Eagerly follow transitions to existing maps while json parsing.

src/objects.h

Index: src/objects.h
diff --git a/src/objects.h b/src/objects.h
index edc85dee0e5c54803432c8e8696c89cc3b2da3f5..154df3cb07e73fba6cccc091413cb2ec800cacd1 100644
--- a/src/objects.h
+++ b/src/objects.h
@@ -1621,6 +1621,15 @@ class JSObject: public JSReceiver {
       Handle<Object> value,
       PropertyAttributes attributes);
 
+  // Try to follow an existing transition to a field with attributes NONE. The
+  // return value indicates whether the transition was successful.
+  inline bool TryTransitionToField(String* key);

[danno, 2012/10/17 13:54:23]

must be static and use Handle<> just like other Handle APIs

[Toon Verwaest, 2012/10/17 14:03:40]

Done.

+
+  // Extend the receiver with a single fast property appeared first in the
+  // passed map. This also extends the property backing store if necessary.
+  static void AddFastPropertyUsingMap(Handle<JSObject> object, Handle<Map> map);
+  inline MUST_USE_RESULT MaybeObject* AddFastPropertyUsingMap(Map* map);
+
   // Can cause GC.
   MUST_USE_RESULT MaybeObject* SetLocalPropertyIgnoreAttributes(
       String* key,