| Summary: | [JSC] ArrayPatternNode::emitDirectBinding does not return assignment target value if dst is nullptr | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | gfablima | ||||||
| Component: | JavaScriptCore | Assignee: | Yusuke Suzuki <ysuzuki> | ||||||
| Status: | RESOLVED FIXED | ||||||||
| Severity: | Normal | CC: | fpizlo, isol2, mark.lam, webkit-bug-importer, ysuzuki | ||||||
| Priority: | P2 | Keywords: | InRadar | ||||||
| Version: | WebKit Nightly Build | ||||||||
| Hardware: | PC | ||||||||
| OS: | Linux | ||||||||
| Bug Depends on: | |||||||||
| Bug Blocks: | 187085 | ||||||||
| Attachments: |
|
||||||||
Created attachment 343694 [details]
Patch
Created attachment 343706 [details]
Patch
Comment on attachment 343706 [details]
Patch
r=me
Committed r233252: <https://trac.webkit.org/changeset/233252> cinfuzz |
Hi everyone, it was observed that javascriptcore have unexpected behaviour when I'm trying to return a destructuring list inside a function. OS: Ubuntu 16.04 x64 Version: 606.1.9.4 Steps to reproduce: function test (){ return ( [a,b,] = [1, 2] ); } print( [a,b,] = [1, 2] ) print( test() ) Actual Results: - 1,2 - undefined Expected Results: - 1,2 - 1,2 Notes: V8, Chakra and SpiderMonkey works as expected.