Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(160)

Issue 2655623004: [runtime] Fix Array.prototype.concat with complex @@species (Closed)

Created:
3 years, 11 months ago by Camillo Bruni
Modified:
3 years, 11 months ago
Reviewers:
Toon Verwaest
CC:
v8-reviews_googlegroups.com
Target Ref:
refs/pending/heads/master
Project:
v8
Visibility:
Public.

Description

[runtime] Fix Array.prototype.concat with complex @@species Array.prototype.concat does not properly handle JSProxy species that will modify the currently visited array. BUG=682194 Review-Url: https://codereview.chromium.org/2655623004 Cr-Commit-Position: refs/heads/master@{#42640} Committed: https://chromium.googlesource.com/v8/v8/+/e5608155aeb18a76fdb495d446efe1f9e33e749b

Patch Set 1 #

Patch Set 2 : fix dchecks #

Patch Set 3 : do instance_type check #

Total comments: 1

Patch Set 4 : fixing argument type #

Unified diffs Side-by-side diffs Delta from patch set Stats (+53 lines, -8 lines) Patch
M src/builtins/builtins-array.cc View 1 2 3 7 chunks +18 lines, -8 lines 0 comments Download
A test/mjsunit/regress/regress-crbug-682194.js View 1 chunk +35 lines, -0 lines 0 comments Download

Messages

Total messages: 26 (21 generated)
Camillo Bruni
PTAL
3 years, 11 months ago (2017-01-25 01:39:46 UTC) #13
Toon Verwaest
https://codereview.chromium.org/2655623004/diff/40001/src/builtins/builtins-array.cc File src/builtins/builtins-array.cc (right): https://codereview.chromium.org/2655623004/diff/40001/src/builtins/builtins-array.cc#newcode558 src/builtins/builtins-array.cc:558: ArrayConcatVisitor(Isolate* isolate, Handle<Object> storage, Handle<HeapObject>
3 years, 11 months ago (2017-01-25 01:44:30 UTC) #14
Toon Verwaest
lgtm
3 years, 11 months ago (2017-01-25 04:35:07 UTC) #21
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2655623004/60001
3 years, 11 months ago (2017-01-25 04:35:27 UTC) #23
commit-bot: I haz the power
3 years, 11 months ago (2017-01-25 04:37:11 UTC) #26
Message was sent while issue was closed.
Committed patchset #4 (id:60001) as
https://chromium.googlesource.com/v8/v8/+/e5608155aeb18a76fdb495d446efe1f9e33...

Powered by Google App Engine
This is Rietveld 408576698