Bug 80921
| Summary: | [JSC] Object.hasOwnProperty errors with Window object | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Gavin Barraclough <barraclough> |
| Component: | WebCore JavaScript | Assignee: | Nobody <webkit-unassigned> |
| Status: | NEW | ||
| Severity: | Normal | CC: | ap |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Gavin Barraclough
JSDOMWindow::getOwnPropertySlot erroneously searches the prototype chain, which it shouldn't be doing for an 'own' access. 'hasOwnProperty' is implemented in terms of getOwnPropertySlot, so this can result in incorrect results (if you create a property 'foo' on the Window object's prototype, hasOwnProperty for 'foo' on the Window object will return true).
Our behavior here is likely related to the sadness that is bug#49739.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |