Comment #6 on issue 4271 by [email protected]: Fatal error in
v8::Object::GetInternalField
https://code.google.com/p/v8/issues/detail?id=4271#c6
The following revision refers to this bug:
https://chromium.googlesource.com/v8/v8.git/+/c9007d8f7ee634e99b3104233d7fcc2d64a18a52
commit c9007d8f7ee634e99b3104233d7fcc2d64a18a52
Author: caitpotter88 <[email protected]>
Date: Fri Jul 17 21:44:26 2015
[d8] bounds-check before getting Shell::Worker internal field
Prevents fatal error in debug builds
BUG=v8:4271, 506954
[email protected]
LOG=N
Committed: https://crrev.com/43ce9c6f101c4224addd9a54e0c39963188dc7fa
Cr-Commit-Position: refs/heads/master@{#29524}
Review URL: https://codereview.chromium.org/1214053004
Cr-Commit-Position: refs/heads/master@{#29737}
[modify] http://crrev.com/c9007d8f7ee634e99b3104233d7fcc2d64a18a52/src/d8.cc
[add]
http://crrev.com/c9007d8f7ee634e99b3104233d7fcc2d64a18a52/test/mjsunit/regress/regress-4271.js
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
