Reviewers: Igor Sheludko,
Message:
ptal
Description:
Reconfigure on the right holder, which might be a hidden object.
BUG=v8:4137
LOG=n
Please review this at https://codereview.chromium.org/1178953003/
Base URL: https://chromium.googlesource.com/v8/v8.git@master
Affected files (+4, -2 lines):
M src/objects.cc
Index: src/objects.cc
diff --git a/src/objects.cc b/src/objects.cc
index
180255f4fd39cca153b7323c0d1c1f990224322e..86f0900728b6ef90365183b9f1b5dfc6f875599b
100644
--- a/src/objects.cc
+++ b/src/objects.cc
@@ -4180,9 +4180,11 @@ MaybeHandle<Object>
JSObject::ReconfigureAsDataProperty(
}
if (it->IsElement()) {
- SetElementCallback(object, it->index(), new_data, attributes);
+ SetElementCallback(it->GetHolder<JSObject>(), it->index(),
new_data,
+ attributes);
} else {
- SetPropertyCallback(object, it->name(), new_data, attributes);
+ SetPropertyCallback(it->GetHolder<JSObject>(), it->name(),
new_data,
+ attributes);
}
if (is_observed) {
RETURN_ON_EXCEPTION(
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.