| Index: src/compiler/js-native-context-specialization.cc
|
| diff --git a/src/compiler/js-native-context-specialization.cc b/src/compiler/js-native-context-specialization.cc
|
| index 7c3b9bab06b61a4452b093552468290cef1f1228..af91eec3cd460e538a654a33dfd0a548445b2b72 100644
|
| --- a/src/compiler/js-native-context-specialization.cc
|
| +++ b/src/compiler/js-native-context-specialization.cc
|
| @@ -1520,7 +1520,7 @@ JSNativeContextSpecialization::BuildPropertyAccess(
|
| common()->BeginRegion(RegionObservability::kNotObservable),
|
| effect);
|
| Node* box = effect = graph()->NewNode(
|
| - simplified()->Allocate(NOT_TENURED),
|
| + simplified()->Allocate(Type::OtherInternal(), NOT_TENURED),
|
| jsgraph()->Constant(HeapNumber::kSize), effect, control);
|
| effect = graph()->NewNode(
|
| simplified()->StoreField(AccessBuilder::ForMap()), box,
|
| @@ -2209,7 +2209,7 @@ Node* JSNativeContextSpecialization::BuildExtendPropertiesBackingStore(
|
| effect = graph()->NewNode(
|
| common()->BeginRegion(RegionObservability::kNotObservable), effect);
|
| Node* new_properties = effect = graph()->NewNode(
|
| - simplified()->Allocate(NOT_TENURED),
|
| + simplified()->Allocate(Type::OtherInternal(), NOT_TENURED),
|
| jsgraph()->Constant(FixedArray::SizeFor(new_length)), effect, control);
|
| effect = graph()->NewNode(simplified()->StoreField(AccessBuilder::ForMap()),
|
| new_properties, jsgraph()->FixedArrayMapConstant(),
|
|
|