Status: Accepted
Owner: [email protected]
CC: [email protected], [email protected]
Labels: Type-Bug Priority-Medium ES5
New issue 3643 by [email protected]: Array.prototype.slice calls [[Get]]
before [[Has]] when generating result array
https://code.google.com/p/v8/issues/detail?id=3643
This code in SimpleSlice() from array.js is busted:
var current = array[index];
if (!IS_UNDEFINED(current) || index in array) {
// add current to result array
}
Test case, courtesy of mstarzinger:
var a = [1, 2, 3];
Object.defineProperty(a, '1', {
get: function() { delete this[1]; return undefined; },
configurable: true
});
var s = a.slice(1);
assertTrue('0' in s);
Array.prototype.splice is likely similar busted.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
