Bug 13620 - Bogus decompilation of "for (var j = 1 in [])"
Summary: Bogus decompilation of "for (var j = 1 in [])"
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 523.x (Safari 3)
Hardware: Mac OS X 10.4
: P2 Normal
Assignee: Nobody
URL:
Keywords: HasReduction
Depends on:
Blocks: 13638
  Show dependency treegraph
 
Reported: 2007-05-08 00:18 PDT by Jesse Ruderman
Modified: 2007-05-11 10:07 PDT (History)
0 users

See Also:


Attachments
Use vardecllist to print the initializer (5.22 KB, patch)
2007-05-11 08:36 PDT, Kimmo Kinnunen
darin: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Jesse Ruderman 2007-05-08 00:18:16 PDT
> (function() { for (var j = 1 in []) {}  })

function () 
{
  for (var j = 1 =  = 1 in [])
    {
    }
}

So many equals signs!

(Tested with a WebKit nightly I downloaded a few hours ago.  Found with jsfunfuzz.)
Comment 1 Kimmo Kinnunen 2007-05-11 08:36:25 PDT
Created attachment 14491 [details]
Use vardecllist to print the initializer
Comment 2 Darin Adler 2007-05-11 08:53:55 PDT
Comment on attachment 14491 [details]
Use vardecllist to print the initializer

r=me
Comment 3 Mark Rowe (bdash) 2007-05-11 10:07:52 PDT
Landed in r21409.