New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 753513 link

Starred by 1 user
Status: Duplicate
Merged: issue 752722
Owner:
tebbi@chromium.org
Closed: Aug 2017
Cc:
hablich@chromium.org
█ brajkumar@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 1
Type: Bug-Regression



Sign in to add a comment

Incorrect shift when array has empty first slot followed numbers

Reported by da...@stuckmann.us, Aug 8 2017 
UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Steps to reproduce the problem:
1.  create array (ie. a=[])
2. Load elements 1 through n with numbers (not strings), leave first slot empty.
3. call a.shift()

What is the expected behavior?
The first slot is removed and the other elements are shifted one

What went wrong?
The last slot was removed.

Did this work before? Yes Chrome release, 59 and below

Chrome version: 60.0.3112.90  Channel: stable
OS Version: OS X 10.12.4
Flash Version: 

here is a jsfiddle to demonstrate the issue: https://jsfiddle.net/dstuckmann/hemk0360/10/

Comment 1 by brajkumar@chromium.org, Aug 9 2017

Cc: hablich@chromium.org brajkumar@chromium.org
Components: -Blink Blink>JavaScript
Labels: -Pri-2 Needs-Triage-M60 ReleaseBlock-Stable M-60 OS-Linux OS-Windows Pri-1
Owner: tebbi@chromium.org
Status: Assigned (was: Unconfirmed)
Able to reproduce this issue on Windows-10, Ubuntu 14.04 and Mac OS 10.12.6 using chrome latest stable #60.0.3112.90 by following steps mentioned in the original comment.

Bisect Information:
---------------------
Good build: 60.0.3102.0
Bad build:  60.0.3104.0

You are probably looking for a change made after 472746 (known good), but no later than 472747 (first known bad).

Change Log:
-----------
https://chromium.googlesource.com/chromium/src/+log/b805cc902d6f113dbe4a1d8dcd6497e1884b0b67..43102f798945c3fb8179e9841046d4015ebe9127

From the above CL suspecting the below change
https://chromium.googlesource.com/v8/v8/+/1be27497bab70345837bf007ccc6f3349d76308f

tebbi@ - Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Note: This is a regression issue broken in M-60, hence adding RB-Stable for M-60. Please feel free to edit if this is not the case.

Thanks!

Comment 2 by tebbi@chromium.org, Aug 9 2017

Mergedinto: 752722
Status: Duplicate (was: Assigned)
►

Sign in to add a comment