Igor Sheludko 178148045f [runtime] Invalidate XxxIteratorLookupChain protectors ... ... when "return" property is added to respective iterator or might be added somewhere up the prototype chain. According to the iterator protocol the "return" callback must be called when iteration is aborted in the middle. Bug: chromium:1357318 Change-Id: I36d81b90cfd40e417136ab97ec53ad7054f4df77 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3916630 Reviewed-by: Marja Hölttä <marja@chromium.org> Commit-Queue: Igor Sheludko <ishell@chromium.org> Cr-Commit-Position: refs/heads/main@{#83427}		2022-09-26 13:50:28 +00:00
..
array-constructor-2.js
array-constructor.js
array-iterator-2.js
array-iterator.js
array-next-1.js
array-next-2.js
array-return-1.js
array-return-2.js
bigint64Array-species.js
biguint64Array-species.js
concat-spreadable.js.js
float32Array-species.js
float64Array-species.js
int8array-species.js
int16Array-species.js
int32Array-species.js
iterator-prototype-return-1.js
iterator-prototype-return-2.js
iterator.js
map-iterator-2.js
map-iterator.js
map-next-1.js
map-next-2.js
map-return-1.js
map-return-2.js
object-prototype-return.js
promise-constructor-2.js
promise-constructor.js
regexp-constructor-2.js
regexp-constructor.js
set-iterator-1.js
set-iterator-2.js
set-iterator-3.js
set-iterator-4.js
set-next-1.js
set-next-2.js
set-return-1.js
set-return-2.js
species.js
string-iterator.js
string-next-1.js
string-next-2.js
string-return-1.js
string-return-2.js
typedarray-constructor-1.js
typedarray-constructor-2.js
typedarray-constructor-3.js
typedarray-constructor-4.js
typedarray-constructor-5.js
typedarray-constructor-6.js
typedarray-constructor-7.js
typedarray-constructor-8.js
typedarray-constructor-9.js
typedarray-constructor-10.js
typedarray-prototype-constructor-1.js
typedarray-prototype-constructor-2.js
typedarray-prototype-constructor-3.js
typedarray-prototype-constructor-4.js
typedarray-prototype-constructor-5.js
typedarray-prototype-constructor-6.js
typedarray-prototype-constructor-7.js
typedarray-prototype-constructor-8.js
typedarray-prototype-constructor-9.js
typedarray-prototype-constructor-10.js
uint8Array-species.js
uint16Array-species.js
uint32Array-species.js