Fix an assertion failure in the full code generator.
authorkmillikin@chromium.org <kmillikin@chromium.org>
Wed, 19 Jan 2011 15:26:54 +0000 (15:26 +0000)
committerBert Belder <bertbelder@gmail.com>
Thu, 20 Jan 2011 00:39:32 +0000 (01:39 +0100)
commit7c2869046ec3617d069b6076e12a3b56fec3d9cd
treefa414a8be5dd2c5bf6ed350e3d291634244576d7
parentba80d4d8a9e6141c00fe60b6fb65983a7f7b8fd9
Fix an assertion failure in the full code generator.

We hit an assertion failure when we tried to record the AST ID of
the (shared) .arguments variable proxy more than once.  This was hit
when we had multiple calls to the same parameter in a function that
used the arguments object.  The fix is to not visit the subexpressions
of the (shared) property access expression.

BUG=1060

Review URL: http://codereview.chromium.org/6368007

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@6404 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
deps/v8/src/arm/full-codegen-arm.cc
deps/v8/src/ia32/full-codegen-ia32.cc
deps/v8/src/x64/full-codegen-x64.cc
deps/v8/test/mjsunit/regress/regress-1060.js [new file with mode: 0644]