Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1035)

Issue 222213004: Merged r19804, r19890, r19894, r19935 into 3.24 branch. (Closed)

Created:
6 years, 8 months ago by Jakob Kummerow
Modified:
6 years, 8 months ago
Reviewers:
ulan
CC:
v8-dev
Visibility:
Public.

Description

Merged r19804, r19890, r19894, r19935 into 3.24 branch. fix bad access check check Check that constant is an integer before getting its value in HGraphBuilder::MatchRotateRight. Simplify GetEnumPropertyKeys and avoid trimming fixed arrays in large object space. Fix generalization with callbacks. BUG=351263, 352070, 352588 LOG=N R=ulan@chromium.org Committed: https://code.google.com/p/v8/source/detail?r=20441

Patch Set 1 #

Unified diffs Side-by-side diffs Delta from patch set Stats (+45 lines, -90 lines) Patch
M src/handles.cc View 1 chunk +3 lines, -26 lines 0 comments Download
M src/hydrogen.cc View 1 chunk +1 line, -7 lines 0 comments Download
M src/objects.h View 1 chunk +1 line, -1 line 0 comments Download
M src/objects.cc View 4 chunks +23 lines, -28 lines 0 comments Download
M src/version.cc View 1 chunk +1 line, -1 line 0 comments Download
A + test/mjsunit/regress/regress-351263.js View 1 chunk +7 lines, -11 lines 0 comments Download
A + test/mjsunit/regress/regress-crbug-351262.js View 1 chunk +2 lines, -8 lines 0 comments Download
A + test/mjsunit/regress/regress-migrate-callbacks.js View 1 chunk +7 lines, -8 lines 0 comments Download

Messages

Total messages: 3 (0 generated)
Jakob Kummerow
6 years, 8 months ago (2014-04-02 15:17:44 UTC) #1
ulan
lgtm (rubber-stamp)
6 years, 8 months ago (2014-04-02 15:19:31 UTC) #2
Jakob Kummerow
6 years, 8 months ago (2014-04-02 15:33:16 UTC) #3
Message was sent while issue was closed.
Committed patchset #1 manually as r20441.

Powered by Google App Engine
This is Rietveld 408576698