Reviewers: rossberg,

Message:
Andreas: PTAL.

Adam, Rafael: FYI. It's unclear whether there are any other objects violating
the assumption in GetCreationContext().

Description:
Ensure that collection iterators' maps have constructors

This fixes JSObject::GetCreationContext() for such iterators.

Please review this at https://codereview.chromium.org/288233002/

SVN Base: https://v8.googlecode.com/svn/branches/bleeding_edge

Affected files (+2, -0 lines):
  M src/bootstrapper.cc


Index: src/bootstrapper.cc
diff --git a/src/bootstrapper.cc b/src/bootstrapper.cc
index 480aab115fedf71711f9221b6ba3ee5634315a05..892f90edaca6d0b6d5fe7d896d01ca81cae96467 100644
--- a/src/bootstrapper.cc
+++ b/src/bootstrapper.cc
@@ -1314,11 +1314,13 @@ void Genesis::InitializeExperimentalGlobal() {
     {   // -- S e t I t e r a t o r
       Handle<Map> map = isolate()->factory()->NewMap(
           JS_SET_ITERATOR_TYPE, JSSetIterator::kSize);
+      map->set_constructor(native_context()->closure());
       native_context()->set_set_iterator_map(*map);
     }
     {   // -- M a p I t e r a t o r
       Handle<Map> map = isolate()->factory()->NewMap(
           JS_MAP_ITERATOR_TYPE, JSMapIterator::kSize);
+      map->set_constructor(native_context()->closure());
       native_context()->set_map_iterator_map(*map);
     }
   }


--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to