Index: src/objects-inl.h |
diff --git a/src/objects-inl.h b/src/objects-inl.h |
index 3a9fe2991decc352c34f79a0635ce1968a57539f..f9c0f460922fea8428b7ca6cc987ecec020e3259 100644 |
--- a/src/objects-inl.h |
+++ b/src/objects-inl.h |
@@ -4735,7 +4735,8 @@ bool Code::IsWeakObjectInOptimizedCode(Object* object) { |
} else if (object->IsPropertyCell()) { |
object = PropertyCell::cast(object)->value(); |
} |
- if (object->IsJSObject()) { |
+ if (object->IsJSObject() || object->IsJSProxy()) { |
+ // JSProxy is handled like JSObject because it can morph into one. |
return FLAG_weak_embedded_objects_in_optimized_code; |
} |
if (object->IsFixedArray()) { |