Fix regressions triggered by map invalidation during graph creation.
authoryangguo@chromium.org <yangguo@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 12 Aug 2013 14:10:25 +0000 (14:10 +0000)
committeryangguo@chromium.org <yangguo@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 12 Aug 2013 14:10:25 +0000 (14:10 +0000)
commitc52b7bba05441f591ee68f3f3e14d69c658fd709
treec549f8d64111b38241390f9d7f9e4f829135aa1b
parent514dd034db637b6690b55d9149fa98d3407bfd27
Fix regressions triggered by map invalidation during graph creation.

BUG=
R=jkummerow@chromium.org

Review URL: https://codereview.chromium.org/22807003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@16150 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/assert-scope.h
src/compiler.cc
src/compiler.h
src/objects.cc
src/objects.h
test/mjsunit/regress/regress-map-invalidation-1.js [new file with mode: 0644]
test/mjsunit/regress/regress-map-invalidation-2.js [new file with mode: 0644]