DescriptionProperly support shrinking arrays in CopyDictionaryToObjectElements.
R=mstarzinger@chromium.org
BUG=chromium:121407
TEST=test/mjsunit/regress/regress-121407.js
Committed: https://code.google.com/p/v8/source/detail?r=11214
Patch Set 1 #Patch Set 2 : Remove assert #Patch Set 3 : Extend test case #
Total comments: 1
Messages
Total messages: 1 (0 generated)
|