Description[heap] Expand verification of layout changes to non-JSObject objects.
On map change of an object this patch checks that
- either GC was notified about this change,
- or the change leaves the slot set of the object the same.
BUG=chromium:694255
Review-Url: https://codereview.chromium.org/2886223002
Cr-Commit-Position: refs/heads/master@{#45427}
Committed: https://chromium.googlesource.com/v8/v8/+/ee83890103a768829e8298132f97e78d46b681f7
Patch Set 1 #
Depends on Patchset: Messages
Total messages: 8 (4 generated)
|