[turbofan] Bounds check when lowering JSStoreProperty.
authorbmeurer@chromium.org <bmeurer@chromium.org>
Mon, 22 Sep 2014 07:17:13 +0000 (07:17 +0000)
committerbmeurer@chromium.org <bmeurer@chromium.org>
Mon, 22 Sep 2014 07:17:13 +0000 (07:17 +0000)
commitf5dcdee1150ed170d796017ac6e8ef965bf78fad
treedcd4125372ac615c8cd91c629f36470e49b2272e
parenta314428a96348c7f3ce7642fd180398a89e42b3a
[turbofan] Bounds check when lowering JSStoreProperty.

R=titzer@chromium.org

Review URL: https://codereview.chromium.org/559653005

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@24105 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
src/compiler/js-graph.h
src/compiler/js-typed-lowering.cc