projects / platform / upstream / v8.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2b554f2) | patch
Properly support shrinking arrays in CopyDictionaryToObjectElements.
authordanno@chromium.org <danno@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 3 Apr 2012 08:13:59 +0000 (08:13 +0000)
committerdanno@chromium.org <danno@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 3 Apr 2012 08:13:59 +0000 (08:13 +0000)
commitd9437722da7d2f61f3eeda699b2636577ce4beaf
tree7be5fad2010a147ed69d748f6a48ec22f4330eedtree | snapshot
parent2b554f2448e60f6505743be693727d798dbfae07commit | diff
Properly support shrinking arrays in CopyDictionaryToObjectElements.

R=mstarzinger@chromium.org
BUG=chromium:121407
TEST=test/mjsunit/regress/regress-121407.js

Review URL: https://chromiumcodereview.appspot.com/9968056

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@11214 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/elements.cc diff | blob | history
test/mjsunit/regress/regress-121407.js [new file with mode: 0644] blob
Domain: Web Framework / Web Engine;