From: Fabrice Bellard <fabrice@bellard.org>
Date: Mon, 26 Oct 2026 11:17:03 +0000 (+0100)
Subject: Fix Proxy ownKeys trap accepting a primitive result (saghul)
X-Git-Url: https://git.kaiwu.me/?a=commitdiff_plain;h=11349128d8ef8212e0877418d0ef654fb735d7a6;p=quickjs.git

Fix Proxy ownKeys trap accepting a primitive result (saghul)
---

diff --git a/quickjs.c b/quickjs.c
index 13d2d75..c4ba915 100644
--- a/quickjs.c
+++ b/quickjs.c
@@ -53672,6 +53672,12 @@ static int js_proxy_get_own_property_names(JSContext *ctx,
     prop_array = JS_CallFree(ctx, method, s->handler, 1, (JSValueConst *)&s->target);
     if (JS_IsException(prop_array))
         return -1;
+    /* CreateListFromArrayLike() requires an object */
+    if (!JS_IsObject(prop_array)) {
+        JS_FreeValue(ctx, prop_array);
+        JS_ThrowTypeError(ctx, "proxy: ownKeys must return an object");
+        return -1;
+    }
     tab = NULL;
     len = 0;
     tab2 = NULL;