Status: New
Owner: ----

New issue 2712 by [email protected]: slice hangs
http://code.google.com/p/v8/issues/detail?id=2712

The following code hangs in Chrome Browser & Node:

[].slice.call({length: -1}, 0);


I'm guessing, slice doesn't check for negative lengths because it expects an array.

Obviously, this is crap code, but I was just messing around and it exposes a bug in the code that, if used with arrays, will never happen.

But imagine someone using an array-like object that has a bug. It will hang a Node server, which it should never do.


--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to