2011-05-31 Oliver Hunt <oliver@apple.com>
authorOliver Hunt <oliver@apple.com>
Wed, 1 Jun 2011 18:08:07 +0000 (18:08 +0000)
committerAdemar de Souza Reis Jr <ademar.reis@openbossa.org>
Wed, 1 Jun 2011 18:32:49 +0000 (15:32 -0300)
commit638ed3dc8797e056f27343eecfa24c994ffe0d36
treeeefefe0f7d4fe57427b384b924e48a0ba38a1480
parent0c7056f091bd373122c66e11ecb1ebff248e7f76
2011-05-31  Oliver Hunt  <oliver@apple.com>

        Reviewed by Geoffrey Garen.

        Freezing a function and its prototype causes browser to crash.
        https://bugs.webkit.org/show_bug.cgi?id=61758

        Add test to ensure correct behaviour

        * fast/js/preventExtensions-expected.txt:
        * fast/js/script-tests/preventExtensions.js:
        (f):
2011-05-31  Oliver Hunt  <oliver@apple.com>

        Reviewed by Geoffrey Garen.

        Freezing a function and its prototype causes browser to crash.
        https://bugs.webkit.org/show_bug.cgi?id=61758

        Make JSObject::preventExtensions virtual so that we can override it
        and instantiate all lazy

        * JavaScriptCore.exp:
        * runtime/JSFunction.cpp:
        (JSC::createPrototypeProperty):
        (JSC::JSFunction::preventExtensions):
        (JSC::JSFunction::getOwnPropertySlot):
        * runtime/JSFunction.h:
        * runtime/JSObject.h:
        * runtime/JSObject.cpp:
        (JSC::JSObject::seal):
        (JSC::JSObject::seal):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@87826 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/js/preventExtensions-expected.txt
LayoutTests/fast/js/script-tests/preventExtensions.js
Source/JavaScriptCore/ChangeLog
Source/JavaScriptCore/JavaScriptCore.exp
Source/JavaScriptCore/JavaScriptCore.vcproj/JavaScriptCore/JavaScriptCore.def
Source/JavaScriptCore/runtime/JSFunction.cpp
Source/JavaScriptCore/runtime/JSFunction.h
Source/JavaScriptCore/runtime/JSObject.cpp
Source/JavaScriptCore/runtime/JSObject.h