Fix issue 965.

test/mjsunit/object-define-property.js

 // Copyright 2010 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 848 matching lines @@
 assertFalse(desc.configurable);
 
 // Define non existing property - all attributes should default to false.
 Object.defineProperty(arr, '15', descElement);
 desc = Object.getOwnPropertyDescriptor(arr, '15');
 assertEquals(desc.value, 'foobar');
 assertFalse(desc.writable);
 assertFalse(desc.enumerable);
 assertFalse(desc.configurable);
 
+// See issue 968: http://code.google.com/p/v8/issues/detail?id=968
+var o = { x : 42 };
+Object.defineProperty(o, "x", { writable: false });
+assertEquals(42, o.x);
 
+o = { x : 42 };
+Object.defineProperty(o, "x", {});
+assertEquals(42, o.x);
+o.x = 37;
+// Writability is preserved.
+assertEquals(37, o.x);
+

[Rico, 2010/12/10 10:42:35]

Maybe add an additional test that makes sure that an accessor is actually
overwritten correctly (step 9.c) if we only set the writable flag

[Lasse Reichstein, 2010/12/10 11:21:45]

More tests added, for both non-existing property, and for inherited value and
accessor properties,