| Index: src/ic.cc
|
| diff --git a/src/ic.cc b/src/ic.cc
|
| index 6a92719cc210ac22c4bf8747e53e7383f0bfb5e0..60fcdc8a88d0f98ec5d10d4b7f1216e39293cae6 100644
|
| --- a/src/ic.cc
|
| +++ b/src/ic.cc
|
| @@ -1206,9 +1206,7 @@ static bool LookupForWrite(Handle<JSObject> receiver,
|
|
|
| if (lookup->IsReadOnly() || !lookup->IsCacheable()) return false;
|
| if (lookup->holder() == *receiver) return lookup->CanHoldValue(value);
|
| - if (lookup->IsPropertyCallbacks() &&
|
| - !lookup->GetCallbackObject()->IsExecutableAccessorInfo())
|
| - return true;
|
| + if (lookup->IsPropertyCallbacks()) return true;
|
| // JSGlobalProxy either stores on the global object in the prototype, or
|
| // goes into the runtime if access checks are needed, so this is always
|
| // safe.
|
|
|