Finiteness of object properties set

[Brendan Eich]

On Sep 19, 2011, at 4:04 AM, David Bruant wrote:

> Object.getOwnPropertyDescriptor creates a native array and, for each own property, it calls [[DefineOwnProperty]] on this array for an index n (ES5.1 - 15.2.3.4 step 4.b)
> This internal method is special for arrays (ES5.1 - 15.4.5.1). When crossing 2³², ToString(n) is not an array index anymore, so the property is added (as per step 5), but the length property gets stuck to its maximum (2³²).
> Since the property is added, continuing results in an infinite loop, the length property remains at 2³².

Nit-pick: length stops at (2³² - 1). Maximum value of the corresponding index is therefore (2³² - 2).

I wish we hadn't codified this in ES1. Oh well.

/be