From 7bf9b23c537df49e235315e8874732c4ac899eb6 Mon Sep 17 00:00:00 2001 From: ulan Date: Wed, 11 Feb 2015 01:59:41 -0800 Subject: [PATCH] Reland r26549 "Fix IsWeakObjectInOptimizedCode predicate to also include property cells." BUG=v8:3882 LOG=NO Review URL: https://codereview.chromium.org/913093002 Cr-Commit-Position: refs/heads/master@{#26573} --- src/objects-inl.h | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/objects-inl.h b/src/objects-inl.h index 4aadf12..c275ade 100644 --- a/src/objects-inl.h +++ b/src/objects-inl.h @@ -5242,7 +5242,11 @@ bool Code::IsWeakObjectInOptimizedCode(Object* object) { return Map::cast(object)->CanTransition() && FLAG_weak_embedded_maps_in_optimized_code; } - if (object->IsCell()) object = Cell::cast(object)->value(); + if (object->IsCell()) { + object = Cell::cast(object)->value(); + } else if (object->IsPropertyCell()) { + object = PropertyCell::cast(object)->value(); + } if (object->IsJSObject()) { return FLAG_weak_embedded_objects_in_optimized_code; } -- 2.7.4