| commit | c65792128c4e361c3a8021423b6f894ab8a401e1 | [log] [tgz] |
|---|---|---|
| author | Choongwoo Han <cwhan.tunz@gmail.com> | Fri Aug 25 18:57:21 2017 |
| committer | Commit Bot <commit-bot@chromium.org> | Mon Aug 28 11:27:46 2017 |
| tree | 61337e90c40acff597e93ebe7ccc52f2796702d5 | |
| parent | 0fd8c418470fcc1becc1c7dd53a5581e6c19c7bc [diff] |
[wasm] get length at the right time Table.p.grow Get the old table size after converting integer of 'delta' argument. Converting integer of the argument can execute another javascript code, and the code can trigger mismatching between table sizes of instance and table object, which causes redundant memory allocation. http://webassembly.org/docs/js/#webassemblytableprototypegrow Bug: chromium:752423 Change-Id: If9a576d20625d0c39342ea5de114e9fc9f230125 Reviewed-on: https://chromium-review.googlesource.com/627248 Reviewed-by: Ben Titzer <titzer@chromium.org> Commit-Queue: Ben Titzer <titzer@chromium.org> Cr-Commit-Position: refs/heads/master@{#47641}
V8 is Google's open source JavaScript engine.
V8 implements ECMAScript as specified in ECMA-262.
V8 is written in C++ and is used in Google Chrome, the open source browser from Google.
V8 can run standalone, or can be embedded into any C++ application.
V8 Project page: https://github.com/v8/v8/wiki
Checkout depot tools, and run
fetch v8
This will checkout V8 into the directory v8 and fetch all of its dependencies. To stay up to date, run
git pull origin
gclient sync
For fetching all branches, add the following into your remote configuration in .git/config:
fetch = +refs/branch-heads/*:refs/remotes/branch-heads/*
fetch = +refs/tags/*:refs/tags/*
Please follow the instructions mentioned on the V8 wiki.