| commit | 4aa46316cd855ec5fce58955196fed6aee45d614 | [log] [tgz] |
|---|---|---|
| author | Jakob Gruber <jgruber@chromium.org> | Tue Feb 11 15:52:03 2020 |
| committer | Jakob Gruber <jgruber@chromium.org> | Tue Feb 11 16:47:46 2020 |
| tree | b5e91af749afdaaf7911789addd8a56ecfe67012 | |
| parent | d0da7b4db4d335d91a374ec3be53199c482e7174 [diff] |
[gasm] Fix deopt frame state in Array.p.reduce and reduceRight We incorrectly passed the current iteration's value of `k` to the frame state used by lazy deopts caused by callback function; correct behavior is to pass the next iteration's value of k. This bug was introduced by https://crrev.com/c/1934329. No-Presubmit: true No-Tree-Checks: true No-Try: true Tbr: neis@chromium.org Bug: v8:9972,chromium:1049982 Change-Id: I13eb132442f0fd4163b81197f401f189731fdd1b Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2050397 Reviewed-by: Michael Hablich <hablich@chromium.org> Reviewed-by: Jakob Gruber <jgruber@chromium.org> Commit-Queue: Jakob Gruber <jgruber@chromium.org>
V8 is Google's open source JavaScript engine.
V8 implements ECMAScript as specified in ECMA-262.
V8 is written in C++ and is used in Google Chrome, the open source browser from Google.
V8 can run standalone, or can be embedded into any C++ application.
V8 Project page: https://v8.dev/docs
Checkout depot tools, and run
fetch v8
This will checkout V8 into the directory v8 and fetch all of its dependencies. To stay up to date, run
git pull origin
gclient sync
For fetching all branches, add the following into your remote configuration in .git/config:
fetch = +refs/branch-heads/*:refs/remotes/branch-heads/*
fetch = +refs/tags/*:refs/tags/*
Please follow the instructions mentioned at v8.dev/docs/contribute.