Comment #4 on issue 27309 by [email protected]: Creating certain new
objects results in the object being set to 'true' rather than an object.
http://code.google.com/p/chromium/issues/detail?id=27309
The following revision refers to this bug:
http://src.chromium.org/viewvc/chrome?view=rev&revision=31660
------------------------------------------------------------------------
r31660 | [email protected] | 2009-11-11 03:14:10 -0800 (Wed, 11 Nov 2009) |
14 lines
Changed paths:
M http://src.chromium.org/viewvc/chrome/trunk/src/DEPS?r1=31660&r2=31659
Update V8 to version 1.3.18.6.
Fix stack corruption bug that causes crashes or incorrect behavior in
IC lookup routines.
Fixed regexp issue with cyrilic characters.
Fix bailout of inline constructor generation.
Do not show hidden properties array in debugger.
BUG=27309,27227,26529,25188,26491
TEST=Covered by V8 tests.
Review URL: http://codereview.chromium.org/385036
------------------------------------------------------------------------
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
