- 23 Jun, 2016 1 commit
-
-
bakkot authored
TypedArrays store their true length in an internal slot. This is normally reflected in the .length property, but that property is configurable. Algorithms which need the length of a typed array are to use the internal slot, not the property; TypedArray.prototype.set was not doing this. BUG=v8:5133 Review-Url: https://codereview.chromium.org/2091153002 Cr-Commit-Position: refs/heads/master@{#37232}
-