| Index: src/compiler/js-native-context-specialization.cc
|
| diff --git a/src/compiler/js-native-context-specialization.cc b/src/compiler/js-native-context-specialization.cc
|
| index 4ab0ad8eded8d95781f53a2ee93b777da8e01fd2..2b271c3cc8457c57d8f572263f3aaf12bd35162f 100644
|
| --- a/src/compiler/js-native-context-specialization.cc
|
| +++ b/src/compiler/js-native-context-specialization.cc
|
| @@ -1006,7 +1006,8 @@ JSNativeContextSpecialization::BuildPropertyAccess(
|
| common()->FrameState(BailoutId::None(),
|
| OutputFrameStateCombine::Ignore(),
|
| frame_info0),
|
| - graph()->NewNode(common()->StateValues(1), receiver),
|
| + graph()->NewNode(common()->StateValues(1, SparseInputMask::Dense()),
|
| + receiver),
|
| jsgraph()->EmptyStateValues(), jsgraph()->EmptyStateValues(),
|
| context, target, frame_state);
|
|
|
| @@ -1043,7 +1044,8 @@ JSNativeContextSpecialization::BuildPropertyAccess(
|
| common()->FrameState(BailoutId::None(),
|
| OutputFrameStateCombine::Ignore(),
|
| frame_info0),
|
| - graph()->NewNode(common()->StateValues(2), receiver, value),
|
| + graph()->NewNode(common()->StateValues(2, SparseInputMask::Dense()),
|
| + receiver, value),
|
| jsgraph()->EmptyStateValues(), jsgraph()->EmptyStateValues(),
|
| context, target, frame_state);
|
|
|
|
|