Fixed incorrect generalization of types in Map::ReconfigureProperty() introduced in r26667.

BUG=chromium:459512
LOG=N
TBR=verwaest@chromium.org

Review URL: https://codereview.chromium.org/936253002

Cr-Commit-Position: refs/heads/master@{#26731}
This commit is contained in:
ishell@chromium.org 2015-02-18 23:58:00 +01:00
parent 09bd2c1533
commit b696572d4f

View File

@ -2815,8 +2815,8 @@ Handle<Map> Map::ReconfigureProperty(Handle<Map> old_map, int modify_index,
Handle<HeapType> old_field_type =
GetFieldType(isolate, old_descriptors, i,
old_details.location(), next_representation);
old_field_type =
GeneralizeFieldType(old_field_type, next_field_type, isolate);
next_field_type =
GeneralizeFieldType(next_field_type, old_field_type, isolate);
}
} else {
Handle<HeapType> old_field_type =