projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ab4e4cd) | patch
Check double array bounds in HasElementImpl.
authordanno@chromium.org <danno@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Sun, 25 Mar 2012 14:21:51 +0000 (14:21 +0000)
committerdanno@chromium.org <danno@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Sun, 25 Mar 2012 14:21:51 +0000 (14:21 +0000)
commit8833c995527432fb84e314f8886a35aa596c563c
treec8fd4e039b4f12c27fe25df58042e75fcc4525fftree | snapshot
parentab4e4cd91799104ca2127e7cee35fff9e7125a9bcommit | diff
Check double array bounds in HasElementImpl.

R=jkummerow@chromium.org
BUG=chromium:119925
TEST=test/mjsunit/regress/regress-119925.js

Review URL: https://chromiumcodereview.appspot.com/9808110

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@11133 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/elements.cc diff | blob | history
test/mjsunit/regress/regress-119925.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;