-
Sub-task
-
Resolution: Fixed
-
P3
-
8u60
-
None
-
b44
-
generic
-
generic
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8085570 | emb-9 | Hannes Wallnoefer | P3 | Resolved | Fixed | team |
JDK-8087075 | 8u65 | Hannes Wallnoefer | P3 | Resolved | Fixed | b01 |
JDK-8080390 | 8u60 | Hannes Wallnoefer | P3 | Resolved | Fixed | b16 |
JDK-8138493 | emb-8u65 | Unassigned | P3 | Resolved | Fixed | b01 |
JDK-8081199 | emb-8u60 | Hannes Wallnoefer | P3 | Resolved | Fixed | team |
jjs> Object.defineProperty([], "length", {value: {valueOf: function(){ print("(╯°□°)╯︵ ┻━┻"); return 0; }}})
Expected: Two tables flipped ;-)
Actual: print() only called once
Note: ES5 15.4.5.1, steps 3.c and 3.d require two ToNumber conversions.
Expected: Two tables flipped ;-)
Actual: print() only called once
Note: ES5 15.4.5.1, steps 3.c and 3.d require two ToNumber conversions.
- backported by
-
JDK-8080390 Fuzzing bug: length valueOf bug
-
- Resolved
-
-
JDK-8081199 Fuzzing bug: length valueOf bug
-
- Resolved
-
-
JDK-8085570 Fuzzing bug: length valueOf bug
-
- Resolved
-
-
JDK-8087075 Fuzzing bug: length valueOf bug
-
- Resolved
-
-
JDK-8138493 Fuzzing bug: length valueOf bug
-
- Resolved
-
- clones
-
JDK-8066214 Fuzzing bug: Object.prototype.toLocaleString(0)
-
- Resolved
-
- is cloned by
-
JDK-8066216 Fuzzing bug: array length mismatch problem
-
- Closed
-
(1 clones, 1 is cloned by)