v8/test/mjsunit/web-snapshot
jameslahm e43cfdd800 Reland "[web snapshot] Add support for object with dictionary mode"
This is a reland of commit 507fa4d7f5

This CL moves the NewJSObjectFromMap after deserializing object properties with dictionary map and fixes the DCHECK failure in JSReceiver::HasFastProperties when triggering GC.

Original change's description:
> [web snapshot] Add support for object with dictionary mode
>
> This CL adds the serialization support for object properties
> with dictionary map. Shape id is used to distinguish between if the object has dictionary map. And add TODO to support “no map objects” which can have fast map and “objects with map” which needs to be turned to dictionary mode.
>
> Bug: v8:11525
> Change-Id: If3eb4195115a41d4a3f6cc7372924b982ca96fc1
> Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3621593
> Commit-Queue: 王澳 <wangao.james@bytedance.com>
> Reviewed-by: Marja Hölttä <marja@chromium.org>
> Cr-Commit-Position: refs/heads/main@{#80366}

Bug: v8:11525
Change-Id: I88422d698aa03fb7d3b21b5709eec2d0cf306256
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3629738
Commit-Queue: 王澳 <wangao.james@bytedance.com>
Reviewed-by: Marja Hölttä <marja@chromium.org>
Cr-Commit-Position: refs/heads/main@{#80374}
2022-05-05 14:33:09 +00:00
..
web-snapshot-1.js [web snapshots] Support elements in objects 2022-03-10 12:52:28 +00:00
web-snapshot-2.js [web snapshot] Add support for arrays w/holes 2022-05-02 17:07:19 +00:00
web-snapshot-3.js Reland "[web snapshot] Add support for object with dictionary mode" 2022-05-05 14:33:09 +00:00
web-snapshot-4.js [web snap] Support Symbols as property keys 2022-05-03 12:54:37 +00:00
web-snapshot-externals.js [web snapshots] Add a JS API for deserializing Web snapshots 2022-04-20 16:02:20 +00:00
web-snapshot-helpers.js [web snapshots] Support elements in objects 2022-03-10 12:52:28 +00:00