mirror of
https://github.com/RGBCube/serenity
synced 2025-05-30 08:45:06 +00:00
![]() Two issues: - throw_exception() with ErrorType::InstanceOfOperatorBadPrototype would receive rhs_prototype.to_string_without_side_effects(), which would ASSERT_NOT_REACHED() as to_string_without_side_effects() must not be called on an empty value. It should (and now does) receive the RHS value instead as the message is "'prototype' property of {} is not an object". - Value::instance_of() was missing an exception check after calling has_instance_method, to_boolean() on an empty value result would crash as well. Fixes #3930. |
||
---|---|---|
.. | ||
assignment-operators.js | ||
binary-bitwise-and.js | ||
binary-bitwise-left-shift.js | ||
binary-bitwise-or.js | ||
binary-bitwise-right-shift.js | ||
binary-bitwise-unsigned-right-shift.js | ||
binary-bitwise-xor.js | ||
binary-relational.js | ||
comma-operator.js | ||
delete-basic.js | ||
delete-global-variable.js | ||
delete-globalThis-property-crash.js | ||
in-operator-basic.js | ||
instanceof-basic.js | ||
logical-and.js | ||
logical-expressions-short-circuit.js | ||
logical-nullish-coalescing.js | ||
logical-or.js | ||
modulo-basic.js | ||
ternary-basic.js | ||
typeof-basic.js | ||
void-basic.js |