Skip to content
This repository was archived by the owner on Mar 25, 2018. It is now read-only.

3.7.12.9

tagged this 09 Dec 12:01
Ensure that non-optimized code objects are not flushed for inlined functions.

Collector was flushing them if optimized code was reachable only through the stack (not through the JSFunction object) which happens when you have a pending lazy deoptimization.

Also prevent v8::Script::New from leaking internal objects allocated by the compiler into outer HandleScope.

R=kmillikin@chromium.org
BUG=http://crbug.com/97116
TEST=test/mjsunit/regress/regress-97116.js

Review URL: http://codereview.chromium.org/8888011
------------------------------------------------------------------------
Review URL: http://codereview.chromium.org/8888040

git-svn-id: http://v8.googlecode.com/svn/branches/3.7@10222 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Assets 2
Loading