tree 207d67825968d79ba0507cab80562f745f0c03c9
parent 2a4336d97ae8d22ba4955c083fa7f6e6f3740e35
author ishell <ishell@chromium.org> 1446552948 -0800
committer Commit bot <commit-bot@chromium.org> 1446552975 +0000

[es6] Fix RegExp built-in subclassing.

1) The Map::CopyInitialMap() did not set descriptor's array if
the source initial map had one.
2) Subclasses are temporarily disallowed to have more in-object
properties than the parent class (for GC reasons).

BUG=v8:3101, v8:3330, v8:4531
LOG=N

Review URL: https://codereview.chromium.org/1431593003

Cr-Commit-Position: refs/heads/master@{#31743}