Bug 13620

Summary:

Bogus decompilation of "for (var j = 1 in [])"

Product:

WebKit

Reporter:

Jesse Ruderman <jruderman>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

Keywords:

HasReduction

Priority:

Version:

523.x (Safari 3)

Hardware:

Mac

OS:

OS X 10.4

Bug Depends on:

Bug Blocks:

13638

Attachments:

Description	Flags
Use vardecllist to print the initializer	darin: review+

Description Jesse Ruderman 2007-05-08 00:18:16 PDT

> (function() { for (var j = 1 in []) {}  })

function () 
{
  for (var j = 1 =  = 1 in [])
    {
    }
}

So many equals signs!

(Tested with a WebKit nightly I downloaded a few hours ago.  Found with jsfunfuzz.)

Comment 1 Kimmo Kinnunen 2007-05-11 08:36:25 PDT

Created attachment 14491 [details]
Use vardecllist to print the initializer

Comment 2 Darin Adler 2007-05-11 08:53:55 PDT

Comment on attachment 14491 [details]
Use vardecllist to print the initializer

r=me

Comment 3 Mark Rowe (bdash) 2007-05-11 10:07:52 PDT

Landed in r21409.