Closed
Bug 1878658
Opened 1 year ago
Closed 1 year ago
Follow-up spec compliance fixes for resizable TypedArrays and DataViews
Categories
(Core :: JavaScript: Standard Library, task, P2)
Core
JavaScript: Standard Library
Tracking
()
RESOLVED
FIXED
124 Branch
Tracking | Status | |
---|---|---|
firefox124 | --- | fixed |
People
(Reporter: anba, Assigned: anba)
References
(Blocks 1 open bug)
Details
Attachments
(3 files)
No description provided.
Assignee | ||
Comment 1•1 year ago
|
||
Side-effects when converting the input value can resize the TypedArray, so
that a previously non-existent property is now in-bounds.
Depends on D200635
Assignee | ||
Comment 2•1 year ago
|
||
The RangeError needs to be thrown before entering the other realm through JSAutoRealm
.
Depends on D200636
Assignee | ||
Comment 3•1 year ago
|
||
Depends on D200637
Updated•1 year ago
|
Severity: -- → N/A
Priority: -- → P2
Pushed by andre.bargull@gmail.com:
https://hg.mozilla.org/integration/autoland/rev/b665f717fa14
Part 1: Handle resized TypedArray after conversion for non-existent properties. r=spidermonkey-reviewers,sfink
https://hg.mozilla.org/integration/autoland/rev/bbb41ba52948
Part 2: Throw RangeError for out-of-bounds DataViews from correct global. r=spidermonkey-reviewers,sfink
https://hg.mozilla.org/integration/autoland/rev/e2597e0646c5
Part 3: Fix variable name typo in TypedArrayJoin. r=spidermonkey-reviewers,sfink
Comment 5•1 year ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/b665f717fa14
https://hg.mozilla.org/mozilla-central/rev/bbb41ba52948
https://hg.mozilla.org/mozilla-central/rev/e2597e0646c5
Status: ASSIGNED → RESOLVED
Closed: 1 year ago
status-firefox124:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 124 Branch
You need to log in
before you can comment on or make changes to this bug.
Description
•