Commit a0230f63 authored by jarin's avatar jarin Committed by Commit bot

[deoptimizer] Initialize array iterator index to zero to make heap-verify happy.

BUG=chromium:682671

Review-Url: https://codereview.chromium.org/2644283002
Cr-Commit-Position: refs/heads/master@{#42538}
parent 35340917
...@@ -3724,6 +3724,8 @@ Handle<Object> TranslatedState::MaterializeCapturedObjectAt( ...@@ -3724,6 +3724,8 @@ Handle<Object> TranslatedState::MaterializeCapturedObjectAt(
Handle<JSArrayIterator> object = Handle<JSArrayIterator>::cast( Handle<JSArrayIterator> object = Handle<JSArrayIterator>::cast(
isolate_->factory()->NewJSObjectFromMap(map, NOT_TENURED)); isolate_->factory()->NewJSObjectFromMap(map, NOT_TENURED));
slot->value_ = object; slot->value_ = object;
// Initialize the index to zero to make the heap verifier happy.
object->set_index(Smi::FromInt(0));
Handle<Object> properties = materializer.FieldAt(value_index); Handle<Object> properties = materializer.FieldAt(value_index);
Handle<Object> elements = materializer.FieldAt(value_index); Handle<Object> elements = materializer.FieldAt(value_index);
Handle<Object> iterated_object = materializer.FieldAt(value_index); Handle<Object> iterated_object = materializer.FieldAt(value_index);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment