typed arrays: fix 32 bit size/index overflow
authorBen Noordhuis <info@bnoordhuis.nl>
Wed, 9 Jan 2013 23:39:44 +0000 (00:39 +0100)
committerBen Noordhuis <info@bnoordhuis.nl>
Wed, 9 Jan 2013 23:55:27 +0000 (00:55 +0100)
commited825f488867d7586bee6ca4feb5fe5b0461775e
treefef6394778e72538ea85bb9fa63d4bb1a9110e97
parentaa742ddf80f104bc4f13321668a4ede0c518cd4a
typed arrays: fix 32 bit size/index overflow

Fix an out-of-bound read/write bug due to integer wrapping. Reported by
Dean McNamee.
src/v8_typed_array.cc
test/simple/test-typed-arrays.js