Jakob Gruber 099de337fe [gasm] Fix deopt frame state in Array.p.reduce and reduceRight ... This fixes a bug in lazy deopts caused by calls to the callback function in Array.prototype.reduce and reduceRight. The deopt continuation expects the *next* iteration's index value but we actually passed the current iteration's value. The user-visible effect of this bug was that sometimes, an unexpected additional call to the callback function would occur. It was introduced by https://crrev.com/c/1934329. Bug: v8:9972,chromium:1049982 Change-Id: Icfd2ef076209e20602f54d4662220e1d4c5d07ee Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2049850 Commit-Queue: Jakob Gruber <jgruber@chromium.org> Reviewed-by: Georg Neis <neis@chromium.org> Cr-Commit-Position: refs/heads/master@{#66226}		2020-02-11 16:38:33 +00:00
..
benchmarks	Remove 'embedded_builtins' variant	2019-10-22 12:58:02 +00:00
cctest	[test] Handlify a few Objects to prevent UAF	2020-02-11 14:09:53 +00:00
common	[wasm] Add missing type enum in switch statement and remove default	2020-01-24 10:36:01 +00:00
debugger	[wasm] Skip test in multiple isolates	2020-02-09 07:50:01 +00:00
fuzzer	[wasm] Extend fuzzer to test AtomicExchange and AtomicCompareExchange	2020-02-05 09:01:58 +00:00
inspector	[wasm] Always use new Liftoff code in debugging mode	2020-02-05 10:35:58 +00:00
intl	Revert "Fix SEGMAP_ERR by rolling ICU?"	2020-02-06 08:16:26 +00:00
js-perf-test	[js-perf-tests] Adds performance tests for BigInt subtraction	2019-10-22 13:32:09 +00:00
memory	[owners] Remove redundant OWNERS files in test/	2019-06-24 12:44:32 +00:00
message	Reland "[weakrefs] Schedule FinalizationGroup cleanup tasks from within V8"	2020-02-10 21:56:34 +00:00
mjsunit	[gasm] Fix deopt frame state in Array.p.reduce and reduceRight	2020-02-11 16:38:33 +00:00
mkgrokdump	[heap] Enable Verify for RO_SPACE when it is shared	2019-11-04 09:55:45 +00:00
mozilla	Remove and update some outdated TODO(mstarzinger).	2019-12-13 10:18:04 +00:00
test262	[Intl] Change order of "currency" and "unit" validation.	2020-01-31 20:31:05 +00:00
torque	[torque] use iterators and constructors for ExtractFixedArray	2020-01-16 13:51:04 +00:00
unittests	[torque] Support bitfield structs stored within Smis	2020-02-07 18:43:06 +00:00
wasm-api-tests	[wasm] Clean up WASM_CALL_INDIRECT macros	2019-11-28 14:44:06 +00:00
wasm-js	[wasm] Update spec tests	2020-02-05 15:42:51 +00:00
wasm-spec-tests	[wasm] Update spec tests	2020-02-05 15:42:51 +00:00
webkit	[class] Improve error message for calling anonymous class constructors	2019-12-05 21:13:07 +00:00
BUILD.gn	[preparser] deprecate stand-alone "preparser" test-suite	2019-11-20 08:52:59 +00:00
OWNERS	Use relative paths to OWNERS files	2019-08-12 13:52:52 +00:00