Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1159)

Issues Search
    My Issues | Starred     Open | Closed | All

Unified Diff: src/ic.cc

Issue 226053002: Fix for v8:3255 Grow KeyedStoreIC doesn't respect String value wrappers (Closed) Base URL: https://v8.googlecode.com/svn/branches/bleeding_edge
Patch Set: Created 6 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | test/mjsunit/regress/regress-3255.js » ('j') | test/mjsunit/regress/regress-3255.js » ('J')
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: src/ic.cc
diff --git a/src/ic.cc b/src/ic.cc
index 688908ead2fa6a1546577971c16ae4ae36d0feb8..a2215ed17095fa1091073b05809ef9c282210d83 100644
--- a/src/ic.cc
+++ b/src/ic.cc
@@ -1743,6 +1743,7 @@ MaybeObject* KeyedStoreIC::Store(Handle<Object> object,
if (maybe_object->IsFailure()) return maybe_object;
} else {
bool use_ic = FLAG_use_ic &&
+ !object->IsStringWrapper() &&
!object->IsAccessCheckNeeded() &&
!object->IsJSGlobalProxy() &&
!(object->IsJSObject() &&
« no previous file with comments | « no previous file | test/mjsunit/regress/regress-3255.js » ('j') | test/mjsunit/regress/regress-3255.js » ('J')

Powered by Google App Engine
This is Rietveld 408576698