• Shu-yu Guo's avatar
    [change-array-by-copy] Use fixed args for with · 758823a5
    Shu-yu Guo authored
    Array#with and TypedArray#with adapt their arguments because they have a
    fixed arity of 2. Builtins that adapt arguments shouldn't use
    ...arguments in Torque, which results in a "don't adapt" sentinel to be
    generated, resulting in incorrect frame size computation.
    
    Bug: v8:12764, chromium:1367133
    Change-Id: I81c1ef2cdef25d049fa0b8effcb2a953c2a9846b
    Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3915939
    Commit-Queue: Shu-yu Guo <syg@chromium.org>
    Reviewed-by: 's avatarAdam Klein <adamk@chromium.org>
    Auto-Submit: Shu-yu Guo <syg@chromium.org>
    Commit-Queue: Adam Klein <adamk@chromium.org>
    Cr-Commit-Position: refs/heads/main@{#83405}
    758823a5
regress-crbug-1367133.js 929 Bytes