Skip to content
  • darin@apple.com's avatar
    JavaScriptCore: · f2e8f29a
    darin@apple.com authored
    2008-05-21  Darin Adler  <darin@apple.com>
    
            Reviewed by Anders.
    
            - fix <rdar://problem/5952721> bug in JavaScript arguments object property lookup
    
            Test: fast/js/arguments-bad-index.html
    
            * kjs/function.cpp:
            (KJS::IndexToNameMap::IndexToNameMap): Use unsigned instead of int.
            (KJS::IndexToNameMap::isMapped): Use unsigned instead of int, and also use the
            strict version of the numeric conversion function, since we don't want to allow
            trailing junk.
            (KJS::IndexToNameMap::unMap): Ditto.
            (KJS::IndexToNameMap::operator[]): Ditto.
            * kjs/function.h: Changed IndexToNameMap::size type from int to unsigned.
    
    LayoutTests:
    
    2008-05-21  Darin Adler  <darin@apple.com>
    
            Reviewed by Anders.
    
            - test for <rdar://problem/5952721> bug in JavaScript arguments object property lookup
    
            * fast/js/arguments-bad-index-expected.txt: Added.
            * fast/js/arguments-bad-index.html: Added.
            * fast/js/r...
    f2e8f29a