projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 15429da) | patch
Fix a potential crash in const declaration.
authorkmillikin@chromium.org <kmillikin@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 11 Jul 2011 14:07:12 +0000 (14:07 +0000)
committerkmillikin@chromium.org <kmillikin@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 11 Jul 2011 14:07:12 +0000 (14:07 +0000)
commit890bc1607a503e2c87a89f69b38a5ee7654aa22e
tree210d22f3d333a889999575e0329610cd455e1508tree | snapshot
parent15429da46982128994681d982a0213904ca741accommit | diff
Fix a potential crash in const declaration.

Declaration of const lookup slots would trigger an assertion if there was a
setter somewhere in the prototype chain, and that setter was shadowed by a
non-readonly data property also in the prototype chain.

R=ager@chromium.org
BUG=
TEST=

Review URL: http://codereview.chromium.org/7324048

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@8602 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/objects.cc diff | blob | history
test/mjsunit/regress/regress-88591.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;