We should avoid it by setting watchpoint.
Created attachment 376754 [details] Patch
Created attachment 376755 [details] Patch
Created attachment 376756 [details] Patch
<rdar://problem/54503629>
Created attachment 376757 [details] Patch
Created attachment 376758 [details] Patch
Comment on attachment 376758 [details] Patch Where is the code that fires arrayJoinWatchpointSet()?
(In reply to Mark Lam from comment #7) > Comment on attachment 376758 [details] > Patch > > Where is the code that fires arrayJoinWatchpointSet()? ObjectPropertyChangeAdaptiveWatchpoint is created for this watchpointset. It will fire.
(In reply to Yusuke Suzuki from comment #8) > (In reply to Mark Lam from comment #7) > > Comment on attachment 376758 [details] > > Patch > > > > Where is the code that fires arrayJoinWatchpointSet()? > > ObjectPropertyChangeAdaptiveWatchpoint is created for this watchpointset. It > will fire. Ah, I see. I missed that.
Comment on attachment 376758 [details] Patch r=me
Committed r248906: <https://trac.webkit.org/changeset/248906>