Change handle creation to use Object*, to comply with strict aliasing rules.

src/handles.h

 // Copyright 2006-2008 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 101 matching lines @@
   }
 
   ~HandleScope() {
     Leave(&previous_);
   }
 
   // Counts the number of allocated handles.
   static int NumberOfHandles();
 
   // Creates a new handle with the given value.
-  static inline void** CreateHandle(void* value) {
+  static inline Object** CreateHandle(Object* value) {
     void** result = current_.next;
     if (result == current_.limit) result = Extend();
     // Update the current next field, set the value in the created
     // handle, and return the result.
     ASSERT(result < current_.limit);
     current_.next = result + 1;
-    *result = value;
-    return result;
+    *reinterpret_cast<Object**>(result) = value;
+    return reinterpret_cast<Object**>(result);
   }
 
  private:
   // Prevent heap allocation or illegal handle scopes.
   HandleScope(const HandleScope&);
   void operator=(const HandleScope&);
   void* operator new(size_t size);
   void operator delete(void* size_t);
 
   static v8::ImplementationUtilities::HandleScopeData current_;
@@ skipping 197 matching lines @@
  private:
   bool has_been_transformed_;  // Tells whether the object has been transformed.
   int unused_property_fields_;  // Captures the unused number of field.
   Handle<JSObject> object_;    // The object being optimized.
 };
 
 
 } }  // namespace v8::internal
 
 #endif  // V8_HANDLES_H_