caitp 0d7f7dc3ee [elements] limit TypedElementsAccessor::IncludesValue to backing store length ... The contract is that the method is only invoked when there are no elements on the prototype, and this elements type forbids accessor elements. So it is safe to limit the search to the end of the backing store. BUG=chromium:634269, v8:5162 R=cbruni@chromium.org, mstarzinger@chromium.org Review-Url: https://codereview.chromium.org/2209273002 Cr-Commit-Position: refs/heads/master@{#38344}		2016-08-04 15:54:55 +00:00
..
regress	[elements] limit TypedElementsAccessor::IncludesValue to backing store length	2016-08-04 15:54:55 +00:00
array-includes-receiver.js	Reland [builtins] implement Array.prototype.includes in TurboFan	2016-08-03 03:27:43 +00:00
array-includes-to-object-sloppy.js	Remove --harmony-array-includes flag	2015-12-12 01:04:10 +00:00
array-includes-to-object-strict.js	Remove --harmony-array-includes flag	2015-12-12 01:04:10 +00:00
array-includes.js	[es7] Array.prototype.includes should be unscopable	2016-06-03 18:30:10 +00:00
exponentiation-operator.js	Remove --harmony-exponentiation-operator flag	2016-08-02 17:17:35 +00:00
typed-array-includes.js	Remove --harmony-array-includes flag	2015-12-12 01:04:10 +00:00