| commit | 621bdd642cc60f0ff1bd1fbececce7a891bd0fbc | [log] [tgz] |
|---|---|---|
| author | verwaest <verwaest@chromium.org> | Tue Feb 02 17:01:49 2016 |
| committer | Commit bot <commit-bot@chromium.org> | Tue Feb 02 17:02:23 2016 |
| tree | 564cb382c6c68ffda9449c68d6803556dbb26007 | |
| parent | 72d768d1f93e8f270f134c409e267d6b80416666 [diff] |
[runtime] Fix integer indexed property handling This includes 2 fixes: 1) We didn't properly advance the holder when checking whether Receiver==Holder, so we'd inadvertently block loading the property if the first property we find is on the typed array. 2) Reflect.get may cause any object on the prototype chain of the holder to be the receiver; so we need to recheck for this special state for each object we perform lookup on. Review URL: https://codereview.chromium.org/1651913005 Cr-Commit-Position: refs/heads/master@{#33689}
V8 is Google's open source JavaScript engine.
V8 implements ECMAScript as specified in ECMA-262.
V8 is written in C++ and is used in Google Chrome, the open source browser from Google.
V8 can run standalone, or can be embedded into any C++ application.
V8 Project page: https://github.com/v8/v8/wiki
Checkout depot tools, and run
fetch v8
This will checkout V8 into the directory v8 and fetch all of its dependencies. To stay up to date, run
git pull origin
gclient sync
For fetching all branches, add the following into your remote configuration in .git/config:
fetch = +refs/branch-heads/*:refs/remotes/branch-heads/*
fetch = +refs/tags/*:refs/tags/*
Please follow the instructions mentioned on the V8 wiki.