Updates:
        Status: Fixed

Comment #4 on issue 3520 by [email protected]: Chrome JS on MacOSX array push bug, pushing NaN sometimes results in INT MIN being pushed leading to erratic client code behavior.
http://code.google.com/p/v8/issues/detail?id=3520

Looks like https://codereview.chromium.org/319343002 (r21733) would have fixed it. The NaN double value is incorrectly forced into an int representation in HForceRepresentation::New by a static_cast<int32_t>, which is undefined behavior and results in 0x80000000.

This does not affect V8 3.27 and 3.28, and since Chrome M27 goes stable soon-ish, we can ignore this.

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to