With the Window object using the oversize allocator, it can be removed entirely. This depends on the patch in 13381
Created attachment 14063 [details] 02-js-gc-forbid-oversize.patch.txt
Comment on attachment 14063 [details] 02-js-gc-forbid-oversize.patch.txt Looks fine. I would have suggested using a simpler approach for CellSize, using sizeof(void*) as the parmaeter rather than the two booleans, as in the IntTypes template in HashFunctions.h.
Just wondering -- how did you verify that max object size? Can we make that verification happen at compile time?
I took Darin's preferred approach to the size selection. Re Geoff's comment, I could not figure out a good way to do the check at compile time.