Revision: 12498
Author: [email protected]
Date: Thu Sep 13 07:36:51 2012
Log: Clear the EnumLength fields of maps that lose their enumeration
cache.
Review URL: https://chromiumcodereview.appspot.com/10905262
http://code.google.com/p/v8/source/detail?r=12498
Modified:
/branches/bleeding_edge/src/objects.cc
=======================================
--- /branches/bleeding_edge/src/objects.cc Thu Sep 13 01:52:55 2012
+++ /branches/bleeding_edge/src/objects.cc Thu Sep 13 07:36:51 2012
@@ -1813,6 +1813,18 @@
old_map->transitions()->set_descriptors(new_map->instance_descriptors());
new_map->ClearTransitions(GetHeap());
old_map->set_owns_descriptors(false);
+ Map* map;
+ JSGlobalPropertyCell* pointer =
+ old_map->transitions()->descriptors_pointer();
+ for (Object* current = old_map;
+ !current->IsUndefined();
+ current = map->GetBackPointer()) {
+ map = Map::cast(current);
+ if (!map->HasTransitionArray()) break;
+ TransitionArray* transitions = map->transitions();
+ if (transitions->descriptors_pointer() != pointer) break;
+ map->SetEnumLength(Map::kInvalidEnumCache);
+ }
} else if (old_target->instance_descriptors() ==
old_map->instance_descriptors()) {
// Since the conversion above generated a new fast map with an
additional
@@ -1831,6 +1843,7 @@
if (!map->HasTransitionArray()) break;
TransitionArray* transitions = map->transitions();
if (transitions->descriptors_pointer() != old_pointer) break;
+ map->SetEnumLength(Map::kInvalidEnumCache);
transitions->set_descriptors_pointer(new_pointer);
}
new_map->ClearTransitions(GetHeap());
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
