• Ulan Degenbaev's avatar
    Refactor construction of [Shared]ArrayBuffers. · 77ff0a55
    Ulan Degenbaev authored
    The backing store is now propagated to the constructors directly,
    instead of being attached after the construction. This ensures that
    the backing store is allocated before the array buffer so that we can
    trigger GCs on backing store allocation (if allocation fails).
    
    The only exception is builtin where we have to allocate the array buffer
    before the backing store to comply with the spec.
    
    Bug: v8:9380
    Tbr: verwaest@chromium.org
    Change-Id: Ib37db65853f3673dd769368cc3e8b6538ad07ff2
    Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1853444
    Commit-Queue: Ulan Degenbaev <ulan@chromium.org>
    Reviewed-by: 's avatarJakob Kummerow <jkummerow@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#64240}
    77ff0a55
js-array-buffer.cc 8.44 KB