Reviewers: danno,

Description:
Fix slack tracking when instance prototype changes.

This fixes a corner case when the instance prototype of a function is
changed while inobject slack tracking is still in progress. This caused
the intial map to be unrelated for functions with the same shared info
and hence the shared construct stub is no longer generic enough to work
for all those functions.

[email protected]
BUG=chromium:157019
TEST=mjsunit/regress/regress-crbug-157019


Please review this at https://codereview.chromium.org/11293059/

SVN Base: https://v8.googlecode.com/svn/branches/bleeding_edge

Affected files:
  M src/arm/stub-cache-arm.cc
  M src/ia32/stub-cache-ia32.cc
  M src/mips/stub-cache-mips.cc
  M src/objects-inl.h
  M src/objects.h
  M src/objects.cc
  M src/x64/stub-cache-x64.cc
  A + test/mjsunit/regress/regress-crbug-157019.js


--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to