638775 - uint property lookup on missing property on sealed object does not throw exception if uint value has not been interned

Status: RESOLVED WONTFIX

(Tamarin Graveyard :: Virtual Machine, defect, P3)

Description

[Lars T Hansen]

Test cases, note the objects are all sealed:

This throws an error as it should:

  class A {}
  print((new A)["foo"]);

This does not throw an error (it prints undefined), though it should have:

  class A {}
  print((new A)[33]);

This throws an error on the first print line:

  class A {}
  print((new A)[32]);
  print((new A)["32"])

This throws an error on the second print line (after printing undefined), though it should have thrown it on the first:

  class A {}
  print((new A)[33]);
  print((new A)["32"])

In all cases the problem appears to be a case in ScriptObject::getUintProperty that checks for whether the integer value has been interned; if it is, getAtomProperty is called on the interned value, otherwise undefined is returned (on the assumption the property is not there).  But if the object is sealed an exception should have been thrown at that point.

Comment 1

[Lars T Hansen]

Jeff notes that interpreter and jit behavior are the same.

Comment 2

[Sylvestre Ledru [:Sylvestre]]

Tamarin is a dead project now. Mass WONTFIX.

Comment 3

[Sylvestre Ledru [:Sylvestre]]

Tamarin isn't maintained anymore. WONTFIX remaining bugs.