mirror of
https://github.com/LadybirdBrowser/ladybird
synced 2026-04-26 09:45:06 +02:00
25e343464d
We cached the length identifier for GetLength, but not GetLengthWithThis. This caused an `has_value()` verification failure when accessing super.length. Found by Fuzzilli.
23 lines
345 B
JavaScript
23 lines
345 B
JavaScript
test("does not crash when accessing super.length", () => {
|
|
let result;
|
|
|
|
class A {
|
|
constructor() {}
|
|
|
|
get length() {
|
|
return 2;
|
|
}
|
|
}
|
|
|
|
class B extends A {
|
|
constructor() {
|
|
super();
|
|
result = super.length;
|
|
}
|
|
}
|
|
|
|
new B();
|
|
|
|
expect(result).toBe(2);
|
|
});
|