https://codereview.chromium.org/1156573002/diff/140001/src/elements.cc
File src/elements.cc (right):
https://codereview.chromium.org/1156573002/diff/140001/src/elements.cc#newcode940
src/elements.cc:940: if (obj->map()->is_strong() &&
!backing_store->is_the_hole(key)) {
On 2015/05/28 15:46:17, arv wrote:
When do we holes in the backing store of a strong object?
The elements backing store can become some flavour of holey array, so
this is needed to make sure deleting a missing property doesn't reject.
I've just realised this is in the wrong place though, if key is >length,
this trips an assert, so I've fixed that.
https://codereview.chromium.org/1156573002/diff/140001/test/mjsunit/strong/object-delete.js
File test/mjsunit/strong/object-delete.js (right):
https://codereview.chromium.org/1156573002/diff/140001/test/mjsunit/strong/object-delete.js#newcode53
test/mjsunit/strong/object-delete.js:53: with(o) {
On 2015/05/28 15:46:17, arv wrote:
with (
Done.
https://codereview.chromium.org/1156573002/diff/140001/test/mjsunit/strong/object-delete.js#newcode128
test/mjsunit/strong/object-delete.js:128: let deletePropertyFuncsSloppy
= [deleteFromObjectSloppy,
On 2015/05/28 15:46:17, arv wrote:
let deletePropertyFuncsSloppy = [
deleteFromObjectSloppy,
deleteFromObjectKeyedSloppy,
...
];
Done.
https://codereview.chromium.org/1156573002/diff/140001/test/mjsunit/strong/object-delete.js#newcode171
test/mjsunit/strong/object-delete.js:171: [{configurable:true,
value:"bar"},
On 2015/05/28 15:46:17, arv wrote:
{configurable: true, value: "bar"},
Done.
https://codereview.chromium.org/1156573002/
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
