Index: third_party/WebKit/Source/platform/heap/HeapPage.cpp |
diff --git a/third_party/WebKit/Source/platform/heap/HeapPage.cpp b/third_party/WebKit/Source/platform/heap/HeapPage.cpp |
index 78c725e28e60dc581876d7ae0138289d312712a3..a94679f4db7bb3e4aeff837b82613f731354300c 100644 |
--- a/third_party/WebKit/Source/platform/heap/HeapPage.cpp |
+++ b/third_party/WebKit/Source/platform/heap/HeapPage.cpp |
@@ -699,7 +699,7 @@ |
size_t allocationSize = Heap::allocationSizeFromSize(newSize); |
ASSERT(allocationSize > header->size()); |
size_t expandSize = allocationSize - header->size(); |
- if (isObjectAllocatedAtAllocationPoint(header) && expandSize <= m_remainingAllocationSize) { |
+ if (header->payloadEnd() == m_currentAllocationPoint && expandSize <= m_remainingAllocationSize) { |
m_currentAllocationPoint += expandSize; |
m_remainingAllocationSize -= expandSize; |
@@ -719,7 +719,7 @@ |
size_t allocationSize = Heap::allocationSizeFromSize(newSize); |
ASSERT(header->size() > allocationSize); |
size_t shrinkSize = header->size() - allocationSize; |
- if (isObjectAllocatedAtAllocationPoint(header)) { |
+ if (header->payloadEnd() == m_currentAllocationPoint) { |
m_currentAllocationPoint -= shrinkSize; |
m_remainingAllocationSize += shrinkSize; |
SET_MEMORY_INACCESSIBLE(m_currentAllocationPoint, shrinkSize); |