Fix for issue 341. In the stub for instanceof, we could try to read
authorkmillikin@chromium.org <kmillikin@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 12 May 2009 11:40:14 +0000 (11:40 +0000)
committerkmillikin@chromium.org <kmillikin@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 12 May 2009 11:40:14 +0000 (11:40 +0000)
commit18f69a71715847cc8363f504ee73a8dc2bac5181
treede91e82496f8e8cce52620b4b97308fc659c9b2c
parent142fe3431acaa1217ca3dbe3b7627dd14f902b28
Fix for issue 341.  In the stub for instanceof, we could try to read
an object's map before we were sure it was a heap object.
Review URL: http://codereview.chromium.org/115236

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@1914 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/ia32/codegen-ia32.cc
test/mjsunit/regress/regress-341.js [new file with mode: 0644]