Updates:
Status: Fixed
Comment #3 on issue 341 by [email protected]: CRASH when running
LayoutTests/fast/js/instance-of-immediates.html
http://code.google.com/p/v8/issues/detail?id=341
This was caused by a failure to check that function's prototype property
was a heap
object before treating it like one.
Fixed in bleeding_edge r1914.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
-~----------~----~----~----~------~----~------~--~---
