-
darin@apple.com authored
2008-05-21 Darin Adler <darin@apple.com> Reviewed by Anders. - fix <rdar://problem/5952721> bug in JavaScript arguments object property lookup Test: fast/js/arguments-bad-index.html * kjs/function.cpp: (KJS::IndexToNameMap::IndexToNameMap): Use unsigned instead of int. (KJS::IndexToNameMap::isMapped): Use unsigned instead of int, and also use the strict version of the numeric conversion function, since we don't want to allow trailing junk. (KJS::IndexToNameMap::unMap): Ditto. (KJS::IndexToNameMap::operator[]): Ditto. * kjs/function.h: Changed IndexToNameMap::size type from int to unsigned. LayoutTests: 2008-05-21 Darin Adler <darin@apple.com> Reviewed by Anders. - test for <rdar://problem/5952721> bug in JavaScript arguments object property lookup * fast/js/arguments-bad-index-expected.txt: Added. * fast/js/arguments-bad-index.html: Added. * fast/js/resources/arguments-bad-index.js: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@33972 268f45cc-cd09-0410-ab3c-d52691b4dbfc
f2e8f29a