Track computed literal properties.

src/objects-debug.cc

Index: src/objects-debug.cc
diff --git a/src/objects-debug.cc b/src/objects-debug.cc
index 891f0d2302daee66039130097592cd9981b56564..f5fcc5039a6ec1d1436adac67f951197df48b151 100644
--- a/src/objects-debug.cc
+++ b/src/objects-debug.cc
@@ -312,6 +312,9 @@ void JSObject::JSObjectVerify() {
         Representation r = descriptors->GetDetails(i).representation();
         int field = descriptors->GetFieldIndex(i);
         Object* value = RawFastPropertyAt(field);
+        // Ignore values set to undefined. Undefined could be the placeholder
+        // for fields that did not yet have a representation.
+        if (value->IsUndefined()) continue;

[danno, 2013/06/06 07:54:19]

Maybe using another sentinel is a better idea for uninitialized fields, one that
can't be programmatically assigned to a field in a valid JavaScript program
(maybe the hole?).

[Toon Verwaest, 2013/06/06 10:31:41]

The hole value has a special meaning when placed in fields. I tried this before
and it is pretty messy. We could introduce a new dummy object for this purpose
if you feel strongly about it. Otherwise I'd leave it as it is.

On 2013/06/06 07:54:19, danno wrote:

         if (r.IsSmi()) ASSERT(value->IsSmi());
         if (r.IsDouble()) ASSERT(value->IsHeapNumber());
         if (r.IsHeapObject()) ASSERT(value->IsHeapObject());