| Index: src/objects.cc
|
| diff --git a/src/objects.cc b/src/objects.cc
|
| index 67e32a63ac4bb1db49d6702eac5a2b793ab67575..8c14d057d2e395533a8589615098881c8a902757 100644
|
| --- a/src/objects.cc
|
| +++ b/src/objects.cc
|
| @@ -17100,10 +17100,11 @@ Handle<JSArrayBuffer> JSTypedArray::MaterializeArrayBuffer(
|
| void* backing_store =
|
| isolate->array_buffer_allocator()->AllocateUninitialized(
|
| fixed_typed_array->DataSize());
|
| - isolate->heap()->RegisterNewArrayBuffer(backing_store,
|
| - fixed_typed_array->DataSize());
|
| buffer->set_backing_store(backing_store);
|
| buffer->set_is_external(false);
|
| + isolate->heap()->RegisterNewArrayBuffer(isolate->heap()->InNewSpace(*buffer),
|
| + backing_store,
|
| + fixed_typed_array->DataSize());
|
| memcpy(buffer->backing_store(),
|
| fixed_typed_array->DataPtr(),
|
| fixed_typed_array->DataSize());
|
|
|