Reviewers: Erik Corry,

Description:
Fixes bug in Object.freeze and Object.seal causing them to misbehave when
Array.prototype has changed.

Object.freeze and Object.seal uses GetOwnPropertyNames which
returns an array with local property names. This array will also have
the additional properties defined on Array.prototype or
Object.prototype.

Note that, the implementation of GetOwnPropertyNames (when used as
Object.getOwnPropertyNames) is correct, since the spec says to create
a new Array (which would also have these properties).


Please review this at http://codereview.chromium.org/3137041/show

SVN Base: http://v8.googlecode.com/svn/branches/bleeding_edge/

Affected files:
  M     src/v8natives.js
  A     test/mjsunit/regress/regress-842.js


--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to