Fixing Sloppy Symbol.iterator setter
authorcbruni <cbruni@chromium.org>
Mon, 14 Sep 2015 07:19:58 +0000 (00:19 -0700)
committerCommit bot <commit-bot@chromium.org>
Mon, 14 Sep 2015 07:22:35 +0000 (07:22 +0000)
commit2f1df49a6c51cfe267e22e8442e34d59514324a2
tree9e92ebdf73b04cceb767bccfb7b9486a637a6edd
parentd8eade4d7d84c4aba7f4c8ebbca04d475031c3f8
Fixing Sloppy Symbol.iterator setter
In certiain cases the ArgumentsIteratorSetter would trigger an invalid
state in the LookupIterator when being overridden. This is now solved
by bypassing the SetDataProperty and directly using
DefinePropertyOrElementIgnoringAttributes since we know exactly which
property we're going to install

LOG=N
BUG=chromium:521484

Review URL: https://codereview.chromium.org/1332873002

Cr-Commit-Position: refs/heads/master@{#30705}
src/accessors.cc
test/mjsunit/es6/arguments-iterator.js