Correctly set the length of string before creating filler object in the json parser...
authorricow@chromium.org <ricow@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 30 May 2011 06:04:36 +0000 (06:04 +0000)
committerricow@chromium.org <ricow@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 30 May 2011 06:04:36 +0000 (06:04 +0000)
commit7eb6f5c1ba1192df6e24a2ca87720365b10734d8
treee62d26c8c62c1e7be9384c9d50da83b3167b575f
parent0b06fa3dcc876f3f81067505d0efd8957ca76005
Correctly set the length of string before creating filler object in the json parser (fixes crbug 84186).

Testcase created based on the supplied test case from the bug report, but using json parse directly instead of through the chrome javascript console.
Review URL: http://codereview.chromium.org/7084023

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@8089 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/json-parser.cc
test/mjsunit/regress/regress-crbug-84186.js [new file with mode: 0644]