[Webkit-unassigned] [Bug 43742] Fast-path for array lookup with double subscript
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Mon Aug 9 13:22:52 PDT 2010
https://bugs.webkit.org/show_bug.cgi?id=43742
Oliver Hunt <oliver at apple.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #63921|review? |review-
Flag| |
--- Comment #2 from Oliver Hunt <oliver at apple.com> 2010-08-09 13:22:52 PST ---
(From update of attachment 63921)
This is incorrect. 1.5 is a valid property, eg.
a=[];
a[1.5] = "Foo"
a["1.5"] === "Foo"; // true
a[1] === undefined; // true
Your patch results in a look up of 1.5 converting to a lookup of 1, which is incorrect. It's somewhat worrying that this passes tests :-(
Is the double that's being looked up actually an integral value?
--Oliver
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list