Fix promotion of JSFunctions with in-object properties.

src/heap/scavenger.cc

Index: src/heap/scavenger.cc
diff --git a/src/heap/scavenger.cc b/src/heap/scavenger.cc
index 25e1fc2d33a569cf221970b5307e1d0b30a29fbb..a6674d8478abf1d737955ba546ac2b593ccdaf3c 100644
--- a/src/heap/scavenger.cc
+++ b/src/heap/scavenger.cc
@@ -192,12 +192,7 @@ class ScavengingVisitor : public StaticVisitorBase {
       *slot = target;
 
       if (object_contents == POINTER_OBJECT) {
-        if (map->instance_type() == JS_FUNCTION_TYPE) {
-          heap->promotion_queue()->insert(target,
-                                          JSFunction::kNonWeakFieldsEndOffset);
-        } else {
-          heap->promotion_queue()->insert(target, object_size);
-        }
+        heap->promotion_queue()->insert(target, object_size);
       }
       heap->IncrementPromotedObjectsSize(object_size);
       return true;