projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bf7b4c1) | patch
Fix ElementsKind handling of prototypes in Array.concat
authorjkummerow@chromium.org <jkummerow@chromium.org>
Thu, 11 Sep 2014 10:04:13 +0000 (10:04 +0000)
committerjkummerow@chromium.org <jkummerow@chromium.org>
Thu, 11 Sep 2014 10:04:13 +0000 (10:04 +0000)
commit11f7584d0aa19473162bf55d1e6801d975690d33
treebbceaa791af35adc3b515f83620d85bf3d06b642tree | snapshot
parentbf7b4c12c33e810b2bef2f49b1a45db30656f99acommit | diff
Fix ElementsKind handling of prototypes in Array.concat

Double elements, typed elements, and sloppy arguments elements were all erroneously marked UNREACHABLE.

BUG=chromium:412203
LOG=n
R=ulan@chromium.org

Review URL: https://codereview.chromium.org/560463002

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@23863 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/runtime.cc diff | blob | history
test/mjsunit/regress/regress-crbug-412203.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;