Bug 62405 - Fix integer overflow in Array.prototype.push
authorGavin Barraclough <barraclough@apple.com>
Fri, 10 Jun 2011 00:30:21 +0000 (00:30 +0000)
committerAdemar de Souza Reis Jr <ademar.reis@openbossa.org>
Fri, 10 Jun 2011 13:06:58 +0000 (10:06 -0300)
commit995f424a28b94c0894f661fda2be71a457448836
tree4727051ec2faf633a55813358a3f45f770a0960c
parentd322e51bdc0f4432c9438938b949c6bf19ab8698
Bug 62405 - Fix integer overflow in Array.prototype.push

Reviewed by Geoff Garen.

Fix geoff's review comments re static_cast.

* runtime/ArrayPrototype.cpp:
(JSC::arrayProtoFuncPush):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@88506 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/runtime/ArrayPrototype.cpp