Commit 2c678a71 authored by Shu-yu Guo's avatar Shu-yu Guo Committed by Commit Bot

[protectors] Add missing protector check for keyed store transition case

Bug: v8:9837
Change-Id: Ib31f027f189017eab820b6eec2b7753e0bccdf82
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1864008
Commit-Queue: Shu-yu Guo <syg@chromium.org>
Reviewed-by: 's avatarJakob Kummerow <jkummerow@chromium.org>
Cr-Commit-Position: refs/heads/master@{#64367}
parent 41903f2a
......@@ -826,6 +826,7 @@ void KeyedStoreGenericAssembler::EmitGenericPropertyStore(
BIND(&lookup_transition);
{
Comment("lookup transition");
CheckForAssociatedProtector(name, slow);
TNode<Map> transition_map =
FindCandidateStoreICTransitionMapHandler(receiver_map, name, slow);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment