-
fpizlo@apple.com authored
https://bugs.webkit.org/show_bug.cgi?id=118077 Reviewed by Oliver Hunt and Mark Hahnenberg. Source/JavaScriptCore: * ftl/FTLCapabilities.cpp: (JSC::FTL::canCompile): * ftl/FTLIntrinsicRepository.h: * ftl/FTLLowerDFGToLLVM.cpp: (JSC::FTL::LowerDFGToLLVM::compileGetByVal): (JSC::FTL::LowerDFGToLLVM::baseIndex): LayoutTests: * js/regress/double-get-by-val-out-of-bounds-expected.txt: Added. * js/regress/double-get-by-val-out-of-bounds.html: Added. * js/regress/get-by-val-out-of-bounds-expected.txt: Added. * js/regress/get-by-val-out-of-bounds.html: Added. * js/regress/script-tests/double-get-by-val-out-of-bounds.js: Added. (foo): * js/regress/script-tests/get-by-val-out-of-bounds.js: Added. (foo): git-svn-id: http://svn.webkit.org/repository/webkit/trunk@160246 268f45cc-cd09-0410-ab3c-d52691b4dbfc
5dba3f1b