| Summary: | Crash when a function is constructed with the string "})({" | ||||||
|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | webkit-bugs | ||||
| Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> | ||||
| Status: | RESOLVED CONFIGURATION CHANGED | ||||||
| Severity: | Normal | CC: | ap, erights, ggaren, oliver | ||||
| Priority: | P2 | ||||||
| Version: | 528+ (Nightly build) | ||||||
| Hardware: | Mac | ||||||
| OS: | OS X 10.9 | ||||||
| Attachments: |
|
||||||
Is this a duplicate of https://bugs.webkit.org/show_bug.cgi?id=106160 ? This is apparently a dup of a closed bug, as explained in a previous message. Should this be closed? The test is gone, so one way or another, there is nothing to do. |
Created attachment 228440 [details] A simple page that will crash the Safari web process. When using the Function constructor to create a function with the string "})({", the invoking process will crash. When using a string such as "})str({", an error is thrown instead. Changing it to "});str({" will again cause a crash.