// Copyright 2015 the V8 project authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include "src/profiler/sampling-heap-profiler.h" #include #include #include "src/api/api-inl.h" #include "src/base/ieee754.h" #include "src/base/template-utils.h" #include "src/base/utils/random-number-generator.h" #include "src/execution/frames-inl.h" #include "src/execution/isolate.h" #include "src/heap/heap.h" #include "src/profiler/strings-storage.h" namespace v8 { namespace internal { // We sample with a Poisson process, with constant average sampling interval. // This follows the exponential probability distribution with parameter // λ = 1/rate where rate is the average number of bytes between samples. // // Let u be a uniformly distributed random number between 0 and 1, then // next_sample = (- ln u) / λ intptr_t SamplingHeapProfiler::Observer::GetNextSampleInterval(uint64_t rate) { if (FLAG_sampling_heap_profiler_suppress_randomness) return static_cast(rate); double u = random_->NextDouble(); double next = (-base::ieee754::log(u)) * rate; return next < kTaggedSize ? kTaggedSize : (next > INT_MAX ? INT_MAX : static_cast(next)); } // Samples were collected according to a poisson process. Since we have not // recorded all allocations, we must approximate the shape of the underlying // space of allocations based on the samples we have collected. Given that // we sample at rate R, the probability that an allocation of size S will be // sampled is 1-exp(-S/R). This function uses the above probability to // approximate the true number of allocations with size *size* given that // *count* samples were observed. v8::AllocationProfile::Allocation SamplingHeapProfiler::ScaleSample( size_t size, unsigned int count) const { double scale = 1.0 / (1.0 - std::exp(-static_cast(size) / rate_)); // Round count instead of truncating. return {size, static_cast(count * scale + 0.5)}; } SamplingHeapProfiler::SamplingHeapProfiler( Heap* heap, StringsStorage* names, uint64_t rate, int stack_depth, v8::HeapProfiler::SamplingFlags flags) : isolate_(Isolate::FromHeap(heap)), heap_(heap), allocation_observer_(heap_, static_cast(rate), rate, this, isolate_->random_number_generator()), names_(names), profile_root_(nullptr, "(root)", v8::UnboundScript::kNoScriptId, 0, next_node_id()), stack_depth_(stack_depth), rate_(rate), flags_(flags) { CHECK_GT(rate_, 0u); heap_->AddAllocationObserversToAllSpaces(&allocation_observer_, &allocation_observer_); } SamplingHeapProfiler::~SamplingHeapProfiler() { heap_->RemoveAllocationObserversFromAllSpaces(&allocation_observer_, &allocation_observer_); } void SamplingHeapProfiler::SampleObject(Address soon_object, size_t size) { DisallowHeapAllocation no_allocation; HandleScope scope(isolate_); HeapObject heap_object = HeapObject::FromAddress(soon_object); Handle obj(heap_object, isolate_); // Mark the new block as FreeSpace to make sure the heap is iterable while we // are taking the sample. heap_->CreateFillerObjectAt(soon_object, static_cast(size), ClearRecordedSlots::kNo); Local loc = v8::Utils::ToLocal(obj); AllocationNode* node = AddStack(); node->allocations_[size]++; auto sample = base::make_unique(size, node, loc, this, next_sample_id()); sample->global.SetWeak(sample.get(), OnWeakCallback, WeakCallbackType::kParameter); samples_.emplace(sample.get(), std::move(sample)); } void SamplingHeapProfiler::OnWeakCallback( const WeakCallbackInfo& data) { Sample* sample = data.GetParameter(); AllocationNode* node = sample->owner; DCHECK_GT(node->allocations_[sample->size], 0); node->allocations_[sample->size]--; if (node->allocations_[sample->size] == 0) { node->allocations_.erase(sample->size); while (node->allocations_.empty() && node->children_.empty() && node->parent_ && !node->parent_->pinned_) { AllocationNode* parent = node->parent_; AllocationNode::FunctionId id = AllocationNode::function_id( node->script_id_, node->script_position_, node->name_); parent->children_.erase(id); node = parent; } } sample->profiler->samples_.erase(sample); // sample is deleted because its unique ptr was erased from samples_. } SamplingHeapProfiler::AllocationNode* SamplingHeapProfiler::FindOrAddChildNode( AllocationNode* parent, const char* name, int script_id, int start_position) { AllocationNode::FunctionId id = AllocationNode::function_id(script_id, start_position, name); AllocationNode* child = parent->FindChildNode(id); if (child) { DCHECK_EQ(strcmp(child->name_, name), 0); return child; } auto new_child = base::make_unique( parent, name, script_id, start_position, next_node_id()); return parent->AddChildNode(id, std::move(new_child)); } SamplingHeapProfiler::AllocationNode* SamplingHeapProfiler::AddStack() { AllocationNode* node = &profile_root_; std::vector stack; JavaScriptFrameIterator it(isolate_); int frames_captured = 0; bool found_arguments_marker_frames = false; while (!it.done() && frames_captured < stack_depth_) { JavaScriptFrame* frame = it.frame(); // If we are materializing objects during deoptimization, inlined // closures may not yet be materialized, and this includes the // closure on the stack. Skip over any such frames (they'll be // in the top frames of the stack). The allocations made in this // sensitive moment belong to the formerly optimized frame anyway. if (frame->unchecked_function().IsJSFunction()) { SharedFunctionInfo shared = frame->function().shared(); stack.push_back(shared); frames_captured++; } else { found_arguments_marker_frames = true; } it.Advance(); } if (frames_captured == 0) { const char* name = nullptr; switch (isolate_->current_vm_state()) { case GC: name = "(GC)"; break; case PARSER: name = "(PARSER)"; break; case COMPILER: name = "(COMPILER)"; break; case BYTECODE_COMPILER: name = "(BYTECODE_COMPILER)"; break; case OTHER: name = "(V8 API)"; break; case EXTERNAL: name = "(EXTERNAL)"; break; case IDLE: name = "(IDLE)"; break; case JS: name = "(JS)"; break; } return FindOrAddChildNode(node, name, v8::UnboundScript::kNoScriptId, 0); } // We need to process the stack in reverse order as the top of the stack is // the first element in the list. for (auto it = stack.rbegin(); it != stack.rend(); ++it) { SharedFunctionInfo shared = *it; const char* name = this->names()->GetName(shared.DebugName()); int script_id = v8::UnboundScript::kNoScriptId; if (shared.script().IsScript()) { Script script = Script::cast(shared.script()); script_id = script.id(); } node = FindOrAddChildNode(node, name, script_id, shared.StartPosition()); } if (found_arguments_marker_frames) { node = FindOrAddChildNode(node, "(deopt)", v8::UnboundScript::kNoScriptId, 0); } return node; } v8::AllocationProfile::Node* SamplingHeapProfiler::TranslateAllocationNode( AllocationProfile* profile, SamplingHeapProfiler::AllocationNode* node, const std::map>& scripts) { // By pinning the node we make sure its children won't get disposed if // a GC kicks in during the tree retrieval. node->pinned_ = true; Local script_name = ToApiHandle(isolate_->factory()->InternalizeUtf8String("")); int line = v8::AllocationProfile::kNoLineNumberInfo; int column = v8::AllocationProfile::kNoColumnNumberInfo; std::vector allocations; allocations.reserve(node->allocations_.size()); if (node->script_id_ != v8::UnboundScript::kNoScriptId && scripts.find(node->script_id_) != scripts.end()) { // Cannot use std::map::at because it is not available on android. auto non_const_scripts = const_cast>&>(scripts); Handle