Index: src/compiler/js-builtin-reducer.cc |
diff --git a/src/compiler/js-builtin-reducer.cc b/src/compiler/js-builtin-reducer.cc |
index ce27281b5d0badb204f4cdaf18a6a795e176d35c..868ae7b0b3cb0411e35084c6bad2f9325dc39c90 100644 |
--- a/src/compiler/js-builtin-reducer.cc |
+++ b/src/compiler/js-builtin-reducer.cc |
@@ -732,9 +732,9 @@ Reduction JSBuiltinReducer::ReduceArrayBufferViewAccessor( |
jsgraph()->ZeroConstant()); |
// Default to zero if the {receiver}s buffer was neutered. |
- Node* value = |
- graph()->NewNode(common()->Select(MachineRepresentation::kTagged), |
- check, receiver_length, jsgraph()->ZeroConstant()); |
+ Node* value = graph()->NewNode( |
+ common()->Select(MachineRepresentation::kTagged, BranchHint::kTrue), |
+ check, receiver_length, jsgraph()->ZeroConstant()); |
ReplaceWithValue(node, value, effect, control); |
return Replace(value); |