Index: src/objects.cc |
diff --git a/src/objects.cc b/src/objects.cc |
index 17d499d6e6c0f13f078e1ba15c7b84f24413fa80..99c91df58e29a765ad5376ea0e6076a5451bdc99 100644 |
--- a/src/objects.cc |
+++ b/src/objects.cc |
@@ -19488,6 +19488,11 @@ void JSArrayBuffer::Neuter() { |
set_backing_store(NULL); |
set_byte_length(Smi::kZero); |
set_was_neutered(true); |
+ // Invalidate the neutering protector. |
+ Isolate* const isolate = GetIsolate(); |
+ if (isolate->IsArrayBufferNeuteringIntact()) { |
+ isolate->InvalidateArrayBufferNeuteringProtector(); |
+ } |
} |