Hey Jaro,

Reland the whole beast. verifier was wrong on the JSForInStep and JSForInDone with OSR because we don't have the static type info there which we asserted. But still it is safe, since the OsrValue is always a SMI (it's completely controlled
by fullcodegen). Otherwise it's identical to the previous CLs.
Please take a look.

Thanks,
Benedikt

https://codereview.chromium.org/1226673005/

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to