DescriptionWith this fix, we only create the enum cache for own property descriptors (originally we cached all descriptors in the map). The problem was that the size of all descriptors could be trimmed during GC triggered by allocating the storage for the cache, so we could have ended up with a wrong storage size.
This is really Toon's fix, I have only created a small repro case.
BUG=
R=verwaest@chromium.org
Committed: https://code.google.com/p/v8/source/detail?r=20308
Patch Set 1 #
Total comments: 2
Patch Set 2 : Tweaks #
Messages
Total messages: 3 (0 generated)
|