[Webkit-unassigned] [Bug 66451] New: Assigning a value to an existing non-enumerable property of a built-in before accessing it change it's [[Enumerable]] attribute to true

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=66451

           Summary: Assigning a value to an existing non-enumerable
                    property of a built-in before accessing it change it's
                    [[Enumerable]] attribute to true
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
               URL: http://dl.dropbox.com/u/513327/enum_bug.html
        OS/Version: Unspecified
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: john.david.dalton at gmail.com
                CC: oliver at apple.com


>From the es-discuss posts:
https://mail.mozilla.org/pipermail/es-discuss/2011-August/016290.html
https://mail.mozilla.org/pipermail/es-discuss/2011-August/016293.html
https://mail.mozilla.org/pipermail/es-discuss/2011-August/016298.html
https://mail.mozilla.org/pipermail/es-discuss/2011-August/016306.html

Oliver wrote:
> I suspect that this only applies to builtin properties on objects, as I think JSC has a similar issue.
> 
> Speaking for JSC (but i wouldn't be surprised if V8 did something similar) we will delay the creation of the majority of builtin properties until they're actually used, eg. until you actually access Array.prototype.reduce we won't reify the property.  A side effect of this is that when you simply assign to the property we skip reification, and so the property attributes are the same as you would get if you were creating a new property.
> 
> A simple test would be to see if
> Array.prototype.reduce;
> Array.prototype.reduce = ...
>
> Results in the correct behavior.

I have created a test case here:
http://dl.dropbox.com/u/513327/enum_bug.html

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.