Comment #5 on issue 3643 by [email protected]: Array.prototype.slice
calls [[Get]] before [[Has]] when generating result array
https://code.google.com/p/v8/issues/detail?id=3643#c5
The following revision refers to this bug:
https://chromium.googlesource.com/v8/v8.git/+/66fbb0d95cbc0f80e625a5fc874dc18f20af365b
commit 66fbb0d95cbc0f80e625a5fc874dc18f20af365b
Author: [email protected] <[email protected]>
Date: Mon Oct 27 13:04:46 2014
SimpleMove now calls [[Has]] before [[Get]] when moving elements
BUG=v8:3643
LOG=n
[email protected]
Review URL: https://codereview.chromium.org/678753002
Cr-Commit-Position: refs/branch-heads/bleeding_edge@{#24907}
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@24907
ce2b1a6d-e550-0410-aec6-3dcde31c8c00
[modify]
https://chromium.googlesource.com/v8/v8.git/+/66fbb0d95cbc0f80e625a5fc874dc18f20af365b/src/array.js
[modify]
https://chromium.googlesource.com/v8/v8.git/+/66fbb0d95cbc0f80e625a5fc874dc18f20af365b/test/mjsunit/regress/regress-3643.js
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
