On Sep 19, 2011, at 4:04 AM, David Bruant wrote: > Object.getOwnPropertyDescriptor creates a native array and, for each own > property, it calls [[DefineOwnProperty]] on this array for an index n (ES5.1 > - 15.2.3.4 step 4.b) > This internal method is special for arrays (ES5.1 - 15.4.5.1). When crossing > 2³², ToString(n) is not an array index anymore, so the property is added (as > per step 5), but the length property gets stuck to its maximum (2³²). > Since the property is added, continuing results in an infinite loop, the > length property remains at 2³².
Nit-pick: length stops at (2³² - 1). Maximum value of the corresponding index is therefore (2³² - 2). I wish we hadn't codified this in ES1. Oh well. /be _______________________________________________ es-discuss mailing list [email protected] https://mail.mozilla.org/listinfo/es-discuss
