[Webkit-unassigned] [Bug 221176] New: An issue about redefining attributes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=221176

            Bug ID: 221176
           Summary: An issue about redefining attributes
           Product: WebKit
           Version: WebKit Local Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: nisl_grammarly1 at 163.com

#version: d940b47

#Testcase
var proto = {};
Object.defineProperty(proto, 'prop', {
    enumerable: true,
});
var Con = function() {};
Con.prototype = proto;
var obj = new Con();
Object.defineProperty(obj, 'prop', {
    enumerable: false,
});
var arr = Object.keys(obj);
for (var p in obj) {
    print(1)
}

#Command:
./webkit/WebKitBuild/Release/bin/jsc testcase.js

#Output:
1

#Expected output:


# Description
When executing this test case, the prop property of obj was redefined, and other engines (SpiderMonkey, v8, chakra, etc.) set it as the redefined property, but the property of JavascriptCore is still the property on the prototype. So I suspect this is an implementation error of JavascriptCore.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210130/dfcc38f6/attachment.htm>