Don't inline Array functions if receiver map is not extensible.
authorulan@chromium.org <ulan@chromium.org>
Wed, 10 Sep 2014 09:22:13 +0000 (09:22 +0000)
committerulan@chromium.org <ulan@chromium.org>
Wed, 10 Sep 2014 09:22:13 +0000 (09:22 +0000)
commitd66ed1176f3d6539ae05a8ce73b0c672dce4567b
tree5e85c52dedf77bf08d43428f9d059553efc8fe70
parent99301fc8c51497d4befdf9f60ea674a5ce5b8814
Don't inline Array functions if receiver map is not extensible.

BUG=405517
LOG=N
TEST=mjsunit/regress/regress-crbug-405517.js
R=bmeurer@chromium.org

Review URL: https://codereview.chromium.org/552333002

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@23828 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/hydrogen.cc
test/mjsunit/regress/regress-crbug-412319.js [new file with mode: 0644]