Version 3.25.7 (based on bleeding_edge revision r19776)

Promise.all and Promise.race should reject non-array parameter (Chromium issue 347453).

Promise.all and Promise race should use "then" rather than "chain" (Chromium issue 347427).

Merge the "Compute Minus Zero Checks" phase into the range analysis (issue 3204).

Performance and stability improvements on all platforms.

git-svn-id: http://v8.googlecode.com/svn/trunk@19777 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
diff --git a/src/objects-debug.cc b/src/objects-debug.cc
index 31a59cb..0988d9d 100644
--- a/src/objects-debug.cc
+++ b/src/objects-debug.cc
@@ -403,6 +403,13 @@
 
 void ConstantPoolArray::ConstantPoolArrayVerify() {
   CHECK(IsConstantPoolArray());
+  for (int i = 0; i < count_of_code_ptr_entries(); i++) {
+    Address code_entry = get_code_ptr_entry(first_code_ptr_index() + i);
+    VerifyPointer(Code::GetCodeFromTargetAddress(code_entry));
+  }
+  for (int i = 0; i < count_of_heap_ptr_entries(); i++) {
+    VerifyObjectField(OffsetOfElementAt(first_heap_ptr_index() + i));
+  }
 }