Fix a regression in character-at stub when doing a keyed load on a string.
authorfschneider@chromium.org <fschneider@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 16 Sep 2010 09:18:08 +0000 (09:18 +0000)
committerfschneider@chromium.org <fschneider@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Thu, 16 Sep 2010 09:18:08 +0000 (09:18 +0000)
commite91a352d025474db95f618382381984bb9bad1d7
tree997f4cc070eda19b1705709ffc1f65a12ab43187
parentb2306a41d0e2e3bf896f1c3defb07f2368a737ab
Fix a regression in character-at stub when doing a keyed load on a string.

Loading from out-of-range has to go to the runtime system to check if there
exists a property with that index in the prototype.

Review URL: http://codereview.chromium.org/3410011

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@5471 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/arm/ic-arm.cc
src/ia32/ic-ia32.cc
src/x64/ic-x64.cc
test/mjsunit/regress/regress-900966.js