Closed Bug 742205 Opened 13 years ago Closed 10 years ago

JS_ObjectIsDate doesn't do the right thing on cross-compartment wrappers

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 856833

People

(Reporter: bzbarsky, Unassigned)

References

(Blocks 1 open bug)

Details

At least as far as I can tell.
Assignee: general → nobody
It calls ObjectIsClass, which for security wrappers should always be false.
When Boris filed this, I think he was using the term 'security wrapper' to mean 'cross-compartment wrapper', rather than the current meaning of "something that inherits 'SecurityWrapper' and refuses unwraps". This bug predates that whole setup.
Yes, this was about unwrappable cross-compartment wrappers. That said, this got fixed in bug 856833 afaict.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
Summary: JS_ObjectIsDate doesn't do the right thing on security wrappers → JS_ObjectIsDate doesn't do the right thing on cross-compartment wrappers
You need to log in before you can comment on or make changes to this bug.