Revision: 19086
Author: [email protected]
Date: Tue Feb 4 22:46:53 2014 UTC
Log: Explicitly disallow stores to JSObjectAccessors (for now).
[email protected]
Review URL: https://codereview.chromium.org/154873002
http://code.google.com/p/v8/source/detail?r=19086
Modified:
/branches/bleeding_edge/src/hydrogen.cc
=======================================
--- /branches/bleeding_edge/src/hydrogen.cc Tue Feb 4 22:23:26 2014 UTC
+++ /branches/bleeding_edge/src/hydrogen.cc Tue Feb 4 22:46:53 2014 UTC
@@ -5442,12 +5442,7 @@
bool HOptimizedGraphBuilder::PropertyAccessInfo::CanAccessMonomorphic() {
if (!CanInlinePropertyAccess(type_)) return false;
- if (IsJSObjectFieldAccessor()) {
- // We should never have gathered typefeedback for JSObjectFieldAccessor
- // stores.
- ASSERT(IsLoad());
- return true;
- }
+ if (IsJSObjectFieldAccessor()) return IsLoad();
if (!LookupDescriptor()) return false;
if (lookup_.IsFound()) {
if (IsLoad()) return true;
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
