Bug 44240

Summary: REGRESSION (r62896): Interpreter incorrectly excludes prototype chain when validating put_by_id_transition
Product: WebKit Reporter: David Kilzer (:ddkilzer) <ddkilzer>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Severity: Normal CC: darin, ggaren, oliver
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: Macintosh   
OS: Mac OS X 10.6   
Bug Depends on: 41929    
Bug Blocks:    
Description Flags
Patch darin: review+

Description David Kilzer (:ddkilzer) 2010-08-19 04:41:25 PDT
LayoutTests/fast/js/dictionary-no-cache.html fails using the JSC interpreter, but passes using the JSC JIT.

--- a/LayoutTests/fast/js/dictionary-no-cache-expected.txt
+++ b/LayoutTests/fast/js/dictionary-no-cache-expected.txt
@@ -5,7 +5,7 @@ On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE
 PASS foundNewPrototypeProperty is true
 PASS foundRemovedPrototypeProperty is false
-PASS calledNewPrototypeSetter is true
+FAIL calledNewPrototypeSetter should be true. Was false.
 PASS getTestProperty(test4) is "on prototype"
 PASS getTestProperty(test4) is "on self"
 PASS getTestProperty(test5) is "on prototype's prototype"
Comment 1 David Kilzer (:ddkilzer) 2010-08-19 04:48:05 PDT
Comment 2 Oliver Hunt 2010-08-23 16:32:10 PDT
*** Bug 44241 has been marked as a duplicate of this bug. ***
Comment 3 Oliver Hunt 2010-08-23 16:51:37 PDT
Created attachment 65184 [details]
Comment 4 Darin Adler 2010-08-23 16:54:25 PDT
Comment on attachment 65184 [details]

Is there a regression test covering this already?
Comment 5 Oliver Hunt 2010-08-23 17:05:39 PDT
Committed r65847
Comment 6 David Kilzer (:ddkilzer) 2010-08-23 17:40:37 PDT
(In reply to comment #4)
> (From update of attachment 65184 [details])
> Is there a regression test covering this already?

Yes, except we don't have any buildbots running tests with the JSC Interpreter:

Comment 7 David Kilzer (:ddkilzer) 2010-08-24 10:08:04 PDT
The regression was introduced in r62896 for Bug 41929.