Ensure double arrays are filled with holes when extended from variations of empty...
authorverwaest@chromium.org <verwaest@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 26 Nov 2012 14:29:21 +0000 (14:29 +0000)
committerverwaest@chromium.org <verwaest@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Mon, 26 Nov 2012 14:29:21 +0000 (14:29 +0000)
commitebeaad6cb5603774de05934eb8993627ed7b3429
treed52bb2ed21d58031ffc16db42cd18b432514939d
parentc7b18f3a7126ecb1b555bda44888d4c895086841
Ensure double arrays are filled with holes when extended from variations of empty arrays.

BUG=162085

Review URL: https://chromiumcodereview.appspot.com/11414155

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@13056 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/arm/stub-cache-arm.cc
src/elements.cc
src/ia32/stub-cache-ia32.cc
src/parser.cc
src/x64/stub-cache-x64.cc
test/mjsunit/array-natives-elements.js
test/mjsunit/regress/regress-crbug-162085.js [new file with mode: 0644]