projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2aa17c6) | patch
Don't crash in Array.join() if the resulting string exceeds the max string length.
authorbmeurer@chromium.org <bmeurer@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Fri, 31 Jan 2014 12:21:17 +0000 (12:21 +0000)
committerbmeurer@chromium.org <bmeurer@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Fri, 31 Jan 2014 12:21:17 +0000 (12:21 +0000)
commit3214cf11ff1c02b10d150ef37a16e5daa0a586a6
tree577016b65dbb2a134f754f73f2561e9ece0b356ctree | snapshot
parent2aa17c6e62bc0ff9758408d639d467cda438d1bfcommit | diff
Don't crash in Array.join() if the resulting string exceeds the max string length.

LOG=y
BUG=336820
R=svenpanne@chromium.org

Review URL: https://codereview.chromium.org/144533003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@18986 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/messages.js diff | blob | history
src/runtime.cc diff | blob | history
test/mjsunit/regress/regress-336820.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;