• mstarzinger's avatar
    Introduce safe interface to "copy and grow" FixedArray. · bcad9b54
    mstarzinger authored
    This introduces a CopyFixedArrayAndGrow method on Factory that takes
    the "grow amount" instead of the "new size" as an argument. The new
    interface is safer because it allows for mutations by the GC that
    potentially trim the source array.
    
    This also fixes a bug in SharedFunctionInfo::AddToOptimizedCodeMap
    where the aformentioned scenario led to unused entries within the
    optimized code map.
    
    Note that FixedArray::CopySize is hereby deprecated because it is
    considered unsafe and should no longer be used.
    
    R=hpayer@chromium.org
    TEST=mjsunit/regress/regress-crbug-513507
    BUG=chromium:513507
    LOG=n
    
    Review URL: https://codereview.chromium.org/1255173006
    
    Cr-Commit-Position: refs/heads/master@{#30012}
    bcad9b54
regress-crbug-513507.js 677 Bytes