| Index: src/compiler/js-typed-lowering.cc
|
| diff --git a/src/compiler/js-typed-lowering.cc b/src/compiler/js-typed-lowering.cc
|
| index 670430609f069e582b02d079b84441a316fd1db7..05daf3e2af62411b6d50f2e3877a4685288b2d6d 100644
|
| --- a/src/compiler/js-typed-lowering.cc
|
| +++ b/src/compiler/js-typed-lowering.cc
|
| @@ -2223,21 +2223,11 @@ Reduction JSTypedLowering::ReduceJSForInPrepare(Node* node) {
|
| Node* efalse0;
|
| {
|
| // FixedArray case.
|
| - Node* receiver_instance_type = efalse0 = graph()->NewNode(
|
| - simplified()->LoadField(AccessBuilder::ForMapInstanceType()),
|
| - receiver_map, effect, if_false0);
|
| -
|
| - cache_type_false0 = graph()->NewNode(
|
| - common()->Select(MachineRepresentation::kTagged, BranchHint::kFalse),
|
| - graph()->NewNode(machine()->Word32Equal(), receiver_instance_type,
|
| - jsgraph()->Uint32Constant(JS_PROXY_TYPE)),
|
| - jsgraph()->ZeroConstant(), // Zero indicagtes proxy.
|
| - jsgraph()->OneConstant()); // One means slow check.
|
| -
|
| + cache_type_false0 = jsgraph()->OneConstant(); // Smi means slow check
|
| cache_array_false0 = cache_type;
|
| cache_length_false0 = efalse0 = graph()->NewNode(
|
| simplified()->LoadField(AccessBuilder::ForFixedArrayLength()),
|
| - cache_array_false0, efalse0, if_false0);
|
| + cache_array_false0, effect, if_false0);
|
| }
|
|
|
| control = graph()->NewNode(common()->Merge(2), if_true0, if_false0);
|
|
|