Commit 9fa7ce51 authored by Paolo Severini's avatar Paolo Severini Committed by V8 LUCI CQ
Browse files

[turbofan] Fix iterator-generator issue with --turbo-optimize-apply

Fuzzing found a problem with --turbo-optimize-apply when the
Array.prototype iterator is replaced with a generator function.
We can the issue by installing a protector on the array iterator.

This CL also defines the --turbo-optimize-apply as 'future' to get
more test coverage.

Bug: v8:9974
Change-Id: Id5bc68fde98ea5d1f6a951c4381ca6283b892632
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2966058


Commit-Queue: Paolo Severini <paolosev@microsoft.com>
Reviewed-by: default avatarGeorg Neis <neis@chromium.org>
Cr-Commit-Position: refs/heads/master@{#75197}
parent 2b552bff
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment