archives

« Bugzilla Issues Index

#2964 — 24.1.4.3 ArrayBuffer.prototype.slice: Handle neutered buffers after step 4


24.1.4.3 ArrayBuffer.prototype.slice ( start , end )

Neutered buffers are only checked in step 4, but side effects may neuter the array buffer object after step 4. This needs to be handled before calling CopyDataBlockBytes in step 23.


fixed in rev26 editor's draft


in rev26