Good catch Feng, thanks for fixing it. :-)
Cheers, -- Mads On Wed, Jan 14, 2009 at 10:01 PM, <[email protected]> wrote: > hi this is wrong > > You cannot turn off access check on an object and turn it on again. > Access check bit is set on Function's initial map, and an instance > shares the same map when it is created, then it is turned off, but the > object can get a new map when adding properties to it, turn-on check > only modifies object's new map, but not the old map. > > This is likely the cause of the security issue 6264. > > > On 2008/10/30 11:42:35, Mads Ager wrote: >> > > > > http://codereview.chromium.org/8914 > --~--~---------~--~----~------------~-------~--~----~ v8-dev mailing list [email protected] http://groups.google.com/group/v8-dev -~----------~----~----~----~------~----~------~--~---
