Description[field type tracking] Fix handling of cleared WeakCells
Whenever a generalization is computed, the inputs must be checked for being cleared, and if they are, the generalization must be Type::Any.
Hopefully this fixes Chromium issue 527994 as well.
BUG=v8:4325, chromium:527994
LOG=n
Committed: https://crrev.com/afa60ff604bf41cacd08a8364e8a70a2b5f69d30
Cr-Commit-Position: refs/heads/master@{#30887}
Patch Set 1 #Patch Set 2 : add more --verify-heap checks after object migrations #
Messages
Total messages: 11 (4 generated)
|