Updates:
Status: Fixed
Comment #4 on issue 2433 by [email protected]: Array access past length
leads to reading uninitialized data after transition to FAST_DOUBLE_ELEMENTS
http://code.google.com/p/v8/issues/detail?id=2433
Fixed in http://code.google.com/p/v8/source/detail?r=13082. Thanks for the patch.
-- v8-dev mailing list [email protected] http://groups.google.com/group/v8-dev
