564208 - After screwing with __proto__, iterating throws "Illegal operation on WrappedNative prototype object"

Status: NEW

(Core :: DOM: Core & HTML, defect, P5)

Description

[Jesse Ruderman]

Attachment: testcase

[Exception... "Illegal operation on WrappedNative prototype object"  nsresult: "0x8057000c (NS_ERROR_XPC_BAD_OP_ON_WN_PROTO)"  location: "JS frame :: file:///Users/jruderman/Desktop/e.html :: <TOP_LEVEL> :: line 8"  data: no]

It's unusual for "for (p in obj) { }" to throw, so I'm guessing this is a bug and not intended behavior.

Comment 1

[Blake Kaplan (:mrbkap) (inactive)]

Attachment: Fix

A for-each loop on the object will still throw, but in general, we should avoid calling getters while enumerating to avoid these sorts of exceptions.

Comment 2

[Blake Kaplan (:mrbkap) (inactive)]

Comment on attachment 450447 [details] [diff] [review]
Fix

This patch is no good. We actually use the value of len_val, so we need to get it. This is probably not worth fixing, given that.

Comment 3

[Frank Yan (:fryn)]

Resetting to NEW. Set back to ASSIGNED with an assignee if you're actively working on this.

Comment 4

[Firefox Bug Husbandry Bot]

https://bugzilla.mozilla.org/show_bug.cgi?id=1472046

Move all DOM bugs that haven’t been updated in more than 3 years and has no one currently assigned to P5.

If you have questions, please contact :mdaly.