1 files changed, 178 insertions, 0 deletions
diff --git a/js/src/proxy/DeadObjectProxy.cpp b/js/src/proxy/DeadObjectProxy.cpp
new file mode 100644
index 0000000000..e675baa986
--- /dev/null
+++ b/js/src/proxy/DeadObjectProxy.cpp
@@ -0,0 +1,178 @@
+/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*-
+ * vim: set ts=8 sts=2 et sw=2 tw=80:
+ * This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+#include "proxy/DeadObjectProxy.h"
+
+#include "jsapi.h"
+
+#include "js/friend/ErrorMessages.h"  // js::GetErrorMessage, JSMSG_*
+#include "vm/JSFunction.h"            // XXXefaust Bug 1064662
+#include "vm/ProxyObject.h"
+
+using namespace js;
+
+const DeadObjectProxy DeadObjectProxy::singleton;
+const char DeadObjectProxy::family = 0;
+
+static void ReportDead(JSContext* cx) {
+  JS_ReportErrorNumberASCII(cx, GetErrorMessage, nullptr, JSMSG_DEAD_OBJECT);
+}
+
+bool DeadObjectProxy::getOwnPropertyDescriptor(
+    JSContext* cx, HandleObject wrapper, HandleId id,
+    MutableHandle<PropertyDescriptor> desc) const {
+  ReportDead(cx);
+  return false;
+}
+
+bool DeadObjectProxy::defineProperty(JSContext* cx, HandleObject wrapper,
+                                     HandleId id,
+                                     Handle<PropertyDescriptor> desc,
+                                     ObjectOpResult& result) const {
+  ReportDead(cx);
+  return false;
+}
+
+bool DeadObjectProxy::ownPropertyKeys(JSContext* cx, HandleObject wrapper,
+                                      MutableHandleIdVector props) const {
+  ReportDead(cx);
+  return false;
+}
+
+bool DeadObjectProxy::delete_(JSContext* cx, HandleObject wrapper, HandleId id,
+                              ObjectOpResult& result) const {
+  ReportDead(cx);
+  return false;
+}
+
+bool DeadObjectProxy::getPrototype(JSContext* cx, HandleObject proxy,
+                                   MutableHandleObject protop) const {
+  protop.set(nullptr);
+  return true;
+}
+
+bool DeadObjectProxy::getPrototypeIfOrdinary(JSContext* cx, HandleObject proxy,
+                                             bool* isOrdinary,
+                                             MutableHandleObject protop) const {
+  *isOrdinary = false;
+  return true;
+}
+
+bool DeadObjectProxy::preventExtensions(JSContext* cx, HandleObject proxy,
+                                        ObjectOpResult& result) const {
+  ReportDead(cx);
+  return false;
+}
+
+bool DeadObjectProxy::isExtensible(JSContext* cx, HandleObject proxy,
+                                   bool* extensible) const {
+  // This is kind of meaningless, but dead-object semantics aside,
+  // [[Extensible]] always being true is consistent with other proxy types.
+  *extensible = true;
+  return true;
+}
+
+bool DeadObjectProxy::call(JSContext* cx, HandleObject wrapper,
+                           const CallArgs& args) const {
+  ReportDead(cx);
+  return false;
+}
+
+bool DeadObjectProxy::construct(JSContext* cx, HandleObject wrapper,
+                                const CallArgs& args) const {
+  ReportDead(cx);
+  return false;
+}
+
+bool DeadObjectProxy::nativeCall(JSContext* cx, IsAcceptableThis test,
+                                 NativeImpl impl, const CallArgs& args) const {
+  ReportDead(cx);
+  return false;
+}
+
+bool DeadObjectProxy::hasInstance(JSContext* cx, HandleObject proxy,
+                                  MutableHandleValue v, bool* bp) const {
+  ReportDead(cx);
+  return false;
+}
+
+bool DeadObjectProxy::getBuiltinClass(JSContext* cx, HandleObject proxy,
+                                      ESClass* cls) const {
+  ReportDead(cx);
+  return false;
+}
+
+bool DeadObjectProxy::isArray(JSContext* cx, HandleObject obj,
+                              JS::IsArrayAnswer* answer) const {
+  ReportDead(cx);
+  return false;
+}
+
+const char* DeadObjectProxy::className(JSContext* cx,
+                                       HandleObject wrapper) const {
+  return "DeadObject";
+}
+
+JSString* DeadObjectProxy::fun_toString(JSContext* cx, HandleObject proxy,
+                                        bool isToSource) const {
+  ReportDead(cx);
+  return nullptr;
+}
+
+RegExpShared* DeadObjectProxy::regexp_toShared(JSContext* cx,
+                                               HandleObject proxy) const {
+  ReportDead(cx);
+  return nullptr;
+}
+
+bool js::IsDeadProxyObject(JSObject* obj) {
+  return IsDerivedProxyObject(obj, &DeadObjectProxy::singleton);
+}
+
+Value js::DeadProxyTargetValue(ProxyObject* obj) {
+  // When nuking scripted proxies, isCallable and isConstructor values for
+  // the proxy needs to be preserved.  So does background-finalization status.
+  int32_t flags = 0;
+  if (obj->handler()->isCallable(obj)) {
+    flags |= DeadObjectProxyIsCallable;
+  }
+  if (obj->handler()->isConstructor(obj)) {
+    flags |= DeadObjectProxyIsConstructor;
+  }
+  if (obj->handler()->finalizeInBackground(obj->private_())) {
+    flags |= DeadObjectProxyIsBackgroundFinalized;
+  }
+  return Int32Value(flags);
+}
+
+JSObject* js::NewDeadProxyObject(JSContext* cx, JSObject* origObj) {
+  MOZ_ASSERT_IF(origObj, origObj->is<ProxyObject>());
+
+  RootedValue target(cx);
+  if (origObj && origObj->is<ProxyObject>()) {
+    target = DeadProxyTargetValue(&origObj->as<ProxyObject>());
+  } else {
+    target = Int32Value(DeadObjectProxyIsBackgroundFinalized);
+  }
+
+  return NewProxyObject(cx, &DeadObjectProxy::singleton, target, nullptr,
+                        ProxyOptions());
+}
+
+JSObject* js::NewDeadProxyObject(JSContext* cx, IsCallableFlag isCallable,
+                                 IsConstructorFlag isConstructor) {
+  int32_t flags = 0;
+  if (isCallable == IsCallableFlag::True) {
+    flags |= DeadObjectProxyIsCallable;
+  }
+  if (isConstructor == IsConstructorFlag::True) {
+    flags |= DeadObjectProxyIsConstructor;
+  }
+
+  RootedValue target(cx, Int32Value(flags));
+  return NewProxyObject(cx, &DeadObjectProxy::singleton, target, nullptr,
+                        ProxyOptions());
+}