1528784 - BigInt wrapper passed as receiver when retrieving "toJSON" property in JSON.stringify

Status: RESOLVED FIXED

(Core :: JavaScript: Standard Library, defect)

Description

[André Bargull [:anba]]

Test case:

Object.defineProperty(BigInt.prototype, "toJSON", {
    get() {
        "use strict";
        return () => typeof this;
    }
});

print(JSON.stringify(0n));

Expected: Prints "bigint"
Actual: Prints "object"

Spec:
Runtime Semantics: SerializeJSONProperty calls GetV which means the primitive value should be passed as the receiver.

Note:
This also fails in V8, so there's probably no test262 test for this case.

Comment 1

[Andy Wingo [:wingo]]

test262 PR here: https://github.com/tc39/test262/pull/2079

Comment 2

[Andy Wingo [:wingo]]

Attachment: Bug 1528784 - Pass BigInt as receiver when retrieving "toJSON" property

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/c6ae678d11d1
Pass BigInt as receiver when retrieving "toJSON" property r=anba

Comment 4

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

https://hg.mozilla.org/mozilla-central/rev/c6ae678d11d1