deps: cherry-pick a814b8a from upstream V8
deps: cherry-pick a814b8a from upstream V8
Original commit message:
Merged: [heap] Clear recorded slots for inobject properties when migrating fast object to slow mode.
Revision: a814b8aeaf2b56635054c96435972dce90576f62
BUG=chromium:666046 LOG=N NOTRY=true NOPRESUBMIT=true NOTREECHECKS=true R=ulan@chromium.org
Review URL: https://codereview.chromium.org/2549803002 .
Cr-Commit-Position: refs/branch-heads/5.5@{#60 (closed)} Cr-Branched-From: 3cbd5838bd8376103daa45d69dade929ee4e0092-refs/heads/5.5.372@{#1} Cr-Branched-From: b3c8b0ce2c9af0528837d8309625118d4096553b-refs/heads/master@{#40015}
R=@nodejs/v8
Chromium bug: https://bugs.chromium.org/p/chromium/issues/detail?id=666046.
This is also needed on v6.x
.
Checklist
-
make -j4 test
(UNIX), orvcbuild test
(Windows) passes -
commit message follows commit guidelines
Affected core subsystem(s)
deps: V8