| Index: src/objects-inl.h
|
| diff --git a/src/objects-inl.h b/src/objects-inl.h
|
| index 3a9fe2991decc352c34f79a0635ce1968a57539f..f9c0f460922fea8428b7ca6cc987ecec020e3259 100644
|
| --- a/src/objects-inl.h
|
| +++ b/src/objects-inl.h
|
| @@ -4735,7 +4735,8 @@ bool Code::IsWeakObjectInOptimizedCode(Object* object) {
|
| } else if (object->IsPropertyCell()) {
|
| object = PropertyCell::cast(object)->value();
|
| }
|
| - if (object->IsJSObject()) {
|
| + if (object->IsJSObject() || object->IsJSProxy()) {
|
| + // JSProxy is handled like JSObject because it can morph into one.
|
| return FLAG_weak_embedded_objects_in_optimized_code;
|
| }
|
| if (object->IsFixedArray()) {
|
|
|