[Webkit-unassigned] [Bug 186993] New: Inconsistent output compared with other JS engines
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Mon Jun 25 00:09:23 PDT 2018
https://bugs.webkit.org/show_bug.cgi?id=186993
Bug ID: 186993
Summary: Inconsistent output compared with other JS engines
Product: WebKit
Version: WebKit Local Build
Hardware: Unspecified
OS: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: JavaScriptCore
Assignee: webkit-unassigned at lists.webkit.org
Reporter: sunlili at ict.ac.cn
Hello,
The following code behaves incorrectly (inconsistent with the standard and other engines).
arr0 = [ 1, 2, 3 ];
arr1 = [ 4, 5, 6 ];
handler1 = {
get: function (oTarget, sKey) {
print('arg ' + '1' + ':get ' + sKey.toString());
if (sKey.toString() == 'Symbol(Symbol.isConcatSpreadable)') {
arr0[1] = { undefined: 'a', 1: 'b', 2: 'c' };
}
if (sKey.toString() == 'length') {
arr1['length'] = 100; return 10;
}
if (Number(sKey.toString()) != NaN) { ; }
return Reflect.get(oTarget, sKey);
},
has: function (oTarget, sKey) {
print('arg ' + '1' + ':has ' + sKey.toString());
if (Number(sKey.toString()) != NaN) {
arr1[1] = true; return Symbol.split;
}
return Reflect.has(oTarget, sKey); }
};
var proxy1 = new Proxy(arr1, handler1);
arr2 = Array.prototype.concat.call(arr0, proxy1);
print(arr2);
The output is :
arg 1:get Symbol(Symbol.isConcatSpreadable)
arg 1:get Symbol(Symbol.toPrimitive)
arg 1:get toString
arg 1:get join
arg 1:get length
arg 1:get 0
arg 1:get 1
arg 1:get 2
arg 1:get 3
arg 1:get 4
arg 1:get 5
arg 1:get 6
arg 1:get 7
arg 1:get 8
arg 1:get 9
1,[object Object],3,4,5,6,,,,,,,
However, it should be:
arg 1:get Symbol(Symbol.isConcatSpreadable)
arg 1:get length
arg 1:has 0
arg 1:get 0
arg 1:has 1
arg 1:get 1
arg 1:has 2
arg 1:get 2
arg 1:has 3
arg 1:get 3
arg 1:has 4
arg 1:get 4
arg 1:has 5
arg 1:get 5
arg 1:has 6
arg 1:get 6
arg 1:has 7
arg 1:get 7
arg 1:has 8
arg 1:get 8
arg 1:has 9
arg 1:get 9
1,2,3,4,true,6,,,,,,,
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180625/4bf9dbf0/attachment-0001.html>
More information about the webkit-unassigned
mailing list