[runtime] Treat empty property cells properly when doing Object.freeze() on a global object.

src/objects.cc

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/objects.h"
 
 #include <cmath>
 #include <iomanip>
 #include <memory>
 #include <sstream>
@@ skipping 7986 matching lines @@
   dictionary->DetailsAtPut(entry, details);
 }
 
 template <>
 void DictionaryDetailsAtPut<GlobalDictionary>(
     Isolate* isolate, Handle<GlobalDictionary> dictionary, int entry,
     PropertyDetails details) {
   Object* value = dictionary->ValueAt(entry);
   DCHECK(value->IsPropertyCell());
   value = PropertyCell::cast(value)->value();
+  if (value->IsTheHole(isolate)) return;
   PropertyCell::PrepareForValue(dictionary, entry, handle(value, isolate),
                                 details);
 }
 
 template <typename Dictionary>
 void ApplyAttributesToDictionary(Isolate* isolate,
                                  Handle<Dictionary> dictionary,
                                  const PropertyAttributes attributes) {
   int capacity = dictionary->Capacity();
   for (int i = 0; i < capacity; i++) {
@@ skipping 12322 matching lines @@
     // Check if the accessor uses a cached property.
     if (!fti->cached_property_name()->IsTheHole(isolate)) {
       return handle(Name::cast(fti->cached_property_name()));
     }
   }
   return MaybeHandle<Name>();
 }
 
 }  // namespace internal
 }  // namespace v8