projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 93489e7) | patch
Don't inline Array.shift() if receiver map is not extensible.
authorbmeurer@chromium.org <bmeurer@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 21 Aug 2014 06:23:44 +0000 (06:23 +0000)
committerbmeurer@chromium.org <bmeurer@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 21 Aug 2014 06:23:44 +0000 (06:23 +0000)
commit0142786cea0853797506d3268c15e98360101b47
treedb3a4be1ca8519ddb941e648bd81d38b5dbfeb37tree | snapshot
parent93489e769524f1acf9655e1b8b64ab55a508f382commit | diff
Don't inline Array.shift() if receiver map is not extensible.

TEST=mjsunit/regress/regress-crbug-405517
BUG=405517
LOG=y
R=jarin@chromium.org

Review URL: https://codereview.chromium.org/491863002

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@23255 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/hydrogen.cc diff | blob | history
test/mjsunit/regress/regress-crbug-405517.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;