DescriptionMerged r11133, r11134 into trunk branch.
Check double array bounds in HasElementImpl.
Fix missing write barrier in CopyObjectToObjectElements.
BUG=chromium:119925, chromium:119926
R=jkummerow@chromium.org
Committed: https://code.google.com/p/v8/source/detail?r=11136
Patch Set 1 #
Messages
Total messages: 2 (0 generated)
|