<html>
    <head>
      <base href="https://bugs.webkit.org/" />
    </head>
    <body>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - [test262] Fixing mapped arguments object property test case"
   href="https://bugs.webkit.org/show_bug.cgi?id=159398#c42">Comment # 42</a>
              on <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - [test262] Fixing mapped arguments object property test case"
   href="https://bugs.webkit.org/show_bug.cgi?id=159398">bug 159398</a>
              from <span class="vcard"><a class="email" href="mailto:sbarati&#64;apple.com" title="Saam Barati &lt;sbarati&#64;apple.com&gt;"> <span class="fn">Saam Barati</span></a>
</span></b>
        <pre>Comment on <span class=""><a href="attachment.cgi?id=284985&amp;action=diff" name="attach_284985" title="Patch">attachment 284985</a> <a href="attachment.cgi?id=284985&amp;action=edit" title="Patch">[details]</a></span>
Patch

View in context: <a href="https://bugs.webkit.org/attachment.cgi?id=284985&amp;action=review">https://bugs.webkit.org/attachment.cgi?id=284985&amp;action=review</a>

<span class="quote">&gt; Source/JavaScriptCore/ChangeLog:11
&gt; +        property cases. Also it is fixing cases where arguments[i]
&gt; +        cannot be deleted when argument &quot;i&quot; is not configurable.</span >

Shouldn't being non-configurable mean you can't be deleted?

<span class="quote">&gt; Source/JavaScriptCore/ChangeLog:14
&gt; +        aliased xor stored in a JSObject with attributes. This patch changes</span >

what does it mean to be aliased in this situation?

<span class="quote">&gt; Source/JavaScriptCore/ChangeLog:18
&gt; +        attribute is true. It is important realize that when the attribute is</span >

Really? I thought it can't be deleted if configurable is false. That's how normal objects work, anyways.

<span class="quote">&gt; Source/JavaScriptCore/runtime/GenericArgumentsInlines.h:145
&gt; +    PropertySlot slot(thisObject, PropertySlot::InternalMethodType::GetOwnProperty);</span >

Seems like this should be ::VMInquiry. ::GetOwnProperty is allowed to do arbitrary side effects.

<span class="quote">&gt; Source/JavaScriptCore/runtime/GenericArgumentsInlines.h:179
&gt; +    PropertySlot slot(thisObject, PropertySlot::InternalMethodType::GetOwnProperty);</span >

Ditto.

<span class="quote">&gt; Source/JavaScriptCore/runtime/GenericArgumentsInlines.h:228
&gt; +                if (descriptor.writable() &amp;&amp; descriptor.configurable())</span >

Please change the above comment to reflect the new behavior.

<span class="quote">&gt; Source/JavaScriptCore/runtime/GenericArgumentsInlines.h:238
&gt; +            if ((descriptor.writablePresent() &amp;&amp; !descriptor.writable()) || descriptor.isAccessorDescriptor())</span >

Why do we care about it being non-writable? I thought for deleting a property, we care about it being configurable?</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>