v8/test
kmillikin@chromium.org dc91c4218b Make optimized Function.prototype.apply safe for non-JSObject first arguments.
If we have a property access of the form this.x, where the access site sees
the global object, we can specialize the IC stub so that it performs a map
check without first performing a heap object check.

Ensure that we do not get in JS code with a non-JSObject this value by
deoptimizing at Function.prototype.apply if the first argument is not a
JSObject.

BUG=v8:1128

Review URL: http://codereview.chromium.org/6463025

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@6707 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
2011-02-09 16:43:23 +00:00
..
cctest Add two tests to strtod. 2011-02-09 14:12:31 +00:00
es5conform Clean up es5conform.status per feedback. 2011-02-07 16:51:47 +00:00
message Enable sharding of individual testsuites in tools/test.py 2011-01-10 13:54:42 +00:00
mjsunit Make optimized Function.prototype.apply safe for non-JSObject first arguments. 2011-02-09 16:43:23 +00:00
mozilla Re-insert exception for mozilla/ecma/Date/15.9.5.10-2 in release mode on arm 2011-02-07 12:07:21 +00:00
sputnik Change the HGraphBuilder to dispatch on the context. 2010-12-09 12:49:53 +00:00