Changeset 252158 in webkit
- Timestamp:
- Nov 6, 2019 4:00:04 PM (4 years ago)
- Location:
- trunk
- Files:
-
- 5 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/JSTests/ChangeLog
r252024 r252158 1 2019-11-06 Commit Queue <commit-queue@webkit.org> 2 3 Unreviewed, rolling out r251940. 4 https://bugs.webkit.org/show_bug.cgi?id=203920 5 6 "it introduced test262 failures" (Requested by rkirsling on 7 #webkit). 8 9 Reverted changeset: 10 11 "[[HasProperty]] result of Proxy in prototype chain is 12 ignored" 13 https://bugs.webkit.org/show_bug.cgi?id=203560 14 https://trac.webkit.org/changeset/251940 15 1 16 2019-11-04 Saam Barati <sbarati@apple.com> 2 17 -
trunk/JSTests/stress/proxy-get-prototype-of.js
r251940 r252158 390 390 let handler = { 391 391 getPrototypeOf: function(theTarget) { 392 assert(theTarget === target); 392 393 called = true; 393 394 return proto; … … 400 401 let proxy = new Proxy(target, handler); 401 402 for (let i = 0; i < 500; i++) { 402 let result = 1 in proxy; 403 assert(!called); 403 let result = "x" in proxy; 404 assert(called); 405 called = false; 404 406 } 405 407 } -
trunk/JSTests/test262/expectations.yaml
r251940 r252158 634 634 default: 'TypeError: Attempted to assign to readonly property.' 635 635 strict mode: 'TypeError: Attempted to assign to readonly property.' 636 test/built-ins/Array/prototype/indexOf/calls-only-has-on-prototype-after-length-zeroed.js: 637 default: 'Test262Error: [[GetPrototypeOf]] trap called' 638 strict mode: 'Test262Error: [[GetPrototypeOf]] trap called' 639 test/built-ins/Array/prototype/lastIndexOf/calls-only-has-on-prototype-after-length-zeroed.js: 640 default: 'Test262Error: [[GetPrototypeOf]] trap called' 641 strict mode: 'Test262Error: [[GetPrototypeOf]] trap called' 636 642 test/built-ins/Array/prototype/map/target-array-with-non-writable-property.js: 637 643 default: 'TypeError: Attempted to assign to readonly property.' … … 1148 1154 default: 'Test262Error: Expected a TypeError but got a TypeError' 1149 1155 strict mode: 'Test262Error: Expected a TypeError but got a TypeError' 1156 test/built-ins/Proxy/has/call-in-prototype.js: 1157 default: 'Test262Error: [[GetPrototypeOf]] trap called' 1158 strict mode: 'Test262Error: [[GetPrototypeOf]] trap called' 1150 1159 test/built-ins/Proxy/revocable/revocation-function-name.js: 1151 1160 default: 'Test262Error: obj should have an own property name' -
trunk/Source/JavaScriptCore/ChangeLog
r252124 r252158 1 2019-11-06 Commit Queue <commit-queue@webkit.org> 2 3 Unreviewed, rolling out r251940. 4 https://bugs.webkit.org/show_bug.cgi?id=203920 5 6 "it introduced test262 failures" (Requested by rkirsling on 7 #webkit). 8 9 Reverted changeset: 10 11 "[[HasProperty]] result of Proxy in prototype chain is 12 ignored" 13 https://bugs.webkit.org/show_bug.cgi?id=203560 14 https://trac.webkit.org/changeset/251940 15 1 16 2019-11-05 Mark Lam <mark.lam@apple.com> 2 17 -
trunk/Source/JavaScriptCore/runtime/JSObjectInlines.h
r251940 r252158 127 127 if (hasSlot) 128 128 return true; 129 if (object->type() == ProxyObjectType && slot.internalMethodType() == PropertySlot::InternalMethodType::HasProperty)130 return false;131 129 JSValue prototype; 132 130 if (LIKELY(structure->classInfo()->methodTable.getPrototype == defaultGetPrototype || slot.internalMethodType() == PropertySlot::InternalMethodType::VMInquiry)) … … 162 160 if (hasSlot) 163 161 return true; 164 if (object->type() == ProxyObjectType && slot.internalMethodType() == PropertySlot::InternalMethodType::HasProperty)165 return false;166 162 } 167 163 JSValue prototype;
Note: See TracChangeset
for help on using the changeset viewer.