[Webkit-unassigned] [Bug 129993] New: Completed iterator can be revived by adding more than one new entry to the target object
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Sun Mar 9 13:08:04 PDT 2014
https://bugs.webkit.org/show_bug.cgi?id=129993
Summary: Completed iterator can be revived by adding more than
one new entry to the target object
Product: WebKit
Version: 528+ (Nightly build)
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Keywords: NeedsRadar
Severity: Normal
Priority: P2
Component: JavaScriptCore
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: oliver at apple.com
CC: ggaren at apple.com, oliver at apple.com,
webkit-bug-importer at group.apple.com
map = new Map
map.set(1,"foo")
keys = map.keys()
for (key of keys) ;
map.set(2, "bar")
map.set(3, "wibble")
for (key of keys) alert(key) // incorrectly shows 3
iterator spec says that a dead iterator has to remain dead.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list