Extend GCMole with poor man's data flow analysis to catch dead raw pointer vars.

src/bootstrapper.cc

Index: src/bootstrapper.cc
diff --git a/src/bootstrapper.cc b/src/bootstrapper.cc
index f33143925cc40716b108f01360dcff052d189741..c3066999f1ecd833e83d51349846c8c31dbfdaa5 100644
--- a/src/bootstrapper.cc
+++ b/src/bootstrapper.cc
@@ -1701,14 +1701,14 @@ void Genesis::InstallBuiltinFunctionIds() {
   F(16, global_context()->regexp_function())
 
 
-static FixedArray* CreateCache(int size, JSFunction* factory_function) {
+static FixedArray* CreateCache(int size, Handle<JSFunction> factory_function) {
   Factory* factory = factory_function->GetIsolate()->factory();
   // Caches are supposed to live for a long time, allocate in old space.
   int array_size = JSFunctionResultCache::kEntriesIndex + 2 * size;
   // Cannot use cast as object is not fully initialized yet.
   JSFunctionResultCache* cache = reinterpret_cast<JSFunctionResultCache*>(
       *factory->NewFixedArrayWithHoles(array_size, TENURED));
-  cache->set(JSFunctionResultCache::kFactoryIndex, factory_function);
+  cache->set(JSFunctionResultCache::kFactoryIndex, *factory_function);
   cache->MakeZeroSize();
   return cache;
 }
@@ -1726,7 +1726,7 @@ void Genesis::InstallJSFunctionResultCaches() {
   int index = 0;
 
 #define F(size, func) do {                           \

[Mads Ager (chromium), 2011/05/16 06:10:27]

Restore alignment of '\'

-    FixedArray* cache = CreateCache((size), (func)); \
+    FixedArray* cache = CreateCache((size), Handle<JSFunction>(func));  \
     caches->set(index++, cache);                     \
   } while (false)