Bug 159664 - for-in over object with a Symbol key breaks upon JITing
Summary: for-in over object with a Symbol key breaks upon JITing
Status: RESOLVED DUPLICATE of bug 160211
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-07-11 21:46 PDT by Chris J. Shull
Modified: 2021-05-14 13:26 PDT (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Chris J. Shull 2016-07-11 21:46:16 PDT
See http://jsbin.com/pelokucuwe/1/edit?js,console

Console shows that iterating over an object with a Symbol key breaks over time (theory is due to JITing).

Observed:
["bar", function bar() {}]
["bar", 1]

Expected:
["bar", function bar() {}]
["bar", function bar() {}]

From https://github.com/emberjs/ember.js/issues/13796
Comment 1 Alexey Shvayka 2021-05-14 13:26:31 PDT
(In reply to Chris J. Shull from comment #0)
> See http://jsbin.com/pelokucuwe/1/edit?js,console

Thank you for extracting the test case, Chris!
JIT crash was fixed in r203793.

*** This bug has been marked as a duplicate of bug 160211 ***