Revert of Protect the emptiness of Array prototype elements with a PropertyCell....
authormvstanton <mvstanton@chromium.org>
Wed, 22 Apr 2015 09:56:39 +0000 (02:56 -0700)
committerCommit bot <commit-bot@chromium.org>
Wed, 22 Apr 2015 09:56:28 +0000 (09:56 +0000)
commit15b98a3328b2a2aafb9dfd73287dd7b268e51455
treef00132f71b9f0b25de646a2cd1298c663dc7e6c5
parent27397421f8ce54a494c169a2625c511687fa5a0c
Revert of Protect the emptiness of Array prototype elements with a PropertyCell. (patchset #7 id:120001 of https://codereview.chromium.org/1092043002/)

Reason for revert:
MAC GCSTRESS failure on new test.

Original issue's description:
> Protect the emptiness of Array prototype elements with a PropertyCell.
>
> Not just emptiness, but also a particular structure.
>
> BUG=v8:4044
> LOG=N

TBR=jkummerow@chromium.org
NOPRESUBMIT=true
NOTREECHECKS=true
NOTRY=true
BUG=v8:4044

Review URL: https://codereview.chromium.org/1099203004

Cr-Commit-Position: refs/heads/master@{#27998}
12 files changed:
src/builtins.cc
src/compilation-dependencies.h
src/heap/heap.cc
src/heap/heap.h
src/hydrogen.h
src/isolate.cc
src/isolate.h
src/objects.cc
src/objects.h
test/cctest/test-api.cc
test/mjsunit/concurrent-initial-prototype-change.js
test/mjsunit/elide-double-hole-check-12.js [deleted file]