Version 3.23.7
Bugfix: dependent code field in AllocationSite was keeping code objects alive even after context death. (Chromium issue 320532)
Fixed data view accessors to throw execptions on offsets bigger than size_t. (issue 3013)
Performance and stability improvements on all platforms.
git-svn-id: http://v8.googlecode.com/svn/trunk@17859 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
diff --git a/src/typedarray.js b/src/typedarray.js
index ca87f8b..fc3a608 100644
--- a/src/typedarray.js
+++ b/src/typedarray.js
@@ -309,7 +309,7 @@
if (!IS_ARRAYBUFFER(buffer)) {
throw MakeTypeError('data_view_not_array_buffer', []);
}
- var bufferByteLength = %ArrayBufferGetByteLength(buffer);
+ var bufferByteLength = buffer.byteLength;
var offset = IS_UNDEFINED(byteOffset) ?
0 : ToPositiveInteger(byteOffset, 'invalid_data_view_offset');
if (offset > bufferByteLength) {