Fix corner case when JSFunction is evicted from flusher.

Fix corner case when JSFunction is evicted from flusher.

This fixes a corner case that happens when JSFunctions are enqueued as
code flushing candidates but their respective SharedFunctionInfo isn't.
If the JSFunction gets evicted due to optimization the code slot in the
SharedFunctionInfo will never be recorded in the slots buffer.

R=hpayer@chromium.org
BUG=chromium:168801
TEST=cctest/test-heap/Regress168801

Committed: http://code.google.com/p/v8/source/detail?r=13481

[Hannes Payer (out of office), 2013-01-23 16:03:41]

LGTM with one comment.

https://codereview.chromium.org/11896064/diff/1/test/cctest/test-heap.cc
File test/cctest/test-heap.cc (right):

https://codereview.chromium.org/11896064/diff/1/test/cctest/test-heap.cc#newc...
test/cctest/test-heap.cc:2796: CompileRun("var x = 0;");
CompileRun needed?

[Michael Starzinger, 2013-01-23 16:16:03]

Landed.

https://codereview.chromium.org/11896064/diff/1/test/cctest/test-heap.cc
File test/cctest/test-heap.cc (right):

https://codereview.chromium.org/11896064/diff/1/test/cctest/test-heap.cc#newc...
test/cctest/test-heap.cc:2796: CompileRun("var x = 0;");
On 2013/01/23 16:03:41, Hannes Payer wrote:
> CompileRun needed?

Done.