Closed
Bug 665961
Opened 14 years ago
Closed 14 years ago
ArrayBuffer does not respect prototype chain for property access.
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
DUPLICATE
of bug 665355
People
(Reporter: nsm, Unassigned)
References
Details
(Keywords: assertion, regression)
Attachments
(2 files)
|
195 bytes,
application/octet-stream
|
Details | |
|
3.25 KB,
patch
|
Details | Diff | Splinter Review |
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Build Identifier:
Switching to inline slots and a delegate object breaks the prototype chain for properties set on the ArrayBuffer or prototype.
Reproducible: Always
|
Reporter | |
Updated•14 years ago
|
|
|
Reporter | |
Comment 1•14 years ago
|
||
|
|
Reporter | |
Comment 2•14 years ago
|
||
First failure in commit b89374bc34ee
|
|
Reporter | |
Comment 3•14 years ago
|
||
Attachment #540857 -
Flags: review?(mrbkap)
|
||
Comment 4•14 years ago
|
||
Comment on attachment 540857 [details] [diff] [review]
Fix: ArrayBuffer::obj_getProperty looks up the prototype chain.
I think this bug is fixed by the second patch in bug 665355, right? Can you move the tests here into that patch and mark this bug a dupe/fixed (your call)?
Attachment #540857 -
Flags: review?(mrbkap)
|
|
Reporter | |
Comment 5•14 years ago
|
||
fixed with second attachment on bug 665355
Status: UNCONFIRMED → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
|
||
Updated•14 years ago
|
tracking-firefox7:
? → ---
You need to log in
before you can comment on or make changes to this bug.
Description
•