tree 6e17affb7f1dc6896c6dec3d48245654398ecf93
parent bdaa7d66a37adcc1f1d81c9b0f834327a74ffe07
author Georg Neis <neis@chromium.org> 1582103059 +0100
committer Commit Bot <commit-bot@chromium.org> 1582107334 +0000

[turbofan] Fix bug in receiver maps inference

JSCreate can have side effects (by looking up the prototype on an
object), so once we walk past that the analysis result must be marked
as "unreliable".

Bug: chromium:1053604
Change-Id: I36625b14f374e74561c9b539bdf7a02ae767cf7f
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2062396
Commit-Queue: Georg Neis <neis@chromium.org>
Reviewed-by: Michael Stanton <mvstanton@chromium.org>
Cr-Commit-Position: refs/heads/master@{#66329}