Dimitri, can I steal this bug? The result.IsValid() check should have been enough to ensure that there is a local property here, so I'm pretty sure the problem is in LocalLookupRealNamedProperty instead.
I'll fix it and add regression tests to the V8 test suite. http://codereview.chromium.org/629008/diff/1/2 File src/objects.cc (right): http://codereview.chromium.org/629008/diff/1/2#newcode6175 src/objects.cc:6175: // Successful name lookup doesn't mean the value is there, because the There is something fishy going on here. The result.IsValid() check should make sure that there actually is a property on the object. http://codereview.chromium.org/629008 -- v8-dev mailing list [email protected] http://groups.google.com/group/v8-dev
