[Webkit-unassigned] [Bug 36738] JS assignment to an existing property should not change the attributes of the property

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Mar 30 13:36:50 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=36738





--- Comment #1 from Oliver Hunt <oliver at apple.com>  2010-03-30 13:36:50 PST ---
No file is attached -- i assume your test is:
Array.prototype.push = ...
for (i in [])
   if (i=="push") return true;

Or some such.

If so try doing:
Array.prototype.push; // Read it first
Array.prototype.push = ...
...

If the test passes in the second case i have a fairly good idea of what's going
on.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list