appendMemcpy might fail in concatAppendOne
Created attachment 283264 [details] Patch
Comment on attachment 283264 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=283264&action=review r=me if perf checks out. Also please rename the test to concat-with-holesMustForwardToPrototype.js since the issue is with arrays that have the holesMustForwardToPrototype attribute. > Source/JavaScriptCore/ChangeLog:10 > + a one of the Array prototypes has an index property. This patch typo: "a one" => "one".
Created attachment 283266 [details] Patch for landing
rdar://problem/27211300
Created attachment 283267 [details] Patch for landing
Comment on attachment 283267 [details] Patch for landing Clearing flags on attachment: 283267 Committed r203033: <http://trac.webkit.org/changeset/203033>
All reviewed patches have been landed. Closing bug.