Missing type cell on ia32 from bindings.
authormvstanton@chromium.org <mvstanton@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 23 May 2013 13:45:33 +0000 (13:45 +0000)
committermvstanton@chromium.org <mvstanton@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 23 May 2013 13:45:33 +0000 (13:45 +0000)
commit1a4482ab3f0964b8d8b45b1508bbccec2dde7fd5
treec5e4892dd5fa0f384ca6b08f144ffe6d718ad3cd
parentaf4516847a290167c5135109db2a94461505f115
Missing type cell on ia32 from bindings.

Javascript constructors called from C++ code didn't have a type cell
properly filled in on ia32. This showed up as a bug in webkit bindings.
Re-enabled flag optimize-constructed-arrays.

BUG=
R=mstarzinger@chromium.org

Review URL: https://codereview.chromium.org/15870002

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@14775 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/flag-definitions.h
src/ia32/builtins-ia32.cc
test/mjsunit/allocation-site-info.js