We inline parts of OrdinarySetPrototypeOf in a few different places that call O.[[SetPrototypeOf]](v) rather than doing full dynamic dispatch. We should put those inlined bits inside OrdinarySetPrototypeOf and have the call sites not inline parts of OrdinarySetPrototypeOf. This is wrong because this behavior is observable with proxy.
Created attachment 272719 [details] EWS testing
Created attachment 272720 [details] patch for review
Created attachment 272721 [details] patch for review
Comment on attachment 272721 [details] patch for review View in context: https://bugs.webkit.org/attachment.cgi?id=272721&action=review > Source/JavaScriptCore/ChangeLog:8 > + We were copy-pasting implememntation bits that belong in OrdinarySetPrototypeOf Typo: implememntation
landed in: http://trac.webkit.org/changeset/197512
(In reply to comment #4) > Comment on attachment 272721 [details] > patch for review > > View in context: > https://bugs.webkit.org/attachment.cgi?id=272721&action=review > > > Source/JavaScriptCore/ChangeLog:8 > > + We were copy-pasting implememntation bits that belong in OrdinarySetPrototypeOf > > Typo: implememntation Oh man. I changed locally but then forgot to change it again once I ran prepare-ChangeLog :/