21080 2008-09-24 16:57:31 -0700 Crash below Function.apply when using a runtime array as the argument list 2008-09-24 17:08:04 -0700 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Mac OS X 10.5 RESOLVED FIXED P2 Normal --- 1 sam sam oldest_to_newest 92627 0 sam 2008-09-24 16:57:31 -0700 Patch forthcoming. 92628 1 23772 sam 2008-09-24 17:02:14 -0700 Created attachment 23772 patch 92629 2 23772 darin 2008-09-24 17:05:28 -0700 Comment on attachment 23772 patch r=me 92631 3 sam 2008-09-24 17:08:04 -0700 Fixed in r36875. 23772 2008-09-24 17:02:14 -0700 2008-09-24 17:05:28 -0700 patch crash.diff text/plain 6121 sam SW5kZXg6IEphdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBKYXZhU2NyaXB0 Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDM2ODc0KQorKysgSmF2YVNjcmlwdENvcmUvQ2hhbmdl TG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMTcgQEAKKzIwMDgtMDktMjQgIFNhbSBXZWlu aWcgIDxzYW1Ad2Via2l0Lm9yZz4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMh KS4KKworICAgICAgICBGaXggZm9yIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNn aT9pZD0yMTA4MAorICAgICAgICA8cmRhcjovL3Byb2JsZW0vNjI0MzUzND4KKyAgICAgICAgQ3Jh c2ggYmVsb3cgRnVuY3Rpb24uYXBwbHkgd2hlbiB1c2luZyBhIHJ1bnRpbWUgYXJyYXkgYXMgdGhl IGFyZ3VtZW50IGxpc3QKKworICAgICAgICBUZXN0OiBwbHVnaW5zL2JpbmRpbmdzLWFycmF5LWFw cGx5LWNyYXNoLmh0bWwKKworICAgICAgICAqIGtqcy9GdW5jdGlvblByb3RvdHlwZS5jcHA6Cisg ICAgICAgIChKU0M6OmZ1bmN0aW9uUHJvdG9GdW5jQXBwbHkpOiBSZXZlcnQgdG8gdGhlIHNsb3cg Y2FzZSBpZiB0aGUgb2JqZWN0IGluaGVyaXRzIGZyb20gCisgICAgICAgIEpTQXJyYXkgKHZpYSBD bGFzc0luZm8pIGJ1dCBpcyBub3QgYSBKU0FycmF5LgorCiAyMDA4LTA5LTI0ICBLZXZpbiBNY0N1 bGxvdWdoICA8a21jY3VsbG91Z2hAYXBwbGUuY29tPgogCiAgICAgICAgIFN0eWxlIGNoYW5nZS4K SW5kZXg6IEphdmFTY3JpcHRDb3JlL2tqcy9GdW5jdGlvblByb3RvdHlwZS5jcHAKPT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PQotLS0gSmF2YVNjcmlwdENvcmUva2pzL0Z1bmN0aW9uUHJvdG90eXBlLmNwcAkocmV2aXNpb24g MzY4NzMpCisrKyBKYXZhU2NyaXB0Q29yZS9ranMvRnVuY3Rpb25Qcm90b3R5cGUuY3BwCSh3b3Jr aW5nIGNvcHkpCkBAIC0xMDEsOSArMTAxLDExIEBAIEpTVmFsdWUqIGZ1bmN0aW9uUHJvdG9GdW5j QXBwbHkoRXhlY1N0YXQKICAgICAgICAgICAgICAgICBzdGF0aWNfY2FzdDxBcmd1bWVudHMqPihh cmdBcnJheSktPmZpbGxBcmdMaXN0KGV4ZWMsIGFwcGx5QXJncyk7CiAgICAgICAgICAgICBlbHNl IGlmIChleGVjLT5tYWNoaW5lKCktPmlzSlNBcnJheShhcmdBcnJheSkpCiAgICAgICAgICAgICAg ICAgc3RhdGljX2Nhc3Q8SlNBcnJheSo+KGFyZ0FycmF5KS0+ZmlsbEFyZ0xpc3QoZXhlYywgYXBw bHlBcmdzKTsKLSAgICAgICAgICAgIGVsc2UgaWYgKHN0YXRpY19jYXN0PEpTT2JqZWN0Kj4oYXJn QXJyYXkpLT5pbmhlcml0cygmSlNBcnJheTo6aW5mbykpCi0gICAgICAgICAgICAgICAgc3RhdGlj X2Nhc3Q8SlNBcnJheSo+KGFyZ0FycmF5KS0+ZmlsbEFyZ0xpc3QoZXhlYywgYXBwbHlBcmdzKTsK LSAgICAgICAgICAgIGVsc2UKKyAgICAgICAgICAgIGVsc2UgaWYgKHN0YXRpY19jYXN0PEpTT2Jq ZWN0Kj4oYXJnQXJyYXkpLT5pbmhlcml0cygmSlNBcnJheTo6aW5mbykpIHsKKyAgICAgICAgICAg ICAgICB1bnNpZ25lZCBsZW5ndGggPSBzdGF0aWNfY2FzdDxKU09iamVjdCo+KGFyZ0FycmF5KS0+ Z2V0KGV4ZWMsIGV4ZWMtPnByb3BlcnR5TmFtZXMoKS5sZW5ndGgpLT50b1VJbnQzMihleGVjKTsK KyAgICAgICAgICAgICAgICBmb3IgKHVuc2lnbmVkIGkgPSAwOyBpIDwgbGVuZ3RoOyArK2kpCisg ICAgICAgICAgICAgICAgICAgIGFwcGx5QXJncy5hcHBlbmQoc3RhdGljX2Nhc3Q8SlNPYmplY3Qq PihhcmdBcnJheSktPmdldChleGVjLCBpKSk7CisgICAgICAgICAgICB9IGVsc2UKICAgICAgICAg ICAgICAgICByZXR1cm4gdGhyb3dFcnJvcihleGVjLCBUeXBlRXJyb3IpOwogICAgICAgICB9IGVs c2UKICAgICAgICAgICAgIHJldHVybiB0aHJvd0Vycm9yKGV4ZWMsIFR5cGVFcnJvcik7CkluZGV4 OiBXZWJLaXRUb29scy9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gV2ViS2l0VG9vbHMvQ2hhbmdl TG9nCShyZXZpc2lvbiAzNjg3NCkKKysrIFdlYktpdFRvb2xzL0NoYW5nZUxvZwkod29ya2luZyBj b3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDA4LTA5LTI0ICBTYW0gV2VpbmlnICA8c2FtQHdlYmtp dC5vcmc+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAg Rml4IGZvciBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjEwODAKKyAg ICAgICAgPHJkYXI6Ly9wcm9ibGVtLzYyNDM1MzQ+CisgICAgICAgIENyYXNoIGJlbG93IEZ1bmN0 aW9uLmFwcGx5IHdoZW4gdXNpbmcgYSBydW50aW1lIGFycmF5IGFzIHRoZSBhcmd1bWVudCBsaXN0 CisKKyAgICAgICAgQWRkIG1ldGhvZCB0byBPYmpDQ29udHJvbGxlciB0byByZXR1cm4gYSBydW50 aW1lIGFycmF5LgorCisgICAgICAgICogRHVtcFJlbmRlclRyZWUvbWFjL09iakNDb250cm9sbGVy Lm06CisgICAgICAgICgrW09iakNDb250cm9sbGVyIGlzU2VsZWN0b3JFeGNsdWRlZEZyb21XZWJT Y3JpcHQ6XSk6CisgICAgICAgICgrW09iakNDb250cm9sbGVyIHdlYlNjcmlwdE5hbWVGb3JTZWxl Y3RvcjpdKToKKyAgICAgICAgKC1bT2JqQ0NvbnRyb2xsZXIgdGVzdEFycmF5XSk6CisKIDIwMDgt MDktMjQgIEJldGggRGFraW4gIDxiZGFraW5AYXBwbGUuY29tPgogCiAgICAgICAgIFJldmlld2Vk IGJ5IFNhbSBXZWluaWcuCkluZGV4OiBXZWJLaXRUb29scy9EdW1wUmVuZGVyVHJlZS9tYWMvT2Jq Q0NvbnRyb2xsZXIubQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBXZWJLaXRUb29scy9EdW1wUmVuZGVyVHJlZS9t YWMvT2JqQ0NvbnRyb2xsZXIubQkocmV2aXNpb24gMzY4NzMpCisrKyBXZWJLaXRUb29scy9EdW1w UmVuZGVyVHJlZS9tYWMvT2JqQ0NvbnRyb2xsZXIubQkod29ya2luZyBjb3B5KQpAQCAtNjQsNiAr NjQsNyBAQCBzdGF0aWMgdm9pZCogcnVuSmF2YVNjcmlwdFRocmVhZCh2b2lkKiBhCiAgICAgICAg ICAgICB8fCBhU2VsZWN0b3IgPT0gQHNlbGVjdG9yKGFjY2Vzc1N0b3JlZFdlYlNjcmlwdE9iamVj dCkKICAgICAgICAgICAgIHx8IGFTZWxlY3RvciA9PSBAc2VsZWN0b3Ioc3RvcmVXZWJTY3JpcHRP YmplY3Q6KQogICAgICAgICAgICAgfHwgYVNlbGVjdG9yID09IEBzZWxlY3Rvcih0ZXN0VmFsdWVG b3JLZXkpCisgICAgICAgICAgICB8fCBhU2VsZWN0b3IgPT0gQHNlbGVjdG9yKHRlc3RBcnJheSkK ICAgICAgICAgKQogICAgICAgICByZXR1cm4gTk87CiAgICAgcmV0dXJuIFlFUzsKQEAgLTg3LDYg Kzg4LDggQEAgc3RhdGljIHZvaWQqIHJ1bkphdmFTY3JpcHRUaHJlYWQodm9pZCogYQogICAgICAg ICByZXR1cm4gQCJzdG9yZVdlYlNjcmlwdE9iamVjdCI7CiAgICAgaWYgKGFTZWxlY3RvciA9PSBA c2VsZWN0b3IodGVzdFZhbHVlRm9yS2V5KSkKICAgICAgICAgcmV0dXJuIEAidGVzdFZhbHVlRm9y S2V5IjsKKyAgICBpZiAoYVNlbGVjdG9yID09IEBzZWxlY3Rvcih0ZXN0QXJyYXkpKQorICAgICAg ICByZXR1cm4gQCJ0ZXN0QXJyYXkiOwogCiAgICAgcmV0dXJuIG5pbDsKIH0KQEAgLTIxNiw2ICsy MTksMTEgQEAgc3RhdGljIHZvaWQqIHJ1bkphdmFTY3JpcHRUaHJlYWQodm9pZCogYQogICAgIHN0 b3JlZFdlYlNjcmlwdE9iamVjdCA9IFt3ZWJTY3JpcHRPYmplY3QgcmV0YWluXTsKIH0KIAorLSAo TlNBcnJheSAqKXRlc3RBcnJheQoreworICAgIHJldHVybiBbTlNBcnJheSBhcnJheV07Cit9CisK IC0gKHZvaWQpZGVhbGxvYwogewogICAgIFtzdG9yZWRXZWJTY3JpcHRPYmplY3QgcmVsZWFzZV07 CkluZGV4OiBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMv Q2hhbmdlTG9nCShyZXZpc2lvbiAzNjg3NCkKKysrIExheW91dFRlc3RzL0NoYW5nZUxvZwkod29y a2luZyBjb3B5KQpAQCAtMSwzICsxLDE0IEBACisyMDA4LTA5LTI0ICBTYW0gV2VpbmlnICA8c2Ft QHdlYmtpdC5vcmc+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAg ICAgICAgVGVzdCBmb3IgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIx MDgwCisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS82MjQzNTM0PgorICAgICAgICBDcmFzaCBiZWxv dyBGdW5jdGlvbi5hcHBseSB3aGVuIHVzaW5nIGEgcnVudGltZSBhcnJheSBhcyB0aGUgYXJndW1l bnQgbGlzdAorCisgICAgICAgICogcGxhdGZvcm0vbWFjL3BsdWdpbnMvYmluZGluZ3MtYXJyYXkt YXBwbHktY3Jhc2gtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBwbGF0Zm9ybS9tYWMv cGx1Z2lucy9iaW5kaW5ncy1hcnJheS1hcHBseS1jcmFzaC5odG1sOiBBZGRlZC4KKwogMjAwOC0w OS0yNCAgSmVyZW15IE1vc2tvdmljaCAgPGplcmVteUBjaHJvbWl1bS5vcmc+CiAKICAgICAgICAg UmV2aWV3ZWQgYnkgRGFuIEJlcm5zdGVpbi4KSW5kZXg6IExheW91dFRlc3RzL3BsYXRmb3JtL21h Yy9wbHVnaW5zL2JpbmRpbmdzLWFycmF5LWFwcGx5LWNyYXNoLWV4cGVjdGVkLnR4dAo9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09Ci0tLSBMYXlvdXRUZXN0cy9wbGF0Zm9ybS9tYWMvcGx1Z2lucy9iaW5kaW5ncy1hcnJheS1h cHBseS1jcmFzaC1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9wbGF0 Zm9ybS9tYWMvcGx1Z2lucy9iaW5kaW5ncy1hcnJheS1hcHBseS1jcmFzaC1leHBlY3RlZC50eHQJ KHJldmlzaW9uIDApCkBAIC0wLDAgKzEsNCBAQAorVGhpcyB0ZXN0cyB0aGF0IHJ1bnRpbWUgYXJy YXlzIGFyZSBub3QgdHJlYXRlZCBhcyBKU0FycmF5cyB3aGVuIHVzZWQgaW4gRnVuY3Rpb24uYXBw bHkuIFRoZSB0ZXN0IHBhc3NlcyBpZiBpdCBkb2VzIG5vdCBjcmFzaC4KKworUEFTUzogRnVuY3Rp b24gY2FsbGVkLiAgTm8gY3Jhc2ghCisKSW5kZXg6IExheW91dFRlc3RzL3BsYXRmb3JtL21hYy9w bHVnaW5zL2JpbmRpbmdzLWFycmF5LWFwcGx5LWNyYXNoLmh0bWwKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5 b3V0VGVzdHMvcGxhdGZvcm0vbWFjL3BsdWdpbnMvYmluZGluZ3MtYXJyYXktYXBwbHktY3Jhc2gu aHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL3BsYXRmb3JtL21hYy9wbHVnaW5zL2Jp bmRpbmdzLWFycmF5LWFwcGx5LWNyYXNoLmh0bWwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsMjcg QEAKKzxodG1sPgorPGJvZHk+Cis8cD5UaGlzIHRlc3RzIHRoYXQgcnVudGltZSBhcnJheXMgYXJl IG5vdCB0cmVhdGVkIGFzIEpTQXJyYXlzIHdoZW4gdXNlZCBpbiBGdW5jdGlvbi5hcHBseS4gIFRo ZSB0ZXN0IHBhc3NlcyBpZiBpdCBkb2VzIG5vdCBjcmFzaC48L3A+Cis8cHJlIGlkPSJjb25zb2xl Ij48L3ByZT4KKzxzY3JpcHQ+CitmdW5jdGlvbiBsb2cobXNnKQoreworICAgIGRvY3VtZW50Lmdl dEVsZW1lbnRCeUlkKCdjb25zb2xlJykuYXBwZW5kQ2hpbGQoZG9jdW1lbnQuY3JlYXRlVGV4dE5v ZGUobXNnICsgIlxuIikpOworfQorCitpZiAod2luZG93LmxheW91dFRlc3RDb250cm9sbGVyKQor ICAgIGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTsKKworaWYgKCF3aW5kb3cub2Jq Q0NvbnRyb2xsZXIpCisgICAgYWxlcnQoIlRoaXMgbmVlZHMgdG8gYmUgcnVuIHVuZGVyIERSVCBv biB0aGUgTWFjLiIpOworCitmdW5jdGlvbiB0ZXN0KCkKK3sKKyAgICBsb2coIlBBU1M6IEZ1bmN0 aW9uIGNhbGxlZC4gIE5vIGNyYXNoISIpOworfQorCit2YXIgYXJyYXkgPSB3aW5kb3cub2JqQ0Nv bnRyb2xsZXIudGVzdEFycmF5KCk7Cit0ZXN0LmFwcGx5KG51bGwsIGFycmF5KTsKKworPC9zY3Jp cHQ+Cis8L2JvZHk+Cis8L2h0bWw+Cg==