AuroraMiddleware/v8
1
0
Fork 0
Code Issues 2 Pull Requests Releases Wiki Activity

[api] Fix IsSimpleInstantion check in InstantiatObject

Browse Source 
We have a simple instantiation at hand if the new.target is from the same
context, not the other way around.

BUG=chromium:630217

Review-Url: https://codereview.chromium.org/2201113002
Cr-Commit-Position: refs/heads/master@{#38279}
This commit is contained in:
cbruni 2016-08-03 00:49:23 -07:00 committed by Commit bot
parent 25c0501c8f
commit 60f9e60be0
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/api-natives.cc
View File

@ -334,8 +334,7 @@ bool IsSimpleInstantiation(Isolate* isolate, ObjectTemplateInfo* info,
JSFunction* fun = JSFunction::cast(new_target);
if (fun->shared()->function_data() != info->constructor()) return false;
if (info->immutable_proto()) return false;
return fun->context()->native_context() !=
isolate->context()->native_context();
return fun->context()->native_context() == isolate->raw_native_context();
}
MaybeHandle<JSObject> InstantiateObject(Isolate* isolate,