Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(534)

Issue 137203010: Merged r18116 into 3.22 branch. (Closed)

Created:
6 years, 11 months ago by Jakob Kummerow
Modified:
6 years, 11 months ago
Reviewers:
ulan
CC:
v8-dev
Visibility:
Public.

Description

Merged r18116 into 3.22 branch. Fix missing bounds check in n-arguments Array constructor. BUG=v8:3027 R=ulan@chromium.org Committed: https://code.google.com/p/v8/source/detail?r=18740

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+23 lines, -17 lines) Patch
M src/code-stubs-hydrogen.cc View 2 chunks +13 lines, -5 lines 0 comments Download
M src/version.cc View 1 chunk +1 line, -1 line 0 comments Download
A + test/mjsunit/regress/regress-3027.js View 2 chunks +9 lines, -11 lines 0 comments Download

Messages

Total messages: 3 (0 generated)
Jakob Kummerow
6 years, 11 months ago (2014-01-22 12:21:28 UTC) #1
ulan
lgtm
6 years, 11 months ago (2014-01-22 12:24:20 UTC) #2
Jakob Kummerow
6 years, 11 months ago (2014-01-22 12:28:54 UTC) #3
Message was sent while issue was closed.
Committed patchset #1 manually as r18740 (presubmit successful).

Powered by Google App Engine
This is Rietveld 408576698