Checks for empty array case added before casting elements to FixedDoubleArray.
authorishell@chromium.org <ishell@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Fri, 2 May 2014 11:30:24 +0000 (11:30 +0000)
committerishell@chromium.org <ishell@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Fri, 2 May 2014 11:30:24 +0000 (11:30 +0000)
commitb4c1eda0327fbcb17dfde26d4c1296c3fb56118e
tree31b1789a3d7bc1785c05602cb0c79b2c92dc8de2
parentca2def98a58b242ac3f6139ced839a2f5d5874ab
Checks for empty array case added before casting elements to FixedDoubleArray.

BUG=chromium:369450
LOG=N
R=bmeurer@chromium.org

Review URL: https://codereview.chromium.org/264973008

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@21118 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/json-stringifier.h
src/runtime.cc
test/mjsunit/regress/regress-369450.js [new file with mode: 0644]