[Webkit-unassigned] [Bug 53559] New: V8: Accessing DataView with index of -1 returns 0, doesn't throw

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=53559

           Summary: V8: Accessing DataView with index of -1 returns 0,
                    doesn't throw
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows 7
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebGL
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: josh at lindenlab.com
                CC: kbr at google.com


var buf = new Uint8Array([1,2,3]), d = new DataView(buf.buffer);

// Expected:
d.getUint8(0);
>>> 1
d.getUint8(1);
>>> 2
d.getUint8(2);
>>> 3

// Also expected:
d.getUint8(3);
>>> Error: INDEX_SIZE_ERR: DOM Exception 1
d.getUint8(-2);
>>> Error: INDEX_SIZE_ERR: DOM Exception 1

// Unexpected:
d.getUint8(-1)
>>> 0

Kenneth Russell doesn't see this in Safari, and mentions that it "looks like a bug in the V8 bindings for DataView"

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.