| commit | 31b1277ec3b8cd17acb01c66d85a456159072157 | [log] [tgz] |
|---|---|---|
| author | kmillikin@chromium.org <kmillikin@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00> | Wed Feb 02 16:08:26 2011 +0000 |
| committer | kmillikin@chromium.org <kmillikin@chromium.org@ce2b1a6d-e550-0410-aec6-3dcde31c8c00> | Wed Feb 02 16:08:26 2011 +0000 |
| tree | 8f232e040f45c868ad48dec42d9a5efe775ddede | |
| parent | dca0135b3ef77975de1da2c6f7fa2a1003fe92d0 [diff] |
Version 3.1.1 Perform security checks before fetching the value in Object.getOwnPropertyDescriptor. Fixed a bug in Array.prototype.splice triggered by passing no arguments. Fixed bugs in -0 in arithmetic and in Math.pow. Fixed bugs in the register allocator and in switching from optimized to unoptimized code. git-svn-id: http://v8.googlecode.com/svn/trunk@6588 ce2b1a6d-e550-0410-aec6-3dcde31c8c00