This repository was archived by the owner on Mar 25, 2018. It is now read-only.
3.3.10.37
This change fixes crashes caused by trying to change element property definitions, freeze, seal or preventExtensions on objects with external elements arrays. R=ricow@chromium.org BUG=95920 TEST=test/mjsunit/regress/regress-95920.js Review URL: http://codereview.chromium.org/7787030 git-svn-id: http://v8.googlecode.com/svn/branches/3.3@9237 ce2b1a6d-e550-0410-aec6-3dcde31c8c00