Closed Bug 535798 Opened 15 years ago Closed 6 years ago

Array methods don't honor synthetic length information

Categories

(Tamarin Graveyard :: Virtual Machine, defect, P2)

Product:
Tamarin Graveyard
Component:
Virtual Machine
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX
Milestone:
Q1 12 - Brannan

People

(Reporter: tharwood, Unassigned)

References

Details

(Whiteboard: must-fix-candidate)

Subclasses of Array can synthesize a novel length if it suits them to do so. If the underlying data structures form a dense array, ArrayObject::isSimpleDense() incorrectly returns true, which gives odd outputs. To repro: see the testcase in bug 535466. The reverse() result, in particular, is egregiously wrong.
Correction: repro testcase attached to bug Bug 535446.
note: wasn't fixed when found due to API versioning issues.
Flags: flashplayer-needsversioning?(trbaker)
Assignee: nobody → tharwood
Flags: flashplayer-qrb+
Flags: flashplayer-needsversioning?(trbaker)
Flags: flashplayer-needsversioning+
Priority: -- → P2
Target Milestone: --- → flash10.2
Assignee: tharwood → nobody
Flags: flashplayer-bug+
Whiteboard: must-fix-candidate
Target Milestone: Q3 11 - Serrano → Q1 12 - Brannan
Flags: flashplayer-injection-
1. This is old enough that I need to double-check if it still occurs post dense-array rewrite. 2. If it does occur, it needs to be fixed 3. If it doesn't occur, it still needs a test case.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.