[Webkit-unassigned] [Bug 170537] test262: REGRESSION(r207226): test262/test/built-ins/Array/prototype/splice/create-proxy.js.default-strict: Exception: TypeError: Attempted to assign to readonly property.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=170537

Alexey Shvayka <shvaikalesh at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |shvaikalesh at gmail.com
         Resolution|---                         |DUPLICATE

--- Comment #2 from Alexey Shvayka <shvaikalesh at gmail.com> ---
(In reply to Saam Barati from comment #1)
> Looks like it's probably a regression to me.

It's actually a progression: r207226 is correct to throw a TypeError if Set() fails.
In create-proxy.js test262 case, the Set() is invoked on Proxy with another Proxy as its [[ProxyTarget]], which incorrectly returned `false` due to a hack in JSObject::getOwnPropertyDescriptor().
r259800 removed the hack, fixing this test.

*** This bug has been marked as a duplicate of bug 200560 ***

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200830/9b374bb9/attachment.htm>