[Webkit-unassigned] [Bug 201910] Array.prototype.push() neither takes effect nor throws an exception

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=201910

Ross Kirsling <ross.kirsling at sony.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ross.kirsling at sony.com

--- Comment #1 from Ross Kirsling <ross.kirsling at sony.com> ---
Looks like this is a bug in JSC as well as XS, but there's no Test262 case enforcing it -- would you be willing to submit yours as a PR there?
https://github.com/tc39/test262

The specific issue is that Array#push calls the abstract operation Set(... , true) which makes failure to set into a TypeError.
(Thus `Array.prototype.push.call('abc', 1);` should throw even though `let x = 'abc'; x.length++;` does not.)
https://tc39.es/ecma262/#sec-array.prototype.push
https://tc39.es/ecma262/#sec-set-o-p-v-throw

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190918/986ad441/attachment.html>