114594 2013-04-14 12:02:00 -0700 HEISENBUG ONLY BITES WITHOUT A DEBUGGER 2013-04-23 12:56:37 -0700 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Mac (Intel) OS X 10.8 RESOLVED WORKSFORME P2 Major --- 0 jorgechamorro webkit-unassigned fpizlo ggaren jorgechamorro juanfc oldest_to_newest 875386 0 198007 jorgechamorro 2013-04-14 12:02:00 -0700 Created attachment 198007 .html with a JS script that runs in a loop and demonstrates the bug The function()s works() and fails() ought to produce the same result, but fails() produces incorrect results every now and then. Notes: -THIS IS A PROBLEM OF THE JAVASCRIPT ENGINE: THE SAME FUNCTION REWRITTEN IN A SLIGHTLY DIFFERENT STYLE WORKS FINE. -IT WON'T BITE WHEN THE DEBUGGER IS OPEN -IT BITES ON iOS 6.x TOO (tested on an iPhone 4) -ON PUMA (MOUNTAIN LION) TOO. -PERHAPS IN LION TOO (but I didn't test it) -NOT IN SNOW LEOPARD -SEE THE COMMENTS IN THE ATTACHMENT The attached file "HeisenBugSafari.html" runs both functions in a loop and compares the results, as soon as they don't match it will print the results to document.body. Sometimes opening and closing the debugger window forces it to bite more often. This bug broke my webapp :-( Cheers, -- Jorge. 875396 1 198009 jorgechamorro 2013-04-14 13:45:52 -0700 Created attachment 198009 start for( ; ; ) loop from 0 Looks like it also fails in Snow Leopard (but much less often) 875424 2 198016 jorgechamorro 2013-04-14 17:07:06 -0700 Created attachment 198016 Loops faster, use this one. 875451 3 ap 2013-04-14 22:28:28 -0700 How often are you usually seeing this? I had this test open until ctr reached 3 million, and there wasn't any failure output. Testing with Safari 6.0.3. 875533 4 198041 jorgechamorro 2013-04-15 02:25:21 -0700 Created attachment 198041 This one comes with "instructions" :-) Alexey, try this one and let me know. Tested in Safari Version 6.0.3 (8536.28.10)/OSX 10.8.3 and Snow Leopard 10.6.8/Safari Version 5.1.8 (6534.58.2) 875724 5 198115 juanfc 2013-04-15 05:31:40 -0700 Created attachment 198115 Bug n++ inside an expression in Webkit JS 875725 6 juanfc 2013-04-15 05:32:24 -0700 It seems that the only difference between both functions is the function which gives a wrong answer does a n++ inside an expression, while the one that does it ok, does the n++ outside the expression. It seems that the n++ is the culprit. If you run this code in Chrome or FF, it works well, that is, both functions do the same, as it should. 875753 7 jorgechamorro 2013-04-15 06:35:59 -0700 @JuanFalgueras: Also when fails(s) fails, what happens is that some characters in 'a' are duplicates of the next character, so it would seem that the (n++) were *sometimes* being evaluated as (++n)s, right? -- ( Jorge )(); 875798 8 juanfc 2013-04-15 07:30:22 -0700 (In reply to comment #7) > @JuanFalgueras: > > Also when fails(s) fails, what happens is that some characters in 'a' are duplicates of the next character, so it would seem that the (n++) were *sometimes* being evaluated as (++n)s, right? > > -- > ( Jorge )(); @Jorge what seems more apparent is that the uncomfortable (to compile) integer++ is badly compile in JS and returns the wrong value, not the previous, or does the post-increment wrongly. That would also justify that repetition of values between iterations. Funnily it doesn't happy when the n++ is made out of any expression. I find this bug really intriguing and way dangerous! - jf 879521 9 jorgechamorro 2013-04-22 16:38:12 -0700 Alexey, can you confirm this bug? 879561 10 ggaren 2013-04-22 19:03:09 -0700 I can reproduce this in Safari 6 but not TOT. I believe it has been fixed. Can you re-try with the latest build @ nightly.webkit.org? 879758 11 juanfc 2013-04-23 02:44:17 -0700 (In reply to comment #10) > I can reproduce this in Safari 6 but not TOT. I believe it has been fixed. > > Can you re-try with the latest build @ nightly.webkit.org? I'have tried it with the latest build. No fails. It was(?) a really funny bug. - 879895 12 jorgechamorro 2013-04-23 09:54:39 -0700 Ok, so this bug was fixed a while ago, or so it seems, because I've been testing some more (randomly chosen) nightlies from r148962 further and further back to r146575 2013-03-22 09:58:34 GMT, in a Mac, and it runs fine in every one I tried ! The pity is that in both 6.0.4 and 5.1.9, the ones that came out last week via software update, it still fails. Thank you! 880089 13 ap 2013-04-23 12:56:37 -0700 Marking resolved per the above discussion. 198007 2013-04-14 12:02:00 -0700 2013-04-14 12:02:00 -0700 .html with a JS script that runs in a loop and demonstrates the bug bugSafari.html text/html 1955 jorgechamorro PCFET0NUWVBFIGh0bWw+Cgo8aHRtbCBsYW5nPSJlbiI+CjxoZWFkPgogIDxtZXRhIGh0dHAtZXF1 aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4KICA8 dGl0bGU+SEVJU0VOQlVHPC90aXRsZT4KICA8bWV0YSBuYW1lPSJnZW5lcmF0b3IiIGNvbnRlbnQ9 IlRleHRNYXRlIGh0dHA6Ly9tYWNyb21hdGVzLmNvbS8iPgogIDxtZXRhIG5hbWU9ImF1dGhvciIg Y29udGVudD0iam9yZ2VAam9yZ2VjaGFtb3Jyby5jb20iPgogIDwhLS0gRGF0ZTogMjAxMy0wNC0x NCAtLT4KICA8c2NyaXB0PgogIAogICAgLyoKICAgICAgTk9URTogVEhJUyBCVUcgV09OJ1QgQklU RSBXSEVOL0lGIFRIRSBERUJVR0dFUiBJUyBPUEVOCiAgICAgIAogICAgICBUSElTIFJVTlMgSU4g QSBMT09QOyBUSEUgQlVHIFdJTEwgQklURSBBUyBTT09OIEFTIFlPVSBDTE9TRSBUSEUgREVCVUdH RVIKICAgICAgCiAgICAgIE9OTFkgQklURVMgSU4gTU9CSUxFIFNBRkFSSSBPTiBpT1MgNi54LCBB TkQgREVTS1RPUCBTQUZBUkkgT04gUFVNQSAoTU9VTlRBSU4gTElPTikKICAgICAgCiAgICAgIFBF UkhBUFMgQlVUIEknVkUgTk9UIFRFU1RFRCBJVCwgSU4gTElPTiBUT08uIFdPTidUIEJJVEUgSU4g U05PVyBMRU9QQVJEIChTYWZhcmkgVmVyc2lvbiA1LjEuOCAoNjUzNC41OC4yKSkKICAgICovCiAg CiAgICBmdW5jdGlvbiB3b3JrcyAocykgewogICAgICB2YXIgcG9zOwogICAgICB2YXIgbj0gMDsK ICAgICAgdmFyIHQ7CiAgICAgIHZhciByPSAiIjsKICAgICAgdmFyIG89ICIwMTIzNDU2Nzg5YWJj ZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXpBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWiI7CiAgICAg IHZhciBwPSAiNTY3ODkwMTIzNG5vcHFyc3R1dnd4eXphYmNkZWZnaGlqa2xtTk9QUVJTVFVWV1hZ WkFCQ0RFRkdISUpLTE0iOwogICAgICB3aGlsZSAobiA8IHMubGVuZ3RoKSB7CiAgICAgICAgdD0g c1tuXTsKICAgICAgICBwb3M9IG8uaW5kZXhPZih0KTsKICAgICAgICByKz0gKHBvcyA+PSAwKSA/ IHBbcG9zXSA6IHQ7CiAgICAgICAgbisrOwogICAgICB9CiAgICAgIHJldHVybiByOwogICAgfQoK ICAgIGZ1bmN0aW9uIGZhaWxzIChzKSB7CiAgICAgIHZhciBwb3MsIG4gPSAwLAogICAgICAgIHQs IHIgPSAiIiwKICAgICAgICBvID0gIjAxMjM0NTY3ODlhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5 ekFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaIiwKICAgICAgICBwID0gIjU2Nzg5MDEyMzRub3Bx cnN0dXZ3eHl6YWJjZGVmZ2hpamtsbU5PUFFSU1RVVldYWVpBQkNERUZHSElKS0xNIjsKICAgICAg d2hpbGUgKG4gPCBzLmxlbmd0aCkgewogICAgICAgIHIgKz0gKChwb3MgPSBvLmluZGV4T2YodCA9 IHNbbisrXSkpID49IDApID8gcFtwb3NdIDogdDsKICAgICAgfQogICAgICByZXR1cm4gcjsKICAg IH0KCiAgICB3aW5kb3cub25sb2FkPSBmdW5jdGlvbiAoKSB7CiAgICAgIHZhciBzPSAieydieCc6 Z2VociwgJ3BicSc6WzYsNyw4LDldfSI7CiAgICAgIHZhciBjdHI9IDA7CiAgICAgIAogICAgICAo ZnVuY3Rpb24gbG9vcCAoKSB7CiAgICAgICAgZm9yICh2YXIgaT0xIDsgaTwxMDAwIDsgaSsrKSB7 CiAgICAgICAgICBjdHIrPSAxOwogICAgICAgICAgdmFyIGE9IGZhaWxzKHMpOwogICAgICAgICAg dmFyIGI9IHdvcmtzKHMpOwogICAgICAgICAgaWYgKGEgIT09IGIpIHsKICAgICAgICAgICAgdmFy IG1zZz0gImN0cjogIitjdHIrIlxuYTogIithKyJcbmI6ICIrYisiXG4iOwogICAgICAgICAgICBk b2N1bWVudC5ib2R5LmlubmVySFRNTD0gIjxwcmU+Iittc2crIjwvcHJlPiI7CiAgICAgICAgICB9 CiAgICAgICAgfQogICAgICAgIGNvbnNvbGUubG9nKGN0cik7CiAgICAgICAgc2V0VGltZW91dChs b29wLCAzMzMpOwogICAgICB9KSgpOwogICAgfTsKICA8L3NjcmlwdD4KPC9oZWFkPgo8Ym9keT4K CjwvYm9keT4KPC9odG1sPgo= 198009 2013-04-14 13:45:52 -0700 2013-04-14 13:45:52 -0700 start for( ; ; ) loop from 0 bugSafari.html text/html 1955 jorgechamorro PCFET0NUWVBFIGh0bWw+Cgo8aHRtbCBsYW5nPSJlbiI+CjxoZWFkPgogIDxtZXRhIGh0dHAtZXF1 aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4KICA8 dGl0bGU+SEVJU0VOQlVHPC90aXRsZT4KICA8bWV0YSBuYW1lPSJnZW5lcmF0b3IiIGNvbnRlbnQ9 IlRleHRNYXRlIGh0dHA6Ly9tYWNyb21hdGVzLmNvbS8iPgogIDxtZXRhIG5hbWU9ImF1dGhvciIg Y29udGVudD0iam9yZ2VAam9yZ2VjaGFtb3Jyby5jb20iPgogIDwhLS0gRGF0ZTogMjAxMy0wNC0x NCAtLT4KICA8c2NyaXB0PgogIAogICAgLyoKICAgICAgTk9URTogVEhJUyBCVUcgV09OJ1QgQklU RSBXSEVOL0lGIFRIRSBERUJVR0dFUiBJUyBPUEVOCiAgICAgIAogICAgICBUSElTIFJVTlMgSU4g QSBMT09QOyBUSEUgQlVHIFdJTEwgQklURSBBUyBTT09OIEFTIFlPVSBDTE9TRSBUSEUgREVCVUdH RVIKICAgICAgCiAgICAgIE9OTFkgQklURVMgSU4gTU9CSUxFIFNBRkFSSSBPTiBpT1MgNi54LCBB TkQgREVTS1RPUCBTQUZBUkkgT04gUFVNQSAoTU9VTlRBSU4gTElPTikKICAgICAgCiAgICAgIFBF UkhBUFMgQlVUIEknVkUgTk9UIFRFU1RFRCBJVCwgSU4gTElPTiBUT08uIFdPTidUIEJJVEUgSU4g U05PVyBMRU9QQVJEIChTYWZhcmkgVmVyc2lvbiA1LjEuOCAoNjUzNC41OC4yKSkKICAgICovCiAg CiAgICBmdW5jdGlvbiB3b3JrcyAocykgewogICAgICB2YXIgcG9zOwogICAgICB2YXIgbj0gMDsK ICAgICAgdmFyIHQ7CiAgICAgIHZhciByPSAiIjsKICAgICAgdmFyIG89ICIwMTIzNDU2Nzg5YWJj ZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXpBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWiI7CiAgICAg IHZhciBwPSAiNTY3ODkwMTIzNG5vcHFyc3R1dnd4eXphYmNkZWZnaGlqa2xtTk9QUVJTVFVWV1hZ WkFCQ0RFRkdISUpLTE0iOwogICAgICB3aGlsZSAobiA8IHMubGVuZ3RoKSB7CiAgICAgICAgdD0g c1tuXTsKICAgICAgICBwb3M9IG8uaW5kZXhPZih0KTsKICAgICAgICByKz0gKHBvcyA+PSAwKSA/ IHBbcG9zXSA6IHQ7CiAgICAgICAgbisrOwogICAgICB9CiAgICAgIHJldHVybiByOwogICAgfQoK ICAgIGZ1bmN0aW9uIGZhaWxzIChzKSB7CiAgICAgIHZhciBwb3MsIG4gPSAwLAogICAgICAgIHQs IHIgPSAiIiwKICAgICAgICBvID0gIjAxMjM0NTY3ODlhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5 ekFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaIiwKICAgICAgICBwID0gIjU2Nzg5MDEyMzRub3Bx cnN0dXZ3eHl6YWJjZGVmZ2hpamtsbU5PUFFSU1RVVldYWVpBQkNERUZHSElKS0xNIjsKICAgICAg d2hpbGUgKG4gPCBzLmxlbmd0aCkgewogICAgICAgIHIgKz0gKChwb3MgPSBvLmluZGV4T2YodCA9 IHNbbisrXSkpID49IDApID8gcFtwb3NdIDogdDsKICAgICAgfQogICAgICByZXR1cm4gcjsKICAg IH0KCiAgICB3aW5kb3cub25sb2FkPSBmdW5jdGlvbiAoKSB7CiAgICAgIHZhciBzPSAieydieCc6 Z2VociwgJ3BicSc6WzYsNyw4LDldfSI7CiAgICAgIHZhciBjdHI9IDA7CiAgICAgIAogICAgICAo ZnVuY3Rpb24gbG9vcCAoKSB7CiAgICAgICAgZm9yICh2YXIgaT0wIDsgaTwxMDAwIDsgaSsrKSB7 CiAgICAgICAgICBjdHIrPSAxOwogICAgICAgICAgdmFyIGE9IGZhaWxzKHMpOwogICAgICAgICAg dmFyIGI9IHdvcmtzKHMpOwogICAgICAgICAgaWYgKGEgIT09IGIpIHsKICAgICAgICAgICAgdmFy IG1zZz0gImN0cjogIitjdHIrIlxuYTogIithKyJcbmI6ICIrYisiXG4iOwogICAgICAgICAgICBk b2N1bWVudC5ib2R5LmlubmVySFRNTD0gIjxwcmU+Iittc2crIjwvcHJlPiI7CiAgICAgICAgICB9 CiAgICAgICAgfQogICAgICAgIGNvbnNvbGUubG9nKGN0cik7CiAgICAgICAgc2V0VGltZW91dChs b29wLCAzMzMpOwogICAgICB9KSgpOwogICAgfTsKICA8L3NjcmlwdD4KPC9oZWFkPgo8Ym9keT4K CjwvYm9keT4KPC9odG1sPgo= 198016 2013-04-14 17:07:06 -0700 2013-04-14 17:07:06 -0700 Loops faster, use this one. HeisenBugSafari.html text/html 1953 jorgechamorro PCFET0NUWVBFIGh0bWw+Cgo8aHRtbCBsYW5nPSJlbiI+CjxoZWFkPgogIDxtZXRhIGh0dHAtZXF1 aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4KICA8 dGl0bGU+SEVJU0VOQlVHPC90aXRsZT4KICA8bWV0YSBuYW1lPSJnZW5lcmF0b3IiIGNvbnRlbnQ9 IlRleHRNYXRlIGh0dHA6Ly9tYWNyb21hdGVzLmNvbS8iPgogIDxtZXRhIG5hbWU9ImF1dGhvciIg Y29udGVudD0iam9yZ2VAam9yZ2VjaGFtb3Jyby5jb20iPgogIDwhLS0gRGF0ZTogMjAxMy0wNC0x NCAtLT4KICA8c2NyaXB0PgogIAogICAgLyoKICAgICAgTk9URTogVEhJUyBCVUcgV09OJ1QgQklU RSBXSEVOL0lGIFRIRSBERUJVR0dFUiBJUyBPUEVOCiAgICAgIAogICAgICBUSElTIFJVTlMgSU4g QSBMT09QOyBUSEUgQlVHIFdJTEwgQklURSBBUyBTT09OIEFTIFlPVSBDTE9TRSBUSEUgREVCVUdH RVIKICAgICAgCiAgICAgIE9OTFkgQklURVMgSU4gTU9CSUxFIFNBRkFSSSBPTiBpT1MgNi54LCBB TkQgREVTS1RPUCBTQUZBUkkgT04gUFVNQSAoTU9VTlRBSU4gTElPTikKICAgICAgCiAgICAgIFBF UkhBUFMgQlVUIEknVkUgTk9UIFRFU1RFRCBJVCwgSU4gTElPTiBUT08uIFdPTidUIEJJVEUgSU4g U05PVyBMRU9QQVJEIChTYWZhcmkgVmVyc2lvbiA1LjEuOCAoNjUzNC41OC4yKSkKICAgICovCiAg CiAgICBmdW5jdGlvbiB3b3JrcyAocykgewogICAgICB2YXIgcG9zOwogICAgICB2YXIgbj0gMDsK ICAgICAgdmFyIHQ7CiAgICAgIHZhciByPSAiIjsKICAgICAgdmFyIG89ICIwMTIzNDU2Nzg5YWJj ZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXpBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWiI7CiAgICAg IHZhciBwPSAiNTY3ODkwMTIzNG5vcHFyc3R1dnd4eXphYmNkZWZnaGlqa2xtTk9QUVJTVFVWV1hZ WkFCQ0RFRkdISUpLTE0iOwogICAgICB3aGlsZSAobiA8IHMubGVuZ3RoKSB7CiAgICAgICAgdD0g c1tuXTsKICAgICAgICBwb3M9IG8uaW5kZXhPZih0KTsKICAgICAgICByKz0gKHBvcyA+PSAwKSA/ IHBbcG9zXSA6IHQ7CiAgICAgICAgbisrOwogICAgICB9CiAgICAgIHJldHVybiByOwogICAgfQoK ICAgIGZ1bmN0aW9uIGZhaWxzIChzKSB7CiAgICAgIHZhciBwb3MsIG4gPSAwLAogICAgICAgIHQs IHIgPSAiIiwKICAgICAgICBvID0gIjAxMjM0NTY3ODlhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5 ekFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaIiwKICAgICAgICBwID0gIjU2Nzg5MDEyMzRub3Bx cnN0dXZ3eHl6YWJjZGVmZ2hpamtsbU5PUFFSU1RVVldYWVpBQkNERUZHSElKS0xNIjsKICAgICAg d2hpbGUgKG4gPCBzLmxlbmd0aCkgewogICAgICAgIHIgKz0gKChwb3MgPSBvLmluZGV4T2YodCA9 IHNbbisrXSkpID49IDApID8gcFtwb3NdIDogdDsKICAgICAgfQogICAgICByZXR1cm4gcjsKICAg IH0KCiAgICB3aW5kb3cub25sb2FkPSBmdW5jdGlvbiAoKSB7CiAgICAgIHZhciBzPSAieydieCc6 Z2VociwgJ3BicSc6WzYsNyw4LDldfSI7CiAgICAgIHZhciBjdHI9IDA7CiAgICAgIAogICAgICAo ZnVuY3Rpb24gbG9vcCAoKSB7CiAgICAgICAgZm9yICh2YXIgaT0wIDsgaTwxMDAwIDsgaSsrKSB7 CiAgICAgICAgICBjdHIrPSAxOwogICAgICAgICAgdmFyIGE9IGZhaWxzKHMpOwogICAgICAgICAg dmFyIGI9IHdvcmtzKHMpOwogICAgICAgICAgaWYgKGEgIT09IGIpIHsKICAgICAgICAgICAgdmFy IG1zZz0gImN0cjogIitjdHIrIlxuYTogIithKyJcbmI6ICIrYisiXG4iOwogICAgICAgICAgICBk b2N1bWVudC5ib2R5LmlubmVySFRNTD0gIjxwcmU+Iittc2crIjwvcHJlPiI7CiAgICAgICAgICB9 CiAgICAgICAgfQogICAgICAgIGNvbnNvbGUubG9nKGN0cik7CiAgICAgICAgc2V0VGltZW91dChs b29wLCAwKTsKICAgICAgfSkoKTsKICAgIH07CiAgPC9zY3JpcHQ+CjwvaGVhZD4KPGJvZHk+Cgo8 L2JvZHk+CjwvaHRtbD4K 198041 2013-04-15 02:25:21 -0700 2013-04-15 02:25:21 -0700 This one comes with "instructions" :-) HeisenBugSafari.html text/html 2602 jorgechamorro PCFET0NUWVBFIGh0bWw+Cgo8aHRtbCBsYW5nPSJlbiI+CjxoZWFkPgogIDxtZXRhIGh0dHAtZXF1 aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4KICA8 dGl0bGU+SEVJU0VOQlVHPC90aXRsZT4KICA8bWV0YSBuYW1lPSJnZW5lcmF0b3IiIGNvbnRlbnQ9 IlRleHRNYXRlIGh0dHA6Ly9tYWNyb21hdGVzLmNvbS8iPgogIDxtZXRhIG5hbWU9ImF1dGhvciIg Y29udGVudD0iam9yZ2VAam9yZ2VjaGFtb3Jyby5jb20iPgogIDwhLS0gRGF0ZTogMjAxMy0wNC0x NCAtLT4KICA8c2NyaXB0PgoKICAgIC8qCiAgICAgIE5PVEU6IFRISVMgQlVHIFdPTidUIEJJVEUg V0hFTi9JRiBUSEUgREVCVUdHRVIgSVMgT1BFTgoKICAgICAgVEhJUyBSVU5TIElOIEEgTE9PUDsg VEhFIEJVRyBXSUxMIEJJVEUgQVMgU09PTiBBUyBZT1UgQ0xPU0UgVEhFIERFQlVHR0VSCgogICAg ICBPTkxZIEJJVEVTIElOIE1PQklMRSBTQUZBUkkgT04gaU9TIDYueCwgQU5EIERFU0tUT1AgU0FG QVJJIE9OIFBVTUEgKE1PVU5UQUlOIExJT04pCgogICAgICBQRVJIQVBTIEJVVCBJJ1ZFIE5PVCBU RVNURUQgSVQsIElOIExJT04gVE9PLiBXT04nVCBCSVRFIElOIFNOT1cgTEVPUEFSRCAoU2FmYXJp IFZlcnNpb24gNS4xLjggKDY1MzQuNTguMikpCiAgICAqLwoKICAgIGZ1bmN0aW9uIHdvcmtzIChz KSB7CiAgICAgIHZhciBwb3M7CiAgICAgIHZhciBuPSAwOwogICAgICB2YXIgdDsKICAgICAgdmFy IHI9ICIiOwogICAgICB2YXIgbz0gIjAxMjM0NTY3ODlhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5 ekFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaIjsKICAgICAgdmFyIHA9ICI1Njc4OTAxMjM0bm9w cXJzdHV2d3h5emFiY2RlZmdoaWprbG1OT1BRUlNUVVZXWFlaQUJDREVGR0hJSktMTSI7CiAgICAg IHdoaWxlIChuIDwgcy5sZW5ndGgpIHsKICAgICAgICB0PSBzW25dOwogICAgICAgIHBvcz0gby5p bmRleE9mKHQpOwogICAgICAgIHIrPSAocG9zID49IDApID8gcFtwb3NdIDogdDsKICAgICAgICBu Kys7CiAgICAgIH0KICAgICAgcmV0dXJuIHI7CiAgICB9CgogICAgZnVuY3Rpb24gZmFpbHMgKHMp IHsKICAgICAgdmFyIHBvcywgbiA9IDAsCiAgICAgICAgdCwgciA9ICIiLAogICAgICAgIG8gPSAi MDEyMzQ1Njc4OWFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6QUJDREVGR0hJSktMTU5PUFFSU1RV VldYWVoiLAogICAgICAgIHAgPSAiNTY3ODkwMTIzNG5vcHFyc3R1dnd4eXphYmNkZWZnaGlqa2xt Tk9QUVJTVFVWV1hZWkFCQ0RFRkdISUpLTE0iOwogICAgICB3aGlsZSAobiA8IHMubGVuZ3RoKSB7 CiAgICAgICAgciArPSAoKHBvcyA9IG8uaW5kZXhPZih0ID0gc1tuKytdKSkgPj0gMCkgPyBwW3Bv c10gOiB0OwogICAgICB9CiAgICAgIHJldHVybiByOwogICAgfQoKICAgIHdpbmRvdy5vbmxvYWQ9 IGZ1bmN0aW9uICgpIHsKICAgICAgdmFyIGN0cnM9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJj dHJzIik7CiAgICAgIHZhciByZXN1bHRzPSBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgicmVzdWx0 cyIpOwogICAgICB2YXIgZXJyb3JNc2c9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJlcnJvck1z ZyIpOwogICAgICAKICAgICAgdmFyIHM9ICJ7J2J4JzpnZWhyLCAncGJxJzpbNiw3LDgsOV19IjsK ICAgICAgdmFyIGZhaWxzQ3RyPSAwOwogICAgICB2YXIgbG9vcHNDdHI9IDA7CgogICAgICAoZnVu Y3Rpb24gbG9vcCAoKSB7CiAgICAgICAgdmFyIG1vcmU9IGxvb3BzQ3RyKzEwMDA7CiAgICAgICAg ZG8gewogICAgICAgICAgbG9vcHNDdHIrPSAxOwogICAgICAgICAgdmFyIGE9IGZhaWxzKHMpOwog ICAgICAgICAgdmFyIGI9IHdvcmtzKHMpOwogICAgICAgICAgaWYgKGEgIT09IGIpIHsKICAgICAg ICAgICAgZmFpbHNDdHIrPSAxOwogICAgICAgICAgICBpZiAoZmFpbHNDdHIgPT09IDEpIHsKICAg ICAgICAgICAgICBlcnJvck1zZy5pbm5lckhUTUw9ICJFcnJvcjogYSAhPT0gYiwgbG9vayBjYXJl ZnVsbHk6IjsKICAgICAgICAgICAgfQogICAgICAgICAgICBjdHJzLmlubmVySFRNTD0gImZhaWxz L2xvb3BzOiAiK2ZhaWxzQ3RyKyIvIitsb29wc0N0cjsKICAgICAgICAgICAgcmVzdWx0cy5pbm5l ckhUTUw9ICJhOiAiK2ErIlxuYjogIitiOwogICAgICAgICAgfQogICAgICAgIH0gd2hpbGUgKGxv b3BzQ3RyIDwgbW9yZSk7CiAgICAgICAgCiAgICAgICAgY3Rycy5pbm5lckhUTUw9ICJmYWlscy9s b29wczogIitmYWlsc0N0cisiLyIrbG9vcHNDdHI7CiAgICAgICAgc2V0VGltZW91dChsb29wLCAw KTsKICAgICAgfSkoKTsKICAgIH07CiAgPC9zY3JpcHQ+CjwvaGVhZD4KPGJvZHk+CiAgPGgyPklm ICdmYWlscycgaXMgMCwgb3BlbiB0aGUgZGVidWdnZXIgKGNvbW1hbmQtb3B0aW9uLUkpIGFuZCB0 aGVuICpjbG9zZSogaXQgYWdhaW4uPC9oMj4KICA8aDI+Tm90ZTogV2hlbiB0aGUgZGVidWdnZXIg aXMgb3BlbiB0aGUgYnVnIHdvbid0IGJpdGUgc28gJ2ZhaWxzJyB3b24ndCBhZHZhbmNlLjwvaDI+ CiAgPHByZSBpZD0iY3RycyI+PC9wcmU+CiAgPGgyIGlkPSJlcnJvck1zZyI+PC9oMj4KICA8cHJl IGlkPSJyZXN1bHRzIj48L3ByZT4KPC9ib2R5Pgo8L2h0bWw+Cg== 198115 2013-04-15 05:31:40 -0700 2013-04-15 05:31:40 -0700 Bug n++ inside an expression in Webkit JS HeisenBugSafari.html text/html 2727 juanfc PCFET0NUWVBFIGh0bWw+Cgo8aHRtbCBsYW5nPSJlbiI+CjxoZWFkPgogIDxtZXRhIGh0dHAtZXF1 aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4KICA8 dGl0bGU+SEVJU0VOQlVHPC90aXRsZT4KICA8bWV0YSBuYW1lPSJnZW5lcmF0b3IiIGNvbnRlbnQ9 IlRleHRNYXRlIGh0dHA6Ly9tYWNyb21hdGVzLmNvbS8iPgogIDxtZXRhIG5hbWU9ImF1dGhvciIg Y29udGVudD0iam9yZ2VAam9yZ2VjaGFtb3Jyby5jb20iPgogIDwhLS0gRGF0ZTogMjAxMy0wNC0x NCAtLT4KICA8c2NyaXB0PgoKICAgIC8qCiAgICAgIE5PVEU6IFRISVMgQlVHIFdPTidUIEJJVEUg V0hFTi9JRiBUSEUgREVCVUdHRVIgSVMgT1BFTgoKICAgICAgVEhJUyBSVU5TIElOIEEgTE9PUDsg VEhFIEJVRyBXSUxMIEJJVEUgQVMgU09PTiBBUyBZT1UgQ0xPU0UgVEhFIERFQlVHR0VSCgogICAg ICBPTkxZIEJJVEVTIElOIE1PQklMRSBTQUZBUkkgT04gaU9TIDYueCwgQU5EIERFU0tUT1AgU0FG QVJJIE9OIFBVTUEgKE1PVU5UQUlOIExJT04pCgogICAgICBQRVJIQVBTIEJVVCBJJ1ZFIE5PVCBU RVNURUQgSVQsIElOIExJT04gVE9PLgogICAgICAKICAgICAgQklURVMgSU4gU05PVyBMRU9QQVJE IChTYWZhcmkgVmVyc2lvbiA1LjEuOCAoNjUzNC41OC4yKSkgVE9PLgogICAgKi8KCiAgICBmdW5j dGlvbiB3b3JrcyAocykgewogICAgICB2YXIgcG9zLCBuID0gMCwKICAgICAgICB0LCByID0gIiIs CiAgICAgICAgbyA9ICIwMTIzNDU2Nzg5YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXpBQkNERUZH SElKS0xNTk9QUVJTVFVWV1hZWiIsCiAgICAgICAgcCA9ICI1Njc4OTAxMjM0bm9wcXJzdHV2d3h5 emFiY2RlZmdoaWprbG1OT1BRUlNUVVZXWFlaQUJDREVGR0hJSktMTSI7CiAgICAgIHdoaWxlIChu IDwgcy5sZW5ndGgpIHsKICAgICAgICByICs9ICgocG9zID0gby5pbmRleE9mKHQgPSBzW25dKSkg Pj0gMCkgPyBwW3Bvc10gOiB0OwogICAgICAgIG4rKzsKICAgICAgfQogICAgICByZXR1cm4gcjsK ICAgIH0KCiAgICBmdW5jdGlvbiBmYWlscyAocykgewogICAgICB2YXIgcG9zLCBuID0gMCwKICAg ICAgICB0LCByID0gIiIsCiAgICAgICAgbyA9ICIwMTIzNDU2Nzg5YWJjZGVmZ2hpamtsbW5vcHFy c3R1dnd4eXpBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWiIsCiAgICAgICAgcCA9ICI1Njc4OTAx MjM0bm9wcXJzdHV2d3h5emFiY2RlZmdoaWprbG1OT1BRUlNUVVZXWFlaQUJDREVGR0hJSktMTSI7 CiAgICAgIHdoaWxlIChuIDwgcy5sZW5ndGgpIHsKICAgICAgICByICs9ICgocG9zID0gby5pbmRl eE9mKHQgPSBzW24rK10pKSA+PSAwKSA/IHBbcG9zXSA6IHQ7CiAgICAgIH0KICAgICAgcmV0dXJu IHI7CiAgICB9CgogICAgd2luZG93Lm9ubG9hZD0gZnVuY3Rpb24gKCkgewogICAgICB2YXIgY3Ry cz0gZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoImN0cnMiKTsKICAgICAgdmFyIHJlc3VsdHM9IGRv Y3VtZW50LmdldEVsZW1lbnRCeUlkKCJyZXN1bHRzIik7CiAgICAgIHZhciBlcnJvck1zZz0gZG9j dW1lbnQuZ2V0RWxlbWVudEJ5SWQoImVycm9yTXNnIik7CiAgICAgIAogICAgICB2YXIgcz0gInsn YngnOmdlaHIsICdwYnEnOls2LDcsOCw5XX0iOwogICAgICB2YXIgc19vaz0gInsnb2snOnRydWUs ICdjb2QnOlsxLDIsMyw0XX0iOwogICAgICB2YXIgZmFpbHNDdHI9IDA7CiAgICAgIHZhciBsb29w c0N0cj0gMDsKCiAgICAgIChmdW5jdGlvbiBsb29wICgpIHsKICAgICAgICB2YXIgbW9yZT0gbG9v cHNDdHIrMTAwMDsKICAgICAgICBkbyB7CiAgICAgICAgICBsb29wc0N0cis9IDE7CiAgICAgICAg ICAKICAgICAgICAgIHZhciBhPSBmYWlscyhzKTsKICAgICAgICAgIHZhciBiPSB3b3JrcyhzKTsK ICAgICAgICAgIAogICAgICAgICAgaWYgKGIgIT09IHNfb2spIHsKICAgICAgICAgICAgYWxlcnQo IndvcmtzKCkgRkFJTEVEIFRPTyEiKTsKICAgICAgICAgIH0KICAgICAgICAgIAogICAgICAgICAg aWYgKGEgIT09IGIpIHsKICAgICAgICAgICAgaWYgKChmYWlsc0N0cis9IDEpID09PSAxKSB7CiAg ICAgICAgICAgICAgZXJyb3JNc2cuaW5uZXJIVE1MPSAiRXJyb3I6IGEgIT09IGIsIGxvb2sgY2Fy ZWZ1bGx5OiI7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgY3Rycy5pbm5lckhUTUw9ICJmYWls cy9sb29wczogIitmYWlsc0N0cisiLyIrbG9vcHNDdHI7CiAgICAgICAgICAgIHJlc3VsdHMuaW5u ZXJIVE1MPSAiYTogIithKyJcbmI6ICIrYjsKICAgICAgICAgIH0KICAgICAgICAgIAogICAgICAg IH0gd2hpbGUgKGxvb3BzQ3RyIDwgbW9yZSk7CiAgICAgICAgCiAgICAgICAgY3Rycy5pbm5lckhU TUw9ICJmYWlscy9sb29wczogIitmYWlsc0N0cisiLyIrbG9vcHNDdHI7CiAgICAgICAgc2V0VGlt ZW91dChsb29wLCAwKTsKICAgICAgfSkoKTsKICAgIH07CiAgPC9zY3JpcHQ+CjwvaGVhZD4KPGJv ZHk+CiAgPGgyPklmICdmYWlscycgaXMgMCwgb3BlbiB0aGUgZGVidWdnZXIgKGNvbW1hbmQtb3B0 aW9uLUkpIGFuZCB0aGVuICpjbG9zZSogaXQgYWdhaW4uPC9oMj4KICA8aDI+Tm90ZTogV2hlbiB0 aGUgZGVidWdnZXIgaXMgb3BlbiB0aGUgYnVnIHdvbid0IGJpdGUgc28gJ2ZhaWxzJyB3b24ndCBh ZHZhbmNlLjwvaDI+CiAgPHByZSBpZD0iY3RycyI+PC9wcmU+CiAgPGgyIGlkPSJlcnJvck1zZyI+ PC9oMj4KICA8cHJlIGlkPSJyZXN1bHRzIj48L3ByZT4KPC9ib2R5Pgo8L2h0bWw+