Index: src/arm/ic-arm.cc |
=================================================================== |
--- src/arm/ic-arm.cc (revision 2449) |
+++ src/arm/ic-arm.cc (working copy) |
@@ -77,6 +77,12 @@ |
__ cmp(r3, Operand(JS_GLOBAL_PROXY_TYPE)); |
__ b(eq, miss); |
+ // Possible work-around for http://crbug.com/16276. |
+ __ cmp(r3, Operand(JS_GLOBAL_OBJECT_TYPE)); |
+ __ b(eq, miss); |
+ __ cmp(r3, Operand(JS_BUILTINS_OBJECT_TYPE)); |
+ __ b(eq, miss); |
+ |
// Check that the properties array is a dictionary. |
__ ldr(t0, FieldMemOperand(t1, JSObject::kPropertiesOffset)); |
__ ldr(r3, FieldMemOperand(t0, HeapObject::kMapOffset)); |