[Webkit-unassigned] [Bug 25560] New: "string value".__proto__ gets the wrong object.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=25560

           Summary: "string value".__proto__ gets the wrong object.
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: erikcorry at google.com


This is a regression.  The problem is not present in eg. Safari 3.2.2 for
Windows.  In the latest WebKit nightlies and in the Safari 4 beta for OSX it is
present.  Here is a snippet to reproduce it:

<script>
"foo".__proto__.foo = "bar";
if (Object.prototype.foo == "bar") alert("Has Safari __proto__ bug");
else alert("Doesn't have Safari __proto__ bug");
</script>

It seems the problem is restricted to string values.  new
String("foo").__proto__ gets the right object.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.