| Index: src/objects.cc
|
| diff --git a/src/objects.cc b/src/objects.cc
|
| index ac3934155ddfb27ec4ce86e739203d3baa25f4c5..ef56f08f692c7801d7e9979746ed1ea1ea1fd66c 100644
|
| --- a/src/objects.cc
|
| +++ b/src/objects.cc
|
| @@ -16481,7 +16481,8 @@ Handle<JSArrayBuffer> JSTypedArray::MaterializeArrayBuffer(
|
| void* backing_store =
|
| isolate->array_buffer_allocator()->AllocateUninitialized(
|
| fixed_typed_array->DataSize());
|
| - isolate->heap()->RegisterNewArrayBuffer(backing_store,
|
| + isolate->heap()->RegisterNewArrayBuffer(isolate->heap()->InNewSpace(*buffer),
|
| + backing_store,
|
| fixed_typed_array->DataSize());
|
| buffer->set_backing_store(backing_store);
|
| buffer->set_is_external(false);
|
|
|