15cc02b4e8
Shared objects have fixed layout (i.e. immutable maps) and start off sealed. Ordinary JS objects allow writable properties to be redefined to be non-writable. This violates the fixed layout invariant and needs to be disallowed. Also contains a drive-by fix removing @highestInstanceTypeWithinParentClassRange, which is unneeded. Bug: chromium:1407595, v8:12547 Change-Id: I0257fa19f59ccfaaf0e07cb42aeedd71e132d21a Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4190525 Reviewed-by: Camillo Bruni <cbruni@chromium.org> Commit-Queue: Shu-yu Guo <syg@chromium.org> Cr-Commit-Position: refs/heads/main@{#85570} |
||
---|---|---|
.. | ||
bytecode_expectations | ||
bytecode-array-builder-unittest.cc | ||
bytecode-array-iterator-unittest.cc | ||
bytecode-array-random-iterator-unittest.cc | ||
bytecode-array-writer-unittest.cc | ||
bytecode-decoder-unittest.cc | ||
bytecode-expectations-printer.cc | ||
bytecode-expectations-printer.h | ||
bytecode-generator-unittest.cc | ||
bytecode-node-unittest.cc | ||
bytecode-operands-unittest.cc | ||
bytecode-register-allocator-unittest.cc | ||
bytecode-register-optimizer-unittest.cc | ||
bytecode-source-info-unittest.cc | ||
bytecode-utils.h | ||
bytecodes-unittest.cc | ||
constant-array-builder-unittest.cc | ||
generate-bytecode-expectations.cc | ||
interpreter-assembler-unittest.cc | ||
interpreter-assembler-unittest.h | ||
interpreter-intrinsics-unittest.cc | ||
interpreter-tester.cc | ||
interpreter-tester.h | ||
interpreter-unittest.cc | ||
source-position-matcher.cc | ||
source-position-matcher.h | ||
source-positions-unittest.cc |