[Webkit-unassigned] [Bug 33450] property access (. operator) incorrectly returning prototype value not instance value

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=33450


Oliver Hunt <oliver at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE




--- Comment #5 from Oliver Hunt <oliver at apple.com>  2010-01-11 15:27:47 PST ---
(In reply to comment #4)
> Oliver:
> 
> I have now verified that our other two large test cases are working correctly
> in the webkit nightly Version 4.0.4 (6531.21.10, r53036).
> 
> It appears the bug is indeed fixed in the cases we were tracking down.
> 
> ---
> 
> We are currently working around the bug in the released version of Safari by
> rewriting all our property accesses to use `[]`.  Is there any way to know from
> lexical analysis which `.` operations are likely to fail so we do not have to
> do this transformation globally?

Alas no.  The bug is due to us incorrectly caching lookup to the prototype
object over an object that we consider a dictionary.

*** This bug has been marked as a duplicate of bug 32402 ***

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.