Bug 13620

Summary: Bogus decompilation of "for (var j = 1 in [])"
Product: WebKit Reporter: Jesse Ruderman <jruderman>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal Keywords: HasReduction
Priority: P2    
Version: 523.x (Safari 3)   
Hardware: Mac   
OS: OS X 10.4   
Bug Depends on:    
Bug Blocks: 13638    
Attachments:
Description Flags
Use vardecllist to print the initializer darin: review+

Jesse Ruderman
Reported 2007-05-08 00:18:16 PDT
> (function() { for (var j = 1 in []) {} }) function () { for (var j = 1 = = 1 in []) { } } So many equals signs! (Tested with a WebKit nightly I downloaded a few hours ago. Found with jsfunfuzz.)
Attachments
Use vardecllist to print the initializer (5.22 KB, patch)
2007-05-11 08:36 PDT, Kimmo Kinnunen 		darin: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Kimmo Kinnunen
Comment 1 2007-05-11 08:36:25 PDT
Created attachment 14491 [details] Use vardecllist to print the initializer
Darin Adler
Comment 2 2007-05-11 08:53:55 PDT
Comment on attachment 14491 [details] Use vardecllist to print the initializer r=me
Mark Rowe (bdash)
Comment 3 2007-05-11 10:07:52 PDT
Landed in r21409.
Note You need to log in before you can comment on or make changes to this bug.