Changeset 48331 in webkit for trunk/JavaScriptCore/runtime/NumberConstructor.h

Timestamp:

Sep 11, 2009, 9:52:39 PM (16 years ago)

Author:

[email protected]

Message:

getPropertyNames caching is invalid when the prototype chain contains objects with custom getPropertyNames
​https://bugs.webkit.org/show_bug.cgi?id=29214

Reviewed by Sam Weinig.

Add a flag to TypeInfo to indicate whether a type overrides getPropertyNames.
This flag is used to make sure that caching of the property name data is safe.

File:

• trunk/JavaScriptCore/runtime/NumberConstructor.h (modified) (1 diff)

trunk/JavaScriptCore/runtime/NumberConstructor.h

@@ -40 +40 @@
         static PassRefPtr<Structure> createStructure(JSValue proto) 
         { 
-            return Structure::create(proto, TypeInfo(ObjectType, ImplementsHasInstance | HasDefaultMark)); 
+            return Structure::create(proto, TypeInfo(ObjectType, ImplementsHasInstance | HasDefaultMark | HasDefaultGetPropertyNames)); 
         }