Fix materialization of accessor frames with captured receivers
authorjarin@chromium.org <jarin@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Fri, 25 Apr 2014 12:58:15 +0000 (12:58 +0000)
committerjarin@chromium.org <jarin@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Fri, 25 Apr 2014 12:58:15 +0000 (12:58 +0000)
commitff884e06ae986ae5f31895524f9273b314230db3
tree040a2c41fd79d3014cea4bb65da374e1a544c105
parent19aa122d870f30057c0cccc723e2e1822b37105a
Fix materialization of accessor frames with captured receivers

I have fixed skipping of the receiver object to materialize captured
objects. This is done with a new DoTranslateSkip method.

We should consider unifying DoTranslateSkip, DoTranslateObject and
DoTranslateCommand as they do the almost the same thing - they only
differ in where they store the result.

The change also turns bunch of ASSERTs into CHECKs.

R=mstarzinger@chromium.org
BUG=359441
TEST=test/mjsunit/regress/regress-359441.js
LOG=N

Review URL: https://codereview.chromium.org/225283006

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@20978 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/deoptimizer.cc
src/deoptimizer.h
test/mjsunit/regress/regress-359441.js [new file with mode: 0644]