Fix property array length calculation in TransformPropertiesToFastFor.
authorkaznacheev@chromium.org <kaznacheev@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Fri, 1 Oct 2010 12:40:30 +0000 (12:40 +0000)
committerkaznacheev@chromium.org <kaznacheev@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Fri, 1 Oct 2010 12:40:30 +0000 (12:40 +0000)
commitf1d057dfecdbe1a2154a17199754bc6b6877ea93
treeb3c6f5a6d18c166b41f22415316705d246efc1e5
parenta11fb492fad4730349260cc985790aba4956976c
Fix property array length calculation in TransformPropertiesToFastFor.

It was silently assumed that inobject_properties value is not too large.
Recent introduction of inobject slack tracking made the assumption false
and debug tests with no snapshot failed.

Review URL: http://codereview.chromium.org/3584004

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@5575 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/objects.cc