[Webkit-unassigned] [Bug 170264] New: Inserting elements into arrays fails when array contains very large numbers

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=170264

            Bug ID: 170264
           Summary: Inserting elements into arrays fails when array
                    contains very large numbers
           Product: WebKit
           Version: Safari 10
          Hardware: Macintosh
                OS: macOS 10.12
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: calvinlough at gmail.com

The following code doesn't behave as expected on the latest version of Safari (10.1+) and on the WebKit nightly builds:

var arr = [0, 2147483648]; // NOTE: the second number is greater than a signed 32bit int
arr.shift(); // remove the first element so arr is [2147483648]
arr[1] = 1; // Safari fails to add the new element and the array is unchanged

On all other browsers and Safari 10.0, arr is [2147483648, 1]. On Safari 10.1 and newer, arr is [2147483648].

The above code works fine if the numbers in the array are less than 2147483648.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170330/7ca2a4c3/attachment.html>