Disable ArrayShift hydrogen support

BUG=chromium:374838
LOG=y
R=mstarzinger@chromium.org

Review URL: https://codereview.chromium.org/295983003

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@21392 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

diff --git a/src/hydrogen.cc b/src/hydrogen.cc
index b296b93..40386aa 100644 (file)
--- a/src/hydrogen.cc
+++ b/src/hydrogen.cc
@@ -7927,6 +7927,10 @@ bool HOptimizedGraphBuilder::TryInlineBuiltinMethodCall(
       return true;
     }
     case kArrayShift: {
+      // Something in here seems to be causing crbug.com/374838.
+      // TODO(bmeurer): Investigate the problem and re-enable this code.
+      return false;
+
       if (receiver_map.is_null()) return false;
       if (receiver_map->instance_type() != JS_ARRAY_TYPE) return false;
       ElementsKind kind = receiver_map->elements_kind();