projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c2af96b) | patch
Check that constant is an integer before getting its value in HGraphBuilder::MatchRot...
authorulan@chromium.org <ulan@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 13 Mar 2014 11:50:50 +0000 (11:50 +0000)
committerulan@chromium.org <ulan@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 13 Mar 2014 11:50:50 +0000 (11:50 +0000)
commitc64b78f6da6484aa4227cf7c2fd3baa65c09933d
tree96ff29909734aee95cdf178b1847f912abab20a3tree | snapshot
parentc2af96ba7bb6cf03d5e064120b26c8ad399e1ab8commit | diff
Check that constant is an integer before getting its value in HGraphBuilder::MatchRotateRight.

BUG=351263
LOG=N
TEST=mjsunit/regress/regress-351263
R=svenpanne@chromium.org

Review URL: https://codereview.chromium.org/197803005

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19890 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/hydrogen.cc diff | blob | history
test/mjsunit/regress/regress-351263.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;