[Webkit-unassigned] [Bug 172575] Properties set on window.customElements are incorrectly removed by GC.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=172575

Russell Bicknell <bicknellr at google.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #311187|index.html                  |test.html
           filename|                            |
 Attachment #311187|0                           |1
        is obsolete|                            |

--- Comment #3 from Russell Bicknell <bicknellr at google.com> ---
Comment on attachment 311187
  --> https://bugs.webkit.org/attachment.cgi?id=311187
test.html

<script>
  // Uncomment this section to prevent the bug.
  /*
  Object.defineProperty(window, 'customElements', {
    value: window.customElements,
  });
  */

  window.customElements.prop = 1234;

  const a = [];
  for (let i = 0; i < 1000000; i++) {
    a.push({});
  }

  const pass = window.customElements.prop === 1234;
  window.parent.postMessage(pass, '*');
</script>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170525/f0f7592c/attachment.html>