Bug 17939
| Summary: | Crash decompiling "const a = 1, b;" | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Jesse Ruderman <jruderman> |
| Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED FIXED | ||
| Severity: | Critical | CC: | mrowe, oliver |
| Priority: | P2 | Keywords: | HasReduction, Regression |
| Version: | 528+ (Nightly build) | ||
| Hardware: | Mac | ||
| OS: | OS X 10.4 | ||
| Bug Depends on: | |||
| Bug Blocks: | 13638 | ||
Jesse Ruderman
print(function() { const a = 1, b; });
Crashes ToT Debug JavaScriptCore in KJS::SourceStream::operator<<(KJS::Node const*).
I suspect that this is a regression caused by the patch in bug 17929.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Mark Rowe (bdash)
Fixed in r31149.