From 1e56e29a388a1c9071b3d26e5e8c491b1b742c88 Mon Sep 17 00:00:00 2001 From: "rossberg@chromium.org" Date: Thu, 6 Oct 2011 08:46:38 +0000 Subject: [PATCH] Fix a prototype chain traversal not expecting proxies. R=kmillikin@chromium.org BUG= TEST= Review URL: http://codereview.chromium.org/8144011 git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@9536 ce2b1a6d-e550-0410-aec6-3dcde31c8c00 --- src/objects.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/objects.cc b/src/objects.cc index d3cb8b5..b4db9e5 100644 --- a/src/objects.cc +++ b/src/objects.cc @@ -3995,7 +3995,7 @@ void JSReceiver::Lookup(String* name, LookupResult* result) { void JSObject::LookupCallback(String* name, LookupResult* result) { Heap* heap = GetHeap(); for (Object* current = this; - current != heap->null_value(); + current != heap->null_value() && current->IsJSObject(); current = JSObject::cast(current)->GetPrototype()) { JSObject::cast(current)->LocalLookupRealNamedProperty(name, result); if (result->IsProperty() && result->type() == CALLBACKS) return; -- 2.7.4