[Webkit-unassigned] [Bug 16644] REGRESSION (r28880-r28886): Global variable access

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=16644


oliver at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |oliver at apple.com




------- Comment #7 from oliver at apple.com  2007-12-29 22:29 PDT -------
This is almost certainly due to r28884

As an educated guess the problem is like to be that in:
if (typeof HTMLElement == 'undefined') {
    var HTMLElement=function(){};
    document.write("FAIL");
} else {
    document.write("PASS");
}

the references to HTMLElement are replaced with fast indexed lookups into the
symbol table, however when the symbol table is initialised it does not allow
for the potential for these variables to be present on the global object, and
just assumes that they are all undefined by default.I would guess that the fix
would be to have the global symbol table be initalised from the values in the
global object if there are any attempts to shadow any of the ghlobal objects
properties.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.