v8/test/mjsunit/es7/regress
Caitlin Potter 6746227291 [builtins] fix incorrect return value in ArrayIncludes
Take runtime path if startIndex parameter requires a ToInteger() call,
which can modify the elements kind of the receiver.

This removes a stub call from the builtin, and simplifies code slightly.

BUG=v8:5986
R=bmeurer@chromium.org, cbruni@chromium.org

Change-Id: Id238a81ab8ba28621858004b34d00a4356b8037f
Reviewed-on: https://chromium-review.googlesource.com/445006
Reviewed-by: Camillo Bruni <cbruni@chromium.org>
Commit-Queue: Caitlin Potter <caitp@igalia.com>
Cr-Commit-Position: refs/heads/master@{#43323}
2017-02-20 14:41:25 +00:00
..
regress-5986.js [builtins] fix incorrect return value in ArrayIncludes 2017-02-20 14:41:25 +00:00
regress-633883.js [builtins] fix mapcheck in Array.includes fast-case when searching for String 2016-08-03 14:27:38 +00:00
regress-634269.js [elements] limit TypedElementsAccessor::IncludesValue to backing store length 2016-08-04 15:54:55 +00:00
regress-634273.js [elements] update Dictionary in IncludesValue if own elements change 2016-08-04 19:09:30 +00:00
regress-634357.js [test] don't use Intl.Collator in non-Intl regression test 2016-08-05 12:56:39 +00:00