[compiler] Properly validate stable map assumption for globals.

src/runtime/runtime-utils.h

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef V8_RUNTIME_RUNTIME_UTILS_H_
 #define V8_RUNTIME_RUNTIME_UTILS_H_
 
 #include "src/base/logging.h"
 #include "src/runtime/runtime.h"
 
@@ skipping 51 matching lines @@
 
 // Cast the given argument to PropertyDetails and store its value in a
 // variable with the given name.  If the argument is not a Smi we crash safely.
 #define CONVERT_PROPERTY_DETAILS_CHECKED(name, index) \
   CHECK(args[index]->IsSmi());                        \
   PropertyDetails name = PropertyDetails(Smi::cast(args[index]));
 
 // Assert that the given argument has a valid value for a LanguageMode
 // and store it in a LanguageMode variable with the given name.
 #define CONVERT_LANGUAGE_MODE_ARG_CHECKED(name, index) \
-  CHECK(args[index]->IsSmi());                         \
-  CHECK(is_valid_language_mode(args.smi_at(index)));   \
-  LanguageMode name = static_cast<LanguageMode>(args.smi_at(index));
+  CHECK(args[index]->IsNumber());                      \
+  int32_t __tmp_##name = 0;                            \
+  CHECK(args[index]->ToInt32(&__tmp_##name));          \
+  CHECK(is_valid_language_mode(__tmp_##name));         \
+  LanguageMode name = static_cast<LanguageMode>(__tmp_##name);
 
 // Assert that the given argument is a number within the Int32 range
 // and convert it to int32_t.  If the argument is not an Int32 we crash safely.
 #define CONVERT_INT32_ARG_CHECKED(name, index) \
   CHECK(args[index]->IsNumber());              \
   int32_t name = 0;                            \
   CHECK(args[index]->ToInt32(&name));
 
 // Assert that the given argument is a number within the Uint32 range
 // and convert it to uint32_t.  If the argument is not an Uint32 call
@@ skipping 77 matching lines @@
 static inline ObjectTriple MakeTriple(Object* x, Object* y, Object* z) {
   ObjectTriple result = {x, y, z};
   // ObjectTriple is assigned to a hidden first argument.
   return result;
 }
 
 }  // namespace internal
 }  // namespace v8
 
 #endif  // V8_RUNTIME_RUNTIME_UTILS_H_