https://codereview.chromium.org/233293005/diff/100001/src/array.js
File src/array.js (right):
https://codereview.chromium.org/233293005/diff/100001/src/array.js#newcode475
src/array.js:475: %SetProperty(this, i+n, %_Arguments(i), 0, 0);
This will break for primitive values as "this" because there is not
ToObject conversion anywhere and primitive values seem to be ignored by
Runtime_SetProperty.
Also this passes "sloppy" as the language mode, which causes this
[[Put]] not to throw if the element cannot be put according to
[[CanPut]].
Both of the above cases are already broken right now. So I am fine with
leaving this as it is, but can we leave a TODO that this is a temporary
workaround? You can assign this TODO to me if you want.
https://codereview.chromium.org/233293005/
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
