Files
v8/test/mjsunit/array-flat-elements-kind.js
Riya Amemiya 3eed742a70 [array] Add Torque fast path for Array.prototype.flat
Add a fast path for Array.prototype.flat in Torque/CSA that uses a
2-pass approach: first compute the output length, then preallocate and
write directly. This avoids runtime call overhead and is modeled after
JSC's implementation but adapted for V8's elements/protector model.

The implementation uses a stack-based iterative traversal to support
arbitrary depth without recursion overhead.

The fast path is only taken when:
- Input is a FastJSArray with fast elements
- NoElements and ArraySpecies protectors are intact
- No proxies, accessors, or custom elements in the chain
- Nested arrays (when depth > 0) are also FastJSArrays

If any precondition fails, we fall back to the existing slow path.

Performance improvement for large arrays(20M) is 3x~16x (in a
single-run benchmark).

Change-Id: I2eea8c149b5c6a522fef086f36df108ca7a0a2e2
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7526287
Reviewed-by: Olivier Flückiger <olivf@chromium.org>
Reviewed-by: Leszek Swirski <leszeks@chromium.org>
Commit-Queue: Olivier Flückiger <olivf@chromium.org>
Commit-Queue: Leszek Swirski <leszeks@chromium.org>
Cr-Commit-Position: refs/heads/main@{#105498}
2026-02-27 03:37:18 -08:00

49 lines
1.5 KiB
JavaScript

// Copyright 2025 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
function assertSmiElementsKind(arr) {
assertTrue(%HasSmiElements(arr),
'Expected SMI elements kind, got: ' + JSON.stringify(arr));
}
function assertDoubleElementsKind(arr) {
assertTrue(%HasDoubleElements(arr),
'Expected DOUBLE elements kind, got: ' + JSON.stringify(arr));
}
function assertObjectElementsKind(arr) {
assertTrue(%HasObjectElements(arr),
'Expected OBJECT elements kind, got: ' + JSON.stringify(arr));
}
// Early return for packed numeric source.
assertSmiElementsKind([1].flat());
assertDoubleElementsKind([1.1].flat());
// All sub-arrays have the same elements kind.
assertSmiElementsKind([[1]].flat());
assertSmiElementsKind([[1],[1]].flat());
assertDoubleElementsKind([[1.1]].flat());
assertDoubleElementsKind([[1.1],[2.2]].flat());
// Mixed sub-array kinds produce DOUBLE (SMIs fit in doubles).
assertDoubleElementsKind([[1],[1.1]].flat());
assertObjectElementsKind([[1],[[1.1]]].flat());
// Non-number leaf elements.
assertObjectElementsKind([["hello"]].flat());
assertObjectElementsKind([[1, "hello"]].flat());
// Generic source with Smi-only contents.
let generic = [{}];
generic[0] = 1;
assertSmiElementsKind(generic.flat());
assertSmiElementsKind([generic].flat());
// Depth > 1.
assertSmiElementsKind([[[1]]].flat(2));
assertDoubleElementsKind([[[1.1],[2.2]]].flat(2));