Fix Object.freeze with field type tracking.
authorverwaest@chromium.org <verwaest@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 29 Jul 2014 13:30:29 +0000 (13:30 +0000)
committerverwaest@chromium.org <verwaest@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 29 Jul 2014 13:30:29 +0000 (13:30 +0000)
commitf08d2690c68545ef1bafc9a2d38d7c148b24c2ee
tree18b6810157bd0af8ad5232d9cc0e11ea319ea41c
parent947740a6d8495c44bfab05094354e42f16605251
Fix Object.freeze with field type tracking.
Keep the descriptor properly intact while update the field type.

BUG=v8:3458
LOG=y
R=jkummerow@chromium.org

Review URL: https://codereview.chromium.org/424093002

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@22671 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/objects.cc
src/objects.h
test/mjsunit/regress/regress-update-field-type-attributes.js [new file with mode: 0644]