Summary: | Crash when a function is constructed with the string "})({" | ||||||
---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | webkit-bugs | ||||
Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> | ||||
Status: | RESOLVED CONFIGURATION CHANGED | ||||||
Severity: | Normal | CC: | ap, erights, ggaren, oliver | ||||
Priority: | P2 | ||||||
Version: | 528+ (Nightly build) | ||||||
Hardware: | Mac | ||||||
OS: | OS X 10.9 | ||||||
Attachments: |
|
Is this a duplicate of https://bugs.webkit.org/show_bug.cgi?id=106160 ? This is apparently a dup of a closed bug, as explained in a previous message. Should this be closed? The test is gone, so one way or another, there is nothing to do. |
Created attachment 228440 [details] A simple page that will crash the Safari web process. When using the Function constructor to create a function with the string "})({", the invoking process will crash. When using a string such as "})str({", an error is thrown instead. Changing it to "});str({" will again cause a crash.