V8 crashes when profile generator is trying to allocate a raw_entries_ buffer more than 2Gb.

src/allocation.h

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 62 matching lines @@
 class AllStatic {
 #ifdef DEBUG
  public:
   void* operator new(size_t size);
   void operator delete(void* p);
 #endif
 };
 
 
 template <typename T>
-T* NewArray(int size) {
+T* NewArray(size_t size) {
   T* result = new T[size];
   if (result == NULL) Malloced::FatalProcessOutOfMemory();
   return result;
 }
 
 
 template <typename T>
 void DeleteArray(T* array) {
   delete[] array;
 }
@@ skipping 39 matching lines @@
 
   friend class Isolate;
 
   DISALLOW_IMPLICIT_CONSTRUCTORS(PreallocatedStorage);
 };
 
 
 } }  // namespace v8::internal
 
 #endif  // V8_ALLOCATION_H_