Revision: 19546
Author:   [email protected]
Date:     Tue Feb 25 15:47:33 2014 UTC
Log: Re-evaluate marking bits of a descriptor array when it gets replaced.

BUG=340254
[email protected]

Review URL: https://codereview.chromium.org/179733004
http://code.google.com/p/v8/source/detail?r=19546

Modified:
 /branches/bleeding_edge/src/objects.cc

=======================================
--- /branches/bleeding_edge/src/objects.cc      Tue Feb 25 12:01:34 2014 UTC
+++ /branches/bleeding_edge/src/objects.cc      Tue Feb 25 15:47:33 2014 UTC
@@ -2579,6 +2579,7 @@

   DescriptorArray* to_replace = instance_descriptors();
   Map* current = this;
+  GetHeap()->incremental_marking()->RecordWrites(to_replace);
   while (current->instance_descriptors() == to_replace) {
     current->SetEnumLength(kInvalidEnumCacheSentinel);
     current->set_instance_descriptors(new_descriptors);
@@ -6814,6 +6815,8 @@

       Map* map;
       // Replace descriptors by new_descriptors in all maps that share it.
+
+      GetHeap()->incremental_marking()->RecordWrites(descriptors);
       for (Object* current = GetBackPointer();
            !current->IsUndefined();
            current = map->GetBackPointer()) {

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to