Bug 120317

Summary: RegExpMatchesArray should not call [[put]]
Product: WebKit Reporter: Gavin Barraclough <barraclough>
Component: JavaScriptCoreAssignee: Gavin Barraclough <barraclough>
Status: RESOLVED FIXED    
Severity: Normal    
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Fix oliver: review+

Description Gavin Barraclough 2013-08-26 10:24:30 PDT
This will call accessors on the JSObject/JSArray prototypes – so adding an accessor or read-only property called index or input to either of these prototypes will result in broken behavior.
Comment 1 Gavin Barraclough 2013-08-26 10:26:38 PDT
Created attachment 209662 [details]
Fix
Comment 2 Gavin Barraclough 2013-08-26 10:42:07 PDT
Committed revision 154612.