You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
My initial reading suggests that this is indeed an infinite loop for a misconfigured Proxy, and that jsc and v8 aren't matching the spec, but hopefully more folks will weigh in.
I think an infinite loop is the expected behavior, yup. Having a Proxy which reports having a property which the underlying object lacks will often have strange behavior.
@mhofman I don't think that one's an issue; the setter is not designed to be re-homed.
Fuzzilli found a bug in the XS implementation of SetterThatIgnoresPrototypeProperties. After fixing the bug, the result is infinite recursion.
Here is the code (simplified from Fuzzilli):
Here are the results with eshost:
We believe that XS is now following the relevant spec steps faithfully.
Note that both XS and SpiderMonkey show infinite recursion, but somehow JSC and v8 do not. What is the expected behavior?
The text was updated successfully, but these errors were encountered: