Status: Accepted Owner: [email protected] Labels: Type-Bug Priority-Medium
New issue 684 by [email protected]: Push-optimization crash. http://code.google.com/p/v8/issues/detail?id=684 var x = {__proto__:[]}; x.push("a"); x.push("a"); x.push("a"); Gives "Segmentation fault, core dumped.". Porting fast push/pop-compilers to X64 gives same crash there. Doesn't happen if __proto__ is {push:[].push, pop:[].pop}, only if it's an Array. -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings -- v8-dev mailing list [email protected] http://groups.google.com/group/v8-dev
