[Webkit-unassigned] [Bug 214837] ASSERTION FAILED: isSymbol() in Source/JavaScriptCore/runtime/JSCell.cpp(188)

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jul 27 19:04:19 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=214837

--- Comment #2 from Mark Lam <mark.lam at apple.com> ---
This is not a real bug.  The test was iterating over special properties in the jsc shell that are only for testing use.  This scenario cannot manifest in any productized version of JSC because these special test properties will not be present.

I'll put together a patch to make all the special test properties non-enumerable so that they will stop tripping up people who doing blind enumeration on the jsc shell's test global object.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200728/34793dba/attachment.htm>


More information about the webkit-unassigned mailing list