[heap] Fix alignment of large fixed double array.

This ensures that large objects have alignment suitable for a fixed
double arrays.

Bug: chromium:1161759
Change-Id: I64fe88d641fedbb5e27c2b38c1b9a4e75cab535a
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2639959Reviewed-by: Igor Sheludko <ishell@chromium.org>
Commit-Queue: Ulan Degenbaev <ulan@chromium.org>
Cr-Commit-Position: refs/heads/master@{#72251}

src/heap/memory-chunk-layout.cc

@@ -41,7 +41,7 @@ size_t MemoryChunkLayout::AllocatableMemoryInCodePage() {
 }
 
 intptr_t MemoryChunkLayout::ObjectStartOffsetInDataPage() {
-  return RoundUp(MemoryChunk::kHeaderSize + Bitmap::kSize, kTaggedSize);
+  return RoundUp(MemoryChunk::kHeaderSize + Bitmap::kSize, kDoubleSize);
 }
 
 size_t MemoryChunkLayout::ObjectStartOffsetInMemoryChunk(

test/cctest/heap/test-spaces.cc

@@ -328,6 +328,16 @@ TEST(OldLargeObjectSpace) {
 
   CHECK(lo->Contains(ho));
 
+  CHECK_EQ(0, Heap::GetFillToAlign(ho.address(), kWordAligned));
+  // All large objects have the same alignment because they start at the
+  // same offset within a page. Fixed double arrays have the most strict
+  // alignment requirements.
+  CHECK_EQ(
+      0, Heap::GetFillToAlign(
+             ho.address(),
+             HeapObject::RequiredAlignment(
+                 ReadOnlyRoots(CcTest::i_isolate()).fixed_double_array_map())));
+
   while (true) {
     {
       AllocationResult allocation = lo->AllocateRaw(lo_size);

tools/v8heapconst.py

@@ -230,269 +230,269 @@ INSTANCE_TYPES = {
 
 # List of known V8 maps.
 KNOWN_MAPS = {
-  ("read_only_space", 0x02115): (170, "MetaMap"),
-  ("read_only_space", 0x0213d): (67, "NullMap"),
-  ("read_only_space", 0x02165): (152, "StrongDescriptorArrayMap"),
-  ("read_only_space", 0x0218d): (157, "WeakFixedArrayMap"),
-  ("read_only_space", 0x021cd): (96, "EnumCacheMap"),
-  ("read_only_space", 0x02201): (116, "FixedArrayMap"),
-  ("read_only_space", 0x0224d): (8, "OneByteInternalizedStringMap"),
-  ("read_only_space", 0x02299): (167, "FreeSpaceMap"),
-  ("read_only_space", 0x022c1): (166, "OnePointerFillerMap"),
-  ("read_only_space", 0x022e9): (166, "TwoPointerFillerMap"),
-  ("read_only_space", 0x02311): (67, "UninitializedMap"),
-  ("read_only_space", 0x02389): (67, "UndefinedMap"),
-  ("read_only_space", 0x023cd): (66, "HeapNumberMap"),
-  ("read_only_space", 0x02401): (67, "TheHoleMap"),
-  ("read_only_space", 0x02461): (67, "BooleanMap"),
-  ("read_only_space", 0x02505): (129, "ByteArrayMap"),
-  ("read_only_space", 0x0252d): (116, "FixedCOWArrayMap"),
-  ("read_only_space", 0x02555): (117, "HashTableMap"),
-  ("read_only_space", 0x0257d): (64, "SymbolMap"),
-  ("read_only_space", 0x025a5): (40, "OneByteStringMap"),
-  ("read_only_space", 0x025cd): (133, "ScopeInfoMap"),
-  ("read_only_space", 0x025f5): (175, "SharedFunctionInfoMap"),
-  ("read_only_space", 0x0261d): (160, "CodeMap"),
-  ("read_only_space", 0x02645): (159, "CellMap"),
-  ("read_only_space", 0x0266d): (174, "GlobalPropertyCellMap"),
-  ("read_only_space", 0x02695): (70, "ForeignMap"),
-  ("read_only_space", 0x026bd): (158, "TransitionArrayMap"),
-  ("read_only_space", 0x026e5): (45, "ThinOneByteStringMap"),
-  ("read_only_space", 0x0270d): (165, "FeedbackVectorMap"),
-  ("read_only_space", 0x02749): (67, "ArgumentsMarkerMap"),
-  ("read_only_space", 0x027a9): (67, "ExceptionMap"),
-  ("read_only_space", 0x02805): (67, "TerminationExceptionMap"),
-  ("read_only_space", 0x0286d): (67, "OptimizedOutMap"),
-  ("read_only_space", 0x028cd): (67, "StaleRegisterMap"),
-  ("read_only_space", 0x0292d): (128, "ScriptContextTableMap"),
-  ("read_only_space", 0x02955): (126, "ClosureFeedbackCellArrayMap"),
-  ("read_only_space", 0x0297d): (164, "FeedbackMetadataArrayMap"),
-  ("read_only_space", 0x029a5): (116, "ArrayListMap"),
-  ("read_only_space", 0x029cd): (65, "BigIntMap"),
-  ("read_only_space", 0x029f5): (127, "ObjectBoilerplateDescriptionMap"),
-  ("read_only_space", 0x02a1d): (130, "BytecodeArrayMap"),
-  ("read_only_space", 0x02a45): (161, "CodeDataContainerMap"),
-  ("read_only_space", 0x02a6d): (162, "CoverageInfoMap"),
-  ("read_only_space", 0x02a95): (131, "FixedDoubleArrayMap"),
-  ("read_only_space", 0x02abd): (119, "GlobalDictionaryMap"),
-  ("read_only_space", 0x02ae5): (97, "ManyClosuresCellMap"),
-  ("read_only_space", 0x02b0d): (116, "ModuleInfoMap"),
-  ("read_only_space", 0x02b35): (120, "NameDictionaryMap"),
-  ("read_only_space", 0x02b5d): (97, "NoClosuresCellMap"),
-  ("read_only_space", 0x02b85): (121, "NumberDictionaryMap"),
-  ("read_only_space", 0x02bad): (97, "OneClosureCellMap"),
-  ("read_only_space", 0x02bd5): (122, "OrderedHashMapMap"),
-  ("read_only_space", 0x02bfd): (123, "OrderedHashSetMap"),
-  ("read_only_space", 0x02c25): (124, "OrderedNameDictionaryMap"),
-  ("read_only_space", 0x02c4d): (172, "PreparseDataMap"),
-  ("read_only_space", 0x02c75): (173, "PropertyArrayMap"),
-  ("read_only_space", 0x02c9d): (93, "SideEffectCallHandlerInfoMap"),
-  ("read_only_space", 0x02cc5): (93, "SideEffectFreeCallHandlerInfoMap"),
-  ("read_only_space", 0x02ced): (93, "NextCallSideEffectFreeCallHandlerInfoMap"),
-  ("read_only_space", 0x02d15): (125, "SimpleNumberDictionaryMap"),
-  ("read_only_space", 0x02d3d): (148, "SmallOrderedHashMapMap"),
-  ("read_only_space", 0x02d65): (149, "SmallOrderedHashSetMap"),
-  ("read_only_space", 0x02d8d): (150, "SmallOrderedNameDictionaryMap"),
-  ("read_only_space", 0x02db5): (153, "SourceTextModuleMap"),
-  ("read_only_space", 0x02ddd): (154, "SyntheticModuleMap"),
-  ("read_only_space", 0x02e05): (71, "WasmTypeInfoMap"),
-  ("read_only_space", 0x02e2d): (182, "WeakArrayListMap"),
-  ("read_only_space", 0x02e55): (118, "EphemeronHashTableMap"),
-  ("read_only_space", 0x02e7d): (163, "EmbedderDataArrayMap"),
-  ("read_only_space", 0x02ea5): (183, "WeakCellMap"),
-  ("read_only_space", 0x02ecd): (32, "StringMap"),
-  ("read_only_space", 0x02ef5): (41, "ConsOneByteStringMap"),
-  ("read_only_space", 0x02f1d): (33, "ConsStringMap"),
-  ("read_only_space", 0x02f45): (37, "ThinStringMap"),
-  ("read_only_space", 0x02f6d): (35, "SlicedStringMap"),
-  ("read_only_space", 0x02f95): (43, "SlicedOneByteStringMap"),
-  ("read_only_space", 0x02fbd): (34, "ExternalStringMap"),
-  ("read_only_space", 0x02fe5): (42, "ExternalOneByteStringMap"),
-  ("read_only_space", 0x0300d): (50, "UncachedExternalStringMap"),
-  ("read_only_space", 0x03035): (0, "InternalizedStringMap"),
-  ("read_only_space", 0x0305d): (2, "ExternalInternalizedStringMap"),
-  ("read_only_space", 0x03085): (10, "ExternalOneByteInternalizedStringMap"),
-  ("read_only_space", 0x030ad): (18, "UncachedExternalInternalizedStringMap"),
-  ("read_only_space", 0x030d5): (26, "UncachedExternalOneByteInternalizedStringMap"),
-  ("read_only_space", 0x030fd): (58, "UncachedExternalOneByteStringMap"),
-  ("read_only_space", 0x03125): (67, "SelfReferenceMarkerMap"),
-  ("read_only_space", 0x0314d): (67, "BasicBlockCountersMarkerMap"),
-  ("read_only_space", 0x03191): (87, "ArrayBoilerplateDescriptionMap"),
-  ("read_only_space", 0x03279): (99, "InterceptorInfoMap"),
-  ("read_only_space", 0x053cd): (72, "PromiseFulfillReactionJobTaskMap"),
-  ("read_only_space", 0x053f5): (73, "PromiseRejectReactionJobTaskMap"),
-  ("read_only_space", 0x0541d): (74, "CallableTaskMap"),
-  ("read_only_space", 0x05445): (75, "CallbackTaskMap"),
-  ("read_only_space", 0x0546d): (76, "PromiseResolveThenableJobTaskMap"),
-  ("read_only_space", 0x05495): (79, "FunctionTemplateInfoMap"),
-  ("read_only_space", 0x054bd): (80, "ObjectTemplateInfoMap"),
-  ("read_only_space", 0x054e5): (81, "AccessCheckInfoMap"),
-  ("read_only_space", 0x0550d): (82, "AccessorInfoMap"),
-  ("read_only_space", 0x05535): (83, "AccessorPairMap"),
-  ("read_only_space", 0x0555d): (84, "AliasedArgumentsEntryMap"),
-  ("read_only_space", 0x05585): (85, "AllocationMementoMap"),
-  ("read_only_space", 0x055ad): (88, "AsmWasmDataMap"),
-  ("read_only_space", 0x055d5): (89, "AsyncGeneratorRequestMap"),
-  ("read_only_space", 0x055fd): (90, "BreakPointMap"),
-  ("read_only_space", 0x05625): (91, "BreakPointInfoMap"),
-  ("read_only_space", 0x0564d): (92, "CachedTemplateObjectMap"),
-  ("read_only_space", 0x05675): (94, "ClassPositionsMap"),
-  ("read_only_space", 0x0569d): (95, "DebugInfoMap"),
-  ("read_only_space", 0x056c5): (98, "FunctionTemplateRareDataMap"),
-  ("read_only_space", 0x056ed): (100, "InterpreterDataMap"),
-  ("read_only_space", 0x05715): (101, "ModuleRequestMap"),
-  ("read_only_space", 0x0573d): (102, "PromiseCapabilityMap"),
-  ("read_only_space", 0x05765): (103, "PromiseReactionMap"),
-  ("read_only_space", 0x0578d): (104, "PropertyDescriptorObjectMap"),
-  ("read_only_space", 0x057b5): (105, "PrototypeInfoMap"),
-  ("read_only_space", 0x057dd): (106, "ScriptMap"),
-  ("read_only_space", 0x05805): (107, "SourceTextModuleInfoEntryMap"),
-  ("read_only_space", 0x0582d): (108, "StackFrameInfoMap"),
-  ("read_only_space", 0x05855): (109, "StackTraceFrameMap"),
-  ("read_only_space", 0x0587d): (110, "TemplateObjectDescriptionMap"),
-  ("read_only_space", 0x058a5): (111, "Tuple2Map"),
-  ("read_only_space", 0x058cd): (112, "WasmExceptionTagMap"),
-  ("read_only_space", 0x058f5): (113, "WasmExportedFunctionDataMap"),
-  ("read_only_space", 0x0591d): (114, "WasmIndirectFunctionTableMap"),
-  ("read_only_space", 0x05945): (115, "WasmJSFunctionDataMap"),
-  ("read_only_space", 0x0596d): (134, "SloppyArgumentsElementsMap"),
-  ("read_only_space", 0x05995): (151, "DescriptorArrayMap"),
-  ("read_only_space", 0x059bd): (156, "UncompiledDataWithoutPreparseDataMap"),
-  ("read_only_space", 0x059e5): (155, "UncompiledDataWithPreparseDataMap"),
-  ("read_only_space", 0x05a0d): (171, "OnHeapBasicBlockProfilerDataMap"),
-  ("read_only_space", 0x05a35): (180, "WasmCapiFunctionDataMap"),
-  ("read_only_space", 0x05a5d): (168, "InternalClassMap"),
-  ("read_only_space", 0x05a85): (177, "SmiPairMap"),
-  ("read_only_space", 0x05aad): (176, "SmiBoxMap"),
-  ("read_only_space", 0x05ad5): (145, "ExportedSubClassBaseMap"),
-  ("read_only_space", 0x05afd): (146, "ExportedSubClassMap"),
-  ("read_only_space", 0x05b25): (68, "AbstractInternalClassSubclass1Map"),
-  ("read_only_space", 0x05b4d): (69, "AbstractInternalClassSubclass2Map"),
-  ("read_only_space", 0x05b75): (132, "InternalClassWithSmiElementsMap"),
-  ("read_only_space", 0x05b9d): (169, "InternalClassWithStructElementsMap"),
-  ("read_only_space", 0x05bc5): (147, "ExportedSubClass2Map"),
-  ("read_only_space", 0x05bed): (178, "SortStateMap"),
-  ("read_only_space", 0x05c15): (86, "AllocationSiteWithWeakNextMap"),
-  ("read_only_space", 0x05c3d): (86, "AllocationSiteWithoutWeakNextMap"),
-  ("read_only_space", 0x05c65): (77, "LoadHandler1Map"),
-  ("read_only_space", 0x05c8d): (77, "LoadHandler2Map"),
-  ("read_only_space", 0x05cb5): (77, "LoadHandler3Map"),
-  ("read_only_space", 0x05cdd): (78, "StoreHandler0Map"),
-  ("read_only_space", 0x05d05): (78, "StoreHandler1Map"),
-  ("read_only_space", 0x05d2d): (78, "StoreHandler2Map"),
-  ("read_only_space", 0x05d55): (78, "StoreHandler3Map"),
-  ("map_space", 0x02115): (1057, "ExternalMap"),
-  ("map_space", 0x0213d): (1098, "JSMessageObjectMap"),
-  ("map_space", 0x02165): (181, "WasmRttEqrefMap"),
-  ("map_space", 0x0218d): (181, "WasmRttAnyrefMap"),
-  ("map_space", 0x021b5): (181, "WasmRttExternrefMap"),
-  ("map_space", 0x021dd): (181, "WasmRttFuncrefMap"),
-  ("map_space", 0x02205): (181, "WasmRttI31refMap"),
+  ("read_only_space", 0x02119): (170, "MetaMap"),
+  ("read_only_space", 0x02141): (67, "NullMap"),
+  ("read_only_space", 0x02169): (152, "StrongDescriptorArrayMap"),
+  ("read_only_space", 0x02191): (157, "WeakFixedArrayMap"),
+  ("read_only_space", 0x021d1): (96, "EnumCacheMap"),
+  ("read_only_space", 0x02205): (116, "FixedArrayMap"),
+  ("read_only_space", 0x02251): (8, "OneByteInternalizedStringMap"),
+  ("read_only_space", 0x0229d): (167, "FreeSpaceMap"),
+  ("read_only_space", 0x022c5): (166, "OnePointerFillerMap"),
+  ("read_only_space", 0x022ed): (166, "TwoPointerFillerMap"),
+  ("read_only_space", 0x02315): (67, "UninitializedMap"),
+  ("read_only_space", 0x0238d): (67, "UndefinedMap"),
+  ("read_only_space", 0x023d1): (66, "HeapNumberMap"),
+  ("read_only_space", 0x02405): (67, "TheHoleMap"),
+  ("read_only_space", 0x02465): (67, "BooleanMap"),
+  ("read_only_space", 0x02509): (129, "ByteArrayMap"),
+  ("read_only_space", 0x02531): (116, "FixedCOWArrayMap"),
+  ("read_only_space", 0x02559): (117, "HashTableMap"),
+  ("read_only_space", 0x02581): (64, "SymbolMap"),
+  ("read_only_space", 0x025a9): (40, "OneByteStringMap"),
+  ("read_only_space", 0x025d1): (133, "ScopeInfoMap"),
+  ("read_only_space", 0x025f9): (175, "SharedFunctionInfoMap"),
+  ("read_only_space", 0x02621): (160, "CodeMap"),
+  ("read_only_space", 0x02649): (159, "CellMap"),
+  ("read_only_space", 0x02671): (174, "GlobalPropertyCellMap"),
+  ("read_only_space", 0x02699): (70, "ForeignMap"),
+  ("read_only_space", 0x026c1): (158, "TransitionArrayMap"),
+  ("read_only_space", 0x026e9): (45, "ThinOneByteStringMap"),
+  ("read_only_space", 0x02711): (165, "FeedbackVectorMap"),
+  ("read_only_space", 0x0274d): (67, "ArgumentsMarkerMap"),
+  ("read_only_space", 0x027ad): (67, "ExceptionMap"),
+  ("read_only_space", 0x02809): (67, "TerminationExceptionMap"),
+  ("read_only_space", 0x02871): (67, "OptimizedOutMap"),
+  ("read_only_space", 0x028d1): (67, "StaleRegisterMap"),
+  ("read_only_space", 0x02931): (128, "ScriptContextTableMap"),
+  ("read_only_space", 0x02959): (126, "ClosureFeedbackCellArrayMap"),
+  ("read_only_space", 0x02981): (164, "FeedbackMetadataArrayMap"),
+  ("read_only_space", 0x029a9): (116, "ArrayListMap"),
+  ("read_only_space", 0x029d1): (65, "BigIntMap"),
+  ("read_only_space", 0x029f9): (127, "ObjectBoilerplateDescriptionMap"),
+  ("read_only_space", 0x02a21): (130, "BytecodeArrayMap"),
+  ("read_only_space", 0x02a49): (161, "CodeDataContainerMap"),
+  ("read_only_space", 0x02a71): (162, "CoverageInfoMap"),
+  ("read_only_space", 0x02a99): (131, "FixedDoubleArrayMap"),
+  ("read_only_space", 0x02ac1): (119, "GlobalDictionaryMap"),
+  ("read_only_space", 0x02ae9): (97, "ManyClosuresCellMap"),
+  ("read_only_space", 0x02b11): (116, "ModuleInfoMap"),
+  ("read_only_space", 0x02b39): (120, "NameDictionaryMap"),
+  ("read_only_space", 0x02b61): (97, "NoClosuresCellMap"),
+  ("read_only_space", 0x02b89): (121, "NumberDictionaryMap"),
+  ("read_only_space", 0x02bb1): (97, "OneClosureCellMap"),
+  ("read_only_space", 0x02bd9): (122, "OrderedHashMapMap"),
+  ("read_only_space", 0x02c01): (123, "OrderedHashSetMap"),
+  ("read_only_space", 0x02c29): (124, "OrderedNameDictionaryMap"),
+  ("read_only_space", 0x02c51): (172, "PreparseDataMap"),
+  ("read_only_space", 0x02c79): (173, "PropertyArrayMap"),
+  ("read_only_space", 0x02ca1): (93, "SideEffectCallHandlerInfoMap"),
+  ("read_only_space", 0x02cc9): (93, "SideEffectFreeCallHandlerInfoMap"),
+  ("read_only_space", 0x02cf1): (93, "NextCallSideEffectFreeCallHandlerInfoMap"),
+  ("read_only_space", 0x02d19): (125, "SimpleNumberDictionaryMap"),
+  ("read_only_space", 0x02d41): (148, "SmallOrderedHashMapMap"),
+  ("read_only_space", 0x02d69): (149, "SmallOrderedHashSetMap"),
+  ("read_only_space", 0x02d91): (150, "SmallOrderedNameDictionaryMap"),
+  ("read_only_space", 0x02db9): (153, "SourceTextModuleMap"),
+  ("read_only_space", 0x02de1): (154, "SyntheticModuleMap"),
+  ("read_only_space", 0x02e09): (71, "WasmTypeInfoMap"),
+  ("read_only_space", 0x02e31): (182, "WeakArrayListMap"),
+  ("read_only_space", 0x02e59): (118, "EphemeronHashTableMap"),
+  ("read_only_space", 0x02e81): (163, "EmbedderDataArrayMap"),
+  ("read_only_space", 0x02ea9): (183, "WeakCellMap"),
+  ("read_only_space", 0x02ed1): (32, "StringMap"),
+  ("read_only_space", 0x02ef9): (41, "ConsOneByteStringMap"),
+  ("read_only_space", 0x02f21): (33, "ConsStringMap"),
+  ("read_only_space", 0x02f49): (37, "ThinStringMap"),
+  ("read_only_space", 0x02f71): (35, "SlicedStringMap"),
+  ("read_only_space", 0x02f99): (43, "SlicedOneByteStringMap"),
+  ("read_only_space", 0x02fc1): (34, "ExternalStringMap"),
+  ("read_only_space", 0x02fe9): (42, "ExternalOneByteStringMap"),
+  ("read_only_space", 0x03011): (50, "UncachedExternalStringMap"),
+  ("read_only_space", 0x03039): (0, "InternalizedStringMap"),
+  ("read_only_space", 0x03061): (2, "ExternalInternalizedStringMap"),
+  ("read_only_space", 0x03089): (10, "ExternalOneByteInternalizedStringMap"),
+  ("read_only_space", 0x030b1): (18, "UncachedExternalInternalizedStringMap"),
+  ("read_only_space", 0x030d9): (26, "UncachedExternalOneByteInternalizedStringMap"),
+  ("read_only_space", 0x03101): (58, "UncachedExternalOneByteStringMap"),
+  ("read_only_space", 0x03129): (67, "SelfReferenceMarkerMap"),
+  ("read_only_space", 0x03151): (67, "BasicBlockCountersMarkerMap"),
+  ("read_only_space", 0x03195): (87, "ArrayBoilerplateDescriptionMap"),
+  ("read_only_space", 0x0327d): (99, "InterceptorInfoMap"),
+  ("read_only_space", 0x053d1): (72, "PromiseFulfillReactionJobTaskMap"),
+  ("read_only_space", 0x053f9): (73, "PromiseRejectReactionJobTaskMap"),
+  ("read_only_space", 0x05421): (74, "CallableTaskMap"),
+  ("read_only_space", 0x05449): (75, "CallbackTaskMap"),
+  ("read_only_space", 0x05471): (76, "PromiseResolveThenableJobTaskMap"),
+  ("read_only_space", 0x05499): (79, "FunctionTemplateInfoMap"),
+  ("read_only_space", 0x054c1): (80, "ObjectTemplateInfoMap"),
+  ("read_only_space", 0x054e9): (81, "AccessCheckInfoMap"),
+  ("read_only_space", 0x05511): (82, "AccessorInfoMap"),
+  ("read_only_space", 0x05539): (83, "AccessorPairMap"),
+  ("read_only_space", 0x05561): (84, "AliasedArgumentsEntryMap"),
+  ("read_only_space", 0x05589): (85, "AllocationMementoMap"),
+  ("read_only_space", 0x055b1): (88, "AsmWasmDataMap"),
+  ("read_only_space", 0x055d9): (89, "AsyncGeneratorRequestMap"),
+  ("read_only_space", 0x05601): (90, "BreakPointMap"),
+  ("read_only_space", 0x05629): (91, "BreakPointInfoMap"),
+  ("read_only_space", 0x05651): (92, "CachedTemplateObjectMap"),
+  ("read_only_space", 0x05679): (94, "ClassPositionsMap"),
+  ("read_only_space", 0x056a1): (95, "DebugInfoMap"),
+  ("read_only_space", 0x056c9): (98, "FunctionTemplateRareDataMap"),
+  ("read_only_space", 0x056f1): (100, "InterpreterDataMap"),
+  ("read_only_space", 0x05719): (101, "ModuleRequestMap"),
+  ("read_only_space", 0x05741): (102, "PromiseCapabilityMap"),
+  ("read_only_space", 0x05769): (103, "PromiseReactionMap"),
+  ("read_only_space", 0x05791): (104, "PropertyDescriptorObjectMap"),
+  ("read_only_space", 0x057b9): (105, "PrototypeInfoMap"),
+  ("read_only_space", 0x057e1): (106, "ScriptMap"),
+  ("read_only_space", 0x05809): (107, "SourceTextModuleInfoEntryMap"),
+  ("read_only_space", 0x05831): (108, "StackFrameInfoMap"),
+  ("read_only_space", 0x05859): (109, "StackTraceFrameMap"),
+  ("read_only_space", 0x05881): (110, "TemplateObjectDescriptionMap"),
+  ("read_only_space", 0x058a9): (111, "Tuple2Map"),
+  ("read_only_space", 0x058d1): (112, "WasmExceptionTagMap"),
+  ("read_only_space", 0x058f9): (113, "WasmExportedFunctionDataMap"),
+  ("read_only_space", 0x05921): (114, "WasmIndirectFunctionTableMap"),
+  ("read_only_space", 0x05949): (115, "WasmJSFunctionDataMap"),
+  ("read_only_space", 0x05971): (134, "SloppyArgumentsElementsMap"),
+  ("read_only_space", 0x05999): (151, "DescriptorArrayMap"),
+  ("read_only_space", 0x059c1): (156, "UncompiledDataWithoutPreparseDataMap"),
+  ("read_only_space", 0x059e9): (155, "UncompiledDataWithPreparseDataMap"),
+  ("read_only_space", 0x05a11): (171, "OnHeapBasicBlockProfilerDataMap"),
+  ("read_only_space", 0x05a39): (180, "WasmCapiFunctionDataMap"),
+  ("read_only_space", 0x05a61): (168, "InternalClassMap"),
+  ("read_only_space", 0x05a89): (177, "SmiPairMap"),
+  ("read_only_space", 0x05ab1): (176, "SmiBoxMap"),
+  ("read_only_space", 0x05ad9): (145, "ExportedSubClassBaseMap"),
+  ("read_only_space", 0x05b01): (146, "ExportedSubClassMap"),
+  ("read_only_space", 0x05b29): (68, "AbstractInternalClassSubclass1Map"),
+  ("read_only_space", 0x05b51): (69, "AbstractInternalClassSubclass2Map"),
+  ("read_only_space", 0x05b79): (132, "InternalClassWithSmiElementsMap"),
+  ("read_only_space", 0x05ba1): (169, "InternalClassWithStructElementsMap"),
+  ("read_only_space", 0x05bc9): (147, "ExportedSubClass2Map"),
+  ("read_only_space", 0x05bf1): (178, "SortStateMap"),
+  ("read_only_space", 0x05c19): (86, "AllocationSiteWithWeakNextMap"),
+  ("read_only_space", 0x05c41): (86, "AllocationSiteWithoutWeakNextMap"),
+  ("read_only_space", 0x05c69): (77, "LoadHandler1Map"),
+  ("read_only_space", 0x05c91): (77, "LoadHandler2Map"),
+  ("read_only_space", 0x05cb9): (77, "LoadHandler3Map"),
+  ("read_only_space", 0x05ce1): (78, "StoreHandler0Map"),
+  ("read_only_space", 0x05d09): (78, "StoreHandler1Map"),
+  ("read_only_space", 0x05d31): (78, "StoreHandler2Map"),
+  ("read_only_space", 0x05d59): (78, "StoreHandler3Map"),
+  ("map_space", 0x02119): (1057, "ExternalMap"),
+  ("map_space", 0x02141): (1098, "JSMessageObjectMap"),
+  ("map_space", 0x02169): (181, "WasmRttEqrefMap"),
+  ("map_space", 0x02191): (181, "WasmRttAnyrefMap"),
+  ("map_space", 0x021b9): (181, "WasmRttExternrefMap"),
+  ("map_space", 0x021e1): (181, "WasmRttFuncrefMap"),
+  ("map_space", 0x02209): (181, "WasmRttI31refMap"),
 }
 
 # List of known V8 objects.
 KNOWN_OBJECTS = {
-  ("read_only_space", 0x021b5): "EmptyWeakFixedArray",
-  ("read_only_space", 0x021bd): "EmptyDescriptorArray",
-  ("read_only_space", 0x021f5): "EmptyEnumCache",
-  ("read_only_space", 0x02229): "EmptyFixedArray",
-  ("read_only_space", 0x02231): "NullValue",
-  ("read_only_space", 0x02339): "UninitializedValue",
-  ("read_only_space", 0x023b1): "UndefinedValue",
-  ("read_only_space", 0x023f5): "NanValue",
-  ("read_only_space", 0x02429): "TheHoleValue",
-  ("read_only_space", 0x02455): "HoleNanValue",
-  ("read_only_space", 0x02489): "TrueValue",
-  ("read_only_space", 0x024c9): "FalseValue",
-  ("read_only_space", 0x024f9): "empty_string",
-  ("read_only_space", 0x02735): "EmptyScopeInfo",
-  ("read_only_space", 0x02771): "ArgumentsMarker",
-  ("read_only_space", 0x027d1): "Exception",
-  ("read_only_space", 0x0282d): "TerminationException",
-  ("read_only_space", 0x02895): "OptimizedOut",
-  ("read_only_space", 0x028f5): "StaleRegister",
-  ("read_only_space", 0x03175): "EmptyPropertyArray",
-  ("read_only_space", 0x0317d): "EmptyByteArray",
-  ("read_only_space", 0x03185): "EmptyObjectBoilerplateDescription",
-  ("read_only_space", 0x031b9): "EmptyArrayBoilerplateDescription",
-  ("read_only_space", 0x031c5): "EmptyClosureFeedbackCellArray",
-  ("read_only_space", 0x031cd): "EmptySlowElementDictionary",
-  ("read_only_space", 0x031f1): "EmptyOrderedHashMap",
-  ("read_only_space", 0x03205): "EmptyOrderedHashSet",
-  ("read_only_space", 0x03219): "EmptyFeedbackMetadata",
-  ("read_only_space", 0x03225): "EmptyPropertyCell",
-  ("read_only_space", 0x03239): "EmptyPropertyDictionary",
-  ("read_only_space", 0x03261): "EmptyOrderedPropertyDictionary",
-  ("read_only_space", 0x032a1): "NoOpInterceptorInfo",
-  ("read_only_space", 0x032c9): "EmptyWeakArrayList",
-  ("read_only_space", 0x032d5): "InfinityValue",
-  ("read_only_space", 0x032e1): "MinusZeroValue",
-  ("read_only_space", 0x032ed): "MinusInfinityValue",
-  ("read_only_space", 0x032f9): "SelfReferenceMarker",
-  ("read_only_space", 0x03339): "BasicBlockCountersMarker",
-  ("read_only_space", 0x0337d): "OffHeapTrampolineRelocationInfo",
-  ("read_only_space", 0x03389): "TrampolineTrivialCodeDataContainer",
-  ("read_only_space", 0x03395): "TrampolinePromiseRejectionCodeDataContainer",
-  ("read_only_space", 0x033a1): "GlobalThisBindingScopeInfo",
-  ("read_only_space", 0x033d9): "EmptyFunctionScopeInfo",
-  ("read_only_space", 0x03401): "NativeScopeInfo",
-  ("read_only_space", 0x0341d): "HashSeed",
-  ("old_space", 0x02115): "ArgumentsIteratorAccessor",
-  ("old_space", 0x02159): "ArrayLengthAccessor",
-  ("old_space", 0x0219d): "BoundFunctionLengthAccessor",
-  ("old_space", 0x021e1): "BoundFunctionNameAccessor",
-  ("old_space", 0x02225): "ErrorStackAccessor",
-  ("old_space", 0x02269): "FunctionArgumentsAccessor",
-  ("old_space", 0x022ad): "FunctionCallerAccessor",
-  ("old_space", 0x022f1): "FunctionNameAccessor",
-  ("old_space", 0x02335): "FunctionLengthAccessor",
-  ("old_space", 0x02379): "FunctionPrototypeAccessor",
-  ("old_space", 0x023bd): "RegExpResultIndicesAccessor",
-  ("old_space", 0x02401): "StringLengthAccessor",
-  ("old_space", 0x02445): "InvalidPrototypeValidityCell",
-  ("old_space", 0x02531): "EmptyScript",
-  ("old_space", 0x02571): "ManyClosuresCell",
-  ("old_space", 0x0257d): "ArrayConstructorProtector",
-  ("old_space", 0x02591): "NoElementsProtector",
-  ("old_space", 0x025a5): "IsConcatSpreadableProtector",
-  ("old_space", 0x025b9): "ArraySpeciesProtector",
-  ("old_space", 0x025cd): "TypedArraySpeciesProtector",
-  ("old_space", 0x025e1): "PromiseSpeciesProtector",
-  ("old_space", 0x025f5): "RegExpSpeciesProtector",
-  ("old_space", 0x02609): "StringLengthProtector",
-  ("old_space", 0x0261d): "ArrayIteratorProtector",
-  ("old_space", 0x02631): "ArrayBufferDetachingProtector",
-  ("old_space", 0x02645): "PromiseHookProtector",
-  ("old_space", 0x02659): "PromiseResolveProtector",
-  ("old_space", 0x0266d): "MapIteratorProtector",
-  ("old_space", 0x02681): "PromiseThenProtector",
-  ("old_space", 0x02695): "SetIteratorProtector",
-  ("old_space", 0x026a9): "StringIteratorProtector",
-  ("old_space", 0x026bd): "SingleCharacterStringCache",
-  ("old_space", 0x02ac5): "StringSplitCache",
-  ("old_space", 0x02ecd): "RegExpMultipleCache",
-  ("old_space", 0x032d5): "BuiltinsConstantsTable",
-  ("old_space", 0x036c9): "AsyncFunctionAwaitRejectSharedFun",
-  ("old_space", 0x036ed): "AsyncFunctionAwaitResolveSharedFun",
-  ("old_space", 0x03711): "AsyncGeneratorAwaitRejectSharedFun",
-  ("old_space", 0x03735): "AsyncGeneratorAwaitResolveSharedFun",
-  ("old_space", 0x03759): "AsyncGeneratorYieldResolveSharedFun",
-  ("old_space", 0x0377d): "AsyncGeneratorReturnResolveSharedFun",
-  ("old_space", 0x037a1): "AsyncGeneratorReturnClosedRejectSharedFun",
-  ("old_space", 0x037c5): "AsyncGeneratorReturnClosedResolveSharedFun",
-  ("old_space", 0x037e9): "AsyncIteratorValueUnwrapSharedFun",
-  ("old_space", 0x0380d): "PromiseAllResolveElementSharedFun",
-  ("old_space", 0x03831): "PromiseAllSettledResolveElementSharedFun",
-  ("old_space", 0x03855): "PromiseAllSettledRejectElementSharedFun",
-  ("old_space", 0x03879): "PromiseAnyRejectElementSharedFun",
-  ("old_space", 0x0389d): "PromiseCapabilityDefaultRejectSharedFun",
-  ("old_space", 0x038c1): "PromiseCapabilityDefaultResolveSharedFun",
-  ("old_space", 0x038e5): "PromiseCatchFinallySharedFun",
-  ("old_space", 0x03909): "PromiseGetCapabilitiesExecutorSharedFun",
-  ("old_space", 0x0392d): "PromiseThenFinallySharedFun",
-  ("old_space", 0x03951): "PromiseThrowerFinallySharedFun",
-  ("old_space", 0x03975): "PromiseValueThunkFinallySharedFun",
-  ("old_space", 0x03999): "ProxyRevokeSharedFun",
+  ("read_only_space", 0x021b9): "EmptyWeakFixedArray",
+  ("read_only_space", 0x021c1): "EmptyDescriptorArray",
+  ("read_only_space", 0x021f9): "EmptyEnumCache",
+  ("read_only_space", 0x0222d): "EmptyFixedArray",
+  ("read_only_space", 0x02235): "NullValue",
+  ("read_only_space", 0x0233d): "UninitializedValue",
+  ("read_only_space", 0x023b5): "UndefinedValue",
+  ("read_only_space", 0x023f9): "NanValue",
+  ("read_only_space", 0x0242d): "TheHoleValue",
+  ("read_only_space", 0x02459): "HoleNanValue",
+  ("read_only_space", 0x0248d): "TrueValue",
+  ("read_only_space", 0x024cd): "FalseValue",
+  ("read_only_space", 0x024fd): "empty_string",
+  ("read_only_space", 0x02739): "EmptyScopeInfo",
+  ("read_only_space", 0x02775): "ArgumentsMarker",
+  ("read_only_space", 0x027d5): "Exception",
+  ("read_only_space", 0x02831): "TerminationException",
+  ("read_only_space", 0x02899): "OptimizedOut",
+  ("read_only_space", 0x028f9): "StaleRegister",
+  ("read_only_space", 0x03179): "EmptyPropertyArray",
+  ("read_only_space", 0x03181): "EmptyByteArray",
+  ("read_only_space", 0x03189): "EmptyObjectBoilerplateDescription",
+  ("read_only_space", 0x031bd): "EmptyArrayBoilerplateDescription",
+  ("read_only_space", 0x031c9): "EmptyClosureFeedbackCellArray",
+  ("read_only_space", 0x031d1): "EmptySlowElementDictionary",
+  ("read_only_space", 0x031f5): "EmptyOrderedHashMap",
+  ("read_only_space", 0x03209): "EmptyOrderedHashSet",
+  ("read_only_space", 0x0321d): "EmptyFeedbackMetadata",
+  ("read_only_space", 0x03229): "EmptyPropertyCell",
+  ("read_only_space", 0x0323d): "EmptyPropertyDictionary",
+  ("read_only_space", 0x03265): "EmptyOrderedPropertyDictionary",
+  ("read_only_space", 0x032a5): "NoOpInterceptorInfo",
+  ("read_only_space", 0x032cd): "EmptyWeakArrayList",
+  ("read_only_space", 0x032d9): "InfinityValue",
+  ("read_only_space", 0x032e5): "MinusZeroValue",
+  ("read_only_space", 0x032f1): "MinusInfinityValue",
+  ("read_only_space", 0x032fd): "SelfReferenceMarker",
+  ("read_only_space", 0x0333d): "BasicBlockCountersMarker",
+  ("read_only_space", 0x03381): "OffHeapTrampolineRelocationInfo",
+  ("read_only_space", 0x0338d): "TrampolineTrivialCodeDataContainer",
+  ("read_only_space", 0x03399): "TrampolinePromiseRejectionCodeDataContainer",
+  ("read_only_space", 0x033a5): "GlobalThisBindingScopeInfo",
+  ("read_only_space", 0x033dd): "EmptyFunctionScopeInfo",
+  ("read_only_space", 0x03405): "NativeScopeInfo",
+  ("read_only_space", 0x03421): "HashSeed",
+  ("old_space", 0x02119): "ArgumentsIteratorAccessor",
+  ("old_space", 0x0215d): "ArrayLengthAccessor",
+  ("old_space", 0x021a1): "BoundFunctionLengthAccessor",
+  ("old_space", 0x021e5): "BoundFunctionNameAccessor",
+  ("old_space", 0x02229): "ErrorStackAccessor",
+  ("old_space", 0x0226d): "FunctionArgumentsAccessor",
+  ("old_space", 0x022b1): "FunctionCallerAccessor",
+  ("old_space", 0x022f5): "FunctionNameAccessor",
+  ("old_space", 0x02339): "FunctionLengthAccessor",
+  ("old_space", 0x0237d): "FunctionPrototypeAccessor",
+  ("old_space", 0x023c1): "RegExpResultIndicesAccessor",
+  ("old_space", 0x02405): "StringLengthAccessor",
+  ("old_space", 0x02449): "InvalidPrototypeValidityCell",
+  ("old_space", 0x02535): "EmptyScript",
+  ("old_space", 0x02575): "ManyClosuresCell",
+  ("old_space", 0x02581): "ArrayConstructorProtector",
+  ("old_space", 0x02595): "NoElementsProtector",
+  ("old_space", 0x025a9): "IsConcatSpreadableProtector",
+  ("old_space", 0x025bd): "ArraySpeciesProtector",
+  ("old_space", 0x025d1): "TypedArraySpeciesProtector",
+  ("old_space", 0x025e5): "PromiseSpeciesProtector",
+  ("old_space", 0x025f9): "RegExpSpeciesProtector",
+  ("old_space", 0x0260d): "StringLengthProtector",
+  ("old_space", 0x02621): "ArrayIteratorProtector",
+  ("old_space", 0x02635): "ArrayBufferDetachingProtector",
+  ("old_space", 0x02649): "PromiseHookProtector",
+  ("old_space", 0x0265d): "PromiseResolveProtector",
+  ("old_space", 0x02671): "MapIteratorProtector",
+  ("old_space", 0x02685): "PromiseThenProtector",
+  ("old_space", 0x02699): "SetIteratorProtector",
+  ("old_space", 0x026ad): "StringIteratorProtector",
+  ("old_space", 0x026c1): "SingleCharacterStringCache",
+  ("old_space", 0x02ac9): "StringSplitCache",
+  ("old_space", 0x02ed1): "RegExpMultipleCache",
+  ("old_space", 0x032d9): "BuiltinsConstantsTable",
+  ("old_space", 0x036cd): "AsyncFunctionAwaitRejectSharedFun",
+  ("old_space", 0x036f1): "AsyncFunctionAwaitResolveSharedFun",
+  ("old_space", 0x03715): "AsyncGeneratorAwaitRejectSharedFun",
+  ("old_space", 0x03739): "AsyncGeneratorAwaitResolveSharedFun",
+  ("old_space", 0x0375d): "AsyncGeneratorYieldResolveSharedFun",
+  ("old_space", 0x03781): "AsyncGeneratorReturnResolveSharedFun",
+  ("old_space", 0x037a5): "AsyncGeneratorReturnClosedRejectSharedFun",
+  ("old_space", 0x037c9): "AsyncGeneratorReturnClosedResolveSharedFun",
+  ("old_space", 0x037ed): "AsyncIteratorValueUnwrapSharedFun",
+  ("old_space", 0x03811): "PromiseAllResolveElementSharedFun",
+  ("old_space", 0x03835): "PromiseAllSettledResolveElementSharedFun",
+  ("old_space", 0x03859): "PromiseAllSettledRejectElementSharedFun",
+  ("old_space", 0x0387d): "PromiseAnyRejectElementSharedFun",
+  ("old_space", 0x038a1): "PromiseCapabilityDefaultRejectSharedFun",
+  ("old_space", 0x038c5): "PromiseCapabilityDefaultResolveSharedFun",
+  ("old_space", 0x038e9): "PromiseCatchFinallySharedFun",
+  ("old_space", 0x0390d): "PromiseGetCapabilitiesExecutorSharedFun",
+  ("old_space", 0x03931): "PromiseThenFinallySharedFun",
+  ("old_space", 0x03955): "PromiseThrowerFinallySharedFun",
+  ("old_space", 0x03979): "PromiseValueThunkFinallySharedFun",
+  ("old_space", 0x0399d): "ProxyRevokeSharedFun",
 }
 
 # Lower 32 bits of first page addresses for various heap spaces.