• Jakob Kummerow's avatar
    Fix IC handler cache clearing for JSBuiltinsObject · c177910d
    Jakob Kummerow authored
    The clearing mechanism relies on comparing the cached handler with the installed handler. If we try to preserve monomorphism by pretending that the IC was in uninitialized state, then it will go premonomorphic first, which means on the next miss there's no installed handler available to compare against. Instead, pretend it was premonomorphic, so the comparison will happen right away, will fail as it should, and the cached handler will be cleared.
    
    Thanks to Weiliang for starting the investigation that led to this.
    
    R=verwaest@chromium.org
    
    Review URL: https://codereview.chromium.org/730383002
    
    Cr-Commit-Position: refs/heads/master@{#25394}
    c177910d
ic.cc 97.5 KB