| Index: third_party/WebKit/Source/platform/heap/HeapPage.cpp
|
| diff --git a/third_party/WebKit/Source/platform/heap/HeapPage.cpp b/third_party/WebKit/Source/platform/heap/HeapPage.cpp
|
| index 78c725e28e60dc581876d7ae0138289d312712a3..a94679f4db7bb3e4aeff837b82613f731354300c 100644
|
| --- a/third_party/WebKit/Source/platform/heap/HeapPage.cpp
|
| +++ b/third_party/WebKit/Source/platform/heap/HeapPage.cpp
|
| @@ -699,7 +699,7 @@
|
| size_t allocationSize = Heap::allocationSizeFromSize(newSize);
|
| ASSERT(allocationSize > header->size());
|
| size_t expandSize = allocationSize - header->size();
|
| - if (isObjectAllocatedAtAllocationPoint(header) && expandSize <= m_remainingAllocationSize) {
|
| + if (header->payloadEnd() == m_currentAllocationPoint && expandSize <= m_remainingAllocationSize) {
|
| m_currentAllocationPoint += expandSize;
|
| m_remainingAllocationSize -= expandSize;
|
|
|
| @@ -719,7 +719,7 @@
|
| size_t allocationSize = Heap::allocationSizeFromSize(newSize);
|
| ASSERT(header->size() > allocationSize);
|
| size_t shrinkSize = header->size() - allocationSize;
|
| - if (isObjectAllocatedAtAllocationPoint(header)) {
|
| + if (header->payloadEnd() == m_currentAllocationPoint) {
|
| m_currentAllocationPoint -= shrinkSize;
|
| m_remainingAllocationSize += shrinkSize;
|
| SET_MEMORY_INACCESSIBLE(m_currentAllocationPoint, shrinkSize);
|
|
|