<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>135009</bug_id>
          
          <creation_ts>2014-07-16 22:50:14 -0700</creation_ts>
          <short_desc>assign undefined value to Element property throws TypeError</short_desc>
          <delta_ts>2014-07-17 18:31:12 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>iPhone / iPad</rep_platform>
          <op_sys>Other</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>134841</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Major</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="ShihChi Huang">huge.huang+webkitbug</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>ap</cc>
    
    <cc>ggaren</cc>
    
    <cc>oliver</cc>
    
    <cc>zalan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1022962</commentid>
    <comment_count>0</comment_count>
    <who name="ShihChi Huang">huge.huang+webkitbug</who>
    <bug_when>2014-07-16 22:50:14 -0700</bug_when>
    <thetext>Prior to iOS8 Safari / Safari 8.0 if we assign undefined to Element property (like document.body.scrollTop) it fallback to 0

```js
document.body.scrollTop = undefined;

TypeError: Type error
column: 110
line: 1
message: &quot;Type error&quot;
stack: &quot;eval code↵eval@[native code]↵_evaluateOn↵_evaluateAndWrap↵evaluate&quot;
__proto__: Error
```</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1023144</commentid>
    <comment_count>1</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2014-07-17 17:08:11 -0700</bug_when>
    <thetext>Hmmm, this is complaining about assigning NaN (undefined is being number coerced)

Maybe due to fractional coordinates?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1023145</commentid>
    <comment_count>2</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2014-07-17 17:11:46 -0700</bug_when>
    <thetext>Good point. Can you still reproduce with a current WebKit nightly? I thought that the fractional coordinate change was already undone.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1023146</commentid>
    <comment_count>3</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2014-07-17 17:13:06 -0700</bug_when>
    <thetext>I think this is a dupe of bug #134841</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1023155</commentid>
    <comment_count>4</comment_count>
    <who name="ShihChi Huang">huge.huang+webkitbug</who>
    <bug_when>2014-07-17 18:05:27 -0700</bug_when>
    <thetext>awesome, I cannot repro in webkit nightly r171105</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1023168</commentid>
    <comment_count>5</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2014-07-17 18:31:12 -0700</bug_when>
    <thetext>(In reply to comment #2)
&gt; Good point. Can you still reproduce with a current WebKit nightly? I thought that the fractional coordinate change was already undone.

It&apos;s been reverted only for Element.scroll*. Other properties&apos; (Element.offset*, Element.client*) return type is still double.

*** This bug has been marked as a duplicate of bug 134841 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>