Closed
Bug 643009
Opened 15 years ago
Closed 15 years ago
Array iterator bug
Categories
(Tamarin Graveyard :: Virtual Machine, defect, P3)
Tamarin Graveyard
Virtual Machine
Tracking
(Not tracked)
RESOLVED
FIXED
Q3 11 - Serrano
People
(Reporter: stejohns, Assigned: stejohns)
References
Details
Attachments
(1 file)
|
3.13 KB,
patch
|
rreitmai
:
review+
|
Details | Diff | Splinter Review |
Adam Lane reports:
array iterators no longer work when an array does not start at index 0.
The test case is: Fill an array with stuff starting at, say, index 259.
This is the pertinent stuff of the repro case.
var a:Array = new Array;
a[258] = new Object;
a[259] = new Object;
Transcript("a length: " + a.length + "\n");
for (var idx:String in a)
Transcript("a[" + idx + "] = " + a[idx] + "\n");
It looks like the iterator “idx” is looking for element 0 and 1, not element 258 and 259.
| Assignee | ||
Comment 1•15 years ago
|
||
Bug is that ArrayObject::nextName should add m_denseStart to the returned name.
| Assignee | ||
Comment 2•15 years ago
|
||
Note: bug is in Mainline but not Wasabi or any shipping Player.
| Assignee | ||
Comment 3•15 years ago
|
||
Attachment #520340 -
Flags: review?(rreitmai)
Updated•15 years ago
|
Status: NEW → ASSIGNED
Flags: flashplayer-qrb+
Flags: flashplayer-needsversioning-
Flags: flashplayer-injection+
Flags: flashplayer-bug+
Priority: -- → P3
Target Milestone: --- → Q3 11 - Serrano
Comment 4•15 years ago
|
||
Comment on attachment 520340 [details] [diff] [review]
Patch + testcase
Glad to see the test case; I assume there aren't any other 'dense' tests that we are missing.
Attachment #520340 -
Flags: review?(rreitmai) → review+
| Assignee | ||
Comment 5•15 years ago
|
||
TR 6120:20e38e2578fe
Status: ASSIGNED → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•