Refuse to clone builtin constructors like Array and Date in self-hosted code

RESOLVED INVALID

Status

()

Core
JavaScript Engine
RESOLVED INVALID
3 years ago
2 years ago

People

(Reporter: jorendorff, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

3 years ago
Assert in SelfHosting.cpp:CloneObject that we never clone an object that's stored in any of the global's reserved slots.

Per bug 904723 comment 21.
We don't have the standard builtins on the self-hosting global anymore, so this isn't actionable.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.