0d7f7dc3ee
The contract is that the method is only invoked when there are no elements on the prototype, and this elements type forbids accessor elements. So it is safe to limit the search to the end of the backing store. BUG=chromium:634269, v8:5162 R=cbruni@chromium.org, mstarzinger@chromium.org Review-Url: https://codereview.chromium.org/2209273002 Cr-Commit-Position: refs/heads/master@{#38344}
8 lines
309 B
JavaScript
8 lines
309 B
JavaScript
// Copyright 2016 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
__v_1 = new Uint8Array();
|
|
Object.defineProperty(__v_1.__proto__, 'length', {value: 42});
|
|
Array.prototype.includes.call(new Uint8Array(), 2);
|