[Webkit-unassigned] [Bug 6985] New: cyclic __proto__ values aren't caught

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=6985

           Summary: cyclic __proto__ values aren't caught
           Product: WebKit
           Version: 420+ (nightly)
          Platform: PC
               URL: data:text/html,%3C%21DOCTYPE%20html%3E%0A%3Cscript%3E%0A
                    var%20o1%20%3D%20%7B%20p1%3A%201%20%7D%3B%0Avar%20o2%20%
                    3D%20%7B%20p2%3A%202%20%7D%3B%0Ao2.__proto__%20%3D%20o1%
                    3B%0Avar%20o3%20%3D%20%7B%20p3%3A%203%20%7D%3B%0Ao3.__pr
                    oto__%20%3D%20o2%3B%0Ao1.__proto__%20%3D%20o3%3B%20//%20
                    this%20hangs%0A%3C/script%3E
        OS/Version: Linux
            Status: NEW
          Severity: critical
          Priority: P2
         Component: JavaScript
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: ian at hixie.ch


STEPS TO REPRODUCE
   Run the following JS:

   var o1 = { p1: 1 };
   var o2 = { p2: 2 };
   o2.__proto__ = o1;
   var o3 = { p3: 3 };
   o3.__proto__ = o2;
   o1.__proto__ = o3; // this hangs

ACTUAL RESULTS
   Hang.

EXPECTED RESULTS
   It should raise an exception "cyclic __proto__ value".


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.