Index: src/compiler/js-create-lowering.cc |
diff --git a/src/compiler/js-create-lowering.cc b/src/compiler/js-create-lowering.cc |
index ebd0d258caa526a4e82a324fe92d57e7b45ca12d..dc35d5c2edcde5ed3e78d12f70f20661ab1da313 100644 |
--- a/src/compiler/js-create-lowering.cc |
+++ b/src/compiler/js-create-lowering.cc |
@@ -764,12 +764,15 @@ Reduction JSCreateLowering::ReduceJSCreateClosure(Node* node) { |
Node* function_map = jsgraph()->HeapConstant( |
handle(Map::cast(native_context()->get(function_map_index)), isolate())); |
+ FeedbackVectorSlot slot = p.feedback().slot(); |
+ Node* literals_cell = jsgraph()->HeapConstant( |
+ handle(Cell::cast(p.feedback().vector()->Get(slot)), isolate())); |
+ |
// Note that it is only safe to embed the raw entry point of the compile |
// lazy stub into the code, because that stub is immortal and immovable. |
Node* compile_entry = jsgraph()->PointerConstant( |
jsgraph()->isolate()->builtins()->CompileLazy()->entry()); |
Node* empty_fixed_array = jsgraph()->EmptyFixedArrayConstant(); |
- Node* empty_feedback_vector = jsgraph()->EmptyFeedbackVectorConstant(); |
Node* the_hole = jsgraph()->TheHoleConstant(); |
Node* undefined = jsgraph()->UndefinedConstant(); |
AllocationBuilder a(jsgraph(), effect, control); |
@@ -778,7 +781,7 @@ Reduction JSCreateLowering::ReduceJSCreateClosure(Node* node) { |
a.Store(AccessBuilder::ForMap(), function_map); |
a.Store(AccessBuilder::ForJSObjectProperties(), empty_fixed_array); |
a.Store(AccessBuilder::ForJSObjectElements(), empty_fixed_array); |
- a.Store(AccessBuilder::ForJSFunctionFeedbackVector(), empty_feedback_vector); |
+ a.Store(AccessBuilder::ForJSFunctionFeedbackVector(), literals_cell); |
a.Store(AccessBuilder::ForJSFunctionPrototypeOrInitialMap(), the_hole); |
a.Store(AccessBuilder::ForJSFunctionSharedFunctionInfo(), shared); |
a.Store(AccessBuilder::ForJSFunctionContext(), context); |