commit | af759fdff7c1ddee962c4726fdaa6a1d1ddf6c88 | [log] [tgz] |
---|---|---|
author | mstarzinger@chromium.org <mstarzinger@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00> | Wed Mar 26 10:32:37 2014 |
committer | mstarzinger@chromium.org <mstarzinger@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00> | Wed Mar 26 10:32:37 2014 |
tree | 6bd91197102d9913ede69b53db0102a65881ff21 | |
parent | ee680195c7a87fef1392ed2d65ee25493b8440de [diff] |
Merged r20033, r20138 into 3.24 branch. Fix TransitionElementsKindStub to handle non-JSArray objects correctly. Fix missing access check in Runtime_SetPrototype. BUG=352982,chromium:354123 R=ulan@chromium.org LOG=N Review URL: https://codereview.chromium.org/212623002 git-svn-id: http://v8.googlecode.com/svn/branches/3.24@20269 ce2b1a6d-e550-0410-aec6-3dcde31c8c00