RESOLVED DUPLICATE of bug 199292 Bug 155267
[ES6] We use isJSArray in our VM in places where we should be using the spec's IsArray function 
https://bugs.webkit.org/show_bug.cgi?id=155267
Summary [ES6] We use isJSArray in our VM in places where we should be using the spec'...
Saam Barati
Reported 2016-03-09 14:59:38 PST
This has implications for Proxy. IsArray is used in speciesConstructArray, JSON stuff, etc.
Attachments
Add attachment proposed patch, testcase, etc.
Alexey Shvayka
Comment 1 2020-08-30 02:35:43 PDT
(In reply to Saam Barati from comment #0) > This has implications for Proxy. > IsArray is used in speciesConstructArray, JSON stuff, etc. I've vetted all call sites of IsArray() abstract op: JSC correctly detects array proxies, which is covered by test262 suite. The last isJSArray() => isArray() change for JSON.parse() was landed in r250860. *** This bug has been marked as a duplicate of bug 199292 ***
Note You need to log in before you can comment on or make changes to this bug.