archives

« Bugzilla Issues Index

#1883 — 15.4.3.10: CreateOwnDataProperty no longer valid to use


CreateOwnDataProperty asserts when there is already an own property with the same property key. That means it's no longer safe to use CreateOwnDataProperty in 15.4.3.10 Array.prototype.slice at step 19.d.iii.


The following test case currently throws an assertion error:

(new class extends Array{constructor(){this.push(0)}}).slice(0,1)


Fixed in rev19 editor's draft

Removed the assert, CreateOwnDataProperty can now fail, but all uses already don't need (it can't fail) or already have the necessary checks.


fixed in rev19