test/mjsunit/regress/regress-351263.js · 37c8976632df1f0b66e4d8dc3039ee5af6e012f5 · Linshizhi / V8

Check that constant is an integer before getting its value in HGraphBuilder::MatchRotateRight. · c64b78f6

ulan@chromium.org authored Mar 13, 2014

BUG=351263
LOG=N
TEST=mjsunit/regress/regress-351263
R=svenpanne@chromium.org

Review URL: https://codereview.chromium.org/197803005

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@19890 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

c64b78f6

regress-351263.js 1.76 KB

Replace regress-351263.js