| Index: src/compiler/js-typed-lowering.cc
|
| diff --git a/src/compiler/js-typed-lowering.cc b/src/compiler/js-typed-lowering.cc
|
| index 50a33c355f7aae634024d0a58a8ccd73ca933b5b..3f9c6e55b47ca0915f4a7616d5619422ffb37675 100644
|
| --- a/src/compiler/js-typed-lowering.cc
|
| +++ b/src/compiler/js-typed-lowering.cc
|
| @@ -1205,7 +1205,8 @@ Reduction JSTypedLowering::ReduceJSLoadProperty(Node* node) {
|
| if (mbase.HasValue() && mbase.Value()->IsJSTypedArray()) {
|
| Handle<JSTypedArray> const array =
|
| Handle<JSTypedArray>::cast(mbase.Value());
|
| - if (!array->GetBuffer()->was_neutered()) {
|
| + if (!array->GetBuffer()->was_neutered() &&
|
| + !array->GetBuffer()->is_wasm_buffer()) {
|
| array->GetBuffer()->set_is_neuterable(false);
|
| BufferAccess const access(array->type());
|
| size_t const k =
|
| @@ -1257,7 +1258,8 @@ Reduction JSTypedLowering::ReduceJSStoreProperty(Node* node) {
|
| if (mbase.HasValue() && mbase.Value()->IsJSTypedArray()) {
|
| Handle<JSTypedArray> const array =
|
| Handle<JSTypedArray>::cast(mbase.Value());
|
| - if (!array->GetBuffer()->was_neutered()) {
|
| + if (!array->GetBuffer()->was_neutered() &&
|
| + !array->GetBuffer()->is_wasm_buffer()) {
|
| array->GetBuffer()->set_is_neuterable(false);
|
| BufferAccess const access(array->type());
|
| size_t const k =
|
|
|