Oilpan: The Garbage Collector for Blink in Chrome
Blink28611 Feb

Oilpan: The Garbage Collector for Blink in Chrome

Oilpan is a specialized garbage collection system for the Blink rendering engine in Chrome, specifically designed to manage C++ objects and eliminate memory safety issues like use-after-free bugs. It operates using a mark-and-sweep tracing mechanism that manages object lifetimes across independent, thread-local heaps partitioned by object type. A key feature is its unified heap integration with V8, which allows for cross-component tracing between JavaScript and the C++ DOM graph. Developers interact with Oilpan using specific smart pointers such as Member and Persistent, alongside required Trace methods that define the relationship between objects. While it provides automatic reclamation for complex structures like DOM nodes and CSS values, it requires careful use of pre-finalizers and weak references to manage non-deterministic destruction. Ultimately, the system replaces manual memory management with a managed runtime model to enhance browser safety and stability.

Episoder(399)

blink::PaintChunk and blink::DisplayItemList

blink::PaintChunk and blink::DisplayItemList

grouping and content. PaintChunk: groups sequential display items that share the same property‑tree state and cull/visibility; it’s the unit we layerize and invalidate.DisplayItemList: the recorded Sk...

10 Okt 202537min

blink::PaintArtifact

blink::PaintArtifact

the immutable “what to draw” package for this frame. A PaintArtifact is the product of Blink painting: a DisplayItemList plus an ordered vector of PaintChunks. It is immutable post‑creation and design...

10 Okt 202531min

blink::PaintController

blink::PaintController

builds the display list + paint chunks and manages caching. As painters call into GraphicsContext, they also drive a PaintController which groups drawing into display items and paint chunks (each keye...

10 Okt 202529min

blink::GraphicsContext

blink::GraphicsContext

immediate drawing API that records to a display list. Painters for layout objects use GraphicsContext to “draw”—but in modern Blink those calls get recorded into a display list (PaintRecord) backed by...

10 Okt 202544min

blink::TransformPaintPropertyNode / ClipPaintPropertyNode / EffectPaintPropertyNode / ScrollPaintPropertyNode

blink::TransformPaintPropertyNode / ClipPaintPropertyNode / EffectPaintPropertyNode / ScrollPaintPropertyNode

These are the nodes within those four trees. Every piece of painted content (a “paint chunk”) is associated with a tuple of (Transform, Clip, Effect, Scroll) nodes—its PropertyTreeState. This precisel...

10 Okt 202533min

blink::PaintPropertyTreeBuilder

blink::PaintPropertyTreeBuilder

builds/updates paint property trees.Consumes the layout/fragment data and produces the four paint property trees (Transform, Clip, Effect, Scroll) for the current frame. These trees encode coordinate ...

10 Okt 202547min

blink::PrePaintTreeWalk

blink::PrePaintTreeWalk

cross‑frame pre‑paint traversal. Runs in the InPrePaint lifecycle phase. Walks the entire layout tree starting at the root LocalFrameView, updating paint invalidation state and computing the context n...

10 Okt 202531min

blink::NGPhysicalFragment and friends

blink::NGPhysicalFragment and friends

Layout takes the styled DOM and produces a fragment tree of positioned boxes. In modern Blink this is LayoutNG; the core artifact is NGPhysicalFragment, which stores geometry and is used downstream fo...

10 Okt 202537min

Populært innen Teknologi

lydartikler-fra-aftenposten
romkapsel
smart-forklart
rss-avskiltet
teknisk-sett
tomprat-med-gunnar-tjomlid
nasjonal-sikkerhetsmyndighet-nsm
energi-og-klima
shifter
rss-impressions-2
elektropodden
rss-alt-vi-kan
fornybaren
teknologi-og-mennesker
pedagogisk-intelligens
rss-for-alarmen-gar
rss-fjorsilkebris-podcast
hans-petter-og-co
rss-byggepodden
rss-polypod