94688 2012-08-22 03:51:55 -0700 Layout test fast/js/toString-overrides.html should expect TypeError when toLocaleString is overwritten 2012-08-23 11:29:21 -0700 1 1 1 Unclassified WebKit Tools / Tests 528+ (Nightly build) Unspecified Unspecified NEW P2 Normal --- 4147 1 ulan webkit-unassigned barraclough oliver porten oldest_to_newest 701748 0 ulan 2012-08-22 03:51:55 -0700 Layout test fast/js/toString-overrides.html has the following test cases: > Number.prototype.toLocaleString = "invalid"; > shouldBe("[1].toLocaleString()", "'1'"); > RegExp.prototype.toLocaleString = "invalid"; > shouldBe("[/r/].toLocaleString()", "'toString2'"); According to ECMA 262/15.4.4.3, both calls to "toLocaleString()" should throw TypeError because steps 8.a, 8.b of the spec algorithm state: > 8.a Let func be the result of calling the [[Get]] internal method of elementObj with argument "toLocaleString". > 8.b If IsCallable(func) is false, throw a TypeError exception. String "invalid" is not callable. Both Chrome and Firefox throw TypeError in these cases: > FAIL [1].toLocaleString() should be 1. Threw exception TypeError: Property 'toLocaleString' of object toString is not a function > FAIL [/r/].toLocaleString() should be toString2. Threw exception TypeError: Property 'toLocaleString' of object toString2 is not a function