[Webkit-unassigned] [Bug 80921] New: [JSC] Object.hasOwnProperty errors with Window object

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=80921

           Summary: [JSC] Object.hasOwnProperty errors with Window object
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore JavaScript
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: barraclough at apple.com


JSDOMWindow::getOwnPropertySlot erroneously searches the prototype chain, which it shouldn't be doing for an 'own' access.  'hasOwnProperty' is implemented in terms of getOwnPropertySlot, so this can result in incorrect results (if you create a property 'foo' on the Window object's prototype, hasOwnProperty for 'foo' on the Window object will return true).

Our behavior here is likely related to the sadness that is bug#49739.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.