From c25c8ba1d464563f25466edeeaac7c900293f6ec Mon Sep 17 00:00:00 2001
From: Igor Sheludko <ishell@chromium.org>
Date: Tue, 4 Oct 2022 18:37:51 +0200
Subject: [PATCH] [builtins] Speculatively defer a label for exception case

... in BaseCollectionsAssembler::AddConstructorEntries().

Bug: chromium:1370968, chromium:1357318
Change-Id: I974a3cfface030f9cb0a0057bb190c03a7f6c162
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3929028
Commit-Queue: Leszek Swirski <leszeks@chromium.org>
Commit-Queue: Igor Sheludko <ishell@chromium.org>
Auto-Submit: Igor Sheludko <ishell@chromium.org>
Reviewed-by: Leszek Swirski <leszeks@chromium.org>
Cr-Commit-Position: refs/heads/main@{#83726}
---
 src/builtins/builtins-collections-gen.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/builtins/builtins-collections-gen.cc b/src/builtins/builtins-collections-gen.cc
index f6edbb6bc0..bf8d735a0c 100644
--- a/src/builtins/builtins-collections-gen.cc
+++ b/src/builtins/builtins-collections-gen.cc
@@ -68,7 +68,7 @@ void BaseCollectionsAssembler::AddConstructorEntries(
   }
   BIND(&fast_loop);
   {
-    Label if_exception_during_fast_iteration(this);
+    Label if_exception_during_fast_iteration(this, Label::kDeferred);
     TNode<JSArray> initial_entries_jsarray =
         UncheckedCast<JSArray>(initial_entries);
 #if DEBUG