[Webkit-unassigned] [Bug 144252] Numeric setter on prototype doesn't get called.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Aug 5 21:11:27 PDT 2015


--- Comment #1 from Yusuke Suzuki <utatane.tea at gmail.com> ---
I think there are 2 issues, correct?

If the __proto__-executed object is categorized into ALL_BLANK_INDEXING_TYPES, we don't set SlowPut into its structure.

And if the newly generated object is not the array, we don't set the SlowPut into its structure even if there's SlowPut structure in the [[Prototype]] chain.

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150806/49e9fd1b/attachment.html>

More information about the webkit-unassigned mailing list