Fix TransitionElementsKindStub to handle non-JSArray objects correctly.
authorulan@chromium.org <ulan@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 18 Mar 2014 13:29:29 +0000 (13:29 +0000)
committerulan@chromium.org <ulan@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 18 Mar 2014 13:29:29 +0000 (13:29 +0000)
commit487ca9e38483d5cca5723398fbd50bf1799af2cc
treead115f1f463e9229994508e313660604f1bd3474
parentbd48e40ad1147fb130c25c6563045d3881e81075
Fix TransitionElementsKindStub to handle non-JSArray objects correctly.

BUG=352982
LOG=N
TEST=mjsunit/regress/regress-352982.js
R=danno@chromium.org

Review URL: https://codereview.chromium.org/196343023

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@20033 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/a64/lithium-codegen-a64.cc
src/arm/lithium-codegen-arm.cc
src/code-stubs-hydrogen.cc
src/code-stubs.h
src/ia32/lithium-codegen-ia32.cc
src/mips/lithium-codegen-mips.cc
src/x64/lithium-codegen-x64.cc
test/mjsunit/regress/regress-352982.js [new file with mode: 0644]