Open Bug 628694 Opened 9 years ago Updated 6 years ago

JS_SetPropertyAttributes etc. can clobber non-configurable (JSPROP_PERMANENT) properties

Categories

(Core :: JavaScript Engine, defect)

Other Branch
defect
Not set

Tracking

()

People

(Reporter: jorendorff, Unassigned)

Details

JS_Set*PropertyAttributes (and maybe JS_Define*?) can clobber existing non-configurable properties. Post-Ff4, we should ban this. It's another dumb corner case not covered by our regression tests. We can chop off the unwanted feature quicker than we could build test coverage for it.

(Trivia: This bug probably means a sufficiently dumb embedding can break COMPILE_N_GO treatment of global permanent properties like NaN.)
Isn't this a dup of a bug Igor has?

/be
Assignee: general → nobody
You need to log in before you can comment on or make changes to this bug.