Reviewers: fschneider,
Description:
Bailout from crankshaft if a global property is found in the prototype
chain of
the global object, not on the global object itself.
Please review this at http://codereview.chromium.org/6449002/
SVN Base: http://v8.googlecode.com/svn/branches/bleeding_edge/
Affected files:
M src/hydrogen.cc
Index: src/hydrogen.cc
===================================================================
--- src/hydrogen.cc (revision 6668)
+++ src/hydrogen.cc (working copy)
@@ -2952,6 +2952,9 @@
if (is_store && lookup->IsReadOnly()) {
BAILOUT("read-only global variable");
}
+ if (lookup->holder() != *global) {
+ BAILOUT("global property on prototype of global object");
+ }
}
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
