<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>31485</bug_id>
          
          <creation_ts>2009-11-13 11:57:28 -0800</creation_ts>
          <short_desc>JSValueProtect and JSValueUnprotect don&apos;t protect API wrapper values</short_desc>
          <delta_ts>2009-11-13 18:09:56 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Oliver Hunt">oliver</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>163410</commentid>
    <comment_count>0</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2009-11-13 11:57:28 -0800</bug_when>
    <thetext>toJS strips out the wrapper objects made for number cells in the API, which means the protect/unprotect become no-ops.  Clearly this is a Bad Thing (tm)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>163411</commentid>
    <comment_count>1</comment_count>
      <attachid>43182</attachid>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2009-11-13 12:00:07 -0800</bug_when>
    <thetext>Created attachment 43182
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>163421</commentid>
    <comment_count>2</comment_count>
      <attachid>43182</attachid>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2009-11-13 12:07:40 -0800</bug_when>
    <thetext>Comment on attachment 43182
Patch

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>163452</commentid>
    <comment_count>3</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2009-11-13 12:42:41 -0800</bug_when>
    <thetext>Committed r50964</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>43182</attachid>
            <date>2009-11-13 12:00:07 -0800</date>
            <delta_ts>2009-11-13 12:07:40 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-31485-20091113120005.patch</filename>
            <type>text/plain</type>
            <size>3487</size>
            <attacher name="Oliver Hunt">oliver</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL0phdmFTY3JpcHRDb3JlL0FQSS9BUElDYXN0LmggYi9KYXZhU2NyaXB0Q29y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</data>
<flag name="review"
          id="24874"
          type_id="1"
          status="+"
          setter="ggaren"
    />
          </attachment>
      

    </bug>

</bugzilla>