projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: da8817f) | patch
Fixed JSObject::SetPropertyForResult (issue 2153)
authorsvenpanne@chromium.org <svenpanne@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 29 May 2012 12:42:22 +0000 (12:42 +0000)
committersvenpanne@chromium.org <svenpanne@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 29 May 2012 12:42:22 +0000 (12:42 +0000)
commit39f88f1b26161fb53693f42878dcf41c8e766327
tree86f1a7d8610b1bf3d2a058454d0a97dbb8256940tree | snapshot
parentda8817f02a3bfc110a45894d5ba7c9082280e17ecommit | diff
Fixed JSObject::SetPropertyForResult (issue 2153)

AccessorPairs containing only holes are maps were handled incorrectly.

BUG=v8:2153
TEST=mjsunit/regress/regress-2153.js

Review URL: https://chromiumcodereview.appspot.com/10453054

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@11672 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/objects.cc diff | blob | history
test/mjsunit/regress/regress-2153.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;