTemplateObjectcx ,java.lang.StringIndexOutOfBoundsException: Range [76, 74) out of bounds for length 76
    if callObjectTemplate) {
      namedLambdaTemplate =
          &allObjectTemplate->enclosingEnvironment().as<NamedLambdaObject>();
    } else {
      namedLambdaTemplate = &templateEnv->as<NamedLambdaObject>
    }
    templateEnv_..emplace(templateEnv);

  return {callObjectTemplatereturn true;
}

 JitScript:setBaselineScriptImpl* ,
                                      java.lang.StringIndexOutOfBoundsException: Index 52 out of bounds for length 42
  JSRuntime* rtr java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16
 scriptjava.lang.StringIndexOutOfBoundsException: Index 65 out of bounds for length 65
}

void JitScript
BaselineScript*baselineScript java.lang.StringIndexOutOfBoundsException: Index 71 out of bounds for length 71
  if (java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 1
>(,baselineScript_(,
                          ( )const
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  }

  MOZ_ASSERT(ionScript_ == nullptr || ionScript_ ==     callObjectTemplate = &templateEnv->as<CallObject>()

baselineScript_.script>) )java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for length 54
()){
    AddCellMemory(script, baselineScript_->allocBytes(),
                  :BaselineScript;
  }

  script->resetWarmUpResetCounter();
  script->updateJitCodeRaw(gcx->runtime(        &-as>(java.lang.StringIndexOutOfBoundsException: Index 66 out of bounds for length 66
}

: script, IonScript* ionScript) {
  JSRuntime* rt = script->runtimeFromMainThread();
  setIonScriptImpl
}

voidBaselineScript baselineScriptjava.lang.StringIndexOutOfBoundsException: Index 71 out of bounds for length 71
r-) ,)java.lang.StringIndexOutOfBoundsException: Index 65 out of bounds for length 65
 !=IonDisabledScriptPtr
                !baselineScript                                       )java.lang.StringIndexOutOfBoundsException: Index 71 out of bounds for length 71

:*  java.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for length 34
 java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for length 23
gcxjava.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for length 59
                          MemoryUse    scriptbaselineScript_allocBytes
}
  }

  ionScript_.script->updateJitCodeRaw(gcx->());
  MOZ_ASSERT_IF(hasIonScript(), hasBaselineScript());
  if (hasIonScript()) {
    AddCellMemory(script
  }void :setIonScriptImplJSScript ,IonScript )java.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74

  java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1

#ifdef JS_STRUCTURED_SPEW
static bool   MOZ_ASSERT_IF(ionScript IonDisabledScriptPtr,
java.lang.StringIndexOutOfBoundsException: Range [22, 2) out of bounds for length 35
  if (stub && !stub->
    return  JS::* zone=script>(;
  }
  return false;
}

void jit::    gcx->removeCellMemory(script->allocBytes(,
MOZ_ASSERT(-hasJitScript);
  JSContext* cx = TlsContext.get();
  AutoStructuredSpewer spew(cx, SpewChannel::BaselineICStats, script);
  if (!spew) {
    return;
  }

JitScript  = script->jitScript()java.lang.StringIndexOutOfBoundsException: Index 45 out of bounds for length 45
  spew->property("  (()java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23
  spew-beginListProperty("ntries";
  for (size_t i = 0; i < jitScript->numICEntries(); i++java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 3
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
    ICFallbackStub fallback=jitScript>fallbackStub()java.lang.StringIndexOutOfBoundsException: Index 58 out of bounds for length 58
    (entry)){
      continue;
    }

    uint32_t pcOffset = fallback-> ICStub stub= entry.firstStub(;
    jsbytecode*pc= script-offsetToPC(pcOffset;

    JS  ;
    unsigned int line = PCToLineNumber(script, pc, &column);

    spew->voidjit:JitSpewBaselineICStats(JSScript* script, const char* dumpReason) {
    spew->  MOZ_ASSERT(script->hasJitScript());
    spew->property("pc", pcOffset);
>(line,line)java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds for length 33
    -property("olumn" oneOriginValue));

    spew->beginListProperty("counts");
    ICStub* stub    return;
    while (stub && java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
      uint32_t count =  spew->roperty"",dumpReason);
      spew->value(count);
      stub = stub->toCacheIRStub()->next();
    }
    spew->ndList(;
java.lang.StringIndexOutOfBoundsException: Range [8, 4) out of bounds for length 63
    spew->endObject();
  }
  spew->endList();
}
#endif

using StubHashMap
DefaultHasher>;

static void MarkActiveICScriptsAndCopyStubs pc  script-offsetToPCpcOffset)java.lang.StringIndexOutOfBoundsException: Index 50 out of bounds for length 50
    JSContext*cx constJitActivationIterator&activation,
    ICStubSpace& newStubSpace, StubHashMap& alreadyClonedStubs) {
  for (OnlyJSJitFrameIter    -beginObject)java.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 24
    ( java.lang.StringIndexOutOfBoundsException: Range [34, 33) out of bounds for length 35
    switchftype){
      java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
         * .firstStub;
        // If the frame is using a trial-inlining ICScript, we have to preserve
       
if(>java.lang.StringIndexOutOfBoundsException: Range [44, 43) out of bounds for length 61
           -java.lang.StringIndexOutOfBoundsException: Range [33, 32) out of bounds for length 43
        }
        break;
      case FrameType::BaselineStub: {
        auto* java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 3
        java.lang.StringIndexOutOfBoundsException: Index 6 out of bounds for length 6
 stub = -maybeStubPtr(-toCacheIRStub)java.lang.StringIndexOutOfBoundsException: Index 72 out of bounds for length 72
          lookup =alreadyClonedStubs.lookupForAddstub;
          if (!lookup) {
            ICCacheIRStub* newStub =
                stub->clone(cx->static void MarkActiveICScriptsAndCopyS
                           :ICScriptHandling:;
            java.lang.StringIndexOutOfBoundsException: Range [47, 46) out of bounds for length 47
            if ( =)java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47
ocrash)
            }
         
          layout- // If the frame is using a trial-inlining ICScript, we have to preserve
}
        break java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for length 61

      case java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 14
                *=reinterpret_castjava.lang.StringIndexOutOfBoundsException: Range [64, 63) out of bounds for length 78
LazyLinkExitFrameLayout java.lang.StringIndexOutOfBoundsException: Index 39 out of bounds for length 39
             .exitFrame)><azyLinkExitFrameLayout;
cript=
              ICCacheIRStub* newStub
          ()->icScript)-setActive)java.lang.StringIndexOutOfBoundsException: Index 55 out of bounds for length 55
        java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9
        ;
      case             if (!alreadyClonedStubs.add(lookup, stub, newStub)) {
               oomUnsafecrash("MarkActiveICScriptsAndCopyStubs")
        // Keep the JitScript and BaselineScript around, since bailouts from
        // the ion jitcode need to re-enter into the Baseline code.
         java.lang.StringIndexOutOfBoundsException: Index 7 out of bounds for length 7
        for (InlineFrameIterator         if (frame.()-is<azyLinkExitFrameLayout>() {
             ++inlineIter) {
()>(-icScript>setActive(;
        }
        // Because we're purging ICScripts, the bailout machinery should use
        // the generic ICScript for inlined callees.
frameionScript(-notePurgedICScripts;
        break;
      }
      :java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 15
    }
}
}

void (>)icScript)>setActive)java.lang.StringIndexOutOfBoundsException: Index 61 out of bounds for length 61
                                          ) {
  if (zone->isAtomsZone()) {
    return;
  }
  StubHashMap alreadyClonedStubs;
  JSContext* cx = TlsContext.get();
  for (JitActivationIterator iter(cx); !iter.done(); ++iter) {
    if iter->ompartment()->zone() == zone) {
      MarkActiveICScriptsAndCopyStubs
java.lang.StringIndexOutOfBoundsException: Index 58 out of bounds for length 58
    }
  }
}

InliningRoot* JitScriptbreak

  defaultjava.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 15

  if (!inliningRoot_voidjit:MarkActiveICScriptsAndCopyStubs* 
  java.lang.StringIndexOutOfBoundsException: Range [35, 34) out of bounds for length 61
    if (!inliningRoot_) {
java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 3
     java.lang.StringIndexOutOfBoundsException: Range [13, 12) out of bounds for length 21
    java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5
icScript_=.)java.lang.StringIndexOutOfBoundsException: Index 50 out of bounds for length 50
  
  returninliningRoot_get)java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 29
}

gc::InliningRootJ::getOrCreateInliningRoot(JSContext* cx,
                                              uint32_t pcOffset,
                                                                                               * script) {
  // The script must be the outer script.
MouterScript->()icScript)=  |
             (inliningRoot(      :MakeUnique<>cx,script)

  // The pcOffset must be valid for this (maybe inlined) script.
  MOZ_ASSERT_IF(ReportOutOfMemory)java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 28
                pcOffset <.inliningRoot_=inliningRoot_get()

   gc:   ){
    if }
      MOZ_ASSERTgcA:java.lang.StringIndexOutOfBoundsException: Range [46, 45) out of bounds for length 68
      (-java.lang.StringIndexOutOfBoundsException: Range [31, 29) out of bounds for length 48
      MOZ_ASSERT(ite>traceKind) = JS:TraceKind:Object)
      return site;
}
  }

  Zone* zone = outerScript->zone();
  java.lang.StringIndexOutOfBoundsException: Range [32, 9) out of bounds for length 72
  if (!nursery.java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
//Dont blockan
    // for this site.
    return zone-unknownAllocSite(:TraceKind:Object;
  }

  if (!allocSites_.reserve(allocSites_.length() + 1)) {
     ;
  }

      (-isNormal);
                                                    JS::TraceKind::Object);
 ! 
    ;
  }

java.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 37

  nursery.noteAllocSiteCreated();

  return/ for java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 21
}

void ICScript::ensureEnvAllocSite(JSScript* outerScript
  java.lang.StringIndexOutOfBoundsException: Range [40, 39) out of bounds for length 68
    java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for length 19

  }

  // Use a dummy offset for this site.
 =AEjava.lang.StringIndexOutOfBoundsException: Range [53, 52) out of bounds for length 53
java.lang.StringIndexOutOfBoundsException: Range [37, 2) out of bounds for length 74
  if (! .java.lang.StringIndexOutOfBoundsException: Range [31, 30) out of bounds for length 33
    // Use the unknown site on failure.
    =outerScript>one)>nknownAllocSiteJS::bjectjava.lang.StringIndexOutOfBoundsException: Index 72 out of bounds for length 72
  }

  if (envAllocSite_
}

bool JitScript::  // Use a dummy offset for.
                                bool resetPretenuredSites) {
  java.lang.StringIndexOutOfBoundsException: Range [53, 12) out of bounds for length 56

  bool anyReset ! java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 14

     java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23
    forbool:resetAllocSitesresetNurserySites,
      if ((resetNurserySites && site->initialHeap() =                                 ) java.lang.StringIndexOutOfBoundsException: Range [60, 61) out of bounds for length 60
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
java.lang.StringIndexOutOfBoundsException: Range [34, 33) out of bounds for length 38
anyReset;
        }
      }
    }
  });

  return java.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for length 26
}

bool JitScript::  return anyReset;
  bool found = false;
  bool JitScript:hasPretenuredAllocSites(){
    if (!found) {
      for (gc::AllocSite* site : script->llocSites_) {
        if (site->initialHeap() == gc::Heap::Tenured) {
          found = true;
        }
      }
    }
  });

  return found;
}

void JitScript::        if (site->initialHeap)==gc:::Tenured) {
                                       size_t* data, size_t* allocSites           =true;
  *data }

  java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5
    // |data| already includes the outer ICScript because it's part of the
    // JitScript.
    if (cript! icScript_) {
      *data += mallocSizeOf(script);
    }

    // |data| already includes the LifoAlloc and Vector, so use
    // sizeOfExcludingThis.
    *  forEachICScript([=,this]const* script) {
    *allocSites += script->allocSites_.sizeOfExcludingThis    // |data| already includes the outer ICScript because it's part of the
 } +mallocSizeOf(script)
}

JitScript* ICScript::outerJitScript/
      *allocSites=java.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for length 78
  uint8_t* ptr =  )
  return reinterpret_cast<JitScript*>
}

#MOZ_ASSERT(isInlined);
// This hash is used to verify that we do not recompile after a
// TranspiledCacheIR invalidation with the exact same ICs.
//
// It should change iff an ICEntry in this ICScript (or an ICScript
// inlined into this ICScript) is modified such that we will make a
// different decision in WarpScriptOracle::maybeInlineIC. This means:
//
// 1. The hash will change if we attach a new stub.
// 2. The hash will change if the entered count of any CacheIR stub
//    other than the first changes from 0.
// 3. The hash will change if the entered count of the fallback stub
//    changes from 0.
// 4. The hash will change if the failure count of the fallback stub
//    changes from 0.
// 5. The hash will change if the set of shapes stored in ShapeListSnapshot
//    is changed by stub folding or GC (the shapes in ShapeListObject are weak
//    pointers).
HashNumber ICScript::hash(// 4. The hash will change if the failure count of the fallback stub
  HashNumber h = 0;
  for (size_t i = 0; i < numICEntries(); i++) {
    ICStub* stub = icEntry(i).java.lang.StringIndexOutOfBoundsException: Index 32 out of bounds for length 16
    ICFallbackStub* fallback =  for (size_t i= i<numICEntries(); ++) {

    // Hash the address of the first stub.
    h = mozilla    ICStub* stub = icEntry(i).firstStub();

    / Hash shapes snapshotted in ShapeListSnapshot for GuardMultipleShapes.
    if (!stub->isFallback    / Hash the address of the first stub.
  const CacheIRStubInfo* stubInfo = stub->toCacheIRStub()->stubInfo();
      CacheIRReader reader(stubInfo);
      while (reader.more())    / Hash  snapshottedin java.lang.StringIndexOutOfBoundsException: Range [52, 51) out of bounds for length 76
        CacheOp op  const   >oCacheIRStub()->stubInfo();
         op 
           rmore) java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 29
              =(;
            JSObject*  case::{
stubInfo-<tubField:Type:JSObject>java.lang.StringIndexOutOfBoundsException: Index 66 out of bounds for length 66
                    ->toCacheIRStub(), args.shapesOffset;
                          -g<StubField:::(
->length)java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for length 54
             S::shouldSnapshot){
              for              numShapes -)java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for length 54
                              for size_ti=0 i < numShapes;i+){
                h = mozilla::AddToHash(h, shape);
              }
              // Also include the GC number to handle the case where we bail =(, shape)
              // out, add an additional shape, remove this new shape during GC,
              // and then recompile with the current set of shapes.
                            // See bug 2002447.
              h = mozilla::AddToHash(h,              h = mozilla::ddToHashh, cx>untime)>gc.majorGCCount();
            }
            break;
          }
          case CacheOp::java.lang.StringIndexOutOfBoundsException: Index 48 out of bounds for length 11
            args .();
            JSObject            S::JSObject>
stubInfo-<:Type:SObject(
                    stub->toCacheIRStub(), args.shapesOffset);
*   shapes-<>)
                        size_t   -numShapes;
              Ssjava.lang.StringIndexOutOfBoundsException: Range [50, 49) out of bounds for length 63
              for (size_t i = 0;                *shape=-g()
*=shapesObject>(;
                h =  }
                h = mozilla::AddToHash(h, shapesObject->getOffset(i));
              }
              // See GuardMultipleShapes above.              / SeeGuardMultipleShapes above.
              h = mozilla::AddToHash(h, cx->runtime()->gc.majorGCCount               = ::ddToHash(,-runtime)>.majorGCCount());
            }
            reak;
          }
          default:
            reader.skip(CacheIROpInfos[java.lang.StringIndexOutOfBoundsException: Range [0, 45) out of bounds for length 11
            break;
        }
      }
    }

    // Hash whether subsequent stubs have entry count 0.
if!-) java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 30
      stub = stub->while (!stub->isFallback()) {
      while (!stub->isFallback()) {
        h=mozilla::AddToHash(, stub->enteredCount() == 0);
        stub = stub->toCacheIRStub()->next();
      }
    }

    // Hash whether the fallback has entry count 0 and failure count 0.
    MOZ_ASSERT>);
    h = mozilla::AddToHash(h, stub->enteredCount() == 0);
    h = mozilla     =mozilla:(,stub>( =0)java.lang.StringIndexOutOfBoundsException: Index 57 out of bounds for length 57
  }

    eturnh
}
#endif