Reviewers: rossberg,

Description:
Fix GC unsafe place in JSProxy::DeletePropertyWithHandler.

Please review this at http://codereview.chromium.org/7670023/

SVN Base: http://v8.googlecode.com/svn/branches/bleeding_edge/

Affected files:
  M     src/objects.cc


Index: src/objects.cc
===================================================================
--- src/objects.cc      (revision 8946)
+++ src/objects.cc      (working copy)
@@ -2318,7 +2318,8 @@
   if (has_exception) return Failure::Exception();

   Object* bool_result = result->ToBoolean();
-  if (mode == STRICT_DELETION && bool_result == GetHeap()->false_value()) {
+  if (mode == STRICT_DELETION &&
+      bool_result == isolate->heap()->false_value()) {
     Handle<Object> args[] = { handler, trap_name };
     Handle<Object> error = isolate->factory()->NewTypeError(
         "handler_failed", HandleVector(args, ARRAY_SIZE(args)));


--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to