-
André Bargull authored
Bug 1660599: Only StoreDenseElementHole with handleAdd=true guarantees writable array length. r=jandem, a=RyanVM We can only assert that the array length is writable for the `handleTrue = true` case. This also requires to reintroduce the writable array length check to the Ion IC code. Added tests to cover multiple scenarios where the StoreDenseElementHole IC is used. Differential Revision: https://phabricator.services.mozilla.com/D88031
c7ea07b2