projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9aa05b0) | patch
Check the offset argument of TypedArray.set for fitting into Smi.
authordslomov@chromium.org <dslomov@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 4 Feb 2014 09:53:05 +0000 (09:53 +0000)
committerdslomov@chromium.org <dslomov@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 4 Feb 2014 09:53:05 +0000 (09:53 +0000)
commita03d31394c8bc1a5a544640644399894651cd40e
treead61789c8ad0b8140731ef31c9169912c92b8339tree | snapshot
parent9aa05b0997594e18bf38f46ce98ad4d5f6e4a408commit | diff
Check the offset argument of TypedArray.set for fitting into Smi.

R=jkummerow@chromium.org
BUG=340125
LOG=Y

Review URL: https://codereview.chromium.org/145623009

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19051 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/typedarray.js diff | blob | history
test/mjsunit/regress/regress-340125.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;