Reviewers: Igor Sheludko,

Message:
Committed patchset #2 (id:20001) manually as
3809b683c9c90d7b9a9020ea0118417e8b13e6ad.

Description:
Fix bug introduced by 4.4.83.18

BUG=
[email protected]

Committed:
https://chromium.googlesource.com/v8/v8/+/3809b683c9c90d7b9a9020ea0118417e8b13e6ad

Please review this at https://codereview.chromium.org/1232083003/

Base URL: https://chromium.googlesource.com/v8/[email protected]

Affected files (+3, -3 lines):
  M include/v8-version.h
  M src/objects.cc


Index: include/v8-version.h
diff --git a/include/v8-version.h b/include/v8-version.h
index fe40d272a7bfd710137b4a49b2a26700bef1cbc8..b50ba34aa1da89d2fb3111fb6d59a4024dcbad28 100644
--- a/include/v8-version.h
+++ b/include/v8-version.h
@@ -11,7 +11,7 @@
 #define V8_MAJOR_VERSION 4
 #define V8_MINOR_VERSION 4
 #define V8_BUILD_NUMBER 63
-#define V8_PATCH_LEVEL 18
+#define V8_PATCH_LEVEL 19

 // Use 1 for candidates and 0 otherwise.
 // (Boolean macro values are not supported by all preprocessors.)
Index: src/objects.cc
diff --git a/src/objects.cc b/src/objects.cc
index 496c26c2c23337055b41336d814bf0861d2c76f4..ad1395a2597d05a85c0702d8916ba9c743dcc9e2 100644
--- a/src/objects.cc
+++ b/src/objects.cc
@@ -3292,7 +3292,7 @@ MaybeHandle<Object> Object::SetSuperProperty(LookupIterator* it,
         PropertyDetails details = own_lookup.property_details();
         if (details.IsConfigurable() || !details.IsReadOnly()) {
           return JSObject::SetOwnPropertyIgnoreAttributes(
-              Handle<JSObject>(it->GetReceiver()), it->name(), value,
+              Handle<JSObject>::cast(it->GetReceiver()), it->name(), value,
               details.attributes());
         }
         return WriteToReadOnlyProperty(&own_lookup, value, language_mode);
@@ -3302,7 +3302,7 @@ MaybeHandle<Object> Object::SetSuperProperty(LookupIterator* it,
         PropertyDetails details = own_lookup.property_details();
         if (details.IsConfigurable()) {
           return JSObject::SetOwnPropertyIgnoreAttributes(
-              Handle<JSObject>(it->GetReceiver()), it->name(), value,
+              Handle<JSObject>::cast(it->GetReceiver()), it->name(), value,
               details.attributes());
         }



--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to