| Index: src/compiler/js-create-lowering.cc
|
| diff --git a/src/compiler/js-create-lowering.cc b/src/compiler/js-create-lowering.cc
|
| index ebd0d258caa526a4e82a324fe92d57e7b45ca12d..dc35d5c2edcde5ed3e78d12f70f20661ab1da313 100644
|
| --- a/src/compiler/js-create-lowering.cc
|
| +++ b/src/compiler/js-create-lowering.cc
|
| @@ -764,12 +764,15 @@ Reduction JSCreateLowering::ReduceJSCreateClosure(Node* node) {
|
| Node* function_map = jsgraph()->HeapConstant(
|
| handle(Map::cast(native_context()->get(function_map_index)), isolate()));
|
|
|
| + FeedbackVectorSlot slot = p.feedback().slot();
|
| + Node* literals_cell = jsgraph()->HeapConstant(
|
| + handle(Cell::cast(p.feedback().vector()->Get(slot)), isolate()));
|
| +
|
| // Note that it is only safe to embed the raw entry point of the compile
|
| // lazy stub into the code, because that stub is immortal and immovable.
|
| Node* compile_entry = jsgraph()->PointerConstant(
|
| jsgraph()->isolate()->builtins()->CompileLazy()->entry());
|
| Node* empty_fixed_array = jsgraph()->EmptyFixedArrayConstant();
|
| - Node* empty_feedback_vector = jsgraph()->EmptyFeedbackVectorConstant();
|
| Node* the_hole = jsgraph()->TheHoleConstant();
|
| Node* undefined = jsgraph()->UndefinedConstant();
|
| AllocationBuilder a(jsgraph(), effect, control);
|
| @@ -778,7 +781,7 @@ Reduction JSCreateLowering::ReduceJSCreateClosure(Node* node) {
|
| a.Store(AccessBuilder::ForMap(), function_map);
|
| a.Store(AccessBuilder::ForJSObjectProperties(), empty_fixed_array);
|
| a.Store(AccessBuilder::ForJSObjectElements(), empty_fixed_array);
|
| - a.Store(AccessBuilder::ForJSFunctionFeedbackVector(), empty_feedback_vector);
|
| + a.Store(AccessBuilder::ForJSFunctionFeedbackVector(), literals_cell);
|
| a.Store(AccessBuilder::ForJSFunctionPrototypeOrInitialMap(), the_hole);
|
| a.Store(AccessBuilder::ForJSFunctionSharedFunctionInfo(), shared);
|
| a.Store(AccessBuilder::ForJSFunctionContext(), context);
|
|
|