v8/test/mjsunit/es7
adamk 1f1329d960 Use SetOwnElement when creating splice records in array length setter
This avoids touching the Array prototype, which may have been tampered with.

BUG=chromium:443982
LOG=n

Review URL: https://codereview.chromium.org/820503005

Cr-Commit-Position: refs/heads/master@{#25908}
2014-12-19 19:39:35 +00:00
..
regress Use SetOwnElement when creating splice records in array length setter 2014-12-19 19:39:35 +00:00
object-observe-debug-event.js Introduce debug events for Microtask queue. 2014-07-03 15:56:01 +00:00
object-observe-runtime.js Harden %SetIsObserved with RUNTIME_ASSERTs 2014-05-12 08:49:51 +00:00
object-observe.js Enable ES6 Map and Set by default 2014-08-05 19:37:32 +00:00