« Bugzilla Issues Index
#4267 — %ThrowTypeError% has a mutable name property
- bug_id:
4267
- creation_ts:
2015-04-07 08:56:00 -0700
- short_desc:
%ThrowTypeError% has a mutable name property
- delta_ts:
2015-07-10 08:34:17 -0700
- product:
Draft for 6th Edition
- component:
technical issue
- version:
Rev 37: April 3, 2015 Release Candidate 4
- rep_platform:
All
- op_sys:
All
- bug_status:
RESOLVED
- resolution:
FIXED
- priority:
Normal
- bug_severity:
critical
- everconfirmed:
true
- reporter:
Erik Arvidsson
- assigned_to:
Allen Wirfs-Brock
- cc:
["andrebargull", "caitpotter88", "erights", "erights", "erik.arvidsson"]
- commentid:
14152
- comment_count:
0
- who:
Erik Arvidsson
- bug_when:
2015-04-07 08:56:05 -0700
The %ThrowTypeError% function is supposed to be a frozen function so that it cannot be used as a side channel. However, in ES6 we added a configurable name property to all functions.
(We also made length configurable but that case is handled in the spec already.)
- commentid:
14153
- comment_count:
1
- who:
André Bargull
- bug_when:
2015-04-07 09:41:01 -0700
%ThrowTypeError% does not have an own .name property per 9.2.7.1 + 19.2.4.2:
> 9.2.7.1 %ThrowTypeError% ( )
> The %ThrowTypeError% intrinsic is an anonymous built-in function object [...]
> 19.2.4.2 name
> Anonymous functions objects that do not have a contextual name associated with them by this
> specification do not have a name own property but inherit the name property of
> %FunctionPrototype%.
- commentid:
14154
- comment_count:
2
- who:
Erik Arvidsson
- bug_when:
2015-04-07 10:01:50 -0700
Thanks André. Crisis averted.
- commentid:
14155
- comment_count:
3
- who:
André Bargull
- bug_when:
2015-04-07 10:02:44 -0700
(In reply to Erik Arvidsson from comment #2)
> Thanks André. Crisis averted.
:-D