| Index: src/ia32/stub-cache-ia32.cc
|
| diff --git a/src/ia32/stub-cache-ia32.cc b/src/ia32/stub-cache-ia32.cc
|
| index cb3c68ea8eeeacb2d105ee62a800ac5480fdf3d9..03d9fe93e2b7cbd8517d953bf240a5bb05b509ae 100644
|
| --- a/src/ia32/stub-cache-ia32.cc
|
| +++ b/src/ia32/stub-cache-ia32.cc
|
| @@ -765,7 +765,7 @@ void StubCompiler::GenerateStoreTransition(MacroAssembler* masm,
|
| Label* miss_restore_name) {
|
| // Check that the map of the object hasn't changed.
|
| __ CheckMap(receiver_reg, Handle<Map>(object->map()),
|
| - miss_label, DO_SMI_CHECK, REQUIRE_EXACT_MAP);
|
| + miss_label, DO_SMI_CHECK);
|
|
|
| // Perform global security token check if needed.
|
| if (object->IsJSGlobalProxy()) {
|
| @@ -900,7 +900,7 @@ void StubCompiler::GenerateStoreField(MacroAssembler* masm,
|
| Label* miss_label) {
|
| // Check that the map of the object hasn't changed.
|
| __ CheckMap(receiver_reg, Handle<Map>(object->map()),
|
| - miss_label, DO_SMI_CHECK, ALLOW_ELEMENT_TRANSITION_MAPS);
|
| + miss_label, DO_SMI_CHECK);
|
|
|
| // Perform global security token check if needed.
|
| if (object->IsJSGlobalProxy()) {
|
| @@ -1041,8 +1041,7 @@ Register StubCompiler::CheckPrototypes(Handle<JSObject> object,
|
| bool in_new_space = heap()->InNewSpace(*prototype);
|
| Handle<Map> current_map(current->map());
|
| if (!current.is_identical_to(first) || check == CHECK_ALL_MAPS) {
|
| - __ CheckMap(reg, current_map, miss, DONT_DO_SMI_CHECK,
|
| - ALLOW_ELEMENT_TRANSITION_MAPS);
|
| + __ CheckMap(reg, current_map, miss, DONT_DO_SMI_CHECK);
|
| }
|
|
|
| // Check access rights to the global object. This has to happen after
|
| @@ -1083,8 +1082,7 @@ Register StubCompiler::CheckPrototypes(Handle<JSObject> object,
|
|
|
| if (!holder.is_identical_to(first) || check == CHECK_ALL_MAPS) {
|
| // Check the holder map.
|
| - __ CheckMap(reg, Handle<Map>(holder->map()),
|
| - miss, DONT_DO_SMI_CHECK, ALLOW_ELEMENT_TRANSITION_MAPS);
|
| + __ CheckMap(reg, Handle<Map>(holder->map()), miss, DONT_DO_SMI_CHECK);
|
| }
|
|
|
| // Perform security check for access to the global object.
|
| @@ -2715,8 +2713,7 @@ Handle<Code> StoreStubCompiler::CompileStoreInterceptor(
|
| Label miss;
|
|
|
| // Check that the map of the object hasn't changed.
|
| - __ CheckMap(receiver(), Handle<Map>(object->map()),
|
| - &miss, DO_SMI_CHECK, ALLOW_ELEMENT_TRANSITION_MAPS);
|
| + __ CheckMap(receiver(), Handle<Map>(object->map()), &miss, DO_SMI_CHECK);
|
|
|
| // Perform global security token check if needed.
|
| if (object->IsJSGlobalProxy()) {
|
|
|