Fix handling of non-object receivers for array builtins.
authormstarzinger@chromium.org <mstarzinger@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Wed, 19 Oct 2011 09:24:37 +0000 (09:24 +0000)
committermstarzinger@chromium.org <mstarzinger@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Wed, 19 Oct 2011 09:24:37 +0000 (09:24 +0000)
commitb3eba9e764a093e4c13d70cdcf240c925a18dc91
treebb804ea77dcd9986270dbeb3067b5430c2dd3c52
parent80e3843dc315ee1db93c697db43795e33ae19fbb
Fix handling of non-object receivers for array builtins.

R=svenpanne@chromium.org
BUG=chromium:100702
TEST=mjsunit/regress/regress-100702

Review URL: http://codereview.chromium.org/8347034

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@9693 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/array.js
test/mjsunit/regress/regress-100702.js [new file with mode: 0644]