Revision: 20875
Author: [email protected]
Date: Tue Apr 22 08:49:46 2014 UTC
Log: Cons string maps must be marked as unstable.
[email protected]
Review URL: https://codereview.chromium.org/247063002
http://code.google.com/p/v8/source/detail?r=20875
Modified:
/branches/bleeding_edge/src/heap.cc
=======================================
--- /branches/bleeding_edge/src/heap.cc Tue Apr 22 07:33:20 2014 UTC
+++ /branches/bleeding_edge/src/heap.cc Tue Apr 22 08:49:46 2014 UTC
@@ -2586,7 +2586,11 @@
{ MaybeObject* maybe_obj = AllocateMap(entry.type, entry.size);
if (!maybe_obj->ToObject(&obj)) return false;
}
- roots_[entry.index] = Map::cast(obj);
+ // Mark cons string maps as unstable, because their objects can
change
+ // maps during GC.
+ Map* map = Map::cast(obj);
+ if (StringShape(entry.type).IsCons()) map->mark_unstable();
+ roots_[entry.index] = map;
}
ALLOCATE_VARSIZE_MAP(STRING_TYPE, undetectable_string)
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
