Reviewers: Sven,

Message:
PTAL.

Description:
Fix invalid usage of StoreIC_ArrayLength optimization.

This introduces an additional check into the StoreIC_ArrayLength builtin
checking that the array still has fast properties. Redifinitions of the
length property that would cause it's type or attributes to change, will
switch to slow properties, thereby invalidating said optimization.

[email protected]
BUG=v8:1756
TEST=test262


Please review this at http://codereview.chromium.org/8895025/

SVN Base: https://v8.googlecode.com/svn/branches/bleeding_edge

Affected files:
  M src/arm/ic-arm.cc
  M src/ia32/ic-ia32.cc
  M src/ic.cc
  M src/mips/ic-mips.cc
  M src/objects-inl.h
  M src/objects.h
  M src/objects.cc
  M src/x64/ic-x64.cc
  M test/test262/test262.status


--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to