ITStudio_OUC/OxideJS-New
0
1
Fork 0
mirror of https://github.com/pjh456/OxideJS.git synced 2026-10-25 19:21:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: 数组迭代器 next 校验 own 内部槽

Browse Source
This commit is contained in:
彭俊皓
2026-09-25 15:54:03 +00:00
parent 613013224f
commit 21b99a98c9
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/oxide_builtins/src/array/sort_iterator.rs
+5
View File
@@ -189,6 +189,11 @@ pub fn array_iterator_next<H: VmHost>(vm: &mut H, args: &[u8]) -> NativeResult {
let target_si = vm.kernel_core().perm_interner().intern(ARRAY_ITER_TARGET_PROP).0; let target_si = vm.kernel_core().perm_interner().intern(ARRAY_ITER_TARGET_PROP).0;
let index_si = vm.kernel_core().perm_interner().intern(ARRAY_ITER_INDEX_PROP).0; let index_si = vm.kernel_core().perm_interner().intern(ARRAY_ITER_INDEX_PROP).0;
let kind_si = vm.kernel_core().perm_interner().intern(ARRAY_ITER_KIND_PROP).0; let kind_si = vm.kernel_core().perm_interner().intern(ARRAY_ITER_KIND_PROP).0;
// 内部槽守卫：无 own __target__ 槽的对象（如 Object.create 产物）不是数组
// 迭代器，不得沿原型链读底层迭代器的槽；三槽同批写入，查一槽即全查。
if vm.get_own_property_slot(&*iter, target_si).is_none() {
return NativeResult::Err(array_type_error(vm, "Array Iterator next called on non-iterator"));
}
let target = match vm.ordinary_get(iter, target_si, this_val) { let target = match vm.ordinary_get(iter, target_si, this_val) {
Ok(v) if v.is_undefined() => { Ok(v) if v.is_undefined() => {
return NativeResult::Ok(crate::iterator::make_iter_result(vm, JsValue::undefined(), true)); return NativeResult::Ok(crate::iterator::make_iter_result(vm, JsValue::undefined(), true));