Fix sparse versions of Array slice/splice to use [[DefineOwnProperty]] to generate...
authoradamk@chromium.org <adamk@chromium.org>
Thu, 23 Oct 2014 21:13:29 +0000 (21:13 +0000)
committeradamk@chromium.org <adamk@chromium.org>
Thu, 23 Oct 2014 21:13:29 +0000 (21:13 +0000)
commit0ef073d556d10fb20dbae549eade97427701b891
treece75a1126a5beb342ef58828e39a3f54fe8240f5
parent5f1ae66d5634e43563b2d25ea652dfb94c31a3b4
Fix sparse versions of Array slice/splice to use [[DefineOwnProperty]] to generate return value

BUG=chromium:423633
LOG=n
R=verwaest@chromium.org

Review URL: https://codereview.chromium.org/673893002

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@24856 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/array.js
test/mjsunit/regress/regress-423633.js