DescriptionFix possible crash in FixedDoubleArray::Initialize()
(this only affected ia32).
BUG=95113
TEST=mjsunit/regress/regress-95113.js passes without crashing.
Committed: http://code.google.com/p/v8/source/detail?r=9153
Patch Set 1 #
Total comments: 2
Patch Set 2 : address comment #Patch Set 3 : remove forgotten unused variable #
Messages
Total messages: 4 (0 generated)
|