[strong] class objects created in strong mode have their prototype frozen

src/compiler/ast-graph-builder.cc

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/compiler/ast-graph-builder.h"
 
 #include "src/compiler.h"
 #include "src/compiler/ast-loop-assignment-analyzer.h"
 #include "src/compiler/control-builders.h"
 #include "src/compiler/js-type-feedback.h"
@@ skipping 1623 matching lines @@
         break;
       }
     }
   }
 
   // Transform both the class literal and the prototype to fast properties.
   const Operator* op = javascript()->CallRuntime(Runtime::kToFastProperties, 1);
   NewNode(op, environment()->Pop());  // prototype
   NewNode(op, environment()->Pop());  // literal
   if (is_strong(language_mode())) {
+    proto =
+        NewNode(javascript()->CallRuntime(Runtime::kObjectFreeze, 1), proto);
+    // Freezing the class prototype should never deopt.
+    PrepareFrameState(proto, BailoutId::None());
+
     // TODO(conradw): It would be more efficient to define the properties with

[rossberg, 2015/07/14 07:45:22]

Nit: move this comment before the proto freeze (applies there as well).
(Similarly in full-code backends)

[conradw, 2015/07/14 11:21:27]

Done.

     // the right attributes the first time round.
     literal =
         NewNode(javascript()->CallRuntime(Runtime::kObjectFreeze, 1), literal);
     // Freezing the class object should never deopt.
     PrepareFrameState(literal, BailoutId::None());
   }
 
   // Assign to class variable.
   if (expr->scope() != NULL) {
     DCHECK_NOT_NULL(expr->class_variable_proxy());
@@ skipping 2590 matching lines @@
     // Phi does not exist yet, introduce one.
     value = NewPhi(inputs, value, control);
     value->ReplaceInput(inputs - 1, other);
   }
   return value;
 }
 
 }  // namespace compiler
 }  // namespace internal
 }  // namespace v8