Version 3.27.8.1 (merged r21392)

src/hydrogen.cc

Index: src/hydrogen.cc
diff --git a/src/hydrogen.cc b/src/hydrogen.cc
index afd9416567bac14fc23b4a47f165cc78021b6433..d997af27e9d67d00780b8289a2b4973e89c14cb4 100644
--- a/src/hydrogen.cc
+++ b/src/hydrogen.cc
@@ -7934,6 +7934,10 @@ bool HOptimizedGraphBuilder::TryInlineBuiltinMethodCall(
       return true;
     }
     case kArrayShift: {
+      // Something in here seems to be causing crbug.com/374838.
+      // TODO(bmeurer): Investigate the problem and re-enable this code.
+      return false;
+
       if (receiver_map.is_null()) return false;
       if (receiver_map->instance_type() != JS_ARRAY_TYPE) return false;
       ElementsKind kind = receiver_map->elements_kind();