1
2
3
4
5
6
7
8
9
10
11
12
13
14

struct objc_class : objc_object {
// Class ISA;
Class superclass;
cache_t cache;             // formerly cache pointer and vtable
class_data_bits_t bits;    // class_rw_t * plus custom rr/alloc flags

class_rw_t *data() const {
return bits.data();
}
void setData(class_rw_t *newData) {
bits.setData(newData);
}
… 省略
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

#if CACHE_MASK_STORAGE == CACHE_MASK_STORAGE_OUTLINED // macOS 模拟器
explicit_atomic<struct bucket_t *> _buckets;
explicit_atomic<mask_t> _mask;
#elif CACHE_MASK_STORAGE == CACHE_MASK_STORAGE_HIGH_16 // 64 位真机
explicit_atomic<uintptr_t> _maskAndBuckets;
mask_t _mask_unused;

// How much the mask is shifted by.
static constexpr uintptr_t maskShift = 48;

// Additional bits after the mask which must be zero. msgSend
// takes advantage of these additional bits to construct the value
// `mask << 4` from `_maskAndBuckets` in a single instruction.
static constexpr uintptr_t maskZeroBits = 4;

// The largest mask value we can store. 可以存储的最大掩码值 2^16-1
static constexpr uintptr_t maxMask = ((uintptr_t)1 << (64 – maskShift)) – 1;

// The mask applied to `_maskAndBuckets` to retrieve the buckets pointer.
static constexpr uintptr_t bucketsMask = ((uintptr_t)1 << (maskShift – maskZeroBits)) – 1;
// Ensure we have enough bits for the buckets pointer.
static_assert(bucketsMask >= MACH_VM_MAX_ADDRESS, “Bucket field doesn’t have enough bits for arbitrary pointers.”);
#elif CACHE_MASK_STORAGE == CACHE_MASK_STORAGE_LOW_4 // 非64位真机
// _maskAndBuckets stores the mask shift in the low 4 bits, and
// the buckets pointer in the remainder of the value. The mask
// shift is the value where (0xffff >> shift) produces the correct
// mask. This is equal to 16 – log2(cache_size).
explicit_atomic<uintptr_t> _maskAndBuckets;
mask_t _mask_unused;

static constexpr uintptr_t maskBits = 4;
static constexpr uintptr_t maskMask = (1 << maskBits) – 1;
static constexpr uintptr_t bucketsMask = ~maskMask;
#else
#error Unknown cache mask storage type.
#endif

#if __LP64__
uint16_t _flags;
#endif
uint16_t _occupied;

1
2
3

explicit_atomic<struct bucket_t *> _buckets; // 存储方法的 hash 表
explicit_atomic<mask_t> _mask; // 算法使用的掩码
uint16_t _occupied; // hash 表中占用的数量

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

struct bucket_t {
private:
// IMP-first is better for arm64e ptrauth and no worse for arm64.
// SEL-first is better for armv7* and i386 and x86_64.
#if __arm64__ // 真机
explicit_atomic<uintptr_t> _imp; // 函数指针，指向方法的具体实现
explicit_atomic<SEL> _sel; // 方法编号
#else // 模拟器
explicit_atomic<SEL> _sel;
explicit_atomic<uintptr_t> _imp;
#endif

// Compute the ptrauth signing modifier from &_imp, newSel, and cls.
uintptr_t modifierForSEL(SEL newSel, Class cls) const {
return (uintptr_t)&_imp ^ (uintptr_t)newSel ^ (uintptr_t)cls;
}

// Sign newImp, with &_imp, newSel, and cls as modifiers.
uintptr_t encodeImp(IMP newImp, SEL newSel, Class cls) const {
if (!newImp) return 0;
#if CACHE_IMP_ENCODING == CACHE_IMP_ENCODING_PTRAUTH
return (uintptr_t)
ptrauth_auth_and_resign(newImp,
ptrauth_key_function_pointer, 0,
ptrauth_key_process_dependent_code,
modifierForSEL(newSel, cls));
#elif CACHE_IMP_ENCODING == CACHE_IMP_ENCODING_ISA_XOR
return (uintptr_t)newImp ^ (uintptr_t)cls;
#elif CACHE_IMP_ENCODING == CACHE_IMP_ENCODING_NONE
return (uintptr_t)newImp;
#else
#error Unknown method cache IMP encoding.
#endif
}

1
2
3
4

– (void)logCup;
– (void)logPen;
– (void)logKeyboard;
– (void)logMouse;

1
2
3
4
5
6
7
8
9
10
11
12
13
14

int main(int argc, const char * argv[]) {
@autoreleasepool {
// insert code here…
TObject *t = [TObject alloc];
NSLog(@”%p”, t);

[t logCup];
[t logPen];
[t logMouse];
[t logKeyboard];

}
return 0;
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

(lldb) p/x TObject.class // 获取 class 类对象地址
(Class) $0 = 0x0000000100002318 TObject
(lldb) p (cache_t*)0x0000000100002328 // 通过地址偏移16字节，强转 cache_t 类型
(cache_t *) $1 = 0x0000000100002328
(lldb) p *$1
(cache_t) $2 = {
_buckets = {
std::__1::atomic<bucket_t *> = 0x000000010032d420 {
_sel = {
std::__1::atomic<objc_selector *> = (null)
}
_imp = {
std::__1::atomic<unsigned long> = 0
}
}
}
_mask = {
std::__1::atomic<unsigned int> = 0
}
_flags = 32804
_occupied = 0
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

(lldb) p/x t.class
(Class) $6 = 0x0000000100002318 TObject
(lldb) p (cache_t*) 0x0000000100002328
(cache_t *) $7 = 0x0000000100002328
(lldb) p *$7
(cache_t) $8 = {
_buckets = {
std::__1::atomic<bucket_t *> = 0x0000000101004bf0 {
_sel = {
std::__1::atomic<objc_selector *> = “”
}
_imp = {
std::__1::atomic<unsigned long> = 3274184
}
}
}
_mask = {
std::__1::atomic<unsigned int> = 3
}
_flags = 32804
_occupied = 2
}
(lldb)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

2020-12-21 23:54:11.872707+0800 Objc_m [2835:50950] -[TObject logCup]
(lldb) p *$1
(cache_t) $3 = {
_buckets = {
std::__1::atomic<bucket_t *> = 0x00000001007117a0 {
_sel = {
std::__1::atomic<objc_selector *> = (null)
}
_imp = {
std::__1::atomic<unsigned long> = 0
}
}
}
_mask = {
std::__1::atomic<unsigned int> = 7
}
_flags = 32804
_occupied = 1
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

2020-12-21 23:56:51.210222+0800 Objc_m[2835:50950] -[TObject logPen]
(lldb) p *$1
(cache_t) $4 = {
_buckets = {
std::__1::atomic<bucket_t *> = 0x00000001007117a0 {
_sel = {
std::__1::atomic<objc_selector *> = (null)
}
_imp = {
std::__1::atomic<unsigned long> = 0
}
}
}
_mask = {
std::__1::atomic<unsigned int> = 7
}
_flags = 32804
_occupied = 2
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

2020-12-21 23:59:32.413929+0800 Objc_m[2835:50950] -[TObject logMouse]
(lldb) p *$1
(cache_t) $5 = {
_buckets = {
std::__1::atomic<bucket_t *> = 0x00000001007117a0 {
_sel = {
std::__1::atomic<objc_selector *> = “”
}
_imp = {
std::__1::atomic<unsigned long> = 12264
}
}
}
_mask = {
std::__1::atomic<unsigned int> = 7
}
_flags = 32804
_occupied = 3
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

void cache_t::incrementOccupied()
{
_occupied++;
}

void cache_t::insert(Class cls, SEL sel, IMP imp, id receiver)
{
#if CONFIG_USE_CACHE_LOCK
cacheUpdateLock.assertLocked();
#else
runtimeLock.assertLocked();
#endif

ASSERT(sel != 0 && cls->isInitialized());

// Use the cache as-is if it is less than 3/4 full
mask_t newOccupied = occupied() + 1;
unsigned oldCapacity = capacity(), capacity = oldCapacity;
if (slowpath(isConstantEmptyCache())) {
// Cache is read-only. Replace it.
// 假如之前没有分配过缓存空间的，分配一个初始容量为4的空间，并在其中将_occupied置为0
// INIT_CACHE_SIZE  1<<2
if (!capacity) capacity = INIT_CACHE_SIZE;
reallocate(oldCapacity, capacity, /* freeOld */false);
}
else if (fastpath(newOccupied + CACHE_END_MARKER <= capacity / 4 * 3)) {
// Cache is less than 3/4 full. Use it as-is.
// 缓存不超过3/4就会维持缓存空间不变
}
else {
// 缓存超过3/4则分配一个容量为当前两倍的新空间
capacity = capacity ? capacity * 2 : INIT_CACHE_SIZE;
// MAX_CACHE_SIZE 1<<16
if (capacity > MAX_CACHE_SIZE) {
capacity = MAX_CACHE_SIZE;
}
reallocate(oldCapacity, capacity, true);
}

bucket_t *b = buckets();
mask_t m = capacity – 1;
mask_t begin = cache_hash(sel, m); // 通过掩码获取方法的缓存的次序
mask_t i = begin;

// Scan for the first unused slot and insert there.
// There is guaranteed to be an empty slot because the
// minimum size is 4 and we resized at 3/4 full.
// 最小是4，当充满3/4 就会 重新分配
do {
if (fastpath(b[i].sel() == 0)) {
incrementOccupied(); // 自增 _occupied
b[i].set<Atomic, Encoded>(sel, imp, cls); // 方法写入缓存
return;
}
if (b[i].sel() == sel) { // 已经加入了缓存
// The entry was added to the cache by some other thread
// before we grabbed the cacheUpdateLock.
return;
}
} while (fastpath((i = cache_next(i, m)) != begin));

cache_t::bad_cache(receiver, (SEL)sel, cls);
}
void cache_fill(Class cls, SEL sel, IMP imp, id receiver)
{
runtimeLock.assertLocked();

#if !DEBUG_TASK_THREADS
// Never cache before +initialize is done
if (cls->isInitialized()) {
cache_t *cache = getCache(cls);
#if CONFIG_USE_CACHE_LOCK
mutex_locker_t lock(cacheUpdateLock);
#endif
cache->insert(cls, sel, imp, receiver);
}
#else
_collecting_in_critical();
#endif
}