heap: We should never finalize an in-construction object

Change-Id: Ia475d5bd55bbf621c26c782c25d40b861a9de817
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2376821
Commit-Queue: Omer Katz <omerkatz@chromium.org>
Commit-Queue: Anton Bikineev <bikineev@chromium.org>
Auto-Submit: Omer Katz <omerkatz@chromium.org>
Reviewed-by: Anton Bikineev <bikineev@chromium.org>
Cr-Commit-Position: refs/heads/master@{#801835}

third_party/blink/renderer/platform/heap/heap_page.cc

@@ -88,6 +88,7 @@
 namespace blink {
 
 void HeapObjectHeader::Finalize(Address object, size_t object_size) {
+  DCHECK(!IsInConstruction<HeapObjectHeader::AccessMode::kAtomic>());
   HeapAllocHooks::FreeHookIfEnabled(object);
   const GCInfo& gc_info = GCInfo::From(GcInfoIndex());
   if (gc_info.finalize)