« Bugzilla Issues Index
#3046 — 24.1.4.3 ArrayBuffer.prototype.slice: Check new ArrayBuffer is not same instance
- bug_id:
3046
- creation_ts:
2014-07-24 08:26:00 -0700
- short_desc:
24.1.4.3 ArrayBuffer.prototype.slice: Check new ArrayBuffer is not same instance
- delta_ts:
2014-08-25 08:29:21 -0700
- product:
Draft for 6th Edition
- component:
technical issue
- version:
Rev 26: July 18, 2014 Draft
- rep_platform:
All
- op_sys:
All
- bug_status:
RESOLVED
- resolution:
FIXED
- priority:
Normal
- bug_severity:
normal
- everconfirmed:
true
- reporter:
André Bargull
- assigned_to:
Allen Wirfs-Brock
- commentid:
9497
- comment_count:
0
- who:
André Bargull
- bug_when:
2014-07-24 08:26:57 -0700
24.1.4.3 ArrayBuffer.prototype.slice ( start , end )
Add check that `new` is not the same instance as `O`, otherwise CopyDataBlockBytes will throw an assertion error.
Test case:
---
let buf = new ArrayBuffer(10);
buf.constructor = function Constructor(len) {
return buf;
};
buf.slice(0);
---
- commentid:
9529
- comment_count:
1
- who:
Allen Wirfs-Brock
- bug_when:
2014-07-24 10:17:21 -0700
fixed in rev27 editor's draft
- commentid:
9880
- comment_count:
2
- who:
Allen Wirfs-Brock
- bug_when:
2014-08-25 08:29:21 -0700
fixed in rev27 draft