[Webkit-unassigned] [Bug 18402] New: REGRESSION: visited element handling is incorrect in nested join/toString calls

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=18402

           Summary: REGRESSION: visited element handling is incorrect in
                    nested join/toString calls
           Product: WebKit
           Version: 526+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P1
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ap at webkit.org
                CC: sam at webkit.org


Array implementation used to have a single static HashSet for toString(),
toLocalizedString() and join(). Now that these methods have been moved to
separate functions, the HashSets are separate, too, which can be detected from
JavaScript.

AFAIK, ECMA-262 doesn't define error handling in this case, but I think that
we'd like to maintain Firefox compatibility.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.