This repository was archived by the owner on Mar 25, 2018. It is now read-only.
3.1.1
Perform security checks before fetching the value in Object.getOwnPropertyDescriptor. Fixed a bug in Array.prototype.splice triggered by passing no arguments. Fixed bugs in -0 in arithmetic and in Math.pow. Fixed bugs in the register allocator and in switching from optimized to unoptimized code. git-svn-id: http://v8.googlecode.com/svn/trunk@6588 ce2b1a6d-e550-0410-aec6-3dcde31c8c00