[proxy] Reload the initial map after prototype lookup on constructable

[proxy] Reload the initial map after prototype lookup on constructable
Proxy.

If a constructable Proxy changes the target's prototype during the
prototype lookup the target's initial map stays uninitialized half-way
during object construction.

LOG=n
BUG=chromium:578039
Committed: https://crrev.com/ec30425a779066d7a0750dbe6e81ffa494a2ced7
Cr-Commit-Position: refs/heads/master@{#33359}

[Camillo Bruni, 2016-01-15 13:28:10]

cbruni@chromium.org changed reviewers:
+ jkummerow@chromium.org, neis@chromium.org

[Camillo Bruni, 2016-01-15 13:28:10]

PTAL

[Camillo Bruni, 2016-01-15 13:57:12]

The CQ bit was checked by cbruni@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-01-15 13:57:17]

Dry run: CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1586203003/20001
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1586203003/20001

[commit-bot: I haz the power, 2016-01-15 14:23:30]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2016-01-15 14:23:30]

Dry run: This issue passed the CQ dry run.

[neis, 2016-01-18 08:20:28]

lgtm but let Jakob have a look too

[Jakob Kummerow, 2016-01-18 10:23:39]

lgtm

https://codereview.chromium.org/1586203003/diff/20001/test/mjsunit/regress/re...
File
test/mjsunit/regress/regress-crbug-578039-Proxy_construct_prototype_change.js
(right):

https://codereview.chromium.org/1586203003/diff/20001/test/mjsunit/regress/re...
test/mjsunit/regress/regress-crbug-578039-Proxy_construct_prototype_change.js:1:
// Copyright 2015 the V8 project authors. All rights reserved.
2015++

[Camillo Bruni, 2016-01-18 12:19:18]

The CQ bit was checked by cbruni@chromium.org

[Camillo Bruni, 2016-01-18 12:19:19]

The patchset sent to the CQ was uploaded after l-g-t-m from neis@chromium.org,
jkummerow@chromium.org
Link to the patchset: https://codereview.chromium.org/1586203003/#ps40001
(title: "year++")

[commit-bot: I haz the power, 2016-01-18 12:19:21]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1586203003/40001
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1586203003/40001

[commit-bot: I haz the power, 2016-01-18 12:48:42]

Committed patchset #3 (id:40001)

[commit-bot: I haz the power, 2016-01-18 12:49:36]

Description was changed from

==========
[proxy] Reload the initial map after prototype lookup on constructable
Proxy.

If a constructable Proxy changes the target's prototype during the
prototype lookup the target's initial map stays uninitialized half-way
during object construction.

LOG=n
BUG=chromium:578039
==========

to

==========
[proxy] Reload the initial map after prototype lookup on constructable
Proxy.

If a constructable Proxy changes the target's prototype during the
prototype lookup the target's initial map stays uninitialized half-way
during object construction.

LOG=n
BUG=chromium:578039

Committed: https://crrev.com/ec30425a779066d7a0750dbe6e81ffa494a2ced7
Cr-Commit-Position: refs/heads/master@{#33359}
==========

[commit-bot: I haz the power, 2016-01-18 12:49:37]

Patchset 3 (id:??) landed as
https://crrev.com/ec30425a779066d7a0750dbe6e81ffa494a2ced7
Cr-Commit-Position: refs/heads/master@{#33359}

[Camillo Bruni, 2016-01-18 13:05:26]

Description was changed from

==========
[proxy] Reload the initial map after prototype lookup on constructable
Proxy.

If a constructable Proxy changes the target's prototype during the
prototype lookup the target's initial map stays uninitialized half-way
during object construction.

LOG=n
BUG=chromium:578039

Committed: https://crrev.com/ec30425a779066d7a0750dbe6e81ffa494a2ced7
Cr-Commit-Position: refs/heads/master@{#33359}
==========

to

==========
[proxy] Reload the initial map after prototype lookup on constructable
Proxy.

If a constructable Proxy changes the target's prototype during the
prototype lookup the target's initial map stays uninitialized half-way
during object construction.

LOG=n
BUG=chromium:578039
BACKMERGE=49

Committed: https://crrev.com/ec30425a779066d7a0750dbe6e81ffa494a2ced7
Cr-Commit-Position: refs/heads/master@{#33359}
==========

[Camillo Bruni, 2016-01-18 13:07:40]

Description was changed from

==========
[proxy] Reload the initial map after prototype lookup on constructable
Proxy.

If a constructable Proxy changes the target's prototype during the
prototype lookup the target's initial map stays uninitialized half-way
during object construction.

LOG=n
BUG=chromium:578039
BACKMERGE=49

Committed: https://crrev.com/ec30425a779066d7a0750dbe6e81ffa494a2ced7
Cr-Commit-Position: refs/heads/master@{#33359}
==========

to

==========
[proxy] Reload the initial map after prototype lookup on constructable
Proxy.

If a constructable Proxy changes the target's prototype during the
prototype lookup the target's initial map stays uninitialized half-way
during object construction.

LOG=n
BUG=chromium:578039

Committed: https://crrev.com/ec30425a779066d7a0750dbe6e81ffa494a2ced7
Cr-Commit-Position: refs/heads/master@{#33359}
==========