[runtime] Force internalize names used before lookup in in DescriptorArray and TransitionArray

src/accessors.cc

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/accessors.h"
 
 #include "src/api.h"
 #include "src/contexts.h"
 #include "src/deoptimizer.h"
 #include "src/execution.h"
@@ skipping 14 matching lines @@
     Handle<Name> name,
     AccessorNameGetterCallback getter,
     AccessorNameSetterCallback setter,
     PropertyAttributes attributes) {
   Factory* factory = isolate->factory();
   Handle<AccessorInfo> info = factory->NewAccessorInfo();
   info->set_property_attributes(attributes);
   info->set_all_can_read(false);
   info->set_all_can_write(false);
   info->set_is_special_data_property(true);
-  info->set_name(*name);
+  info->set_name(*factory->InternalizeName(name));
   Handle<Object> get = v8::FromCData(isolate, getter);
   if (setter == nullptr) setter = &ReconfigureToDataProperty;
   Handle<Object> set = v8::FromCData(isolate, setter);
   info->set_getter(*get);
   info->set_setter(*set);
   return info;
 }
 
 
 static V8_INLINE bool CheckForName(Handle<Name> name,
@@ skipping 29 matching lines @@
       }
 
       return false;
   }
 }
 
 
 bool Accessors::IsJSArrayBufferViewFieldAccessor(Handle<Map> map,
                                                  Handle<Name> name,
                                                  int* object_offset) {
+  DCHECK(name->IsUniqueName());
   Isolate* isolate = name->GetIsolate();
 
   switch (map->instance_type()) {
     case JS_TYPED_ARRAY_TYPE: {
       if (!CheckForName(name, isolate->factory()->length_string(),
                         JSTypedArray::kLengthOffset, object_offset) &&
           !CheckForName(name, isolate->factory()->byte_length_string(),
                         JSTypedArray::kByteLengthOffset, object_offset) &&
           !CheckForName(name, isolate->factory()->byte_offset_string(),
                         JSTypedArray::kByteOffsetOffset, object_offset)) {
@@ skipping 1109 matching lines @@
   Isolate* isolate = name->GetIsolate();
   Handle<AccessorInfo> info = MakeAccessor(isolate, name, &ModuleGetExport,
                                            &ModuleSetExport, attributes);
   info->set_data(Smi::FromInt(index));
   return info;
 }
 
 
 }  // namespace internal
 }  // namespace v8