[webkit-reviews] review granted: [Bug 221177] Attempting to [[Set]] JSArray's read-only "length" should throw even with current [[Value]] : [Attachment 450997] Patch

[bugzilla-daemon at webkit.org]

Saam Barati <sbarati at apple.com> has granted Alexey Shvayka
<ashvayka at apple.com>'s request for review:
Bug 221177: Attempting to [[Set]] JSArray's read-only "length" should throw
even with current [[Value]]
https://bugs.webkit.org/show_bug.cgi?id=221177

Attachment 450997: Patch

https://bugs.webkit.org/attachment.cgi?id=450997&action=review




--- Comment #4 from Saam Barati <sbarati at apple.com> ---
Comment on attachment 450997
  --> https://bugs.webkit.org/attachment.cgi?id=450997
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=450997&action=review

r=me

> Source/JavaScriptCore/ChangeLog:13
> +	     a) it's the only callee of setLengthWithArrayStorage() that
performs [[DefineOwnProperty]],

callee -> caller