-
mstarzinger@chromium.org authored
The typed array constructor might fail if the first argument is an object with a length property. Accessing the property can cause an exception to be thrown and an explicit check needs to be performed. R=verwaest@chromium.org BUG=chromium:168545 TEST=mjsunit/regress/regress-crbug-168545.js Review URL: https://codereview.chromium.org/11777014 git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@13325 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
0e46919c
| Name |
Last commit
|
Last update |
|---|---|---|
| benchmarks | ||
| build | ||
| include | ||
| preparser | ||
| samples | ||
| src | ||
| test | ||
| tools | ||
| .gitignore | ||
| AUTHORS | ||
| ChangeLog | ||
| DEPS | ||
| LICENSE | ||
| LICENSE.strongtalk | ||
| LICENSE.v8 | ||
| LICENSE.valgrind | ||
| Makefile | ||
| Makefile.android | ||
| OWNERS | ||
| PRESUBMIT.py | ||
| SConstruct |