Bug 120317 - RegExpMatchesArray should not call [[put]]
Summary: RegExpMatchesArray should not call [[put]]
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Gavin Barraclough
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-08-26 10:24 PDT by Gavin Barraclough
Modified: 2013-08-26 10:42 PDT (History)
0 users

See Also:

Attachments
Fix (3.89 KB, patch)
2013-08-26 10:26 PDT, Gavin Barraclough 		oliver: review+
Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Gavin Barraclough 2013-08-26 10:24:30 PDT 
This will call accessors on the JSObject/JSArray prototypes – so adding an accessor or read-only property called index or input to either of these prototypes will result in broken behavior.
Comment 1 Gavin Barraclough 2013-08-26 10:26:38 PDT 
Created attachment 209662 [details]
Fix
Comment 2 Gavin Barraclough 2013-08-26 10:42:07 PDT 
Committed revision 154612.