<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>187520</bug_id>
          
          <creation_ts>2018-07-10 08:42:03 -0700</creation_ts>
          <short_desc>hasOwnProperty returns true for out of bounds property index on TypedArray</short_desc>
          <delta_ts>2018-08-08 09:04:06 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>Safari 11</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>gfablima</reporter>
          <assigned_to name="Keith Miller">keith_miller</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>fpizlo</cc>
    
    <cc>isol2</cc>
    
    <cc>keith_miller</cc>
    
    <cc>mark.lam</cc>
    
    <cc>msaboff</cc>
    
    <cc>saam</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>ysuzuki</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1440847</commentid>
    <comment_count>0</comment_count>
    <who name="">gfablima</who>
    <bug_when>2018-07-10 08:42:03 -0700</bug_when>
    <thetext>Hi everyone,
I found an inconsistence in jsc when we try to get an invalid property in a TypedArray, 
in this case a Float32Array.

Steps to reproduce:
var a = new Float32Array([0.1, 0.2, 0.3]);
print(Object.getOwnPropertyNames(a).sort())
var c = a.hasOwnProperty(3);
if (c) throw new Error(&quot;Test failed&quot;);

Actual results:
0,1,2
Error: Test failed

Expected results:
0,1,2

V8, SpiderMonkey and Chakra works as expected.

OS: Ubuntu 16.04 x64
Version: 606.1.9.4</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1441040</commentid>
    <comment_count>1</comment_count>
    <who name="Keith Miller">keith_miller</who>
    <bug_when>2018-07-10 17:33:40 -0700</bug_when>
    <thetext>Thanks for the bug report. Seems like a simple fix.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1441049</commentid>
    <comment_count>2</comment_count>
      <attachid>344738</attachid>
    <who name="Keith Miller">keith_miller</who>
    <bug_when>2018-07-10 17:46:44 -0700</bug_when>
    <thetext>Created attachment 344738
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1441062</commentid>
    <comment_count>3</comment_count>
      <attachid>344738</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-07-10 18:28:42 -0700</bug_when>
    <thetext>Comment on attachment 344738
Patch

Clearing flags on attachment: 344738

Committed r233718: &lt;https://trac.webkit.org/changeset/233718&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1441063</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-07-10 18:28:43 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1441064</commentid>
    <comment_count>5</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2018-07-10 18:29:49 -0700</bug_when>
    <thetext>&lt;rdar://problem/42051129&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1448763</commentid>
    <comment_count>6</comment_count>
    <who name="">isol2</who>
    <bug_when>2018-08-08 09:04:06 -0700</bug_when>
    <thetext>cinfuzz</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>344738</attachid>
            <date>2018-07-10 17:46:44 -0700</date>
            <delta_ts>2018-07-10 18:28:42 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-187520-20180710174641.patch</filename>
            <type>text/plain</type>
            <size>3764</size>
            <attacher name="Keith Miller">keith_miller</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjMzNjk4CmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlw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</data>

          </attachment>
      

    </bug>

</bugzilla>