tree 32651167fe85ac4b1b4379f92ca4011246e39b43
parent de4e07d107e6e98dd0d9fb8fbd46cb1fc52f5082
author shvaikalesh@gmail.com <shvaikalesh@gmail.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> 1579292517 +0000
committer shvaikalesh@gmail.com <shvaikalesh@gmail.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> 1579292517 +0000

JSON.parse should lookup prototype chains during revival
https://bugs.webkit.org/show_bug.cgi?id=205769

Reviewed by Saam Barati.

JSTests:

* test262/expectations.yaml: Mark 4 test cases as passing.

Source/JavaScriptCore:

This patch makes JSON.parse use [[Get]] instead of [[GetOwnProperty]] during revival,
aligning JSC with the spec (step 1 of https://tc39.es/ecma262/#sec-internalizejsonproperty),
SpiderMonkey, and V8.

User-provided `reviver` can delete properties that are not yet inspected by itself,
making usage [[GetOwnProperty]] non-compliant to the spec.

* runtime/JSONObject.cpp:
(JSC::Walker::walk):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@254757 268f45cc-cd09-0410-ab3c-d52691b4dbfc