danno@chromium.org 06c7620302 Fixed crashes exposed though fuzzing. ... The %_OneByteSeqStringSetChar intrinsic expects its arguments to be checked before being called for efficiency reasons, but the fuzzer provided no such checks. Now the intrinsic is robust to bad input if FLAG_debug_code is set. R=yangguo@chromium.org TEST=test/mjsunit/regress/regress-320948.js BUG=chromium:320948 LOG=Y Review URL: https://codereview.chromium.org/72813004 git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@17886 ce2b1a6d-e550-0410-aec6-3dcde31c8c00		2013-11-19 16:41:07 +00:00
..
benchmarks	Make it possible to run a test only in the standard variant.	2013-10-17 13:09:28 +00:00
cctest	Make number of available threads isolate-dependent and expose it to ResourceConstraints.	2013-11-19 11:52:47 +00:00
intl	Revert "Landing https://codereview.chromium.org/40133004 for mnita@google.com." due to test failures.	2013-11-06 18:19:26 +00:00
message	Fix error message wording when instanceof throws.	2013-11-08 11:45:56 +00:00
mjsunit	Fixed crashes exposed though fuzzing.	2013-11-19 16:41:07 +00:00
mozilla	Reland "Implement Math.sin, cos and tan using table lookup and spline interpolation."	2013-11-12 14:43:18 +00:00
preparser	Make it possible to run a test only in the standard variant.	2013-10-17 13:09:28 +00:00
test262	Reland "Implement Math.sin, cos and tan using table lookup and spline interpolation."	2013-11-12 14:43:18 +00:00
webkit	[Sheriff] Mark flaky webkit test.	2013-11-13 11:09:47 +00:00