Add a fast path for Array.prototype.flat in Torque/CSA that uses a 2-pass approach: first compute the output length, then preallocate and write directly. This avoids runtime call overhead and is modeled after JSC's implementation but adapted for V8's elements/protector model. The implementation uses a stack-based iterative traversal to support arbitrary depth without recursion overhead. The fast path is only taken when: - Input is a FastJSArray with fast elements - NoElements and ArraySpecies protectors are intact - No proxies, accessors, or custom elements in the chain - Nested arrays (when depth > 0) are also FastJSArrays If any precondition fails, we fall back to the existing slow path. Performance improvement for large arrays(20M) is 3x~16x (in a single-run benchmark). Change-Id: I2eea8c149b5c6a522fef086f36df108ca7a0a2e2 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7526287 Reviewed-by: Olivier Flückiger <olivf@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Commit-Queue: Olivier Flückiger <olivf@chromium.org> Commit-Queue: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#105498}
49 lines
1.5 KiB
JavaScript
49 lines
1.5 KiB
JavaScript
// Copyright 2025 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
function assertSmiElementsKind(arr) {
|
|
assertTrue(%HasSmiElements(arr),
|
|
'Expected SMI elements kind, got: ' + JSON.stringify(arr));
|
|
}
|
|
|
|
function assertDoubleElementsKind(arr) {
|
|
assertTrue(%HasDoubleElements(arr),
|
|
'Expected DOUBLE elements kind, got: ' + JSON.stringify(arr));
|
|
}
|
|
|
|
function assertObjectElementsKind(arr) {
|
|
assertTrue(%HasObjectElements(arr),
|
|
'Expected OBJECT elements kind, got: ' + JSON.stringify(arr));
|
|
}
|
|
|
|
// Early return for packed numeric source.
|
|
assertSmiElementsKind([1].flat());
|
|
assertDoubleElementsKind([1.1].flat());
|
|
|
|
// All sub-arrays have the same elements kind.
|
|
assertSmiElementsKind([[1]].flat());
|
|
assertSmiElementsKind([[1],[1]].flat());
|
|
assertDoubleElementsKind([[1.1]].flat());
|
|
assertDoubleElementsKind([[1.1],[2.2]].flat());
|
|
|
|
// Mixed sub-array kinds produce DOUBLE (SMIs fit in doubles).
|
|
assertDoubleElementsKind([[1],[1.1]].flat());
|
|
assertObjectElementsKind([[1],[[1.1]]].flat());
|
|
|
|
// Non-number leaf elements.
|
|
assertObjectElementsKind([["hello"]].flat());
|
|
assertObjectElementsKind([[1, "hello"]].flat());
|
|
|
|
// Generic source with Smi-only contents.
|
|
let generic = [{}];
|
|
generic[0] = 1;
|
|
assertSmiElementsKind(generic.flat());
|
|
assertSmiElementsKind([generic].flat());
|
|
|
|
// Depth > 1.
|
|
assertSmiElementsKind([[[1]]].flat(2));
|
|
assertDoubleElementsKind([[[1.1],[2.2]]].flat(2));
|