Upstream version 7.35.139.0

[platform/framework/web/crosswalk.git] / src / v8 / src / hydrogen.cc

diff --git a/src/v8/src/hydrogen.cc b/src/v8/src/hydrogen.cc
index ee60708..70b2933 100644 (file)
--- a/src/v8/src/hydrogen.cc
+++ b/src/v8/src/hydrogen.cc
@@ -7799,6 +7799,8 @@ bool HOptimizedGraphBuilder::TryInlineBuiltinMethodCall(
       if (receiver_map->instance_type() != JS_ARRAY_TYPE) return false;
       ElementsKind elements_kind = receiver_map->elements_kind();
       if (!IsFastElementsKind(elements_kind)) return false;
+      if (receiver_map->is_observed()) return false;
+      ASSERT(receiver_map->is_extensible());
 
       Drop(expr->arguments()->length());
       HValue* result;
@@ -7861,6 +7863,8 @@ bool HOptimizedGraphBuilder::TryInlineBuiltinMethodCall(
       if (receiver_map->instance_type() != JS_ARRAY_TYPE) return false;
       ElementsKind elements_kind = receiver_map->elements_kind();
       if (!IsFastElementsKind(elements_kind)) return false;
+      if (receiver_map->is_observed()) return false;
+      ASSERT(receiver_map->is_extensible());
 
       HValue* op_vals[] = {
         context(),