Index: src/runtime/runtime-array.cc |
diff --git a/src/runtime/runtime-array.cc b/src/runtime/runtime-array.cc |
index eb2843469ad370f055dbe1e47dc736cbbba1b846..fb3a0f4f91acba6fa1711f6a90a7fc2063c41fca 100644 |
--- a/src/runtime/runtime-array.cc |
+++ b/src/runtime/runtime-array.cc |
@@ -102,6 +102,7 @@ RUNTIME_FUNCTION(Runtime_PushIfAbsent) { |
// Strict not needed. Used for cycle detection in Array join implementation. |
RETURN_FAILURE_ON_EXCEPTION( |
isolate, JSObject::AddDataElement(array, length, element, NONE)); |
+ JSObject::ValidateElements(array); |
return isolate->heap()->true_value(); |
} |