Reviewers: Igor Sheludko,

Message:
ptal

Description:
Reconfigure on the right holder, which might be a hidden object.

BUG=v8:4137
LOG=n

Please review this at https://codereview.chromium.org/1178953003/

Base URL: https://chromium.googlesource.com/v8/v8.git@master

Affected files (+4, -2 lines):
  M src/objects.cc


Index: src/objects.cc
diff --git a/src/objects.cc b/src/objects.cc
index 180255f4fd39cca153b7323c0d1c1f990224322e..86f0900728b6ef90365183b9f1b5dfc6f875599b 100644
--- a/src/objects.cc
+++ b/src/objects.cc
@@ -4180,9 +4180,11 @@ MaybeHandle<Object> JSObject::ReconfigureAsDataProperty(
         }

         if (it->IsElement()) {
-          SetElementCallback(object, it->index(), new_data, attributes);
+ SetElementCallback(it->GetHolder<JSObject>(), it->index(), new_data,
+                             attributes);
         } else {
-          SetPropertyCallback(object, it->name(), new_data, attributes);
+ SetPropertyCallback(it->GetHolder<JSObject>(), it->name(), new_data,
+                              attributes);
         }
         if (is_observed) {
           RETURN_ON_EXCEPTION(


--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to