Closed Bug 643009 Opened 15 years ago Closed 15 years ago

Array iterator bug

Categories

(Tamarin Graveyard :: Virtual Machine, defect, P3)

defect

Tracking

(Not tracked)

RESOLVED FIXED
Q3 11 - Serrano

People

(Reporter: stejohns, Assigned: stejohns)

References

Details

Attachments

(1 file)

Adam Lane reports: array iterators no longer work when an array does not start at index 0. The test case is: Fill an array with stuff starting at, say, index 259. This is the pertinent stuff of the repro case. var a:Array = new Array; a[258] = new Object; a[259] = new Object; Transcript("a length: " + a.length + "\n"); for (var idx:String in a) Transcript("a[" + idx + "] = " + a[idx] + "\n"); It looks like the iterator “idx” is looking for element 0 and 1, not element 258 and 259.
Bug is that ArrayObject::nextName should add m_denseStart to the returned name.
Note: bug is in Mainline but not Wasabi or any shipping Player.
Attached patch Patch + testcase — — Splinter Review
Attachment #520340 - Flags: review?(rreitmai)
Status: NEW → ASSIGNED
Flags: flashplayer-qrb+
Flags: flashplayer-needsversioning-
Flags: flashplayer-injection+
Flags: flashplayer-bug+
Priority: -- → P3
Target Milestone: --- → Q3 11 - Serrano
Comment on attachment 520340 [details] [diff] [review] Patch + testcase Glad to see the test case; I assume there aren't any other 'dense' tests that we are missing.
Attachment #520340 - Flags: review?(rreitmai) → review+
TR 6120:20e38e2578fe
Status: ASSIGNED → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: