Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(246)

Unified Diff: src/runtime/runtime-object.cc

Issue 2321533003: Properly handle holes following spreads in array literals (Closed)
Patch Set: Less auto Created 4 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « src/parsing/parser.cc ('k') | test/mjsunit/regress/regress-crbug-644215.js » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: src/runtime/runtime-object.cc
diff --git a/src/runtime/runtime-object.cc b/src/runtime/runtime-object.cc
index 6d4bad5c6f889e5f0f833c648a1db335eb10cd0b..7908c6295ce082e5412f16f19d1a57ed2c9ff330 100644
--- a/src/runtime/runtime-object.cc
+++ b/src/runtime/runtime-object.cc
@@ -418,6 +418,7 @@ RUNTIME_FUNCTION(Runtime_AppendElement) {
CONVERT_ARG_HANDLE_CHECKED(JSArray, array, 0);
CONVERT_ARG_HANDLE_CHECKED(Object, value, 1);
+ CHECK(!value->IsTheHole(isolate));
uint32_t index;
CHECK(array->length()->ToArrayIndex(&index));
« no previous file with comments | « src/parsing/parser.cc ('k') | test/mjsunit/regress/regress-crbug-644215.js » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698