DescriptionOnly verify in-object fields in fast properties case.
This matches the behavior of JSObject::JSObjectVerify() and seems to be
the current contract for --verify-heap.
BUG=chromium:572590
LOG=n
Committed: https://crrev.com/2fcf3aa62cfbd57be3013df77aaf2083cd4f3de6
Cr-Commit-Position: refs/heads/master@{#33056}
Patch Set 1 #Patch Set 2 : Ignition cannot deal with the test case yet. #
Messages
Total messages: 12 (5 generated)
|