[webkit-reviews] review requested: [Bug 173867] RegExp.prototype[@@replace] relies on globals and doesn't perform ToLength : [Attachment 394541] Patch

[bugzilla-daemon at webkit.org]

Alexey Shvayka <shvaikalesh at gmail.com> has asked  for review:
Bug 173867: RegExp.prototype[@@replace] relies on globals and doesn't perform
ToLength
https://bugs.webkit.org/show_bug.cgi?id=173867

Attachment 394541: Patch

https://bugs.webkit.org/attachment.cgi?id=394541&action=review




--- Comment #5 from Alexey Shvayka <shvaikalesh at gmail.com> ---
Created attachment 394541

  --> https://bugs.webkit.org/attachment.cgi?id=394541&action=review

Patch

Set correct 'length' of builtinStringSubstringInternal's JSFunction.