[Webkit-unassigned] [Bug 220574] A possible bug about attribute modification

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=220574

--- Comment #1 from NWU_NISL <nisl_grammarly1 at 163.com> ---
(In reply to NWU_NISL from comment #0)
> #version:
> dbae081(https://github.com/WebKit/WebKit-http/commit/
> dbae081ad7e22d9ab61edf2f337f6c2bb593c7f8)
> 
> #Testcase:
> a = {
>     get p() {print('get');},
>     p: 2,
>     set p(b) {print('set');}
> };
> 
> a.p = 0;
> print('a.p:', a.p);
> 
> #Command:
> ./webkit/WebKitBuild/Release/bin/jsc testcase.js
> 
> #Output:
> a.p: 0
> 
> #Expected output:
> set
> a.p: undefined
> 
> #Description:
> When executing this test case, other engines (such as v8, SpiderMonkey,
> chakra, etc.) seem to call the 'get' method defined in the 'a' object and
> output the value of 'a.p' as 'undefined', but JavascriptCore changed the
> value of 'a.p' to 0. Maybe this is a bug of JavascriptCore.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210115/d5da16e4/attachment.htm>