Layout descriptor must be trimmed when corresponding descriptors array is trimmed...
authorishell <ishell@chromium.org>
Mon, 30 Mar 2015 17:03:41 +0000 (10:03 -0700)
committerCommit bot <commit-bot@chromium.org>
Mon, 30 Mar 2015 17:03:50 +0000 (17:03 +0000)
commit3cb9f132baeab26b9f14c5cf482eab6c460bcb80
treef33fbab590a0a83dec417065ef989c7a6ac1568f
parent8baa09c4fe968362c2c2436eef63916a54e2a10c
Layout descriptor must be trimmed when corresponding descriptors array is trimmed to stay in sync.

BUG=chromium:470804
LOG=Y

Review URL: https://codereview.chromium.org/1033273005

Cr-Commit-Position: refs/heads/master@{#27528}
src/heap/mark-compact.cc
src/layout-descriptor-inl.h
src/layout-descriptor.cc
src/layout-descriptor.h
test/cctest/test-unboxed-doubles.cc
test/mjsunit/regress/regress-470804.js [new file with mode: 0644]