[Webkit-unassigned] [Bug 144252] Numeric setter on prototype doesn't get called.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=144252

--- Comment #1 from Yusuke Suzuki <utatane.tea at gmail.com> ---
I think there are 2 issues, correct?

1.
If the __proto__-executed object is categorized into ALL_BLANK_INDEXING_TYPES, we don't set SlowPut into its structure.


2.
And if the newly generated object is not the array, we don't set the SlowPut into its structure even if there's SlowPut structure in the [[Prototype]] chain.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150806/49e9fd1b/attachment.html>