Bug 185943

Summary:

[JSC] ArrayPatternNode::emitDirectBinding does not return assignment target value if dst is nullptr

Product:

WebKit

Reporter:

gfablima

Component:

JavaScriptCore

Assignee:

Yusuke Suzuki <ysuzuki>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

fpizlo, isol2, mark.lam, webkit-bug-importer, ysuzuki

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

OS:

Linux

Bug Depends on:

Bug Blocks:

187085

Attachments:

Description	Flags
Patch	none
Patch	mark.lam: review+

gfablima

Reported 2018-05-24 06:09:41 PDT

Hi everyone, it was observed that javascriptcore have unexpected behaviour when I'm trying to return a destructuring list inside a function. OS: Ubuntu 16.04 x64 Version: 606.1.9.4 Steps to reproduce: function test (){ return ( [a,b,] = [1, 2] ); } print( [a,b,] = [1, 2] ) print( test() ) Actual Results: - 1,2 - undefined Expected Results: - 1,2 - 1,2 Notes: V8, Chakra and SpiderMonkey works as expected.

Attachments
Patch (3.53 KB, patch) 2018-06-26 23:56 PDT, Yusuke Suzuki	no flags	Details Formatted Diff Diff
Patch (3.92 KB, patch) 2018-06-27 02:58 PDT, Yusuke Suzuki	mark.lam: review+	Details Formatted Diff Diff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.