Description[turbofan] Fix ForInStatement that deopts during filter.
This adds a missing bailout id to a ForInStatement for when retrieving
and filtering a property name deoptimizes. This can happen with proxies
that have a getPropertyDescriptor trap.
R=jarin@chromium.org
TEST=mjsunit/for-in-opt
Committed: https://crrev.com/b807d112d785f65807494761c9d0b2fae5d6a7af
Cr-Commit-Position: refs/heads/master@{#27846}
Patch Set 1 #Patch Set 2 : Ported to all architectures. #
Messages
Total messages: 6 (1 generated)
|