https://codereview.chromium.org/22545007/diff/20001/src/array.js
File src/array.js (right):
https://codereview.chromium.org/22545007/diff/20001/src/array.js#newcode1315
src/array.js:1315: if (!IS_UNDEFINED(element) || i in array) {
On 2013/08/13 14:10:22, Michael Starzinger wrote:
This is actually wrong as the i-th element might have a getter that
removes the
element upon first access but still returns undefined. This will cause
us to do
the "in" check on the property after the element has been removed.
We had this "optimization" for a while and it was removed. The test262
suite
should actually cover this case.
This is the issue tracking exactly this:
https://code.google.com/p/v8/issues/detail?id=1956
https://codereview.chromium.org/22545007/
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
