Description[es6] Fix RegExp built-in subclassing.
1) The Map::CopyInitialMap() did not set descriptor's array if
the source initial map had one.
2) Subclasses are temporarily disallowed to have more in-object
properties than the parent class (for GC reasons).
BUG=v8:3101, v8:3330, v8:4531
LOG=N
Committed: https://crrev.com/678a5583d6e15ee81546f7e4a23a21dc5cfe8012
Cr-Commit-Position: refs/heads/master@{#31743}
Patch Set 1 : #
Dependent Patchsets: Messages
Total messages: 20 (11 generated)
|