Status: Accepted
Owner: [email protected]
CC: [email protected]
Labels: Type-Bug Priority-Medium
New issue 2048 by [email protected]: Prototype chain is not traversed
for OOB reads from typed arrays
http://code.google.com/p/v8/issues/detail?id=2048
Object.defineProperty(
Object.prototype,
"2",
{
get: function() {
return "oob read";
}
}
);
var a = new Float64Array(1)
alert(a[2]);
Alerts "oob read" in FF and undefined in Chrome. I am not sure what is
correct semantics for this but I think it was traversing prototype chain
before.
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
