Use page header information to test for InNewSpace.

src/store-buffer.cc

 // Copyright 2011 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 396 matching lines @@
         }
         if (chunk->owner() == heap_->lo_space()) {
           LargePage* large_page = reinterpret_cast<LargePage*>(chunk);
           HeapObject* array = large_page->GetObject();
           ASSERT(array->IsFixedArray());
           Address start = array->address();
           Address object_end = start + array->Size();
           heap_->IteratePointersToNewSpace(heap_, start, object_end, callback);
         } else {
           Page* page = reinterpret_cast<Page*>(chunk);
+          PagedSpace* owner = reinterpret_cast<PagedSpace*>(page->owner());
           heap_->IteratePointersOnPage(
-              reinterpret_cast<PagedSpace*>(page->owner()),
-              &Heap::IteratePointersToNewSpace,
+              owner,
+              (owner == heap_->map_space() ?
+                 &Heap::IteratePointersFromMapsToNewSpace :
+                 &Heap::IteratePointersToNewSpace),
               callback,
               page);
         }
       }
     }
     (*callback_)(heap_, NULL, kStoreBufferScanningPageEvent);
   }
 }
 
 
@@ skipping 48 matching lines @@
 }
 
 
 void StoreBuffer::CheckForFullBuffer() {
   if (old_limit_ - old_top_ < kStoreBufferSize * 2) {
     HandleFullness();
   }
 }
 
 } }  // namespace v8::internal