Shu-yu Guo 758823a527 [change-array-by-copy] Use fixed args for with ... Array#with and TypedArray#with adapt their arguments because they have a fixed arity of 2. Builtins that adapt arguments shouldn't use ...arguments in Torque, which results in a "don't adapt" sentinel to be generated, resulting in incorrect frame size computation. Bug: v8:12764, chromium:1367133 Change-Id: I81c1ef2cdef25d049fa0b8effcb2a953c2a9846b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3915939 Commit-Queue: Shu-yu Guo <syg@chromium.org> Reviewed-by: Adam Klein <adamk@chromium.org> Auto-Submit: Shu-yu Guo <syg@chromium.org> Commit-Queue: Adam Klein <adamk@chromium.org> Cr-Commit-Position: refs/heads/main@{#83405}		2022-09-23 20:36:42 +00:00
..
regress-4696.js
regress-6100.js	Remove always-on --harmony-template-escapes flag	2017-11-28 18:36:41 +00:00
regress-6322.js	Remove always-true --harmony-async-iteration runtime flag	2018-01-12 20:14:34 +00:00
regress-8808.js	[class] Remove flags for class fields	2019-05-01 02:02:51 +00:00
regress-173361.js
regress-771470.js
regress-772649.js	[Test] Add PrepareForOptimization to some mjsunit tests.	2019-05-03 13:32:32 +00:00
regress-897436.js	[async-await] remove CSA_SLOW_ASSERT in AsyncGeneratorResolve	2018-10-24 00:04:55 +00:00
regress-912504.js	[flags] Rename --opt to --turbofan	2022-05-03 12:10:30 +00:00
regress-952722.js	[ast] simplify ClassScope::ResolvePrivateNamesPartially	2019-04-16 11:08:40 +00:00
regress-crbug-347528.js	[Test] Add PrepareForOptimization to some mjsunit tests.	2019-05-03 13:32:32 +00:00
regress-crbug-571149.js
regress-crbug-621111.js
regress-crbug-621496.js
regress-crbug-1367133.js	[change-array-by-copy] Use fixed args for with	2022-09-23 20:36:42 +00:00
regress-typedarray-out-of-bounds.js