Comment #4 on issue 4229 by [email protected]:
Object.prototype.hasOwnProperty steps not executed in correct order
https://code.google.com/p/v8/issues/detail?id=4229#c4
The following revision refers to this bug:
https://chromium.googlesource.com/v8/v8.git/+/f4e39a8c1f68aa1cc7a3e5292760ecf563388cf0
commit f4e39a8c1f68aa1cc7a3e5292760ecf563388cf0
Author: arv <[email protected]>
Date: Wed Jun 24 22:30:37 2015
Fix evaluation order of Object.prototype.hasOwnProperty
We need to do the ToName before the ToObject.
BUG=v8:4229
LOG=N
R=adamk
Review URL: https://codereview.chromium.org/1211663002
Cr-Commit-Position: refs/heads/master@{#29272}
[modify]
http://crrev.com/f4e39a8c1f68aa1cc7a3e5292760ecf563388cf0/src/v8natives.js
[add]
http://crrev.com/f4e39a8c1f68aa1cc7a3e5292760ecf563388cf0/test/mjsunit/has-own-property-evaluation-order.js
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
