Changeset 87826 in webkit for trunk/Source/JavaScriptCore/runtime/JSFunction.h

Timestamp:

Jun 1, 2011, 11:08:07 AM (14 years ago)

Author:

[email protected]

Message:

2011-05-31 Oliver Hunt <​[email protected]>

Reviewed by Geoffrey Garen.

Freezing a function and its prototype causes browser to crash.
​https://bugs.webkit.org/show_bug.cgi?id=61758

Add test to ensure correct behaviour

• fast/js/preventExtensions-expected.txt:
• fast/js/script-tests/preventExtensions.js: (f):

2011-05-31 Oliver Hunt <​[email protected]>

Reviewed by Geoffrey Garen.

Freezing a function and its prototype causes browser to crash.
​https://bugs.webkit.org/show_bug.cgi?id=61758

Make JSObject::preventExtensions virtual so that we can override it
and instantiate all lazy

• JavaScriptCore.exp:
• runtime/JSFunction.cpp: (JSC::createPrototypeProperty): (JSC::JSFunction::preventExtensions): (JSC::JSFunction::getOwnPropertySlot):
• runtime/JSFunction.h:
• runtime/JSObject.h:
• runtime/JSObject.cpp: (JSC::JSObject::seal): (JSC::JSObject::seal):

File:

• trunk/Source/JavaScriptCore/runtime/JSFunction.h (modified) (1 diff)

trunk/Source/JavaScriptCore/runtime/JSFunction.h

@@ -92 +92 @@
         bool isHostFunctionNonInline() const;
 
+        virtual void preventExtensions(JSGlobalData&);
         virtual bool getOwnPropertySlot(ExecState*, const Identifier&, PropertySlot&);
         virtual bool getOwnPropertyDescriptor(ExecState*, const Identifier&, PropertyDescriptor&);