Fix JSObject::SetElement for fixed typed array elements.
authordslomov@chromium.org <dslomov@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 27 Mar 2014 12:54:26 +0000 (12:54 +0000)
committerdslomov@chromium.org <dslomov@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 27 Mar 2014 12:54:26 +0000 (12:54 +0000)
commit4cdfb46a6db67505cf256c4ccd2fdd49b95e529a
tree57b538ab6774a6360fc520fd9add60d575c26f78
parentfe58e3d7b81bf7f0d720671955b3b91406e353d7
Fix JSObject::SetElement for fixed typed array elements.

R=ulan@chromium.org
BUG=357108
LOG=N

Review URL: https://codereview.chromium.org/214543003

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@20300 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/objects.cc
test/mjsunit/regress/regress-357108.js [new file with mode: 0644]