[JAEGER] Merge from tracemonkey. Note that we will currently fail one trace test that was recently added. There is a bug in that test that will be fixed posthaste.

2010-08-17 15:32:40 -07:00
parent 7dbe6bd6c2 7f680033c5
commit 132b1fa4a3
104 changed files with 3325 additions and 1008 deletions
--- a/js/src/jsarray.cpp
+++ b/js/src/jsarray.cpp
@@ -231,7 +231,7 @@ js_GetLengthProperty(JSContext *cx, JSObject *obj, jsuint *lengthp)
    }

    if (obj->isArguments() && !obj->isArgsLengthOverridden()) {
-        *lengthp = obj->getArgsLength();
+        *lengthp = obj->getArgsInitialLength();
        return true;
    }