Index: src/ia32/lithium-codegen-ia32.cc |
diff --git a/src/ia32/lithium-codegen-ia32.cc b/src/ia32/lithium-codegen-ia32.cc |
index 27e460cda4a3d2b2b797eeab5b896f9470d96a38..7198852a8aefbfe162dd8796e19deafb56c52529 100644 |
--- a/src/ia32/lithium-codegen-ia32.cc |
+++ b/src/ia32/lithium-codegen-ia32.cc |
@@ -5596,7 +5596,8 @@ void LCodeGen::EmitDeepCopy(Handle<JSObject> object, |
// Copy in-object properties. |
for (int i = 0; i < inobject_properties; i++) { |
int total_offset = object_offset + object->GetInObjectPropertyOffset(i); |
- Handle<Object> value = Handle<Object>(object->InObjectPropertyAt(i)); |
+ Handle<Object> value = Handle<Object>(object->InObjectPropertyAt(i), |
+ isolate()); |
if (value->IsJSObject()) { |
Handle<JSObject> value_object = Handle<JSObject>::cast(value); |
__ lea(ecx, Operand(result, *offset)); |
@@ -5646,7 +5647,7 @@ void LCodeGen::EmitDeepCopy(Handle<JSObject> object, |
Handle<FixedArray> fast_elements = Handle<FixedArray>::cast(elements); |
for (int i = 0; i < elements_length; i++) { |
int total_offset = elements_offset + FixedArray::OffsetOfElementAt(i); |
- Handle<Object> value(fast_elements->get(i)); |
+ Handle<Object> value(fast_elements->get(i), isolate()); |
if (value->IsJSObject()) { |
Handle<JSObject> value_object = Handle<JSObject>::cast(value); |
__ lea(ecx, Operand(result, *offset)); |