Revision: 9536 Author: [email protected] Date: Thu Oct 6 01:46:38 2011 Log: Fix a prototype chain traversal not expecting proxies.
[email protected] BUG= TEST= Review URL: http://codereview.chromium.org/8144011 http://code.google.com/p/v8/source/detail?r=9536 Modified: /branches/bleeding_edge/src/objects.cc ======================================= --- /branches/bleeding_edge/src/objects.cc Thu Oct 6 01:42:10 2011 +++ /branches/bleeding_edge/src/objects.cc Thu Oct 6 01:46:38 2011 @@ -3995,7 +3995,7 @@ void JSObject::LookupCallback(String* name, LookupResult* result) { Heap* heap = GetHeap(); for (Object* current = this; - current != heap->null_value(); + current != heap->null_value() && current->IsJSObject(); current = JSObject::cast(current)->GetPrototype()) { JSObject::cast(current)->LocalLookupRealNamedProperty(name, result); if (result->IsProperty() && result->type() == CALLBACKS) return; -- v8-dev mailing list [email protected] http://groups.google.com/group/v8-dev
