Status: Untriaged
Owner: dpra...@chromium.org
Labels: Type-Bug Pri-2 OS-All Area-Misc LayoutTests

New issue 24209 by dpra...@chromium.org: Setter not called if added to  
prototype chain after IC has been generated
http://code.google.com/p/chromium/issues/detail?id=24209

( Migrated from http://buganizer/issue?id=1344252 ).


kasperl on August 25 2008 23:00
(Assigned)
Summary
    Setter not called if added to prototype chain after IC has been generated
Component
    Chrome > Deprecated > V8 Engine
Reporter
    kasperl
Assignee
    kasperl
CC
    chrome-bugs, v8-dev
Type
    Bug
Priority
    P2
Severity
    S2
In prod
    false
Hotlist
    Cr__Rel_Future
URLs affected
    <none>
Notes
See message from Geoffrey Garen from Apple:

----

Hello v8-ers!

I've found a bug in v8's inline cache for "store to field:" A setter that
is added to a prototype after the inline cache is recorded will not be
called. Here's a testcase demonstrating the bug. It passes in Firefox 3 and
Safari 3.1, but fails in v8.




The basic problem is that the StoreField stub only verifies the target
object's map, and not the maps in the target object's prototype chain.

Should the StoreField stub consult the full prototype chain?

Thanks,
Geoff
scratch.js
kasperl on August 25 2008 23:12
(Assigned)
Notes
Failing test case added as v8/bugs/bug-1344252.js.
kasperl on August 26 2008 00:41
(Assigned)
Assignee
    bak
laforge on January 21 2009 15:27
(Assigned)
Notes
Hi Lars,

We are currently attempting to clean-up the 4000 open bugs that are in
Buganizer.  We are looking to close out-dated bugs and transition good
non-private bugs into the issue tracker.  This bug is currently assigned to
you and hasn't been modified since 8/26/08 12:41 AM.  If you could please
kindly confirm that this bug is still valid and check to see whether it be
moved into issue tracker.  If it's not longer valid, please close it out.

Thanks,
Anthony


--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to