[Webkit-unassigned] [Bug 216816] An issue about evaluating instanceof

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=216816

--- Comment #3 from Alexey Shvayka <shvaikalesh at gmail.com> ---
(In reply to NWU_NISL from comment #0)
> #### testcase
> var  obj = {__proto__:String};
> var result = "hello" instanceof obj;
> print(result);

https://test262.report/browse/language/expressions/instanceof/prototype-getter-with-primitive.js failure seems to be related.

To fix this, JSObject::{hasInstance,defaultHasInstance} should be redesigned to accept a constructor instead of a prototype.
Also, we'd need to make sure that primitives are correctly handled by JIT tiers.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200929/dfe134c7/attachment.htm>