IntlObject should not be using JSArray::initializeIndex().
authormark.lam@apple.com <mark.lam@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 30 Mar 2017 23:06:21 +0000 (23:06 +0000)
committermark.lam@apple.com <mark.lam@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 30 Mar 2017 23:06:21 +0000 (23:06 +0000)
commitd09019e0bf4d027ba3e3791ae7abbbd5bc17fd49
tree0896a40db73382c0bbf12a7158d1798354fe8f0c
parent73c9828f7965d9c822c26c3e23b03ed9935aa7a3
IntlObject should not be using JSArray::initializeIndex().
https://bugs.webkit.org/show_bug.cgi?id=170302
<rdar://problem/31356918>

Reviewed by Saam Barati.

JSArray::initializeIndex() is only meant to be used with arrays created using
JSArray::tryCreateForInitializationPrivate() under very constrained conditions.

* runtime/IntlObject.cpp:
(JSC::canonicalizeLocaleList):
(JSC::intlObjectFuncGetCanonicalLocales):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@214637 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/runtime/IntlObject.cpp