301553 - Object.toString() fails silently on XML objects (E4X)

Status: VERIFIED FIXED

(Core :: JavaScript Engine, defect, P1)

Description

[Wladimir Palant]

The following code results in execution being aborted without any message on the
JS console:

var x = <xml/>;
Object.toString.apply(x);

A try ... catch block doesn't change anything. The method should produce
something meaningful instead or at least produce an exception.

Comment 1

[Wladimir Palant]

Attachment: Testcase

This testcase should show a message box before and after calling
Object.toString(). Instead, only the alert box before the call is displayed,
despite the try ... catch block around the call.

Comment 2

[Brendan Eich [:brendan]]

Another ancient bug exposed by E4X's anti-traditional method hiding.

/be

Comment 3

[Brendan Eich [:brendan]]

Attachment: never perpetrate a silent failure

js_TryMethod and js_TryValueOf are all about being infallible predicates that
suppress exceptions.  This is a very old bug.

/be

Comment 4

[Mike Shaver (:shaver emeritus)]

Comment on attachment 190060 [details] [diff] [review]
never perpetrate a silent failure

r=shaver.  That's an old bug!

Comment 5

[Brendan Eich [:brendan]]

Fixed.

/be

Comment 6

[Bob Clary [:bc] (inactive)]

Checking in regress-301553.js;
/cvsroot/mozilla/js/tests/e4x/Regress/regress-301553.js,v  <--  regress-301553.js
initial revision: 1.1

Comment 7

[Bob Clary [:bc] (inactive)]

verified fixed 1.9 20060818 windows/mac*/linux