Fix evaluation order of Object.prototype.hasOwnProperty
authorarv <arv@chromium.org>
Wed, 24 Jun 2015 22:30:37 +0000 (15:30 -0700)
committerCommit bot <commit-bot@chromium.org>
Wed, 24 Jun 2015 22:30:52 +0000 (22:30 +0000)
commitf4e39a8c1f68aa1cc7a3e5292760ecf563388cf0
tree941de1c6f161597fa88ea1db17f273e64f7b12e7
parenta0f4706e5ea0ffaf0fbd1e0015a1a8697427f021
Fix evaluation order of Object.prototype.hasOwnProperty

We need to do the ToName before the ToObject.

BUG=v8:4229
LOG=N
R=adamk

Review URL: https://codereview.chromium.org/1211663002

Cr-Commit-Position: refs/heads/master@{#29272}
src/v8natives.js
test/mjsunit/has-own-property-evaluation-order.js [new file with mode: 0644]