Closed
Bug 443930
Opened 18 years ago
Closed 17 years ago
Calling Object['isPrototypeOf'](); cause VM crash
Categories
(Tamarin Graveyard :: Virtual Machine, defect)
Tracking
(Not tracked)
VERIFIED
DUPLICATE
of bug 437623
People
(Reporter: brbaker, Unassigned)
Details
Steps to reproduce:
1. Compile and execute following AS3 code:
Object['isPrototypeOf']();
Object['hasOwnProperty']();
Object['propertyIsEnumerable']();
Object['setPropertyIsEnumerable']();
Actual Results:
Flash Player crash.
Expected Results:
Flash Player throws an error.
Workaround (if any):
|
Reporter | |
Comment 1•18 years ago
|
||
This happens in tamarin-central but NOT in tamarin-tracing
Summary: Calling Object['isPrototypeOf'](); cause Flash Player crash → Calling Object['isPrototypeOf'](); cause VM crash
|
|
||
Updated•17 years ago
|
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → DUPLICATE
|
|
||
Updated•16 years ago
|
Status: RESOLVED → VERIFIED
You need to log in
before you can comment on or make changes to this bug.
Description
•