Comment #14 on issue 2615 by [email protected]: Non-compliant behavior
in array functions at MaxUInt32 boundary
https://code.google.com/p/v8/issues/detail?id=2615#c14
The following revision refers to this bug:
https://chromium.googlesource.com/v8/v8.git/+/97f895f94002471104bb0629a327dd37fc0760fa
commit 97f895f94002471104bb0629a327dd37fc0760fa
Author: [email protected] <[email protected]>
Date: Tue Nov 11 19:07:29 2014
Correctly handle Array unshift/splices that move elements past the max
length of an Array
BUG=v8:2615
LOG=n
[email protected]
Review URL: https://codereview.chromium.org/679113003
Cr-Commit-Position: refs/branch-heads/bleeding_edge@{#25270}
git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@25270
ce2b1a6d-e550-0410-aec6-3dcde31c8c00
[modify]
https://chromium.googlesource.com/v8/v8.git/+/97f895f94002471104bb0629a327dd37fc0760fa/src/array.js
[rename]
https://chromium.googlesource.com/v8/v8.git/+/97f895f94002471104bb0629a327dd37fc0760fa/test/mjsunit/regress/regress-splice-large-index.js
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
