ArrayBuffer.h 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348
  1. //-------------------------------------------------------------------------------------------------------
  2. // Copyright (C) Microsoft. All rights reserved.
  3. // Licensed under the MIT license. See LICENSE.txt file in the project root for full license information.
  4. //-------------------------------------------------------------------------------------------------------
  5. // Implements ArrayBuffer according to Khronos spec.
  6. //----------------------------------------------------------------------------
  7. #pragma once
  8. namespace Js
  9. {
  10. class ArrayBufferParent;
  11. class ArrayBuffer;
  12. class SharedArrayBuffer;
  13. class ArrayBufferBase : public DynamicObject
  14. {
  15. protected:
  16. #if ENABLE_FAST_ARRAYBUFFER
  17. #define MAX_ASMJS_ARRAYBUFFER_LENGTH 0x100000000 // 4GB
  18. #define MAX_WASM__ARRAYBUFFER_LENGTH 0x200000000 // 8GB
  19. typedef void*(*AllocWrapperType)(size_t);
  20. #define AsmJsVirtualAllocator ((AllocWrapperType)Js::ArrayBuffer::AllocWrapper<MAX_ASMJS_ARRAYBUFFER_LENGTH>)
  21. #define WasmVirtualAllocator ((AllocWrapperType)Js::ArrayBuffer::AllocWrapper<MAX_WASM__ARRAYBUFFER_LENGTH>)
  22. template<size_t MaxVirtualSize = MAX_ASMJS_ARRAYBUFFER_LENGTH>
  23. static void* __cdecl AllocWrapper(DECLSPEC_GUARD_OVERFLOW size_t length)
  24. {
  25. LPVOID address = VirtualAlloc(nullptr, MaxVirtualSize, MEM_RESERVE, PAGE_NOACCESS);
  26. //throw out of memory
  27. if (!address)
  28. {
  29. return nullptr;
  30. }
  31. if (length == 0)
  32. {
  33. return address;
  34. }
  35. LPVOID arrayAddress = VirtualAlloc(address, length, MEM_COMMIT, PAGE_READWRITE);
  36. if (!arrayAddress)
  37. {
  38. VirtualFree(address, 0, MEM_RELEASE);
  39. return nullptr;
  40. }
  41. return arrayAddress;
  42. }
  43. static void FreeMemAlloc(Var ptr)
  44. {
  45. BOOL fSuccess = VirtualFree((LPVOID)ptr, 0, MEM_RELEASE);
  46. Assert(fSuccess);
  47. }
  48. #else
  49. static void* __cdecl AllocWrapper(DECLSPEC_GUARD_OVERFLOW size_t length)
  50. {
  51. // This allocator should never be used
  52. Js::Throw::FatalInternalError();
  53. }
  54. #define AsmJsVirtualAllocator Js::ArrayBuffer::AllocWrapper
  55. #define WasmVirtualAllocator Js::ArrayBuffer::AllocWrapper
  56. #endif
  57. public:
  58. DEFINE_VTABLE_CTOR_ABSTRACT(ArrayBufferBase, DynamicObject);
  59. virtual void MarshalToScriptContext(Js::ScriptContext * scriptContext) = 0;
  60. ArrayBufferBase(DynamicType *type) : DynamicObject(type), isDetached(false) { }
  61. bool IsDetached() { return isDetached; }
  62. #if ENABLE_TTD
  63. virtual void MarshalCrossSite_TTDInflate() = 0;
  64. #endif
  65. virtual bool IsArrayBuffer() = 0;
  66. virtual bool IsSharedArrayBuffer() = 0;
  67. virtual bool IsWebAssemblyArrayBuffer() { return false; }
  68. virtual ArrayBuffer * GetAsArrayBuffer() = 0;
  69. virtual SharedArrayBuffer * GetAsSharedArrayBuffer() { return nullptr; }
  70. virtual void AddParent(ArrayBufferParent* parent) { }
  71. virtual uint32 GetByteLength() const = 0;
  72. virtual BYTE* GetBuffer() const = 0;
  73. virtual bool IsValidVirtualBufferLength(uint length) const { return false; };
  74. static bool Is(Var value);
  75. static ArrayBufferBase* FromVar(Var value);
  76. static ArrayBufferBase* UnsafeFromVar(Var value);
  77. static int GetIsDetachedOffset() { return offsetof(ArrayBufferBase, isDetached); }
  78. protected:
  79. Field(bool) isDetached;
  80. };
  81. class ArrayBuffer : public ArrayBufferBase
  82. {
  83. public:
  84. // we need to install cross-site thunk on the nested array buffer when marshaling
  85. // typed array.
  86. DEFINE_VTABLE_CTOR_ABSTRACT(ArrayBuffer, ArrayBufferBase);
  87. private:
  88. void DetachBufferFromParent(ArrayBufferParent* parent);
  89. public:
  90. template <typename FreeFN>
  91. class ArrayBufferDetachedState : public ArrayBufferDetachedStateBase
  92. {
  93. public:
  94. FreeFN* freeFunction;
  95. Recycler* recycler;
  96. ArrayBufferDetachedState(BYTE* buffer, uint32 bufferLength, FreeFN* freeFunction, Recycler* recycler, ArrayBufferAllocationType allocationType)
  97. : ArrayBufferDetachedStateBase(TypeIds_ArrayBuffer, buffer, bufferLength, allocationType),
  98. recycler(recycler),
  99. freeFunction(freeFunction)
  100. {}
  101. virtual void ClearSelfOnly() override
  102. {
  103. HeapDelete(this);
  104. }
  105. virtual void DiscardState() override;
  106. virtual void Discard() override
  107. {
  108. ClearSelfOnly();
  109. }
  110. };
  111. template <typename Allocator>
  112. ArrayBuffer(DECLSPEC_GUARD_OVERFLOW uint32 length, DynamicType * type, Allocator allocator);
  113. ArrayBuffer(byte* buffer, DECLSPEC_GUARD_OVERFLOW uint32 length, DynamicType * type);
  114. class EntryInfo
  115. {
  116. public:
  117. static FunctionInfo NewInstance;
  118. static FunctionInfo Slice;
  119. static FunctionInfo IsView;
  120. static FunctionInfo GetterByteLength;
  121. static FunctionInfo GetterSymbolSpecies;
  122. #if ENABLE_DEBUG_CONFIG_OPTIONS
  123. static FunctionInfo Detach;
  124. #endif
  125. };
  126. static Var NewInstance(RecyclableObject* function, CallInfo callInfo, ...);
  127. static Var EntrySlice(RecyclableObject* function, CallInfo callInfo, ...);
  128. static Var EntryIsView(RecyclableObject* function, CallInfo callInfo, ...);
  129. static Var EntryGetterByteLength(RecyclableObject* function, CallInfo callInfo, ...);
  130. static Var EntryGetterSymbolSpecies(RecyclableObject* function, CallInfo callInfo, ...);
  131. #if ENABLE_DEBUG_CONFIG_OPTIONS
  132. static Var EntryDetach(RecyclableObject* function, CallInfo callInfo, ...);
  133. #endif
  134. static bool Is(Var aValue);
  135. static ArrayBuffer* NewFromDetachedState(DetachedStateBase* state, JavascriptLibrary *library);
  136. static ArrayBuffer* FromVar(Var aValue);
  137. static ArrayBuffer* UnsafeFromVar(Var aValue);
  138. virtual BOOL GetDiagTypeString(StringBuilder<ArenaAllocator>* stringBuilder, ScriptContext* requestContext) override;
  139. virtual BOOL GetDiagValueString(StringBuilder<ArenaAllocator>* stringBuilder, ScriptContext* requestContext) override;
  140. ArrayBufferDetachedStateBase* DetachAndGetState();
  141. virtual uint32 GetByteLength() const override { return bufferLength; }
  142. virtual BYTE* GetBuffer() const override { return buffer; }
  143. static int GetByteLengthOffset() { return offsetof(ArrayBuffer, bufferLength); }
  144. static int GetBufferOffset() { return offsetof(ArrayBuffer, buffer); }
  145. virtual void AddParent(ArrayBufferParent* parent) override;
  146. #if defined(TARGET_64)
  147. //maximum 2G -1 for amd64
  148. static const uint32 MaxArrayBufferLength = 0x7FFFFFFF;
  149. #else
  150. // maximum 1G to avoid arithmetic overflow.
  151. static const uint32 MaxArrayBufferLength = 1 << 30;
  152. #endif
  153. static const uint32 ParentsCleanupThreshold = 1000;
  154. virtual bool IsValidAsmJsBufferLength(uint length, bool forceCheck = false) { return false; }
  155. virtual bool IsArrayBuffer() override { return true; }
  156. virtual bool IsSharedArrayBuffer() override { return false; }
  157. virtual ArrayBuffer * GetAsArrayBuffer() override { return ArrayBuffer::FromVar(this); }
  158. static uint32 ToIndex(Var value, int32 errorCode, ScriptContext *scriptContext, uint32 MaxAllowedLength, bool checkSameValueZero = true);
  159. protected:
  160. void Detach();
  161. typedef void __cdecl FreeFn(void* ptr);
  162. virtual ArrayBufferDetachedStateBase* CreateDetachedState(BYTE* buffer, DECLSPEC_GUARD_OVERFLOW uint32 bufferLength) = 0;
  163. //In most cases, the ArrayBuffer will only have one parent
  164. Field(RecyclerWeakReference<ArrayBufferParent>*) primaryParent;
  165. struct OtherParents :public SList<RecyclerWeakReference<ArrayBufferParent>*, Recycler>
  166. {
  167. OtherParents(Recycler* recycler)
  168. :SList<RecyclerWeakReference<ArrayBufferParent>*, Recycler>(recycler), increasedCount(0)
  169. {
  170. }
  171. Field(uint) increasedCount;
  172. };
  173. Field(OtherParents*) otherParents;
  174. FieldNoBarrier(BYTE*) buffer; // Points to a heap allocated RGBA buffer, can be null
  175. Field(uint32) bufferLength; // Number of bytes allocated
  176. };
  177. class ArrayBufferParent : public ArrayObject
  178. {
  179. friend ArrayBuffer;
  180. friend ArrayBufferBase;
  181. private:
  182. Field(ArrayBufferBase*) arrayBuffer;
  183. protected:
  184. DEFINE_VTABLE_CTOR_ABSTRACT(ArrayBufferParent, ArrayObject);
  185. ArrayBufferParent(DynamicType * type, uint32 length, ArrayBufferBase* arrayBuffer)
  186. : ArrayObject(type, /*initSlots*/true, length),
  187. arrayBuffer(arrayBuffer)
  188. {
  189. arrayBuffer->AddParent(this);
  190. }
  191. public:
  192. ArrayBufferBase* GetArrayBuffer() const
  193. {
  194. return this->arrayBuffer;
  195. }
  196. #if ENABLE_TTD
  197. public:
  198. virtual void MarkVisitKindSpecificPtrs(TTD::SnapshotExtractor* extractor) override;
  199. virtual void ProcessCorePaths() override;
  200. #endif
  201. };
  202. // Normally we use malloc/free; for ArrayBuffer created from projection we need to use different allocator.
  203. class JavascriptArrayBuffer : public ArrayBuffer
  204. {
  205. protected:
  206. DEFINE_VTABLE_CTOR(JavascriptArrayBuffer, ArrayBuffer);
  207. DEFINE_MARSHAL_OBJECT_TO_SCRIPT_CONTEXT(JavascriptArrayBuffer);
  208. public:
  209. static JavascriptArrayBuffer* Create(DECLSPEC_GUARD_OVERFLOW uint32 length, DynamicType * type);
  210. static JavascriptArrayBuffer* Create(byte* buffer, DECLSPEC_GUARD_OVERFLOW uint32 length, DynamicType * type);
  211. virtual void Dispose(bool isShutdown) override;
  212. virtual void Finalize(bool isShutdown) override;
  213. static bool IsValidAsmJsBufferLengthAlgo(uint length, bool forceCheck);
  214. virtual bool IsValidAsmJsBufferLength(uint length, bool forceCheck = false) override;
  215. virtual bool IsValidVirtualBufferLength(uint length) const override;
  216. protected:
  217. JavascriptArrayBuffer(DynamicType * type);
  218. virtual ArrayBufferDetachedStateBase* CreateDetachedState(BYTE* buffer, DECLSPEC_GUARD_OVERFLOW uint32 bufferLength) override;
  219. template<typename Allocator>
  220. JavascriptArrayBuffer(uint32 length, DynamicType * type, Allocator allocator): ArrayBuffer(length, type, allocator){}
  221. JavascriptArrayBuffer(uint32 length, DynamicType * type);
  222. JavascriptArrayBuffer(byte* buffer, uint32 length, DynamicType * type);
  223. #if ENABLE_TTD
  224. public:
  225. virtual TTD::NSSnapObjects::SnapObjectType GetSnapTag_TTD() const override;
  226. virtual void ExtractSnapObjectDataInto(TTD::NSSnapObjects::SnapObject* objData, TTD::SlabAllocator& alloc) override;
  227. #endif
  228. };
  229. class WebAssemblyArrayBuffer : public JavascriptArrayBuffer
  230. {
  231. template<typename Allocator>
  232. WebAssemblyArrayBuffer(uint32 length, DynamicType * type, Allocator allocator);
  233. WebAssemblyArrayBuffer(uint32 length, DynamicType * type);
  234. WebAssemblyArrayBuffer(byte* buffer, uint32 length, DynamicType * type);
  235. protected:
  236. DEFINE_VTABLE_CTOR(WebAssemblyArrayBuffer, JavascriptArrayBuffer);
  237. DEFINE_MARSHAL_OBJECT_TO_SCRIPT_CONTEXT(WebAssemblyArrayBuffer);
  238. public:
  239. static WebAssemblyArrayBuffer* Create(byte* buffer, DECLSPEC_GUARD_OVERFLOW uint32 length, DynamicType * type);
  240. WebAssemblyArrayBuffer* GrowMemory(DECLSPEC_GUARD_OVERFLOW uint32 newBufferLength);
  241. virtual bool IsValidVirtualBufferLength(uint length) const override;
  242. virtual bool IsWebAssemblyArrayBuffer() override { return true; }
  243. protected:
  244. virtual ArrayBufferDetachedStateBase* CreateDetachedState(BYTE* buffer, DECLSPEC_GUARD_OVERFLOW uint32 bufferLength) override;
  245. };
  246. // the memory must be allocated via CoTaskMemAlloc.
  247. class ProjectionArrayBuffer : public ArrayBuffer
  248. {
  249. protected:
  250. DEFINE_VTABLE_CTOR(ProjectionArrayBuffer, ArrayBuffer);
  251. DEFINE_MARSHAL_OBJECT_TO_SCRIPT_CONTEXT(ProjectionArrayBuffer);
  252. typedef void __stdcall FreeFn(LPVOID ptr);
  253. virtual ArrayBufferDetachedStateBase* CreateDetachedState(BYTE* buffer, DECLSPEC_GUARD_OVERFLOW uint32 bufferLength) override
  254. {
  255. return HeapNew(ArrayBufferDetachedState<FreeFn>, buffer, bufferLength, CoTaskMemFree, GetScriptContext()->GetRecycler(), ArrayBufferAllocationType::CoTask);
  256. }
  257. public:
  258. // Create constructor. script engine creates a buffer allocated via CoTaskMemAlloc.
  259. static ProjectionArrayBuffer* Create(DECLSPEC_GUARD_OVERFLOW uint32 length, DynamicType * type);
  260. // take over ownership. a CoTaskMemAlloc'ed buffer passed in via projection.
  261. static ProjectionArrayBuffer* Create(byte* buffer, DECLSPEC_GUARD_OVERFLOW uint32 length, DynamicType * type);
  262. virtual void Dispose(bool isShutdown) override;
  263. virtual void Finalize(bool isShutdown) override {};
  264. private:
  265. ProjectionArrayBuffer(uint32 length, DynamicType * type);
  266. ProjectionArrayBuffer(byte* buffer, uint32 length, DynamicType * type);
  267. };
  268. // non-owning ArrayBuffer used for wrapping external data
  269. class ExternalArrayBuffer : public ArrayBuffer
  270. {
  271. protected:
  272. DEFINE_VTABLE_CTOR(ExternalArrayBuffer, ArrayBuffer);
  273. DEFINE_MARSHAL_OBJECT_TO_SCRIPT_CONTEXT(ExternalArrayBuffer);
  274. public:
  275. ExternalArrayBuffer(byte *buffer, DECLSPEC_GUARD_OVERFLOW uint32 length, DynamicType *type);
  276. static ExternalArrayBuffer* Create(byte* buffer, DECLSPEC_GUARD_OVERFLOW uint32 length, DynamicType * type);
  277. protected:
  278. virtual ArrayBufferDetachedStateBase* CreateDetachedState(BYTE* buffer, DECLSPEC_GUARD_OVERFLOW uint32 bufferLength) override;
  279. #if ENABLE_TTD
  280. public:
  281. virtual TTD::NSSnapObjects::SnapObjectType GetSnapTag_TTD() const override;
  282. virtual void ExtractSnapObjectDataInto(TTD::NSSnapObjects::SnapObject* objData, TTD::SlabAllocator& alloc) override;
  283. #endif
  284. };
  285. class ExternalArrayBufferDetachedState : public ArrayBufferDetachedStateBase
  286. {
  287. public:
  288. ExternalArrayBufferDetachedState(BYTE* buffer, uint32 bufferLength);
  289. virtual void ClearSelfOnly() override;
  290. virtual void DiscardState() override;
  291. virtual void Discard() override;
  292. virtual ArrayBuffer* Create(JavascriptLibrary* library);
  293. };
  294. }