[runtime] MigrateFastToFast: fix check for unboxed inobject doubles

[runtime] MigrateFastToFast: fix check for unboxed inobject doubles

After the recent fast-property deletion changes, there can be a
non-empty out-of-object backing store (that previously held properties)
even though the next double property will be stored in-object.

BUG=chromium:718779
Review-Url: https://codereview.chromium.org/2861093004
Cr-Commit-Position: refs/heads/master@{#45146}
Committed: https://chromium.googlesource.com/v8/v8/+/ceba405f28a6b20814107930365788f2749db574

[Jakob Kummerow, 2017-05-05 16:10:09]

jkummerow@chromium.org changed reviewers:
+ ishell@chromium.org

[Jakob Kummerow, 2017-05-05 16:10:09]

PTAL.

[Igor Sheludko, 2017-05-05 17:48:01]

Description was changed from

==========
MigrateFastToFast: fix check for unboxed inobject doubles

After the recent fast-property deletion changes, there can be a
non-empty out-of-object backing store (that previously held properties)
even though the next double property will be stored in-object.

BUG=chromium:718779
==========

to

==========
[runtime] MigrateFastToFast: fix check for unboxed inobject doubles

After the recent fast-property deletion changes, there can be a
non-empty out-of-object backing store (that previously held properties)
even though the next double property will be stored in-object.

BUG=chromium:718779
==========

[Igor Sheludko, 2017-05-05 17:48:23]

lgtm (I added [runtime] to the description).

[Jakob Kummerow, 2017-05-05 21:48:29]

The CQ bit was checked by jkummerow@chromium.org

[commit-bot: I haz the power, 2017-05-05 21:48:37]

CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-05-05 22:23:05]

CQ is committing da patch.

Bot data: {"patchset_id": 1, "attempt_start_ts": 1494020909103160, "parent_rev":
"c3f0e2a5b0eb8371ebb99868e14f038a00e9b669", "commit_rev":
"ceba405f28a6b20814107930365788f2749db574"}

[commit-bot: I haz the power, 2017-05-05 22:23:12]

Description was changed from

==========
[runtime] MigrateFastToFast: fix check for unboxed inobject doubles

After the recent fast-property deletion changes, there can be a
non-empty out-of-object backing store (that previously held properties)
even though the next double property will be stored in-object.

BUG=chromium:718779
==========

to

==========
[runtime] MigrateFastToFast: fix check for unboxed inobject doubles

After the recent fast-property deletion changes, there can be a
non-empty out-of-object backing store (that previously held properties)
even though the next double property will be stored in-object.

BUG=chromium:718779

Review-Url: https://codereview.chromium.org/2861093004
Cr-Commit-Position: refs/heads/master@{#45146}
Committed:
https://chromium.googlesource.com/v8/v8/+/ceba405f28a6b20814107930365788f2749...
==========

[commit-bot: I haz the power, 2017-05-05 22:23:13]

Committed patchset #1 (id:1) as
https://chromium.googlesource.com/v8/v8/+/ceba405f28a6b20814107930365788f2749...