Fix map modification in transition tree traversal.
authormstarzinger@chromium.org <mstarzinger@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Fri, 30 Sep 2011 13:03:48 +0000 (13:03 +0000)
committermstarzinger@chromium.org <mstarzinger@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Fri, 30 Sep 2011 13:03:48 +0000 (13:03 +0000)
commitb5be9fa83a13e408a949e982ea759d39f094efaa
tree5d99cd0178c2aa248e372730230ed039e6af276d
parentf274c94e65cce0cc02c081f02cacb2a3c70dea9a
Fix map modification in transition tree traversal.

While traversing the transition tree we build a work-list using the map
field of maps. Setting those map values with a write barrier causes
black-to-gray changes on maps which are currently not recognized as
such, hence their computed size might be off.

R=vegorov@chromium.org
BUG=v8:1672
TEST=cctest/test-decls/Present

Review URL: http://codereview.chromium.org/8082023

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@9498 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/objects-inl.h
src/objects.cc
src/objects.h