Fix InternalObjectHashTable to properly update table ref in observationState

src/object-observe.js

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 20 matching lines @@
 var InternalObjectFreeze = $Object.freeze;
 
 var observationState = %GetObservationState();
 if (IS_UNDEFINED(observationState.observerInfoMap)) {
   observationState.observerInfoMap = %CreateObjectHashTable();
   observationState.objectInfoMap = %CreateObjectHashTable();
   observationState.activeObservers = new InternalArray;
   observationState.observerPriority = 0;
 }
 
-function InternalObjectHashTable(table) {
-  this.table = table;
+function InternalObjectHashTable(tableName) {
+  this.tableName = tableName;
 }
 
 InternalObjectHashTable.prototype = {
   get: function(key) {
-    return %ObjectHashTableGet(this.table, key);
+    return %ObjectHashTableGet(observationState[this.tableName], key);
   },
   set: function(key, value) {
-    this.table = %ObjectHashTableSet(this.table, key, value);
+    observationState[this.tableName] =
+        %ObjectHashTableSet(observationState[this.tableName], key, value);
   },
   has: function(key) {
-    return %ObjectHashTableHas(this.table, key);
+    return %ObjectHashTableHas(observationState[this.tableName], key);
   }
 };
 
-var observerInfoMap = new InternalObjectHashTable(
-    observationState.observerInfoMap);
-var objectInfoMap = new InternalObjectHashTable(observationState.objectInfoMap);
+var observerInfoMap = new InternalObjectHashTable('observerInfoMap');
+var objectInfoMap = new InternalObjectHashTable('objectInfoMap');
 
 function ObjectObserve(object, callback) {
   if (!IS_SPEC_OBJECT(object))
     throw MakeTypeError("observe_non_object", ["observe"]);
   if (!IS_SPEC_FUNCTION(callback))
     throw MakeTypeError("observe_non_function", ["observe"]);
   if (InternalObjectIsFrozen(callback))
     throw MakeTypeError("observe_callback_frozen");
 
   if (!observerInfoMap.has(callback)) {
@@ skipping 120 matching lines @@
   %CheckIsBootstrapping();
   InstallFunctions($Object, DONT_ENUM, $Array(
     "deliverChangeRecords", ObjectDeliverChangeRecords,
     "notify", ObjectNotify,  // TODO: Remove when getNotifier is implemented.
     "observe", ObjectObserve,
     "unobserve", ObjectUnobserve
   ));
 }
 
 SetupObjectObserve();