sgjesse@chromium.org 9bc3a16af0 Fix bug in instanceof stub ... If the instanceof stub was requested to deliver true/false objects as the result instead of 0/1 then 0/1 was actually returned if the builtin INSTANCE_OF ended up being called. This is now fixed. BUG=v8:1020 TEST=test/mjsunit/regress/regress-1020.js Review URL: http://codereview.chromium.org/6014013 git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@6185 ce2b1a6d-e550-0410-aec6-3dcde31c8c00		2011-01-05 14:19:12 +00:00
..
cctest	Add exception for test-deoptimization/DeoptimizeBinaryOperationDIV	2011-01-05 09:34:45 +00:00
es5conform	Fix ES5 failure after removing Number/String/Boolean.prototype.toJSON.	2010-12-15 12:39:18 +00:00
message	Update V8 to version 3.0 (re-land r5920).	2010-12-07 11:31:57 +00:00
mjsunit	Fix bug in instanceof stub	2011-01-05 14:19:12 +00:00
mozilla	Allow getters and setters on JSArray elements.	2011-01-04 13:59:34 +00:00
sputnik	Change the HGraphBuilder to dispatch on the context.	2010-12-09 12:49:53 +00:00