| Index: src/objects.cc
|
| diff --git a/src/objects.cc b/src/objects.cc
|
| index 2f2bd643484eec81d25a54b241841dfb0d4bdb25..b77163617e5ec4e3b5a4055b37bc6866cf0d5d2b 100644
|
| --- a/src/objects.cc
|
| +++ b/src/objects.cc
|
| @@ -627,6 +627,8 @@ MaybeObject* Object::GetProperty(Object* receiver,
|
| // that even though we may not actually end up loading the named
|
| // property from the current object, we still check that we have
|
| // access to it.
|
| + // TODO(dcarney): revert.
|
| + CHECK(current->IsJSObject());
|
| JSObject* checked = JSObject::cast(current);
|
| if (!heap->isolate()->MayNamedAccess(checked, name, v8::ACCESS_GET)) {
|
| return checked->GetPropertyWithFailedAccessCheck(receiver,
|
|
|