Disallow Object.observe calls on access-checked objects

src/messages.h

 // Copyright 2006-2008 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // The infrastructure used for (localized) message reporting in V8.
 //
 // Note: there's a big unresolved issue about ownership of the data
 // structures used by this framework.
 
 #ifndef V8_MESSAGES_H_
@@ skipping 142 matching lines @@
   T(ObjectGetterExpectingFunction,                                             \
     "Object.prototype.__defineGetter__: Expecting function")                   \
   T(ObjectGetterCallable, "Getter must be a function: %")                      \
   T(ObjectNotExtensible, "Can't add property %, object is not extensible")     \
   T(ObjectSetterExpectingFunction,                                             \
     "Object.prototype.__defineSetter__: Expecting function")                   \
   T(ObjectSetterCallable, "Setter must be a function: %")                      \
   T(ObserveCallbackFrozen,                                                     \
     "Object.observe cannot deliver to a frozen function object")               \
   T(ObserveGlobalProxy, "% cannot be called on the global proxy object")       \
+  T(ObserveAccessChecked, "% cannot be called on access-checked objects")      \
   T(ObserveInvalidAccept,                                                      \
     "Third argument to Object.observe must be an array of strings.")           \
   T(ObserveNonFunction, "Object.% cannot deliver to non-function")             \
   T(ObserveNonObject, "Object.% cannot % non-object")                          \
   T(ObserveNotifyNonNotifier, "notify called on non-notifier object")          \
   T(ObservePerformNonFunction, "Cannot perform non-function")                  \
   T(ObservePerformNonString, "Invalid non-string changeType")                  \
   T(ObserveTypeNonString,                                                      \
     "Invalid changeRecord with non-string 'type' property")                    \
   T(OrdinaryFunctionCalledAsConstructor,                                       \
@@ skipping 313 matching lines @@
 
   static MUST_USE_RESULT MaybeHandle<String> GetStringifiedProperty(
       Isolate* isolate, LookupIterator* property_lookup,
       Handle<String> default_value);
 
   List<Handle<JSObject> > visited_;
 };
 } }  // namespace v8::internal
 
 #endif  // V8_MESSAGES_H_