- 25 Aug, 2017 1 commit
-
-
Jakob Gruber authored
We cannot assume that the receiver is a JSObject, nor can we assume ToObject() completes successfully. TBR=yangguo@chromium.org Bug: chromium:739954 Change-Id: Id55571131ef8755e86f15cd2acb918ff0f1b7788 Reviewed-on: https://chromium-review.googlesource.com/632376Reviewed-by:
Jakob Gruber <jgruber@chromium.org> Commit-Queue: Jakob Gruber <jgruber@chromium.org> Cr-Commit-Position: refs/heads/master@{#47611}
-
- 08 Jun, 2015 1 commit
-
-
yangguo authored
R=svenpanne@chromium.org BUG=v8:3718 LOG=N Review URL: https://codereview.chromium.org/1164933005 Cr-Commit-Position: refs/heads/master@{#28840}
-