Also reset interrupt budget on feedback cell when flushing bytecode

Bug: v8:8394, v8:8395
Change-Id: I1cbb87b67bef4d469abde99070b7870e2b8d0c90
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1601149
Commit-Queue: Mythri Alle <mythria@chromium.org>
Reviewed-by: Ross McIlroy <rmcilroy@chromium.org>
Cr-Commit-Position: refs/heads/master@{#61340}

src/objects/feedback-cell-inl.h

@@ -31,6 +31,11 @@ void FeedbackCell::clear_padding() {
          FeedbackCell::kAlignedSize - FeedbackCell::kUnalignedSize);
 }
 
+void FeedbackCell::reset() {
+  set_value(GetReadOnlyRoots().undefined_value());
+  set_interrupt_budget(FeedbackCell::GetInitialInterruptBudget());
+}
+
 }  // namespace internal
 }  // namespace v8
 

src/objects/feedback-cell.h

@@ -45,6 +45,7 @@ class FeedbackCell : public Struct {
   static const int kAlignedSize = RoundUp<kObjectAlignment>(int{kSize});
 
   inline void clear_padding();
+  inline void reset();
 
   using BodyDescriptor =
       FixedBodyDescriptor<kValueOffset, kInterruptBudgetOffset, kAlignedSize>;

src/objects/js-objects-inl.h

@@ -701,8 +701,7 @@ void JSFunction::ResetIfBytecodeFlushed() {
     // Bytecode was flushed and function is now uncompiled, reset JSFunction
     // by setting code to CompileLazy and clearing the feedback vector.
     set_code(GetIsolate()->builtins()->builtin(i::Builtins::kCompileLazy));
-    raw_feedback_cell()->set_value(
-        ReadOnlyRoots(GetIsolate()).undefined_value());
+    raw_feedback_cell()->reset();
   }
 }