Skip to content
This repository was archived by the owner on Mar 25, 2018. It is now read-only.

3.24.30.1

tagged this 03 Feb 14:21
Make memento checks more stable. Add filler at the end of new space and check if object and memento are on the same new space page.

Elements field of newly allocated JSArray could be left uninitialized in some cases (fast literal case).

BUG=340124
LOG=N
R=jkummerow@chromium.org, machenbach@chromium.org

Review URL: https://codereview.chromium.org/139133004

git-svn-id: http://v8.googlecode.com/svn/trunk@19029 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Assets 2
Loading