v8/src
feng@chromium.org 6ac8e45528 Check that an index is in the range of 0 to array length in ArrayConcatVisitor.
Elements out of range are discarded.

Review URL: http://codereview.chromium.org/8836

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@628 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
2008-10-28 17:23:10 +00:00
..
third_party Reverted the changes to jscre because the arm cross-compiler dies with 2008-10-09 12:18:48 +00:00
accessors.cc Fixed usage of NewArgumentsObject for accessor. 2008-10-23 15:06:31 +00:00
accessors.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
allocation.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
allocation.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
api.cc Get ready for pushing version 0.4.1 to trunk. 2008-10-28 08:42:47 +00:00
api.h Split window support from V8. 2008-10-21 19:07:58 +00:00
apinatives.js This change removes the %AddProperty native JavaScript function from V8. 2008-10-03 12:14:29 +00:00
arguments.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
array.js Implement Array::concat function in C++. 2008-10-28 14:47:50 +00:00
assembler-arm-inl.h Refactor the enum RelocMode changing the naming scheme from lower case to 2008-09-22 13:57:03 +00:00
assembler-arm.cc Remove some craaaazy trailing whitespace. 2008-09-30 11:41:58 +00:00
assembler-arm.h Remove the ARM jump elimination. This completely removes jump elimination. 2008-09-30 09:42:08 +00:00
assembler-ia32-inl.h Refactor the enum RelocMode changing the naming scheme from lower case to 2008-09-22 13:57:03 +00:00
assembler-ia32.cc Refactor the smi case inlining for binary operations, so 2008-10-22 07:47:02 +00:00
assembler-ia32.h Remove x86 jump elimination. This was just complicated enough to make it annoying to support short jump encoding. I measured a code size increase of 5 bytes on the V8 benchmark, from missing one jump to next elimination possibility. 2008-09-29 07:33:58 +00:00
assembler.cc Recommit reverted change, now with fixes to make it work with gcc-4.2. 2008-10-03 15:53:44 +00:00
assembler.h Rename member variables and functions and clarify comments to try to 2008-10-22 12:45:33 +00:00
ast.cc - Added a map cache for literal objects. This will 2008-09-25 07:46:07 +00:00
ast.h Move code generation for storing to a reference out of the AST nodes, and 2008-10-07 11:19:44 +00:00
bootstrapper.cc - Added conditional write barrier to object accessors. 2008-10-23 08:46:32 +00:00
bootstrapper.h Split window support from V8. 2008-10-21 19:07:58 +00:00
builtins-arm.cc No more failures than before. It is ready to be reviewed. 2008-10-21 20:11:50 +00:00
builtins-ia32.cc Split window support from V8. 2008-10-21 19:07:58 +00:00
builtins.cc Serendipitously arrange the tags so that String.length() becomes a branch-free 2008-10-27 12:39:34 +00:00
builtins.h Serendipitously arrange the tags so that String.length() becomes a branch-free 2008-10-27 12:39:34 +00:00
char-predicates-inl.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
char-predicates.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
checks.cc This is a new static flag system, designed to have all flags in a central place, and compiled into the binary without requiring static constructors for registration. All flags are moved out of the specific modules and into flags.defs, with different sections for debug, release, etc. The flag variables are always defined. For example, a debug flag in release mode still exists, but is read only and set to the default value. 2008-09-12 10:19:33 +00:00
checks.h Fix failing test caused by extra precision in register allocated fp values. 2008-09-26 23:14:43 +00:00
code-stubs.cc Improve the generated code for the instanceof operator, 2008-10-08 13:33:16 +00:00
code-stubs.h Improve the generated code for the instanceof operator, 2008-10-08 13:33:16 +00:00
code.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
codegen-arm.cc Fix issue 120 by patching the on-stack receiver in the 2008-10-27 14:12:02 +00:00
codegen-arm.h Fix some style issues. 2008-10-23 07:28:21 +00:00
codegen-ia32.cc Fix issue 120 by patching the on-stack receiver in the 2008-10-27 14:12:02 +00:00
codegen-ia32.h Fix some style issues. 2008-10-23 07:28:21 +00:00
codegen-inl.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
codegen.cc Fix some style issues. 2008-10-23 07:28:21 +00:00
codegen.h Simplify CodeGenerator hierarchy by not using a base class. 2008-10-10 00:00:52 +00:00
compilation-cache.cc - Added caching of regexp data in the compilation cache. 2008-10-24 08:40:02 +00:00
compilation-cache.h - Added caching of regexp data in the compilation cache. 2008-10-24 08:40:02 +00:00
compiler.cc - Added caching of regexp data in the compilation cache. 2008-10-24 08:40:02 +00:00
compiler.h Make sure that the body of the function created by calling Function is 2008-09-25 07:35:45 +00:00
constants-arm.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
contexts.cc Improve code for looking up in context slots in runtime.cc and 2008-10-24 10:59:40 +00:00
contexts.h Improve code for looking up in context slots in runtime.cc and 2008-10-24 10:59:40 +00:00
conversions-inl.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
conversions.cc Simplify logic in string-to-double conversion code. 2008-09-15 12:17:36 +00:00
conversions.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
counters.cc Move the Counters to structures that can be POD initialized, avoiding the need for static constructors on program startup. They were only default initializing and doing some unneeded string operations. 2008-09-15 08:59:31 +00:00
counters.h Remove EOL trailing whitespace. 2008-09-15 09:24:59 +00:00
cpu-arm.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
cpu-ia32.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
cpu.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
d8-readline.cc Added development shell (d8) including readline support, counters and 2008-10-21 09:12:27 +00:00
d8.cc - Changed regexp logging to include the string being matched and to 2008-10-22 12:00:19 +00:00
d8.h Added development shell (d8) including readline support, counters and 2008-10-21 09:12:27 +00:00
d8.js Added development shell (d8) including readline support, counters and 2008-10-21 09:12:27 +00:00
date-delay.js - Added %IsArrayClass, %IsDateClass, and %IsStringClass. 2008-10-07 10:54:50 +00:00
dateparser.cc - Added conditional write barrier to object accessors. 2008-10-23 08:46:32 +00:00
dateparser.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
debug-delay.js Make sure that the name accessor on functions return the expected 2008-10-03 07:14:31 +00:00
debug.cc - Added const in a few places. 2008-10-23 08:25:23 +00:00
debug.h - Added const in a few places. 2008-10-23 08:25:23 +00:00
disasm-arm.cc Made the ARM port with simulator build and run on Windows. 2008-09-19 12:35:15 +00:00
disasm-ia32.cc Added missing static to returned buffer. 2008-09-17 09:05:36 +00:00
disasm.h Replaced calls to functions that msvc consider deprecated. Used 2008-09-11 14:34:48 +00:00
disassembler.cc Refactor the enum RelocMode changing the naming scheme from lower case to 2008-09-22 13:57:03 +00:00
disassembler.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
dtoa-config.c Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
execution.cc Revert revision 593. This was a cleanup change but it caused layout 2008-10-28 07:30:10 +00:00
execution.h Removed the print, load, quit and version extensions from the VM. Moved the print extension to the compiler test as it was used there. Changed the serializer tests to only use the gc extension. 2008-10-03 08:30:22 +00:00
factory.cc Implement Array::concat function in C++. 2008-10-28 14:47:50 +00:00
factory.h Implement Array::concat function in C++. 2008-10-28 14:47:50 +00:00
flag-definitions.h Revert changes 601 and 602. TBR 2008-10-27 12:45:24 +00:00
flags.cc - Rename flags.defs to flag-definitions.h. 2008-09-17 08:47:50 +00:00
flags.h - Rename flags.defs to flag-definitions.h. 2008-09-17 08:47:50 +00:00
frames-arm.cc Adapt to new calling convention on ARM: 2008-09-12 03:29:06 +00:00
frames-arm.h Adapt to new calling convention on ARM: 2008-09-12 03:29:06 +00:00
frames-ia32.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
frames-ia32.h Refactored the code for entering and leaving exit frames (calls 2008-09-23 08:19:26 +00:00
frames-inl.h Introduce a special kind of frames for construct frames, e.g. 2008-10-10 09:09:38 +00:00
frames.cc Introduce a special kind of frames for construct frames, e.g. 2008-10-10 09:09:38 +00:00
frames.h Introduce a special kind of frames for construct frames, e.g. 2008-10-10 09:09:38 +00:00
global-handles.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
global-handles.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
globals.h - Changed regexp logging to include the string being matched and to 2008-10-22 12:00:19 +00:00
handles-inl.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
handles.cc - Added const in a few places. 2008-10-23 08:25:23 +00:00
handles.h - Optimized CopyFixedArray and CopyJSObject. 2008-10-22 08:21:18 +00:00
hashmap.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
hashmap.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
heap-inl.h Introduce a lookup cache class in the runtime system and use it for 2008-10-23 07:04:56 +00:00
heap.cc You can't use BinarySearch on an unsorted array and other 2008-10-26 20:50:05 +00:00
heap.h - Fixed performance regression caused by ComputeContextSlotReceiver. 2008-10-23 14:55:45 +00:00
ic-arm.cc In my final round of refactoring, I accidentally broke my string 2008-10-28 10:25:35 +00:00
ic-ia32.cc Fix issue 120 by patching the on-stack receiver in the 2008-10-27 14:12:02 +00:00
ic-inl.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
ic.cc Allow inline caching for getting the length of string wrapper objects. 2008-10-27 14:36:08 +00:00
ic.h Serendipitously arrange the tags so that String.length() becomes a branch-free 2008-10-27 12:39:34 +00:00
jsregexp.cc Fix issue 128. 2008-10-27 09:48:47 +00:00
jsregexp.h - Added caching of regexp data in the compilation cache. 2008-10-24 08:40:02 +00:00
list-inl.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
list.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
log.cc Fixing profiling when using snapshot. 2008-10-28 09:53:52 +00:00
log.h Fixing profiling when using snapshot. 2008-10-28 09:53:52 +00:00
macro-assembler-arm.cc - ip register cannot be used when accessing large constants in the instruction 2008-10-21 22:40:14 +00:00
macro-assembler-arm.h No more failures than before. It is ready to be reviewed. 2008-10-21 20:11:50 +00:00
macro-assembler-ia32.cc - ip register cannot be used when accessing large constants in the instruction 2008-10-21 22:40:14 +00:00
macro-assembler-ia32.h Split window support from V8. 2008-10-21 19:07:58 +00:00
macro-assembler.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
macros.py - Missing files 2008-10-17 11:36:42 +00:00
mark-compact.cc Revert changes 601 and 602. TBR 2008-10-27 12:45:24 +00:00
mark-compact.h Revert changes 601 and 602. TBR 2008-10-27 12:45:24 +00:00
math.js This change removes the %AddProperty native JavaScript function from V8. 2008-10-03 12:14:29 +00:00
memory.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
messages.cc Changed the message reporting for try { ... } finally { ... } statements to 2008-10-23 08:40:19 +00:00
messages.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
messages.js The constructor properties on the prototypes of error objects should 2008-10-06 12:53:02 +00:00
mirror-delay.js Split window support from V8. 2008-10-21 19:07:58 +00:00
mksnapshot.cc Updated the snapshot builder to reflect the removed extensions in http://codereview.chromium.org/6233. 2008-10-03 09:05:58 +00:00
natives.h Added development shell (d8) including readline support, counters and 2008-10-21 09:12:27 +00:00
objects-debug.cc - Added caching of regexp data in the compilation cache. 2008-10-24 08:40:02 +00:00
objects-inl.h Change the order of two assignments, to make sure that the script type 2008-10-28 13:46:04 +00:00
objects.cc Implement Array::concat function in C++. 2008-10-28 14:47:50 +00:00
objects.h Allow inline caching for getting the length of string wrapper objects. 2008-10-27 14:36:08 +00:00
parser.cc Fix some style issues. 2008-10-23 07:28:21 +00:00
parser.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
platform-linux.cc Allow platforms (linux and win32) to not force 16-byte alignment 2008-09-23 10:06:58 +00:00
platform-macos.cc Allow platforms (linux and win32) to not force 16-byte alignment 2008-09-23 10:06:58 +00:00
platform-nullos.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
platform-win32.cc remove unused strcasecmp on windows, it conflicts with the one from webkit, check in on behave of dglazkov@chromium.org 2008-10-24 23:20:25 +00:00
platform.h remove unused strcasecmp on windows, it conflicts with the one from webkit, check in on behave of dglazkov@chromium.org 2008-10-24 23:20:25 +00:00
prettyprinter.cc Replaced calls to functions that msvc consider deprecated. Used 2008-09-11 14:34:48 +00:00
prettyprinter.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
property.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
property.h Revert changes 601 and 602. TBR 2008-10-27 12:45:24 +00:00
regexp-delay.js This change removes the %AddProperty native JavaScript function from V8. 2008-10-03 12:14:29 +00:00
rewriter.cc Refactor the enum RelocMode changing the naming scheme from lower case to 2008-09-22 13:57:03 +00:00
rewriter.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
runtime.cc Check that an index is in the range of 0 to array length in ArrayConcatVisitor. 2008-10-28 17:23:10 +00:00
runtime.h Implement Array::concat function in C++. 2008-10-28 14:47:50 +00:00
runtime.js Fast check undefined in EQUALS. 2008-10-28 03:39:17 +00:00
scanner.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
scanner.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
SConscript Incorporate patches by Paolo Giarrusso to allow profiling 2008-10-22 09:46:09 +00:00
scopeinfo.cc Fix bug in function context slot lookup. There were two problems: we 2008-09-11 13:00:30 +00:00
scopeinfo.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
scopes.cc Refactor the enum RelocMode changing the naming scheme from lower case to 2008-09-22 13:57:03 +00:00
scopes.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
serialize.cc Fix some style issues. 2008-10-23 07:28:21 +00:00
serialize.h Fix some style issues. 2008-10-23 07:28:21 +00:00
shell.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
simulator-arm.cc Made the ARM port with simulator build and run on Windows. 2008-09-19 12:35:15 +00:00
simulator-arm.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
simulator-ia32.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
simulator-ia32.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
smart-pointer.h Added development shell (d8) including readline support, counters and 2008-10-21 09:12:27 +00:00
snapshot-common.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
snapshot-empty.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
snapshot.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
spaces-inl.h - Optimized CopyFixedArray and CopyJSObject. 2008-10-22 08:21:18 +00:00
spaces.cc - Removed a few indirections by making the two SemiSpaces 2008-10-17 09:13:27 +00:00
spaces.h - Removed a few indirections by making the two SemiSpaces 2008-10-17 09:13:27 +00:00
string-stream.cc Split window support from V8. 2008-10-21 19:07:58 +00:00
string-stream.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
string.js - Missing files 2008-10-17 11:36:42 +00:00
stub-cache-arm.cc Fix issue 120 by patching the on-stack receiver in the 2008-10-27 14:12:02 +00:00
stub-cache-ia32.cc In my final round of refactoring, I accidentally broke my string 2008-10-28 10:25:35 +00:00
stub-cache.cc Serendipitously arrange the tags so that String.length() becomes a branch-free 2008-10-27 12:39:34 +00:00
stub-cache.h Serendipitously arrange the tags so that String.length() becomes a branch-free 2008-10-27 12:39:34 +00:00
token.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
token.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
top.cc Work around issue 131 by checking for empty handles 2008-10-28 08:29:23 +00:00
top.h Revert revision 593. This was a cleanup change but it caused layout 2008-10-28 07:30:10 +00:00
unicode-inl.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
unicode.cc - Case-sensitive atomic regular expressions now use the same code as 2008-10-02 15:35:28 +00:00
unicode.h - Case-sensitive atomic regular expressions now use the same code as 2008-10-02 15:35:28 +00:00
uri.js Make sure that the name accessor on functions return the expected 2008-10-03 07:14:31 +00:00
usage-analyzer.cc Get rid of the local variable we use to keep the state 2008-10-01 10:57:37 +00:00
usage-analyzer.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
utils.cc Replaced calls to functions that msvc consider deprecated. Used 2008-09-11 14:34:48 +00:00
utils.h Copy strings 1 word at a time when flattening etc. 2008-10-23 07:20:28 +00:00
v8-counters.cc Move the Counters to structures that can be POD initialized, avoiding the need for static constructors on program startup. They were only default initializing and doing some unneeded string operations. 2008-09-15 08:59:31 +00:00
v8-counters.h - Added caching of regexp data in the compilation cache. 2008-10-24 08:40:02 +00:00
v8.cc This is a new static flag system, designed to have all flags in a central place, and compiled into the binary without requiring static constructors for registration. All flags are moved out of the specific modules and into flags.defs, with different sections for debug, release, etc. The flag variables are always defined. For example, a debug flag in release mode still exists, but is read only and set to the default value. 2008-09-12 10:19:33 +00:00
v8.h This is a new static flag system, designed to have all flags in a central place, and compiled into the binary without requiring static constructors for registration. All flags are moved out of the specific modules and into flags.defs, with different sections for debug, release, etc. The flag variables are always defined. For example, a debug flag in release mode still exists, but is read only and set to the default value. 2008-09-12 10:19:33 +00:00
v8natives.js Split window support from V8. 2008-10-21 19:07:58 +00:00
v8threads.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
v8threads.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
variables.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
variables.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
zone-inl.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
zone.cc Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00
zone.h Changed copyright header from google inc. to v8 project authors. 2008-09-09 20:08:45 +00:00