Actually also advance the iterator in StorePropertyWithInterceptor

BUG=v8:3636
LOG=n
R=ishell@chromium.org

Review URL: https://codereview.chromium.org/702523002

Cr-Commit-Position: refs/heads/master@{#25098}
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@25098 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

diff --git a/src/ic/ic.cc b/src/ic/ic.cc
index d0c0edb..a9369ed 100644 (file)
--- a/src/ic/ic.cc
+++ b/src/ic/ic.cc
@@ -2688,7 +2688,7 @@ RUNTIME_FUNCTION(StorePropertyWithInterceptor) {
   PrototypeIterator iter(isolate, receiver,
                          PrototypeIterator::START_AT_RECEIVER);
   bool found = false;
-  while (!iter.IsAtEnd(PrototypeIterator::END_AT_NON_HIDDEN)) {
+  for (; !iter.IsAtEnd(PrototypeIterator::END_AT_NON_HIDDEN); iter.Advance()) {
     Handle<Object> current = PrototypeIterator::GetCurrent(iter);
     if (current->IsJSObject() &&
         Handle<JSObject>::cast(current)->HasNamedInterceptor()) {