<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>124886</bug_id>
          
          <creation_ts>2013-11-26 04:14:53 -0800</creation_ts>
          <short_desc>Crash in JSC::ASTBuilder::Expression JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseUnaryExpression&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;)</short_desc>
          <delta_ts>2013-11-26 12:22:25 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>116980</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Renata Hodovan">rhodovan.u-szeged</reporter>
          <assigned_to name="Oliver Hunt">oliver</assigned_to>
          <cc>kling</cc>
    
    <cc>mark.lam</cc>
    
    <cc>noam</cc>
    
    <cc>oliver</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>954243</commentid>
    <comment_count>0</comment_count>
      <attachid>217872</attachid>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2013-11-26 04:14:53 -0800</bug_when>
    <thetext>Created attachment 217872
Test case

The following short expression makes release WebKit crash and causes an assertion failure in the debug version:

1 % +;

====================================

Release backtrace:

1   0x684a5d
2   0x6875f4
3   0x689030
4   0x68b036
5   0x68f43f
6   0x6e7655
7   0x6eaaf0
8   0x452a37
9   0x43ed98
10  0x5bddc0
11  0x43609e
12  0x40c599 jscmain(int, char**)
13  0x40651b main
14  0x7ffff5aef76d __libc_start_main
15  0x406591

Program received signal SIGSEGV, Segmentation fault.
0x0000000000821e49 in WTFCrash ()
(gdb) bt
#0  0x0000000000821e49 in WTFCrash ()
#1  0x0000000000684a5d in JSC::ASTBuilder::Expression JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseAssignmentExpression&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;)
    ()
#2  0x00000000006875f4 in JSC::ASTBuilder::Expression JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseExpression&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;) ()
#3  0x0000000000689030 in JSC::ASTBuilder::Statement JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseExpressionStatement&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;) ()
#4  0x000000000068b036 in JSC::ASTBuilder::Statement JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseStatement&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;, JSC::Identifier const*&amp;, unsigned int*) ()
#5  0x000000000068f43f in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseInner() ()
#6  0x00000000006e7655 in WTF::PassRefPtr&lt;JSC::ProgramNode&gt; JSC::parse&lt;JSC::ProgramNode&gt;(JSC::VM*, JSC::SourceCode const&amp;, JSC::FunctionParameters*, JSC::Identifier const&amp;, JSC::JSParserStrictness, JSC::JSParserMode, JSC::ParserError&amp;, JSC::JSTextPosition*) [clone .constprop.127] ()
#7  0x00000000006eaaf0 in JSC::UnlinkedProgramCodeBlock* JSC::CodeCache::getGlobalCodeBlock&lt;JSC::UnlinkedProgramCodeBlock, JSC::ProgramExecutable&gt;(JSC::VM&amp;, JSC::ProgramExecutable*, JSC::SourceCode const&amp;, JSC::JSParserStrictness, JSC::DebuggerMode, JSC::ProfilerMode, JSC::ParserError&amp;) ()
#8  0x0000000000452a37 in JSC::JSGlobalObject::createProgramCodeBlock(JSC::ExecState*, JSC::ProgramExecutable*, JSC::JSObject**) ()
#9  0x000000000043ed98 in JSC::ProgramExecutable::initializeGlobalProperties(JSC::VM&amp;, JSC::ExecState*, JSC::JSScope*) ()
#10 0x00000000005bddc0 in JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) ()
#11 0x000000000043609e in JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&amp;, JSC::JSValue, JSC::JSValue*) ()
#12 0x000000000040c599 in jscmain(int, char**) ()
#13 0x000000000040651b in main ()


====================================

Debug backtrace:

SHOULD NEVER BE REACHED
/home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp(2163) : const char* JSC::operatorString(bool, unsigned int)
1   0x7ffff7508504 WTFCrash
2   0x7ffff73088a3
3   0x7ffff734f45d JSC::ASTBuilder::Expression JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseUnaryExpression&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;)
4   0x7ffff734b96b JSC::ASTBuilder::Expression JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseBinaryExpression&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;)
5   0x7ffff734399d JSC::ASTBuilder::Expression JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseConditionalExpression&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;)
6   0x7ffff7339887 JSC::ASTBuilder::Expression JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseAssignmentExpression&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;)
7   0x7ffff732e679 JSC::ASTBuilder::Expression JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseExpression&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;)
8   0x7ffff73259fd JSC::ASTBuilder::Statement JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseExpressionStatement&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;)
9   0x7ffff731dfb9 JSC::ASTBuilder::Statement JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseStatement&lt;JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;, JSC::Identifier const*&amp;, unsigned int*)
10  0x7ffff731b450 JSC::ASTBuilder::SourceElements JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseSourceElements&lt;(JSC::SourceElementsMode)0, JSC::ASTBuilder&gt;(JSC::ASTBuilder&amp;)
11  0x7ffff7315019 JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseInner()
12  0x7ffff702d35f WTF::PassRefPtr&lt;JSC::ProgramNode&gt; JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parse&lt;JSC::ProgramNode&gt;(JSC::ParserError&amp;)
13  0x7ffff702cf69 WTF::PassRefPtr&lt;JSC::ProgramNode&gt; JSC::parse&lt;JSC::ProgramNode&gt;(JSC::VM*, JSC::SourceCode const&amp;, JSC::FunctionParameters*, JSC::Identifier const&amp;, JSC::JSParserStrictness, JSC::JSParserMode, JSC::ParserError&amp;, JSC::JSTextPosition*)
14  0x7ffff73bc20a JSC::UnlinkedProgramCodeBlock* JSC::CodeCache::getGlobalCodeBlock&lt;JSC::UnlinkedProgramCodeBlock, JSC::ProgramExecutable&gt;(JSC::VM&amp;, JSC::ProgramExecutable*, JSC::SourceCode const&amp;, JSC::JSParserStrictness, JSC::DebuggerMode, JSC::ProfilerMode, JSC::ParserError&amp;)
15  0x7ffff73ba873 JSC::CodeCache::getProgramCodeBlock(JSC::VM&amp;, JSC::ProgramExecutable*, JSC::SourceCode const&amp;, JSC::JSParserStrictness, JSC::DebuggerMode, JSC::ProfilerMode, JSC::ParserError&amp;)
16  0x7ffff7401ebd JSC::JSGlobalObject::createProgramCodeBlock(JSC::ExecState*, JSC::ProgramExecutable*, JSC::JSObject**)
17  0x7ffff73d4065 JSC::ProgramExecutable::initializeGlobalProperties(JSC::VM&amp;, JSC::ExecState*, JSC::JSScope*)
18  0x7ffff72a0386 JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*)
19  0x7ffff73c7324 JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&amp;, JSC::JSValue, JSC::JSValue*)
20  0x4163a0
21  0x41716f jscmain(int, char**)
22  0x41618c main
23  0x7ffff5b8d76d __libc_start_main
24  0x414c99

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff7508509 in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:341
341	    *(int *)(uintptr_t)0xbbadbeef = 0;
(gdb) bt
#0  0x00007ffff7508509 in WTFCrash () at /home/reni/Data/REPOS/webkit_sec/Source/WTF/wtf/Assertions.cpp:341
#1  0x00007ffff73088a3 in JSC::operatorString (prefix=true, tok=39250) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp:2163
#2  0x00007ffff734f45d in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseUnaryExpression&lt;JSC::ASTBuilder&gt; (this=0x7fffffffadc0, context=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp:2208
#3  0x00007ffff734b96b in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseBinaryExpression&lt;JSC::ASTBuilder&gt; (this=0x7fffffffadc0, context=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp:1639
#4  0x00007ffff734399d in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseConditionalExpression&lt;JSC::ASTBuilder&gt; (this=0x7fffffffadc0, context=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp:1599
#5  0x00007ffff7339887 in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseAssignmentExpression&lt;JSC::ASTBuilder&gt; (this=0x7fffffffadc0, context=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp:1533
#6  0x00007ffff732e679 in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseExpression&lt;JSC::ASTBuilder&gt; (this=0x7fffffffadc0, context=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp:1496
#7  0x00007ffff73259fd in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseExpressionStatement&lt;JSC::ASTBuilder&gt; (this=0x7fffffffadc0, context=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp:1401
#8  0x00007ffff731dfb9 in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseStatement&lt;JSC::ASTBuilder&gt; (this=0x7fffffffadc0, context=..., 
    directive=@0x7fffffffa498: 0x0, directiveLiteralLength=0x7fffffffa4b4) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp:1135
#9  0x00007ffff731b450 in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseSourceElements&lt;(JSC::SourceElementsMode)0, JSC::ASTBuilder&gt; (this=0x7fffffffadc0, 
    context=...) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp:300
#10 0x00007ffff7315019 in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parseInner (this=0x7fffffffadc0)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.cpp:247
#11 0x00007ffff702d35f in JSC::Parser&lt;JSC::Lexer&lt;unsigned char&gt; &gt;::parse&lt;JSC::ProgramNode&gt; (this=0x7fffffffadc0, error=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.h:887
#12 0x00007ffff702cf69 in JSC::parse&lt;JSC::ProgramNode&gt; (vm=0x6464e0, source=..., parameters=0x0, name=..., strictness=JSC::JSParseNormal, 
    parserMode=JSC::JSParseProgramCode, error=..., positionBeforeLastNewline=0x0)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/parser/Parser.h:957
#13 0x00007ffff73bc20a in JSC::CodeCache::getGlobalCodeBlock&lt;JSC::UnlinkedProgramCodeBlock, JSC::ProgramExecutable&gt; (this=0x657340, vm=..., 
    executable=0x7fffa992fef0, source=..., strictness=JSC::JSParseNormal, debuggerMode=JSC::DebuggerOff, profilerMode=JSC::ProfilerOff, error=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/CodeCache.cpp:95
#14 0x00007ffff73ba873 in JSC::CodeCache::getProgramCodeBlock (this=0x657340, vm=..., executable=0x7fffa992fef0, source=..., strictness=JSC::JSParseNormal, 
    debuggerMode=JSC::DebuggerOff, profilerMode=JSC::ProfilerOff, error=...)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/CodeCache.cpp:129
#15 0x00007ffff7401ebd in JSC::JSGlobalObject::createProgramCodeBlock (this=0x7fffa99ff970, callFrame=0x7fffa99ff9b0, executable=0x7fffa992fef0, 
    exception=0x7fffffffc660) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/JSGlobalObject.cpp:731
#16 0x00007ffff73d4065 in JSC::ProgramExecutable::initializeGlobalProperties (this=0x7fffa992fef0, vm=..., callFrame=0x7fffa99ff9b0, scope=0x7fffa99ff970)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/Executable.cpp:463
#17 0x00007ffff72a0386 in JSC::Interpreter::execute (this=0x6573d0, program=0x7fffa992fef0, callFrame=0x7fffa99ff9b0, thisObj=0x7fffa98cfeb0)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/interpreter/Interpreter.cpp:850
#18 0x00007ffff73c7324 in JSC::evaluate (exec=0x7fffa99ff9b0, source=..., thisValue=..., returnedException=0x7fffffffdbb0)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/runtime/Completion.cpp:83
#19 0x00000000004163a0 in runWithScripts (globalObject=0x7fffa99ff970, scripts=..., dump=false)
    at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/jsc.cpp:646
#20 0x000000000041716f in jscmain (argc=2, argv=0x7fffffffde58) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/jsc.cpp:863
#21 0x000000000041618c in main (argc=2, argv=0x7fffffffde58) at /home/reni/Data/REPOS/webkit_sec/Source/JavaScriptCore/jsc.cpp:604</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>954293</commentid>
    <comment_count>1</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-11-26 10:13:04 -0800</bug_when>
    <thetext>Looking at this.  I&apos;ve probably created a bogus fall through when adding error messages</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>954322</commentid>
    <comment_count>2</comment_count>
      <attachid>217894</attachid>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-11-26 12:12:34 -0800</bug_when>
    <thetext>Created attachment 217894
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>954324</commentid>
    <comment_count>3</comment_count>
      <attachid>217894</attachid>
    <who name="Sam Weinig">sam</who>
    <bug_when>2013-11-26 12:14:20 -0800</bug_when>
    <thetext>Comment on attachment 217894
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=217894&amp;action=review

&gt; Source/JavaScriptCore/parser/Parser.cpp:42
&gt; +    propagateError();\

We usually put a space before the \.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>954327</commentid>
    <comment_count>4</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2013-11-26 12:22:25 -0800</bug_when>
    <thetext>Committed r159790: &lt;http://trac.webkit.org/changeset/159790&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>217872</attachid>
            <date>2013-11-26 04:14:53 -0800</date>
            <delta_ts>2013-11-26 04:14:53 -0800</delta_ts>
            <desc>Test case</desc>
            <filename>test.js</filename>
            <type>application/javascript</type>
            <size>6</size>
            <attacher name="Renata Hodovan">rhodovan.u-szeged</attacher>
            
              <data encoding="base64">MSAlICs7
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>217894</attachid>
            <date>2013-11-26 12:12:34 -0800</date>
            <delta_ts>2013-11-26 12:14:20 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-124886-20131126121233.patch</filename>
            <type>text/plain</type>
            <size>4401</size>
            <attacher name="Oliver Hunt">oliver</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTU5Nzg1CmRpZmYgLS1naXQgYS9Tb3VyY2UvSmF2YVNjcmlw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</data>
<flag name="review"
          id="241120"
          type_id="1"
          status="+"
          setter="sam"
    />
          </attachment>
      

    </bug>

</bugzilla>