[Webkit-unassigned] [Bug 212730] TypedArray.prototype.set is incorrect with primitives

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=212730

Alexey Shvayka <shvaikalesh at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Hardware|PC                          |All
            Version|WebKit Local Build          |WebKit Nightly Build
           Assignee|webkit-unassigned at lists.web |shvaikalesh at gmail.com
                   |kit.org                     |
            Summary|An issue about              |TypedArray.prototype.set is
                   |%TypedArray%.prototype.set  |incorrect with primitives
                   |method                      |
                 OS|Linux                       |All
           Severity|Normal                      |Minor

--- Comment #2 from Alexey Shvayka <shvaikalesh at gmail.com> ---
In genericTypedArrayViewProtoFuncSet(), JSC casts an argument to JSObject* instead of performing toObject().
SpiderMonkey gets this right, while V8 handles all primitives per spec except for numbers.
I will submit a patch as soon as test262 coverage (https://github.com/tc39/test262/pull/2651) is merged & synced.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200608/aefd3f00/attachment.htm>