[Webkit-unassigned] [Bug 132872] Getter on prototype is called even though property is also defined on instance

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=132872





--- Comment #2 from Wladimir Palant <trev at adblockplus.org>  2014-05-13 11:40:41 PST ---
Note that the issue only happens if there are at least 9 objects created (the testcase creates 1000 of them, just in case). It seems that the issue here is a wrong optimization when the JIT compiler processes method Class.bar() - it will call the getter on the prototype directly, without checking whether the same property exists on the object instance.

The issue is only reproducible in Safari, neither Firefox nor Chrome show this behavior.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.