| Index: src/ia32/lithium-codegen-ia32.cc
|
| diff --git a/src/ia32/lithium-codegen-ia32.cc b/src/ia32/lithium-codegen-ia32.cc
|
| index 183f84740dc932a1038a364fc6b8ccb8a5729b1b..fa6d7ad3b7da131a15f61f79fff791bc723eb36b 100644
|
| --- a/src/ia32/lithium-codegen-ia32.cc
|
| +++ b/src/ia32/lithium-codegen-ia32.cc
|
| @@ -5611,7 +5611,8 @@ void LCodeGen::EmitDeepCopy(Handle<JSObject> object,
|
| // Copy in-object properties.
|
| for (int i = 0; i < inobject_properties; i++) {
|
| int total_offset = object_offset + object->GetInObjectPropertyOffset(i);
|
| - Handle<Object> value = Handle<Object>(object->InObjectPropertyAt(i));
|
| + Handle<Object> value = Handle<Object>(object->InObjectPropertyAt(i),
|
| + isolate());
|
| if (value->IsJSObject()) {
|
| Handle<JSObject> value_object = Handle<JSObject>::cast(value);
|
| __ lea(ecx, Operand(result, *offset));
|
| @@ -5661,7 +5662,7 @@ void LCodeGen::EmitDeepCopy(Handle<JSObject> object,
|
| Handle<FixedArray> fast_elements = Handle<FixedArray>::cast(elements);
|
| for (int i = 0; i < elements_length; i++) {
|
| int total_offset = elements_offset + FixedArray::OffsetOfElementAt(i);
|
| - Handle<Object> value(fast_elements->get(i));
|
| + Handle<Object> value(fast_elements->get(i), isolate());
|
| if (value->IsJSObject()) {
|
| Handle<JSObject> value_object = Handle<JSObject>::cast(value);
|
| __ lea(ecx, Operand(result, *offset));
|
|
|