<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>44240</bug_id>
          
          <creation_ts>2010-08-19 04:41:25 -0700</creation_ts>
          <short_desc>REGRESSION (r62896): Interpreter incorrectly excludes prototype chain when validating put_by_id_transition</short_desc>
          <delta_ts>2010-08-24 10:08:04 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Mac</rep_platform>
          <op_sys>OS X 10.6</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>41929</dependson>
          
          <everconfirmed>1</everconfirmed>
          <reporter name="David Kilzer (:ddkilzer)">ddkilzer</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>darin</cc>
    
    <cc>ggaren</cc>
    
    <cc>oliver</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>266630</commentid>
    <comment_count>0</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2010-08-19 04:41:25 -0700</bug_when>
    <thetext>LayoutTests/fast/js/dictionary-no-cache.html fails using the JSC interpreter, but passes using the JSC JIT.

--- a/LayoutTests/fast/js/dictionary-no-cache-expected.txt
+++ b/LayoutTests/fast/js/dictionary-no-cache-expected.txt
@@ -5,7 +5,7 @@ On success, you will see a series of &quot;PASS&quot; messages, followed by &quot;TEST COMPLETE
 
 PASS foundNewPrototypeProperty is true
 PASS foundRemovedPrototypeProperty is false
-PASS calledNewPrototypeSetter is true
+FAIL calledNewPrototypeSetter should be true. Was false.
 PASS getTestProperty(test4) is &quot;on prototype&quot;
 PASS getTestProperty(test4) is &quot;on self&quot;
 PASS getTestProperty(test5) is &quot;on prototype&apos;s prototype&quot;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>266641</commentid>
    <comment_count>1</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2010-08-19 04:48:05 -0700</bug_when>
    <thetext>&lt;rdar://problem/8328995&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>268164</commentid>
    <comment_count>2</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2010-08-23 16:32:10 -0700</bug_when>
    <thetext>*** Bug 44241 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>268194</commentid>
    <comment_count>3</comment_count>
      <attachid>65184</attachid>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2010-08-23 16:51:37 -0700</bug_when>
    <thetext>Created attachment 65184
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>268199</commentid>
    <comment_count>4</comment_count>
      <attachid>65184</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2010-08-23 16:54:25 -0700</bug_when>
    <thetext>Comment on attachment 65184
Patch

Is there a regression test covering this already?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>268202</commentid>
    <comment_count>5</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2010-08-23 17:05:39 -0700</bug_when>
    <thetext>Committed r65847</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>268222</commentid>
    <comment_count>6</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2010-08-23 17:40:37 -0700</bug_when>
    <thetext>(In reply to comment #4)
&gt; (From update of attachment 65184 [details])
&gt; Is there a regression test covering this already?

Yes, except we don&apos;t have any buildbots running tests with the JSC Interpreter:

fast/js/dictionary-no-cache.html
fast/js/pic/cached-prototype-setter.html</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>268614</commentid>
    <comment_count>7</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2010-08-24 10:08:04 -0700</bug_when>
    <thetext>The regression was introduced in r62896 for Bug 41929.
&lt;http://trac.webkit.org/changeset/62896&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>65184</attachid>
            <date>2010-08-23 16:51:37 -0700</date>
            <delta_ts>2010-08-23 16:54:24 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-44240-20100823165135.patch</filename>
            <type>text/plain</type>
            <size>1639</size>
            <attacher name="Oliver Hunt">oliver</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZyBiL0phdmFTY3JpcHRDb3JlL0No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</data>
<flag name="review"
          id="53881"
          type_id="1"
          status="+"
          setter="darin"
    />
          </attachment>
      

    </bug>

</bugzilla>