commit 8e5e33843e51e2a74ae674181198a4ac00d82996
author antonm@chromium.org <antonm@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00> Wed Mar 24 09:56:30 2010 +0000
committer antonm@chromium.org <antonm@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00> Wed Mar 24 09:56:30 2010 +0000
tree fb379ccdfce7970a9d7c77b65f3b86f36f0a4b50
parent 5d8f0e6e7b477f422e3064bdf0dd5f2a23f75544

Bring fix for crbug.com/39128 to trunk.

That brings r4242 to trunk.

BUG=39128
Review URL: http://codereview.chromium.org/1269001

git-svn-id: http://v8.googlecode.com/svn/trunk@4244 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

src/heap.cc

diff --git a/src/heap.cc b/src/heap.cc
index 13ffa29..a9754ce 100644
--- a/src/heap.cc
+++ b/src/heap.cc
@@ -2648,7 +2648,7 @@
     // Update write barrier for all fields that lie beyond the header.
     RecordWrites(clone_address,
                  JSObject::kHeaderSize,
-                 object_size - JSObject::kHeaderSize);
+                 (object_size - JSObject::kHeaderSize) / kPointerSize);
   } else {
     clone = new_space_.AllocateRaw(object_size);
     if (clone->IsFailure()) return clone;