On 17 August 2011 21:24, John-David Dalton <[email protected]> wrote: > Another odd thing is that V8 uses the `Array#push` internally for > `Object.defineProperties`. > I noticed that if I set `Array.prototype.push = 1;` using > `Object.defineProperties(…)` would error complaining about `push` not > being a function.
Yes, there are still several bugs like that in the V8 built-ins. The reason is that most of these built-ins are written in JS itself, and in some places the code isn't careful enough about applying the original function instead of just invoking an object method. /Andreas _______________________________________________ es-discuss mailing list [email protected] https://mail.mozilla.org/listinfo/es-discuss
