making heap verification more aggressive

src/objects.h

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef V8_OBJECTS_H_
 #define V8_OBJECTS_H_
 
 #include <iosfwd>
 
 #include "src/assert-scope.h"
@@ skipping 944 matching lines @@
   V(Code)                        \
   V(AbstractCode)                \
   V(Oddball)                     \
   V(SharedFunctionInfo)          \
   V(JSValue)                     \
   V(JSDate)                      \
   V(JSMessageObject)             \
   V(StringWrapper)               \
   V(Foreign)                     \
   V(Boolean)                     \
+  V(JSArgumentsObject)           \
   V(JSArray)                     \
   V(JSArrayBuffer)               \
   V(JSArrayBufferView)           \
   V(JSTypedArray)                \
   V(JSDataView)                  \
   V(JSProxy)                     \
   V(JSError)                     \
   V(JSPromise)                   \
   V(JSSet)                       \
   V(JSMap)                       \
@@ skipping 1596 matching lines @@
 
 // Common superclass for JSSloppyArgumentsObject and JSStrictArgumentsObject.
 class JSArgumentsObject: public JSObject {
  public:
   // Offsets of object fields.
   static const int kLengthOffset = JSObject::kHeaderSize;
   static const int kHeaderSize = kLengthOffset + kPointerSize;
   // Indices of in-object properties.
   static const int kLengthIndex = 0;
 
+  DECLARE_VERIFIER(JSArgumentsObject)
+  DECLARE_CAST(JSArgumentsObject)
+
  private:
   DISALLOW_IMPLICIT_CONSTRUCTORS(JSArgumentsObject);
 };
 
 
 // JSSloppyArgumentsObject is just a JSObject with specific initial map.
 // This initial map adds in-object properties for "length" and "callee".
 class JSSloppyArgumentsObject: public JSArgumentsObject {
  public:
   // Offsets of object fields.
   static const int kCalleeOffset = JSArgumentsObject::kHeaderSize;
   static const int kSize = kCalleeOffset + kPointerSize;
   // Indices of in-object properties.
   static const int kCalleeIndex = 1;
 
+  DECLARE_CAST(JSSloppyArgumentsObject)
+
  private:
   DISALLOW_IMPLICIT_CONSTRUCTORS(JSSloppyArgumentsObject);
 };
 
 
 // JSStrictArgumentsObject is just a JSObject with specific initial map.
 // This initial map adds an in-object property for "length".
 class JSStrictArgumentsObject: public JSArgumentsObject {
  public:
   // Offsets of object fields.
   static const int kSize = JSArgumentsObject::kHeaderSize;
 
+  DECLARE_CAST(JSStrictArgumentsObject)
+
  private:
   DISALLOW_IMPLICIT_CONSTRUCTORS(JSStrictArgumentsObject);
 };
 
 
 // Common superclass for FixedArrays that allow implementations to share
 // common accessors and some code paths.
 class FixedArrayBase: public HeapObject {
  public:
   // [length]: length of the array.
@@ skipping 8347 matching lines @@
     }
     return value;
   }
 };
 
 
 }  // NOLINT, false-positive due to second-order macros.
 }  // NOLINT, false-positive due to second-order macros.
 
 #endif  // V8_OBJECTS_H_