| Index: src/objects.cc
|
| diff --git a/src/objects.cc b/src/objects.cc
|
| index 2b6feb5c828b139d3ada33c35e9dcefe94d64883..3c95e03f29bdd5c66b5219416c9ed11db5e29fd2 100644
|
| --- a/src/objects.cc
|
| +++ b/src/objects.cc
|
| @@ -715,15 +715,16 @@ bool Object::ToInt32(int32_t* value) {
|
| bool Object::ToUint32(uint32_t* value) {
|
| if (IsSmi()) {
|
| int num = Smi::cast(this)->value();
|
| - if (num >= 0) {
|
| - *value = static_cast<uint32_t>(num);
|
| - return true;
|
| - }
|
| + if (num < 0) return false;
|
| + *value = static_cast<uint32_t>(num);
|
| + return true;
|
| }
|
| if (IsHeapNumber()) {
|
| double num = HeapNumber::cast(this)->value();
|
| - if (num >= 0 && FastUI2D(FastD2UI(num)) == num) {
|
| - *value = FastD2UI(num);
|
| + if (num < 0) return false;
|
| + uint32_t uint_value = FastD2UI(num);
|
| + if (FastUI2D(uint_value) == num) {
|
| + *value = uint_value;
|
| return true;
|
| }
|
| }
|
| @@ -6393,26 +6394,28 @@ bool JSArray::DefineOwnProperty(Isolate* isolate, Handle<JSArray> o,
|
| }
|
|
|
|
|
| -// TODO(jkummerow): Consider unification with ArrayLengthSetter in accessors.cc.
|
| -bool AnythingToArrayLength(Isolate* isolate, Handle<Object> length_obj,
|
| - uint32_t* output) {
|
| +// Part of ES6 9.4.2.4 ArraySetLength.
|
| +// static
|
| +bool JSArray::AnythingToArrayLength(Isolate* isolate,
|
| + Handle<Object> length_object,
|
| + uint32_t* output) {
|
| // Fast path: check numbers and strings that can be converted directly
|
| // and unobservably.
|
| - if (length_obj->ToUint32(output)) return true;
|
| - if (length_obj->IsString() &&
|
| - Handle<String>::cast(length_obj)->AsArrayIndex(output)) {
|
| + if (length_object->ToArrayLength(output)) return true;
|
| + if (length_object->IsString() &&
|
| + Handle<String>::cast(length_object)->AsArrayIndex(output)) {
|
| return true;
|
| }
|
| // Slow path: follow steps in ES6 9.4.2.4 "ArraySetLength".
|
| // 3. Let newLen be ToUint32(Desc.[[Value]]).
|
| Handle<Object> uint32_v;
|
| - if (!Object::ToUint32(isolate, length_obj).ToHandle(&uint32_v)) {
|
| + if (!Object::ToUint32(isolate, length_object).ToHandle(&uint32_v)) {
|
| // 4. ReturnIfAbrupt(newLen).
|
| return false;
|
| }
|
| // 5. Let numberLen be ToNumber(Desc.[[Value]]).
|
| Handle<Object> number_v;
|
| - if (!Object::ToNumber(length_obj).ToHandle(&number_v)) {
|
| + if (!Object::ToNumber(length_object).ToHandle(&number_v)) {
|
| // 6. ReturnIfAbrupt(newLen).
|
| return false;
|
| }
|
| @@ -6423,7 +6426,8 @@ bool AnythingToArrayLength(Isolate* isolate, Handle<Object> length_obj,
|
| isolate->Throw(*exception);
|
| return false;
|
| }
|
| - return uint32_v->ToArrayLength(output);
|
| + CHECK(uint32_v->ToArrayLength(output));
|
| + return true;
|
| }
|
|
|
|
|
|
|