Index: src/ia32/stub-cache-ia32.cc |
=================================================================== |
--- src/ia32/stub-cache-ia32.cc (revision 7926) |
+++ src/ia32/stub-cache-ia32.cc (working copy) |
@@ -2115,6 +2115,7 @@ |
// repatch it to global receiver. |
if (object->IsGlobalObject()) return heap()->undefined_value(); |
if (cell != NULL) return heap()->undefined_value(); |
+ if (!object->IsJSObject()) return heap()->undefined_value(); |
int depth = optimization.GetPrototypeDepthOfExpectedType( |
JSObject::cast(object), holder); |
if (depth == kInvalidProtoDepth) return heap()->undefined_value(); |