| Index: src/compiler/js-global-object-specialization.cc
|
| diff --git a/src/compiler/js-global-object-specialization.cc b/src/compiler/js-global-object-specialization.cc
|
| index 81ea1ad44ba9932a111243a1e66996ad1da0a6b5..a90aeac9bfde63cf93a932221dc02e2f948c588f 100644
|
| --- a/src/compiler/js-global-object-specialization.cc
|
| +++ b/src/compiler/js-global-object-specialization.cc
|
| @@ -173,8 +173,8 @@ Reduction JSGlobalObjectSpecialization::ReduceJSStoreGlobal(Node* node) {
|
| Node* check =
|
| graph()->NewNode(simplified()->ReferenceEqual(Type::Tagged()), value,
|
| jsgraph()->Constant(property_cell_value));
|
| - control = graph()->NewNode(common()->DeoptimizeUnless(), check,
|
| - frame_state, effect, control);
|
| + control = effect = graph()->NewNode(common()->DeoptimizeUnless(), check,
|
| + frame_state, effect, control);
|
| break;
|
| }
|
| case PropertyCellType::kConstantType: {
|
| @@ -185,8 +185,8 @@ Reduction JSGlobalObjectSpecialization::ReduceJSStoreGlobal(Node* node) {
|
| Type* property_cell_value_type = Type::TaggedSigned();
|
| if (property_cell_value->IsHeapObject()) {
|
| // Deoptimize if the {value} is a Smi.
|
| - control = graph()->NewNode(common()->DeoptimizeIf(), check, frame_state,
|
| - effect, control);
|
| + control = effect = graph()->NewNode(common()->DeoptimizeIf(), check,
|
| + frame_state, effect, control);
|
|
|
| // Load the {value} map check against the {property_cell} map.
|
| Node* value_map = effect =
|
| @@ -199,8 +199,8 @@ Reduction JSGlobalObjectSpecialization::ReduceJSStoreGlobal(Node* node) {
|
| jsgraph()->HeapConstant(property_cell_value_map));
|
| property_cell_value_type = Type::TaggedPointer();
|
| }
|
| - control = graph()->NewNode(common()->DeoptimizeUnless(), check,
|
| - frame_state, effect, control);
|
| + control = effect = graph()->NewNode(common()->DeoptimizeUnless(), check,
|
| + frame_state, effect, control);
|
| effect = graph()->NewNode(
|
| simplified()->StoreField(
|
| AccessBuilder::ForPropertyCellValue(property_cell_value_type)),
|
|
|