ee0e12acf0
https://bugs.webkit.org/show_bug.cgi?id=227963 Reviewed by Alexey Shvayka. JSTests: * stress/reflect-set-custom-value.js: Source/JavaScriptCore: Follow up after r280463: as it turns out, putInlineFastReplacingStaticPropertyIfNeeded also needs to handle custom values, similar to how definePropertyOnReceiverSlow was updated. This function will be called when the target property of the receiver is a custom value and isn't reified. The previous test case was expanded to test both the reified and non-reified cases. * runtime/JSObject.cpp: (JSC::JSObject::putInlineFastReplacingStaticPropertyIfNeeded): * tools/JSDollarVM.cpp: Canonical link: https://commits.webkit.org/240137@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@280505 268f45cc-cd09-0410-ab3c-d52691b4dbfc |
||
|---|---|---|
| .. | ||
| CellList.cpp | ||
| CellList.h | ||
| CellProfile.h | ||
| CompilerTimingScope.cpp | ||
| CompilerTimingScope.h | ||
| FunctionAllowlist.cpp | ||
| FunctionAllowlist.h | ||
| FunctionOverrides.cpp | ||
| FunctionOverrides.h | ||
| HeapVerifier.cpp | ||
| HeapVerifier.h | ||
| Integrity.cpp | ||
| Integrity.h | ||
| IntegrityInlines.h | ||
| JSDollarVM.cpp | ||
| JSDollarVM.h | ||
| ProfileTreeNode.h | ||
| SigillCrashAnalyzer.cpp | ||
| SigillCrashAnalyzer.h | ||
| TieredMMapArray.h | ||
| VMInspector.cpp | ||
| VMInspector.h | ||
| VMInspectorInlines.h | ||