95913 2012-09-05 17:01:52 -0700 Bug, assignment within subscript of prefix/postfix increment of bracket access 2012-09-05 17:55:24 -0700 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED javascript:alert((function(){ var a = { x:1 }; var b = { x:1 }; a[a=b,"x"]++; return a.x; })()) P2 Normal --- 1 barraclough barraclough oldest_to_newest 712684 0 barraclough 2012-09-05 17:01:52 -0700 See URL. 712695 1 162375 barraclough 2012-09-05 17:22:10 -0700 Created attachment 162375 Fix 712717 2 barraclough 2012-09-05 17:55:24 -0700 Fixed in r127666 162375 2012-09-05 17:22:10 -0700 2012-09-05 17:23:30 -0700 Fix 95913.patch text/plain 6087 barraclough SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMTI3NjYyKQorKysgU291cmNl L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDIxIEBA CisyMDEyLTA5LTA1ICBHYXZpbiBCYXJyYWNsb3VnaCAgPGJhcnJhY2xvdWdoQGFwcGxlLmNvbT4K KworICAgICAgICBCdWcsIGFzc2lnbm1lbnQgd2l0aGluIHN1YnNjcmlwdCBvZiBwcmVmaXgvcG9z dGZpeCBpbmNyZW1lbnQgb2YgYnJhY2tldCBhY2Nlc3MKKyAgICAgICAgaHR0cHM6Ly9idWdzLndl YmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTk1OTEzCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9C T0RZIChPT1BTISkuCisKKyAgICAgICAgamF2YXNjcmlwdDphbGVydCgoZnVuY3Rpb24oKXsgdmFy IGEgPSB7IHg6MSB9OyB2YXIgYiA9IHsgeDoxIH07IGFbYT1iLCJ4Il0rKzsgcmV0dXJuIGEueDsg fSkoKSkKKworICAgICAgICAqIGJ5dGVjb21waWxlci9Ob2Rlc0NvZGVnZW4uY3BwOgorICAgICAg ICAoSlNDOjpQb3N0Zml4Tm9kZTo6ZW1pdEJyYWNrZXQpOgorICAgICAgICAoSlNDOjpQcmVmaXhO b2RlOjplbWl0QnJhY2tldCk6CisgICAgICAgICAgICAtIFNob3VsZCBjaGVjayBmb3IgYXNzaWdt ZW50cyBpbiB0aGUgc3Vic2NyaXB0IHdoZW4gbG9hZGluZyB0aGUgYmFzZS4KKyAgICAgICAgKiBw YXJzZXIvTm9kZXMuaDoKKyAgICAgICAgKEpTQzo6QnJhY2tldEFjY2Vzc29yTm9kZTo6c3Vic2Ny aXB0SGFzQXNzaWdubWVudHMpOgorICAgICAgICAoQnJhY2tldEFjY2Vzc29yTm9kZSk6CisgICAg ICAgICAgICAtIFVzZWQgYnkgZW1pdEJyYWNrZXQgbWV0aG9kcy4KKwogMjAxMi0wOS0wNSAgR2F2 aW4gQmFycmFjbG91Z2ggIDxiYXJyYWNsb3VnaEBhcHBsZS5jb20+CiAKICAgICAgICAgTWVyZ2Ug cHJlZml4L3Bvc3RmaXggbm9kZXMKSW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9ieXRlY29t cGlsZXIvTm9kZXNDb2RlZ2VuLmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvSmF2YVNjcmlwdENv cmUvYnl0ZWNvbXBpbGVyL05vZGVzQ29kZWdlbi5jcHAJKHJldmlzaW9uIDEyNzY1NCkKKysrIFNv dXJjZS9KYXZhU2NyaXB0Q29yZS9ieXRlY29tcGlsZXIvTm9kZXNDb2RlZ2VuLmNwcAkod29ya2lu ZyBjb3B5KQpAQCAtNjU2LDcgKzY1Niw3IEBAIFJlZ2lzdGVySUQqIFBvc3RmaXhOb2RlOjplbWl0 QnJhY2tldChCeXQKICAgICBFeHByZXNzaW9uTm9kZSogYmFzZU5vZGUgPSBicmFja2V0QWNjZXNz b3ItPmJhc2UoKTsKICAgICBFeHByZXNzaW9uTm9kZSogc3Vic2NyaXB0ID0gYnJhY2tldEFjY2Vz c29yLT5zdWJzY3JpcHQoKTsKIAotICAgIFJlZlB0cjxSZWdpc3RlcklEPiBiYXNlID0gZ2VuZXJh dG9yLmVtaXROb2RlKGJhc2VOb2RlKTsKKyAgICBSZWZQdHI8UmVnaXN0ZXJJRD4gYmFzZSA9IGdl bmVyYXRvci5lbWl0Tm9kZUZvckxlZnRIYW5kU2lkZShiYXNlTm9kZSwgYnJhY2tldEFjY2Vzc29y LT5zdWJzY3JpcHRIYXNBc3NpZ25tZW50cygpLCBzdWJzY3JpcHQtPmlzUHVyZShnZW5lcmF0b3Ip KTsKICAgICBSZWZQdHI8UmVnaXN0ZXJJRD4gcHJvcGVydHkgPSBnZW5lcmF0b3IuZW1pdE5vZGUo c3Vic2NyaXB0KTsKIAogICAgIGdlbmVyYXRvci5lbWl0RXhwcmVzc2lvbkluZm8oYnJhY2tldEFj Y2Vzc29yLT5kaXZvdCgpLCBicmFja2V0QWNjZXNzb3ItPnN0YXJ0T2Zmc2V0KCksIGJyYWNrZXRB Y2Nlc3Nvci0+ZW5kT2Zmc2V0KCkpOwpAQCAtODQ4LDcgKzg0OCw3IEBAIFJlZ2lzdGVySUQqIFBy ZWZpeE5vZGU6OmVtaXRCcmFja2V0KEJ5dGUKICAgICBFeHByZXNzaW9uTm9kZSogYmFzZU5vZGUg PSBicmFja2V0QWNjZXNzb3ItPmJhc2UoKTsKICAgICBFeHByZXNzaW9uTm9kZSogc3Vic2NyaXB0 ID0gYnJhY2tldEFjY2Vzc29yLT5zdWJzY3JpcHQoKTsKIAotICAgIFJlZlB0cjxSZWdpc3RlcklE PiBiYXNlID0gZ2VuZXJhdG9yLmVtaXROb2RlKGJhc2VOb2RlKTsKKyAgICBSZWZQdHI8UmVnaXN0 ZXJJRD4gYmFzZSA9IGdlbmVyYXRvci5lbWl0Tm9kZUZvckxlZnRIYW5kU2lkZShiYXNlTm9kZSwg YnJhY2tldEFjY2Vzc29yLT5zdWJzY3JpcHRIYXNBc3NpZ25tZW50cygpLCBzdWJzY3JpcHQtPmlz UHVyZShnZW5lcmF0b3IpKTsKICAgICBSZWZQdHI8UmVnaXN0ZXJJRD4gcHJvcGVydHkgPSBnZW5l cmF0b3IuZW1pdE5vZGUoc3Vic2NyaXB0KTsKICAgICBSZWZQdHI8UmVnaXN0ZXJJRD4gcHJvcERz dCA9IGdlbmVyYXRvci50ZW1wRGVzdGluYXRpb24oZHN0KTsKIApJbmRleDogU291cmNlL0phdmFT Y3JpcHRDb3JlL3BhcnNlci9Ob2Rlcy5oCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9KYXZhU2NyaXB0 Q29yZS9wYXJzZXIvTm9kZXMuaAkocmV2aXNpb24gMTI3NjU0KQorKysgU291cmNlL0phdmFTY3Jp cHRDb3JlL3BhcnNlci9Ob2Rlcy5oCSh3b3JraW5nIGNvcHkpCkBAIC00NjEsNiArNDYxLDggQEAg bmFtZXNwYWNlIEpTQyB7CiAgICAgICAgIEV4cHJlc3Npb25Ob2RlKiBiYXNlKCkgY29uc3QgeyBy ZXR1cm4gbV9iYXNlOyB9CiAgICAgICAgIEV4cHJlc3Npb25Ob2RlKiBzdWJzY3JpcHQoKSBjb25z dCB7IHJldHVybiBtX3N1YnNjcmlwdDsgfQogCisgICAgICAgIGJvb2wgc3Vic2NyaXB0SGFzQXNz aWdubWVudHMoKSBjb25zdCB7IHJldHVybiBtX3N1YnNjcmlwdEhhc0Fzc2lnbm1lbnRzOyB9CisK ICAgICBwcml2YXRlOgogICAgICAgICB2aXJ0dWFsIFJlZ2lzdGVySUQqIGVtaXRCeXRlY29kZShC eXRlY29kZUdlbmVyYXRvciYsIFJlZ2lzdGVySUQqID0gMCk7CiAKSW5kZXg6IExheW91dFRlc3Rz L0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHJldmlzaW9u IDEyNzY2MykKKysrIExheW91dFRlc3RzL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwz ICsxLDE5IEBACisyMDEyLTA5LTA1ICBHYXZpbiBCYXJyYWNsb3VnaCAgPGJhcnJhY2xvdWdoQGFw cGxlLmNvbT4KKworICAgICAgICBCdWcsIGFzc2lnbm1lbnQgd2l0aGluIHN1YnNjcmlwdCBvZiBw cmVmaXgvcG9zdGZpeCBpbmNyZW1lbnQgb2YgYnJhY2tldCBhY2Nlc3MKKyAgICAgICAgaHR0cHM6 Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTk1OTEzCisKKyAgICAgICAgUmV2aWV3 ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgQWRkZWQgdGVzdCBjYXNlcy4KKworICAg ICAgICAqIGZhc3QvanMvaW5jLWJyYWNrZXQtYXNzaWduLXN1YnNjcmlwdC1leHBlY3RlZC50eHQ6 IEFkZGVkLgorICAgICAgICAqIGZhc3QvanMvaW5jLWJyYWNrZXQtYXNzaWduLXN1YnNjcmlwdC5o dG1sOiBBZGRlZC4KKyAgICAgICAgKiBmYXN0L2pzL3NjcmlwdC10ZXN0cy9pbmMtYnJhY2tldC1h c3NpZ24tc3Vic2NyaXB0LmpzOiBBZGRlZC4KKyAgICAgICAgKHRlc3RQcmVJbmNCcmFja2V0QWNj ZXNzV2l0aEFzc2lnblN1YnNjcmlwdCk6CisgICAgICAgICh0ZXN0UG9zdEluY0JyYWNrZXRBY2Nl c3NXaXRoQXNzaWduU3Vic2NyaXB0KToKKyAgICAgICAgICAgIC0gVGVzdHMgYSBwcmUvcG9zdCBp bmNyZW1lbnQgdG8gYSBicmFja2V0IGFjY2Vzcywgd2hlcmUgc3Vic2NyaXB0IGNvbnRhaW5zIGFz c2lnbm1lbnQuCisKIDIwMTItMDktMDUgIERhbiBCZXJuc3RlaW4gIDxtaXR6QGFwcGxlLmNvbT4K IAogICAgICAgICBSZW5hbWVkIGEgbWlzbmFtZWQgZXhwZWN0ZWQgcmVzdWx0LgpJbmRleDogTGF5 b3V0VGVzdHMvZmFzdC9qcy9pbmMtYnJhY2tldC1hc3NpZ24tc3Vic2NyaXB0LWV4cGVjdGVkLnR4 dAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9mYXN0L2pzL2luYy1icmFja2V0LWFzc2lnbi1z dWJzY3JpcHQtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvZmFzdC9q cy9pbmMtYnJhY2tldC1hc3NpZ24tc3Vic2NyaXB0LWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkK QEAgLTAsMCArMSwxMSBAQAorVGVzdCBmb3IgcmVncmVzc2lvbiBhZ2FpbnN0CisKK09uIHN1Y2Nl c3MsIHlvdSB3aWxsIHNlZSBhIHNlcmllcyBvZiAiUEFTUyIgbWVzc2FnZXMsIGZvbGxvd2VkIGJ5 ICJURVNUIENPTVBMRVRFIi4KKworCitQQVNTIHRlc3RQcmVJbmNCcmFja2V0QWNjZXNzV2l0aEFz c2lnblN1YnNjcmlwdCgpIGlzIHRydWUKK1BBU1MgdGVzdFBvc3RJbmNCcmFja2V0QWNjZXNzV2l0 aEFzc2lnblN1YnNjcmlwdCgpIGlzIHRydWUKK1BBU1Mgc3VjY2Vzc2Z1bGx5UGFyc2VkIGlzIHRy dWUKKworVEVTVCBDT01QTEVURQorCkluZGV4OiBMYXlvdXRUZXN0cy9mYXN0L2pzL2luYy1icmFj a2V0LWFzc2lnbi1zdWJzY3JpcHQuaHRtbAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9mYXN0 L2pzL2luYy1icmFja2V0LWFzc2lnbi1zdWJzY3JpcHQuaHRtbAkocmV2aXNpb24gMCkKKysrIExh eW91dFRlc3RzL2Zhc3QvanMvaW5jLWJyYWNrZXQtYXNzaWduLXN1YnNjcmlwdC5odG1sCShyZXZp c2lvbiAwKQpAQCAtMCwwICsxLDEwIEBACis8IURPQ1RZUEUgSFRNTCBQVUJMSUMgIi0vL0lFVEYv L0RURCBIVE1MLy9FTiI+Cis8aHRtbD4KKzxoZWFkPgorPHNjcmlwdCBzcmM9InJlc291cmNlcy9q cy10ZXN0LXByZS5qcyI+PC9zY3JpcHQ+Cis8L2hlYWQ+Cis8Ym9keT4KKzxzY3JpcHQgc3JjPSJz Y3JpcHQtdGVzdHMvaW5jLWJyYWNrZXQtYXNzaWduLXN1YnNjcmlwdC5qcyI+PC9zY3JpcHQ+Cis8 c2NyaXB0IHNyYz0icmVzb3VyY2VzL2pzLXRlc3QtcG9zdC5qcyI+PC9zY3JpcHQ+Cis8L2JvZHk+ Cis8L2h0bWw+CkluZGV4OiBMYXlvdXRUZXN0cy9mYXN0L2pzL3NjcmlwdC10ZXN0cy9pbmMtYnJh Y2tldC1hc3NpZ24tc3Vic2NyaXB0LmpzCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zhc3Qv anMvc2NyaXB0LXRlc3RzL2luYy1icmFja2V0LWFzc2lnbi1zdWJzY3JpcHQuanMJKHJldmlzaW9u IDApCisrKyBMYXlvdXRUZXN0cy9mYXN0L2pzL3NjcmlwdC10ZXN0cy9pbmMtYnJhY2tldC1hc3Np Z24tc3Vic2NyaXB0LmpzCShyZXZpc2lvbiAwKQpAQCAtMCwwICsxLDI0IEBACitkZXNjcmlwdGlv bigKKydUZXN0IGZvciByZWdyZXNzaW9uIGFnYWluc3QgPGEgaHJlZj0iaHR0cHM6Ly9idWdzLndl YmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTk1OTEzIj4nCispOworCitmdW5jdGlvbiB0ZXN0UHJl SW5jQnJhY2tldEFjY2Vzc1dpdGhBc3NpZ25TdWJzY3JpcHQoKQoreworICAgIHZhciB4ID0geyBw cm9wZXJ0eTogLTEgfTsKKyAgICB2YXIgeSA9IHsgcHJvcGVydHk6IHRydWUgfTsKKyAgICArK3hb eCA9IHksICJwcm9wZXJ0eSJdOworICAgIHJldHVybiB4LnByb3BlcnR5OworfQorCitmdW5jdGlv biB0ZXN0UG9zdEluY0JyYWNrZXRBY2Nlc3NXaXRoQXNzaWduU3Vic2NyaXB0KCkKK3sKKyAgICB2 YXIgeCA9IHsgcHJvcGVydHk6IC0xIH07CisgICAgdmFyIHkgPSB7IHByb3BlcnR5OiB0cnVlIH07 CisgICAgeFt4ID0geSwgInByb3BlcnR5Il0rKzsKKyAgICByZXR1cm4geC5wcm9wZXJ0eTsKK30K Kworc2hvdWxkQmVUcnVlKCd0ZXN0UHJlSW5jQnJhY2tldEFjY2Vzc1dpdGhBc3NpZ25TdWJzY3Jp cHQoKScpOworc2hvdWxkQmVUcnVlKCd0ZXN0UG9zdEluY0JyYWNrZXRBY2Nlc3NXaXRoQXNzaWdu U3Vic2NyaXB0KCknKTsKKworc3VjY2Vzc2Z1bGx5UGFyc2VkID0gdHJ1ZTsK