DescriptionMIPS: Fix function Fast_ArrayConcat.
Port for https://codereview.chromium.org/1409123003
In function Fast_ArrayConcat is added comparation between result_len and
FixedDoubleArray::kMaxLength. This change enables successful execution
of the test regress-599414-array-concat-fast-path.
Original commit message:
[runtime] Avoid @@isConcatSpreadable lookup for fast path Array.prototype.concat
Currently we do not check for @@isConcatSpreadable properly. If the Symbol is
set on the Array.prototype or Object.prototype the current fast paths fail.
This CL adds a fix to globally invalidate a isConcatSpreadable_protector.
Drive-by-fix: use named accessors for context variables
TEST=mjsunit/regress/regress-599414-array-concat-fast-path
BUG=
Committed: https://crrev.com/e2e879694af027fde9c6f003a5281a135a5ba45f
Cr-Commit-Position: refs/heads/master@{#36429}
Patch Set 1 #
Messages
Total messages: 9 (3 generated)
|