Index: src/ia32/stub-cache-ia32.cc |
diff --git a/src/ia32/stub-cache-ia32.cc b/src/ia32/stub-cache-ia32.cc |
index cb3c68ea8eeeacb2d105ee62a800ac5480fdf3d9..03d9fe93e2b7cbd8517d953bf240a5bb05b509ae 100644 |
--- a/src/ia32/stub-cache-ia32.cc |
+++ b/src/ia32/stub-cache-ia32.cc |
@@ -765,7 +765,7 @@ void StubCompiler::GenerateStoreTransition(MacroAssembler* masm, |
Label* miss_restore_name) { |
// Check that the map of the object hasn't changed. |
__ CheckMap(receiver_reg, Handle<Map>(object->map()), |
- miss_label, DO_SMI_CHECK, REQUIRE_EXACT_MAP); |
+ miss_label, DO_SMI_CHECK); |
// Perform global security token check if needed. |
if (object->IsJSGlobalProxy()) { |
@@ -900,7 +900,7 @@ void StubCompiler::GenerateStoreField(MacroAssembler* masm, |
Label* miss_label) { |
// Check that the map of the object hasn't changed. |
__ CheckMap(receiver_reg, Handle<Map>(object->map()), |
- miss_label, DO_SMI_CHECK, ALLOW_ELEMENT_TRANSITION_MAPS); |
+ miss_label, DO_SMI_CHECK); |
// Perform global security token check if needed. |
if (object->IsJSGlobalProxy()) { |
@@ -1041,8 +1041,7 @@ Register StubCompiler::CheckPrototypes(Handle<JSObject> object, |
bool in_new_space = heap()->InNewSpace(*prototype); |
Handle<Map> current_map(current->map()); |
if (!current.is_identical_to(first) || check == CHECK_ALL_MAPS) { |
- __ CheckMap(reg, current_map, miss, DONT_DO_SMI_CHECK, |
- ALLOW_ELEMENT_TRANSITION_MAPS); |
+ __ CheckMap(reg, current_map, miss, DONT_DO_SMI_CHECK); |
} |
// Check access rights to the global object. This has to happen after |
@@ -1083,8 +1082,7 @@ Register StubCompiler::CheckPrototypes(Handle<JSObject> object, |
if (!holder.is_identical_to(first) || check == CHECK_ALL_MAPS) { |
// Check the holder map. |
- __ CheckMap(reg, Handle<Map>(holder->map()), |
- miss, DONT_DO_SMI_CHECK, ALLOW_ELEMENT_TRANSITION_MAPS); |
+ __ CheckMap(reg, Handle<Map>(holder->map()), miss, DONT_DO_SMI_CHECK); |
} |
// Perform security check for access to the global object. |
@@ -2715,8 +2713,7 @@ Handle<Code> StoreStubCompiler::CompileStoreInterceptor( |
Label miss; |
// Check that the map of the object hasn't changed. |
- __ CheckMap(receiver(), Handle<Map>(object->map()), |
- &miss, DO_SMI_CHECK, ALLOW_ELEMENT_TRANSITION_MAPS); |
+ __ CheckMap(receiver(), Handle<Map>(object->map()), &miss, DO_SMI_CHECK); |
// Perform global security token check if needed. |
if (object->IsJSGlobalProxy()) { |