Revision: 12241
Author:
verw...@chromium.org
Date: Wed Aug 1 03:50:26 2012
Log: Don't leak inobject space when transforming to fast properties
without descriptors.
Review URL:
https://chromiumcodereview.appspot.com/10828112
http://code.google.com/p/v8/source/detail?r=12241
Modified:
/branches/bleeding_edge/src/objects.cc
=======================================
--- /branches/bleeding_edge/src/objects.cc Tue Jul 31 02:53:39 2012
+++ /branches/bleeding_edge/src/objects.cc Wed Aug 1 03:50:26 2012
@@ -12577,7 +12577,7 @@
if (instance_descriptor_length == 0) {
ASSERT_LE(unused_property_fields, inobject_props);
// Transform the object.
- new_map->set_unused_property_fields(unused_property_fields);
+ new_map->set_unused_property_fields(inobject_props);
obj->set_map(new_map);
obj->set_properties(heap->empty_fixed_array());
// Check that it really works.