Fixing bugs in promotion of elements transitions (r1175).
authorverwaest@chromium.org <verwaest@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 18 Jun 2012 11:16:02 +0000 (11:16 +0000)
committerverwaest@chromium.org <verwaest@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 18 Jun 2012 11:16:02 +0000 (11:16 +0000)
commit49ad5bdf5d2cb689545725bfcf80b865f3663dbe
treed667b855a756005eb170696dd08c4399231aba8d
parentcbcf674db1ae57c79940063c7ec5ca8eb99cfd0d
Fixing bugs in promotion of elements transitions (r1175).
- Fixed invalid memory access when reading enum-cache from descriptor array with elements transitions but 0 real descriptors.
- Fixed infinite recursion in the intrusive map iterator when visiting elements transitions.
- Properly cached non-fastmode elements transitions.

Review URL: https://chromiumcodereview.appspot.com/10565030

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@11841 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/objects.cc
src/objects.h