Reviewers: Michael Achenbach,
Description:
Version 3.25.28.6 (merged r20316, r20366, r20428, r20451)
Don't pass the hole to SetElement when creating Array.observe change records
Fix Type::Intersect to skip uninhabited bitsets
Make invalid LHSs that are calls late errors
BUG=chromium:356589,chromium:357330,chromium:358346
LOG=N
R=machenb...@chromium.org
Please review this at https://codereview.chromium.org/227483006/
SVN Base: https://v8.googlecode.com/svn/branches/3.25
Affected files (+300, -274 lines):
M src/arm/full-codegen-arm.cc
M src/arm64/full-codegen-arm64.cc
M src/ast.h
M src/ast.cc
M src/heap.h
M src/ia32/full-codegen-ia32.cc
M src/mips/full-codegen-mips.cc
M src/objects.cc
M src/parser.h
M src/parser.cc
M src/preparser.h
M src/preparser.cc
M src/types.cc
M src/variables.h
M src/variables.cc
M src/version.cc
M src/x64/full-codegen-x64.cc
M test/cctest/test-parsing.cc
M test/mjsunit/invalid-lhs.js
A + test/mjsunit/regress/regress-356589.js
A + test/mjsunit/regress/regress-crbug-357330.js
M test/webkit/fast/js/modify-non-references.js
M test/webkit/fast/js/modify-non-references-expected.txt
--
--
v8-dev mailing list
v8-dev@googlegroups.com
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to v8-dev+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
