| Index: src/objects.cc
|
| diff --git a/src/objects.cc b/src/objects.cc
|
| index edd758370bdb76f490e24e16b162b2f9ee98b9ff..bd8b43e34ed933db54c958c31754ca5b5a7a5e82 100644
|
| --- a/src/objects.cc
|
| +++ b/src/objects.cc
|
| @@ -16503,7 +16503,8 @@ Handle<JSArrayBuffer> JSTypedArray::MaterializeArrayBuffer(
|
| void* backing_store =
|
| isolate->array_buffer_allocator()->AllocateUninitialized(
|
| fixed_typed_array->DataSize());
|
| - isolate->heap()->RegisterNewArrayBuffer(backing_store,
|
| + isolate->heap()->RegisterNewArrayBuffer(isolate->heap()->InNewSpace(*buffer),
|
| + backing_store,
|
| fixed_typed_array->DataSize());
|
| buffer->set_backing_store(backing_store);
|
| buffer->set_is_external(false);
|
|
|