Revision: 6678
Author: [email protected]
Date: Tue Feb 8 05:28:09 2011
Log: Bailout from crankshaft if a global property is found in the prototype
chain of the global object, not on the global object itself.
Review URL: http://codereview.chromium.org/6449002
http://code.google.com/p/v8/source/detail?r=6678
Modified:
/branches/bleeding_edge/src/hydrogen.cc
=======================================
--- /branches/bleeding_edge/src/hydrogen.cc Tue Feb 8 02:08:47 2011
+++ /branches/bleeding_edge/src/hydrogen.cc Tue Feb 8 05:28:09 2011
@@ -2952,6 +2952,9 @@
if (is_store && lookup->IsReadOnly()) {
BAILOUT("read-only global variable");
}
+ if (lookup->holder() != *global) {
+ BAILOUT("global property on prototype of global object");
+ }
}
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
