Handle changes to the Object prototype in fast handling of arrays
authorsgjesse@chromium.org <sgjesse@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 24 May 2011 12:28:10 +0000 (12:28 +0000)
committersgjesse@chromium.org <sgjesse@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00>
Tue, 24 May 2011 12:28:10 +0000 (12:28 +0000)
commiteff2946b9b93c7801d92d30c699baca1fd037caa
tree0cc184a2c8821f53353340d5eb13f0ff9e8d4417
parent5552dbccdd3de8c81cb20e1b310fae3c475b545d
Handle changes to the Object prototype in fast handling of arrays

R=ager@chromium.org

BUG=v8:1403
TEST=test/mjsunit/regress/regress-1403.js

Review URL: http://codereview.chromium.org//7067019

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@8032 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/builtins.cc
test/mjsunit/regress/regress-1403.js [new file with mode: 0644]