AuroraMiddleware/v8
1
0
Fork 0
Code Issues 2 Pull Requests Releases Wiki Activity

Remove unnecessary check in StoreProxy

Browse Source 
Bug: v8:6560, chromium:761639
Change-Id: Idf546f53b20387670e42187692e702ba5e9eab73
Reviewed-on: https://chromium-review.googlesource.com/647550
Reviewed-by: Igor Sheludko <ishell@chromium.org>
Commit-Queue: Maya Lekova <mslekova@google.com>
Cr-Commit-Position: refs/heads/master@{#47820}
This commit is contained in:
Maya Lekova 2017-09-04 09:42:22 +02:00 committed by Commit Bot
parent 76960c052e
commit affdc80880
2 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/ic/ic.cc
View File

@ -1678,7 +1678,6 @@ Handle<Object> StoreIC::StoreProxy(Handle<Map> receiver_map,
GetPrototypeCheckCount(isolate(), receiver_map, proxy, name);
DCHECK_LE(0, checks_count);
DCHECK(!receiver_map->IsJSGlobalObjectMap());
Handle<Object> validity_cell =
Map::GetOrCreatePrototypeChainValidityCell(receiver_map, isolate());

10
test/mjsunit/regress/regress-761639.js Normal file
View File

@ -0,0 +1,10 @@
// Copyright 2017 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Regression test for hitting a DCHECK in StoreProxy.
for (var i = 0; i < 10; i++) {
__proto__ = new Proxy({}, { getPrototypeOf() { } });
}