Index: src/mips/stub-cache-mips.cc |
diff --git a/src/mips/stub-cache-mips.cc b/src/mips/stub-cache-mips.cc |
index d5cf6de9059aaf4dabf260cd37eba799041ffbdf..cf9f9f6b97b94388f62b256a641b99fb246141ee 100644 |
--- a/src/mips/stub-cache-mips.cc |
+++ b/src/mips/stub-cache-mips.cc |
@@ -2424,6 +2424,12 @@ void CallStubCompiler::CompileHandlerFrontend(Handle<Object> object, |
// Check that the object is a symbol. |
__ GetObjectType(a1, a1, a3); |
__ Branch(&miss, ne, a3, Operand(SYMBOL_TYPE)); |
+ // Check that the maps starting from the prototype haven't changed. |
+ GenerateDirectLoadGlobalFunctionPrototype( |
+ masm(), Context::SYMBOL_FUNCTION_INDEX, a0, &miss); |
+ CheckPrototypes( |
+ Handle<JSObject>(JSObject::cast(object->GetPrototype(isolate()))), |
+ a0, holder, a3, a1, t0, name, &miss); |
break; |
case NUMBER_CHECK: { |