| Index: src/compiler/js-global-object-specialization.cc
|
| diff --git a/src/compiler/js-global-object-specialization.cc b/src/compiler/js-global-object-specialization.cc
|
| index f646c6d9150d2a09148a41b7ba30ad97e138aadd..4a0bdf9176e4e8ef4353808ec9141422f77cde7e 100644
|
| --- a/src/compiler/js-global-object-specialization.cc
|
| +++ b/src/compiler/js-global-object-specialization.cc
|
| @@ -207,7 +207,7 @@ Reduction JSGlobalObjectSpecialization::ReduceJSStoreGlobal(Node* node) {
|
| MachineRepresentation representation = MachineRepresentation::kTagged;
|
| if (property_cell_value->IsHeapObject()) {
|
| // Check that the {value} is a HeapObject.
|
| - value = effect = graph()->NewNode(simplified()->CheckTaggedPointer(),
|
| + value = effect = graph()->NewNode(simplified()->CheckHeapObject(),
|
| value, effect, control);
|
|
|
| // Check {value} map agains the {property_cell} map.
|
| @@ -220,8 +220,8 @@ Reduction JSGlobalObjectSpecialization::ReduceJSStoreGlobal(Node* node) {
|
| representation = MachineRepresentation::kTaggedPointer;
|
| } else {
|
| // Check that the {value} is a Smi.
|
| - value = effect = graph()->NewNode(simplified()->CheckTaggedSigned(),
|
| - value, effect, control);
|
| + value = effect =
|
| + graph()->NewNode(simplified()->CheckSmi(), value, effect, control);
|
| property_cell_value_type = Type::SignedSmall();
|
| representation = MachineRepresentation::kTaggedSigned;
|
| }
|
|
|