Description[crankshaft] Properly deal with null prototype.
Don't assume that the prototype of an object is always a JSObject when
inlining the known receiver map case for abstract relational comparison.
BUG=chromium:679202
R=ishell@chromium.org
Review-Url: https://codereview.chromium.org/2621583002
Cr-Commit-Position: refs/heads/master@{#42123}
Committed: https://chromium.googlesource.com/v8/v8/+/5f418c8a2d95620c8d328e1357e9373c74e685e6
Patch Set 1 #
Messages
Total messages: 10 (6 generated)
|