From 11f64c3d7437ad6c256b6276913300ba98660919 Mon Sep 17 00:00:00 2001
From: Andrey Efremov <efremov.andrey@huawei-partners.com>
Date: Fri, 14 Apr 2023 18:43:06 +0300
Subject: [PATCH] Fix ObjectFactory::FillFreeObject

Signed-off-by: Andrey Efremov <efremov.andrey@huawei-partners.com>
---
 runtime/object_factory.cpp | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/runtime/object_factory.cpp b/runtime/object_factory.cpp
index 9fc69579e..8565a3820 100644
--- a/runtime/object_factory.cpp
+++ b/runtime/object_factory.cpp
@@ -925,6 +925,10 @@ JSHandle<JSObject> ObjectFactory::NewJSObjectByConstructor(const JSHandle<JSFunc
 FreeObject *ObjectFactory::FillFreeObject([[maybe_unused]] uintptr_t address, [[maybe_unused]] size_t size,
                                           [[maybe_unused]] RemoveSlots remove_slots)
 {
+    ASSERT(size % JSTaggedValue::TaggedTypeSize() == 0);
+    for (size_t offset = 0; offset < size; offset += JSTaggedValue::TaggedTypeSize()) {
+        ObjectAccessor::SetDynPrimitive(thread_, reinterpret_cast<void *>(address), offset, JSTaggedValue::VALUE_HOLE);
+    }
     FreeObject *object = nullptr;
     if (size >= FreeObject::GetTaggedSizeOffset() && size < FreeObject::SIZE) {
         object = reinterpret_cast<FreeObject *>(address);
-- 
Gitee