| Index: src/ia32/ic-ia32.cc
|
| ===================================================================
|
| --- src/ia32/ic-ia32.cc (revision 2430)
|
| +++ src/ia32/ic-ia32.cc (working copy)
|
| @@ -75,6 +75,12 @@
|
| __ cmp(r0, JS_GLOBAL_PROXY_TYPE);
|
| __ j(equal, miss_label, not_taken);
|
|
|
| + // Possible work-around for http://crbug.com/16276.
|
| + __ cmp(r0, JS_GLOBAL_OBJECT_TYPE);
|
| + __ j(equal, miss_label, not_taken);
|
| + __ cmp(r0, JS_BUILTINS_OBJECT_TYPE);
|
| + __ j(equal, miss_label, not_taken);
|
| +
|
| // Check that the properties array is a dictionary.
|
| __ mov(r0, FieldOperand(r1, JSObject::kPropertiesOffset));
|
| __ cmp(FieldOperand(r0, HeapObject::kMapOffset),
|
|
|