fix bug in objectliteral cache · Pull Request !13178 · OpenHarmony/arkcompiler_ets_runtime

1. fix bug in objectliteral cache
---
### 关联的Issue
https://gitee.com/openharmony/arkcompiler_ets_runtime/issues/ICUOIF

### 修改原因（目的、解决的问题等，例如：修复xx场景崩溃问题）

We use the object literal cache for optimization. However, in very rare cases, there may be two identical object literals associated with two different PGO root types, and the transition chains of the two roots are inconsistent. This leads to retrieving an HClass from the cache with an incorrect number of inlined properties, which needs to be fixed.

Inconsistant example: 
During the first PGO collection, the HClass information of obj was recorded with three inlined properties. In the second collection, the HClass of obj1 was recorded, which has four properties in total and thus should have four inlined properties.
However, since the cache from the first collection was reused, the generated root HClass only contains three inlined properties.

```js
function change_state() {
  let now = new Date();
  let minutes = now.getMinutes();
  return minutes % 2 == 0;
}

function test() {
  if (change_state()) {
    let obj = {
      a : 1,
      b : 2,
      c : 4
    }
  } else {
    let obj1 = {
      a : 3,
      b : 41,
      c : 34
    }
    obj1.d = 5;
  }
}

test();
```

```text
Profiler Version: 0.0.0.16
Compatible an file version: 4.0.1.7
FileSize: 2315, HeaderSize: 120, Checksum: 12ae0077

Panda file sumcheck list: [ 64:2672669278, 65:2672669278 ]

[
  Type: (isRoot: 1, ever out of bounds: 0, kind: 0, abcId: 64, id: 482): [  ],
  Type: (isRoot: 1, ever out of bounds: 0, kind: 0, abcId: 64, id: 538): [  ],
  Type: (isRoot: 1, ever out of bounds: 0, kind: 1, abcId: 64, id: 620): [ a:23 | b:23 | c:23 ],
  Type: (isRoot: 1, ever out of bounds: 0, kind: 1, abcId: 64, id: 654): [ a:23 | b:23 | c:23 ]
  // bug at here!!! two root types with same layoutdesc but the second one has more transition children.
]
```

### 修改描述（做了什么，变更了什么，例如：xx函数入口增加判空）
when number of properties is larger than number of inlined properties, set attr to not inlinedpropes

### 自测试项（测试结果截图，直接贴到每一个测试项底下）
#### jit-workload 本地执行（compiler/jit/isa/stub/ic/对象布局等修改必须执行）
- [x] 已通过
- [ ] 不涉及，无需验证
#### interpreter-js_perf 性能测试（性能优化/性能敏感场景：IR化/ic/hclass/对象布局/isa/builtins等修改必须执行）
- [x] 已验证不劣化
- [ ] 不涉及，无需验证
#### aot-js_perf 性能测试（性能优化/性能敏感场景：IR化/ic/hclass/对象布局/isa/builtins等修改必须执行）
- [x] 已验证不劣化
- [ ] 不涉及，无需验证
#### interpreter-workload性能测试（性能优化/性能敏感场景：IR化/ic/hclass/对象布局/isa/builtins等修改必须执行）
- [x] 已验证不劣化
- [ ] 不涉及，无需验证
#### aot-workload性能测试（性能优化/性能敏感场景：IR化/compiler/aot/isa/stub/ic/对象布局等修改必须执行）
- [x] 已验证不劣化
- [ ] 不涉及，无需验证
#### 非StableArray不能采用ElementKind读取元素（修改解释器相关IR代码需要自检）
- [] 已自检
- [x] 不涉及，无需验证
#### 在IR时添加fastpath时，需要检查是否有分支会改变非字典序模式或者修改数组长度，此时应该走slowpath（修改解释器相关IR代码需要自检）
- [ ] 已自检
- [x] 不涉及，无需验证
#### IR化后的逻辑需要与c++实现一致，不一致的地方需要有分支用例看护（修改解释器相关IR代码需要自检）
- [ ] 已自检
- [x] 不涉及，无需验证
#### c++代码中检测或抛出异常的地方，IR需要同样实现（修改解释器相关IR代码需要自检）
- [ ] 已自检
- [x] 不涉及，无需验证
#### IR中使用默认入参是HeapObject对象的接口时，需要在上下文中保证了参数的正确性（修改解释器相关IR代码需要自检）
- [ ] 已自检
- [x] 不涉及，无需验证
#### 修改c解释器，需要同时检查汇编解释器与AOT是否需要修改
- [ ] 已自检
- [x] 不涉及，无需验证
### 是否已执行L0用例
- [x] 已验证
- [ ] 不涉及。如不涉及，请写明理由

类型	指派人员	状态
审查	@klooer 由 CODEOWNERS 文件第 14 行指派为审查者	进行中 (0/1人)
审查	weng-changcheng gonggong 孙哲 Gargoyle.h Petrov Igor chuning1988	进行中 (0/1人)
测试	openharmony_ci 已测试通过	已完成 (1/1人)

OpenHarmony/arkcompiler_ets_runtime .gitee-modal { width: 500px !important; }

搜索帮助

OpenHarmony/arkcompiler_ets_runtime