From: ulan <ulan@chromium.org>
Date: Wed, 11 Feb 2015 09:59:41 +0000 (-0800)
Subject: Reland r26549 "Fix IsWeakObjectInOptimizedCode predicate to also include property... 
X-Git-Tag: upstream/4.7.83~4467
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=7bf9b23c537df49e235315e8874732c4ac899eb6;p=platform%2Fupstream%2Fv8.git

Reland r26549 "Fix IsWeakObjectInOptimizedCode predicate to also include property cells."

BUG=v8:3882
LOG=NO

Review URL: https://codereview.chromium.org/913093002

Cr-Commit-Position: refs/heads/master@{#26573}
---

diff --git a/src/objects-inl.h b/src/objects-inl.h
index 4aadf12d7..c275ade93 100644
--- a/src/objects-inl.h
+++ b/src/objects-inl.h
@@ -5242,7 +5242,11 @@ bool Code::IsWeakObjectInOptimizedCode(Object* object) {
     return Map::cast(object)->CanTransition() &&
            FLAG_weak_embedded_maps_in_optimized_code;
   }
-  if (object->IsCell()) object = Cell::cast(object)->value();
+  if (object->IsCell()) {
+    object = Cell::cast(object)->value();
+  } else if (object->IsPropertyCell()) {
+    object = PropertyCell::cast(object)->value();
+  }
   if (object->IsJSObject()) {
     return FLAG_weak_embedded_objects_in_optimized_code;
   }