[Webkit-unassigned] [Bug 78149] New: [V8] Bindings for list interfaces are all broken

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=78149

           Summary: [V8] Bindings for list interfaces are all broken
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore JavaScript
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: arv at chromium.org
                CC: abarth at webkit.org, japhet at chromium.org,
                    antonm at chromium.org, haraken at chromium.org


Created an attachment (id=126146)
 --> (https://bugs.webkit.org/attachment.cgi?id=126146&action=review)
LayoutTest showing that FileList is broken

This cropped up when I was looking at bug 73865.

The V8 bindings for collection like list interfaces that contains non Node wrappers are all broken because we do not keep an implicit reference to the items.

The following fails for example:

    inputElement.files[0].custom = 42;
    forceGC();
    shouldBe('inputElement.files[0].custom', '42');

The code snippet above will fail for all lists where the item method returns a non Node, non value type. By searching for item() methods in the IDL files I believe all of the following are broken:

ClientRectList
CSSRuleList
CSSValueList
DataTransferItemList
DOMMimeTypeArray
DOMPlugin
DOMPluginArray
EntryArray
EntryArraySync
FileList
GamepadList
MediaStreamList
MediaStreamTrackList
SpeechInputResultList
SQLResultSetRowList?
StyleSheetList
TextTrackCueList
TextTrackList
TouchList
WebKitAnimationList

Since this is a common pattern we should generate code for these in the code generator.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.