Fix putting of prototype transitions. The length is also subject to GC, just like...
authorverwaest@chromium.org <verwaest@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 27 Feb 2014 16:07:44 +0000 (16:07 +0000)
committerverwaest@chromium.org <verwaest@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 27 Feb 2014 16:07:44 +0000 (16:07 +0000)
commitaa14020bc7c000588134667c007682e0a130daaf
treee5c31759cc35ce0df370c1634dc7d31eb5984662
parentf1ad20d059eeaaecf21fce45045b22369baafff2
Fix putting of prototype transitions. The length is also subject to GC, just like entry.

BUG=347536
LOG=n
R=danno@chromium.org

Review URL: https://codereview.chromium.org/183193003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19586 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/mark-compact.cc
src/objects.cc
test/mjsunit/regress/regress-put-prototype-transition.js [new file with mode: 0644]