projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1a6cd52) | patch
Check that index and length are Smi in bounds check.
authorverwaest@chromium.org <verwaest@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 21 Aug 2012 16:46:25 +0000 (16:46 +0000)
committerverwaest@chromium.org <verwaest@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 21 Aug 2012 16:46:25 +0000 (16:46 +0000)
commit5df5eea066c1b033c36bba2a596549d4f0a9be38
treeedd3a378f625932d8ec0a3a85a47dd1b1060d071tree | snapshot
parent1a6cd523c8e4c9fdf991bc2a92de61f571add00ecommit | diff
Check that index and length are Smi in bounds check.

BUG=chromium:142218
R=danno@chromium.org

Review URL: https://chromiumcodereview.appspot.com/10829456

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@12362 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/arm/lithium-codegen-arm.cc diff | blob | history
src/arm/lithium-codegen-arm.h diff | blob | history
src/ia32/lithium-codegen-ia32.cc diff | blob | history
src/ia32/lithium-codegen-ia32.h diff | blob | history
src/x64/lithium-codegen-x64.cc diff | blob | history
src/x64/lithium-codegen-x64.h diff | blob | history
test/mjsunit/regress/regress-crbug-142218.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;