| Index: src/objects.cc
|
| diff --git a/src/objects.cc b/src/objects.cc
|
| index 17d499d6e6c0f13f078e1ba15c7b84f24413fa80..99c91df58e29a765ad5376ea0e6076a5451bdc99 100644
|
| --- a/src/objects.cc
|
| +++ b/src/objects.cc
|
| @@ -19488,6 +19488,11 @@ void JSArrayBuffer::Neuter() {
|
| set_backing_store(NULL);
|
| set_byte_length(Smi::kZero);
|
| set_was_neutered(true);
|
| + // Invalidate the neutering protector.
|
| + Isolate* const isolate = GetIsolate();
|
| + if (isolate->IsArrayBufferNeuteringIntact()) {
|
| + isolate->InvalidateArrayBufferNeuteringProtector();
|
| + }
|
| }
|
|
|
|
|
|
|