[Webkit-unassigned] [Bug 195443] New: Wrong Realization of Reflect.ownKeys

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=195443

            Bug ID: 195443
           Summary: Wrong Realization of Reflect.ownKeys
           Product: WebKit
           Version: WebKit Local Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: sunlili at ict.ac.cn

Hello，
I run following code in lastest JavascriptCore, the result is wrong. TypeError should be thrown when returns duplicate entries.

var proxy = new Proxy({}, {
  ownKeys: function(target) {
    print("in ownKeys");
    return ['a','b','a']; 
  },
});
print(Reflect.ownKeys(proxy));
print("BT_FLAG");

SpiderMonkey and V8 throw a TypeError: 'ownKeys' on proxy: trap returned duplicate entries, However, JavascriptCore execute without failures.

BT group
2019.3.8

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190308/a39ec956/attachment.html>