Alice0775 White Reporter
	Description • 10 years ago

This bug was filed from the Socorro interface and is 
report bp-956ca8b6-2208-49d3-81cb-19b882141220.
=============================================================

Pushlog:
https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=6f1696df360b&tochange=7837628feeca

	Alice0775 White Reporter
	Comment 1 • 10 years ago

[Tracking Requested - why for this release]:

	Alice0775 White Reporter
	Comment 2 • 10 years ago

bp-be10f4d5-bbe4-4114-954c-ec4e42141220

	Alice0775 White Reporter
	Comment 3 • 10 years ago

In local build
Last Good: 38c02eda337d
First Bad: 6a71021584ff

	Tom S [:evilpie]
	Comment 4 • 10 years ago

Test case:
var p = Proxy.create({
    getOwnPropertyDescriptor: function() {
        return {value: 1, configurable: true, writable: true};
    }
}, null);

var o = Object.create(p);
o.a = 1;

	Tom S [:evilpie]
	Comment 5 • 10 years ago

Oh also interesting that apparently this is a version of Caja using the old proxies.

	Spencer Selander [greenknight]
	Comment 6 • 10 years ago

Tested that URL with e10s disabled, browser crashed and session restore failed - one time reopened to a blank browser, other times with "Trouble restoring..." message. With e10s enabled, just the one tab crashed.

	Jeff Walden [:Waldo]
	Comment 8 • 10 years ago

Comment on attachment 8540994 [details] [diff] [review]
set-property

Review of attachment 8540994 [details] [diff] [review]:
-----------------------------------------------------------------

Dunno if the exact semantics implemented here are correct, but this clearly removes the type error of passing an arbitrary receiver into a proxy handler trap where the proxy object was expected.  So let's do this.  Correct semantics should eventually fall out of jorendorff's ongoing refactoring of all this junk.

	Tom S [:evilpie]
	Comment 9 • 10 years ago

Thanks. I agree this is probably better, but Jason should still take a look at this.

https://treeherder.mozilla.org/#/jobs?repo=try&revision=6767f9dce400
https://hg.mozilla.org/integration/mozilla-inbound/rev/7fbd629599de

	Phil Ringnalda (:philor)
	Comment 10 • 10 years ago

https://hg.mozilla.org/mozilla-central/rev/7fbd629599de

	Lawrence Mandel [:lmandel] (use needinfo)
	Comment 11 • 9 years ago

This landed on m-c at the beginning of Jan. As this bug is tracked for 37, does it need to remain open? Has this issue been addressed?

	Tom S [:evilpie]
	Comment 12 • 9 years ago

This is waiting on Jason to answer his needinfo request.

	Jason Orendorff [:jorendorff]
	Comment 13 • 9 years ago

Thanks for leaving it open. I'm worried about this and need to confer with bz.

	Jason Orendorff [:jorendorff]
	Comment 14 • 9 years ago

Talked with bz. Tom's fix is the right thing.

I've filed follow-up bug 1130537 to fix some underlying weirdness, and hope to get a patch in quickly...

	Firefox Bug Husbandry Bot
	Comment 15 • 6 years ago

Removing leave-open keyword from resolved bugs, per :sylvestre.