From 8ba0429cd68620fec5225ebc47e210b0f7228997 Mon Sep 17 00:00:00 2001 From: Manish Date: Tue, 14 May 2024 12:12:43 -0700 Subject: [PATCH] Match https://chromium.googlesource.com/v8/v8.git/+/f320600cd1f48ba6bb57c0395823fe0c5e5ec52e%5E%21/#F0 Match https://chromium.googlesource.com/v8/v8.git/+/f320600cd1f48ba6bb57c0395823fe0c5e5ec52e%5E%21/#F0 --- deps/v8/src/objects/js-objects.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deps/v8/src/objects/js-objects.cc b/deps/v8/src/objects/js-objects.cc index e5a03dff14835e..91433bc8e0ca74 100644 --- a/deps/v8/src/objects/js-objects.cc +++ b/deps/v8/src/objects/js-objects.cc @@ -432,7 +432,7 @@ Maybe JSReceiver::SetOrCopyDataProperties( Nothing()); if (!from->HasFastProperties() && target->HasFastProperties() && - !IsJSGlobalProxy(*target)) { + IsJSObject(*target) && !IsJSGlobalProxy(*target)) { // JSProxy is always in slow-mode. DCHECK(!IsJSProxy(*target)); // Convert to slow properties if we're guaranteed to overflow the number of