Re-land patch for bug 458851 now that latent bug it uncovered (not filed; see hg log) is fixed.

2008-10-28 14:04:29 -07:00
parent e122ea9082
commit 4a4c3d3d3a
9 changed files with 267 additions and 303 deletions
--- a/js/src/jsobj.cpp
+++ b/js/src/jsobj.cpp
@@ -3414,7 +3414,7 @@ js_LookupPropertyWithFlags(JSContext *cx, JSObject *obj, jsid id, uintN flags,
                        format = cs->format;
                        if (JOF_MODE(format) != JOF_NAME)
                            flags |= JSRESOLVE_QUALIFIED;
-                        if ((format & JOF_ASSIGNING) ||
+                        if ((format & (JOF_SET | JOF_FOR)) ||
                            (cx->fp->flags & JSFRAME_ASSIGNING)) {
                            flags |= JSRESOLVE_ASSIGNING;
                        } else {