DescriptionPPC/s390: [crankshaft] Fix Smi overflow in {HMaybeGrowElements}.
Port 6c12d57eada07ab019f84b2882faee6e2815a7ff
Original Commit Message:
This fixes the case where the index passed to {HMaybeGrowElements} used
to derive the new capacity for the elements backing store does not fit
into Smi range. Such an overflow would fail the capacity check and cause
growing to be skipped. Subsequent keyed stores would potentially go out
of bounds.
R=mstarzinger@chromium.org, joransiu@ca.ibm.com, jyan@ca.ibm.com, michael_dawson@ca.ibm.com
BUG=chromium:686427
LOG=N
Review-Url: https://codereview.chromium.org/2697473004
Cr-Commit-Position: refs/heads/master@{#43167}
Committed: https://chromium.googlesource.com/v8/v8/+/673bbcbb9d555ee2492b860301c026caed112585
Patch Set 1 #
Messages
Total messages: 7 (3 generated)
|