git://git.webkit.org / WebKit-https.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 75eb830) | patch
REGRESSION (Safari 10.1): Inserting elements into arrays fails when array contains...
authormsaboff@apple.com <msaboff@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 5 Apr 2017 23:31:35 +0000 (23:31 +0000)
committermsaboff@apple.com <msaboff@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 5 Apr 2017 23:31:35 +0000 (23:31 +0000)
commit13023b72eddc007dbc668d0fc8c473f173027bfd
treea5eb01ca45ac6efd56581980321bdb708248d329tree | snapshot
parent75eb8306abc282f8cd2887fe1fa04a61d73cbb7acommit | diff
REGRESSION (Safari 10.1): Inserting elements into arrays fails when array contains very large numbers
https://bugs.webkit.org/show_bug.cgi?id=170264
<rdar://problem/31375593>

Rubber-stamped by Saam Barati.

The original bug was fixed in: https://trac.webkit.org/changeset/214714
I'm just adding another test for good measure.

* stress/double-array-to-array-storage.js: Added.
(assert):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@214977 268f45cc-cd09-0410-ab3c-d52691b4dbfc
JSTests/ChangeLog diff | blob | history
JSTests/stress/double-array-to-array-storage.js [new file with mode: 0644] blob
Mirror of the WebKit open source project from svn.webkit.org.