[typedarrays] Use internal byteOffset in TypedArray.prototype.set

src/js/typedarray.js

 // Copyright 2013 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 (function(global, utils) {
 
 "use strict";
 
 %CheckIsBootstrapping();
 
@@ skipping 264 matching lines @@
 }
 
 function TypedArraySetFromOverlappingTypedArray(target, source, offset) {
   var sourceElementSize = source.BYTES_PER_ELEMENT;
   var targetElementSize = target.BYTES_PER_ELEMENT;
   var sourceLength = %_TypedArrayGetLength(source);
 
   // Copy left part.
   function CopyLeftPart() {
     // First un-mutated byte after the next write
-    var targetPtr = target.byteOffset + (offset + 1) * targetElementSize;
+    var targetPtr = %_ArrayBufferViewGetByteOffset(target) +
+                    (offset + 1) * targetElementSize;
     // Next read at sourcePtr. We do not care for memory changing before
     // sourcePtr - we have already copied it.
-    var sourcePtr = source.byteOffset;
+    var sourcePtr = %_ArrayBufferViewGetByteOffset(source);
     for (var leftIndex = 0;
          leftIndex < sourceLength && targetPtr <= sourcePtr;
          leftIndex++) {
       target[offset + leftIndex] = source[leftIndex];
       targetPtr += targetElementSize;
       sourcePtr += sourceElementSize;
     }
     return leftIndex;
   }
   var leftIndex = CopyLeftPart();
 
   // Copy right part;
   function CopyRightPart() {
     // First unmutated byte before the next write
-    var targetPtr =
-      target.byteOffset + (offset + sourceLength - 1) * targetElementSize;
+    var targetPtr = %_ArrayBufferViewGetByteOffset(target) +
+                    (offset + sourceLength - 1) * targetElementSize;
     // Next read before sourcePtr. We do not care for memory changing after
     // sourcePtr - we have already copied it.
-    var sourcePtr =
-      source.byteOffset + sourceLength * sourceElementSize;
+    var sourcePtr = %_ArrayBufferViewGetByteOffset(source) +
+                    sourceLength * sourceElementSize;
     for(var rightIndex = sourceLength - 1;
         rightIndex >= leftIndex && targetPtr >= sourcePtr;
         rightIndex--) {
       target[offset + rightIndex] = source[rightIndex];
       targetPtr -= targetElementSize;
       sourcePtr -= sourceElementSize;
     }
     return rightIndex;
   }
   var rightIndex = CopyRightPart();
@@ skipping 371 matching lines @@
   %AddNamedProperty(GlobalNAME.prototype,
                     "constructor", global.NAME, DONT_ENUM);
   %AddNamedProperty(GlobalNAME.prototype,
                     "BYTES_PER_ELEMENT", ELEMENT_SIZE,
                     READ_ONLY | DONT_ENUM | DONT_DELETE);
 endmacro
 
 TYPED_ARRAYS(SETUP_TYPED_ARRAY)
 
 })