| Index: src/ia32/lithium-codegen-ia32.cc
|
| diff --git a/src/ia32/lithium-codegen-ia32.cc b/src/ia32/lithium-codegen-ia32.cc
|
| index 27e460cda4a3d2b2b797eeab5b896f9470d96a38..7198852a8aefbfe162dd8796e19deafb56c52529 100644
|
| --- a/src/ia32/lithium-codegen-ia32.cc
|
| +++ b/src/ia32/lithium-codegen-ia32.cc
|
| @@ -5596,7 +5596,8 @@ void LCodeGen::EmitDeepCopy(Handle<JSObject> object,
|
| // Copy in-object properties.
|
| for (int i = 0; i < inobject_properties; i++) {
|
| int total_offset = object_offset + object->GetInObjectPropertyOffset(i);
|
| - Handle<Object> value = Handle<Object>(object->InObjectPropertyAt(i));
|
| + Handle<Object> value = Handle<Object>(object->InObjectPropertyAt(i),
|
| + isolate());
|
| if (value->IsJSObject()) {
|
| Handle<JSObject> value_object = Handle<JSObject>::cast(value);
|
| __ lea(ecx, Operand(result, *offset));
|
| @@ -5646,7 +5647,7 @@ void LCodeGen::EmitDeepCopy(Handle<JSObject> object,
|
| Handle<FixedArray> fast_elements = Handle<FixedArray>::cast(elements);
|
| for (int i = 0; i < elements_length; i++) {
|
| int total_offset = elements_offset + FixedArray::OffsetOfElementAt(i);
|
| - Handle<Object> value(fast_elements->get(i));
|
| + Handle<Object> value(fast_elements->get(i), isolate());
|
| if (value->IsJSObject()) {
|
| Handle<JSObject> value_object = Handle<JSObject>::cast(value);
|
| __ lea(ecx, Operand(result, *offset));
|
|
|