Updates:
Status: Fixed
Comment #3 on issue 346 by [email protected]: Crash [@
v8::internal::JSObject::LocalLookup] and CHECK(holder != __null) failed
http://code.google.com/p/v8/issues/detail?id=346
The bug has been fixed in V8 version 2133 with the patch at
http://codereview.chromium.org/119357. The unit test includes
acknowledgment of the bug submitter.
The C++ code that quickly moved holes and undefineds to the end of
the array of elements, when sorting them, did not handle accessors
correctly.
When accessors are detected, we now bail out to a JavaScript function which
does the same thing more safely and slowly.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
-~----------~----~----~----~------~----~------~--~---
