From 3ff882ff644c9f3df40454c1a61f2c6589275ae8 Mon Sep 17 00:00:00 2001
From: "rossberg@chromium.org"
 <rossberg@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Date: Thu, 21 Jul 2011 11:28:18 +0000
Subject: [PATCH] Make proxy fixing GC safe.

R=vegorov@chromium.org
BUG=
TEST=

Review URL: http://codereview.chromium.org/7460009

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@8708 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
---
 src/objects.cc | 2 +-
 src/runtime.cc | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/objects.cc b/src/objects.cc
index f414c1596d..7495d6e709 100644
--- a/src/objects.cc
+++ b/src/objects.cc
@@ -2331,7 +2331,7 @@ void JSProxy::Fix() {
   Handle<JSProxy> self(this);
 
   isolate->factory()->BecomeJSObject(self);
-  ASSERT(IsJSObject());
+  ASSERT(self->IsJSObject());
   // TODO(rossberg): recognize function proxies.
 }
 
diff --git a/src/runtime.cc b/src/runtime.cc
index b4259c4a5c..2cf8aba18e 100644
--- a/src/runtime.cc
+++ b/src/runtime.cc
@@ -619,7 +619,7 @@ RUNTIME_FUNCTION(MaybeObject*, Runtime_Fix) {
   ASSERT(args.length() == 1);
   CONVERT_CHECKED(JSProxy, proxy, args[0]);
   proxy->Fix();
-  return proxy;
+  return isolate->heap()->undefined_value();
 }