Revision: 12975 Author: [email protected] Date: Thu Nov 15 07:27:06 2012 Log: Fix shifting from holey arrays.
Review URL: https://chromiumcodereview.appspot.com/11417007 http://code.google.com/p/v8/source/detail?r=12975 Modified: /branches/bleeding_edge/src/builtins.cc ======================================= --- /branches/bleeding_edge/src/builtins.cc Thu Nov 15 06:30:01 2012 +++ /branches/bleeding_edge/src/builtins.cc Thu Nov 15 07:27:06 2012 @@ -714,6 +714,9 @@ Object* first; MaybeObject* maybe_first = accessor->Get(receiver, array, 0, elms_obj); if (!maybe_first->To(&first)) return maybe_first; + if (first->IsTheHole()) { + first = heap->undefined_value(); + } if (!heap->lo_space()->Contains(elms_obj)) { array->set_elements(LeftTrimFixedArray(heap, elms_obj, 1)); -- v8-dev mailing list [email protected] http://groups.google.com/group/v8-dev
