RESOLVED FIXED 185943
[JSC] ArrayPatternNode::emitDirectBinding does not return assignment target value if dst is nullptr 
https://bugs.webkit.org/show_bug.cgi?id=185943
Summary [JSC] ArrayPatternNode::emitDirectBinding does not return assignment target v...
gfablima
Reported 2018-05-24 06:09:41 PDT
Hi everyone, it was observed that javascriptcore have unexpected behaviour when I'm trying to return a destructuring list inside a function. OS: Ubuntu 16.04 x64 Version: 606.1.9.4 Steps to reproduce: function test (){ return ( [a,b,] = [1, 2] ); } print( [a,b,] = [1, 2] ) print( test() ) Actual Results: - 1,2 - undefined Expected Results: - 1,2 - 1,2 Notes: V8, Chakra and SpiderMonkey works as expected.
Attachments
Patch (3.53 KB, patch)
2018-06-26 23:56 PDT, Yusuke Suzuki 		no flags
DetailsFormatted DiffDiff
Patch (3.92 KB, patch)
2018-06-27 02:58 PDT, Yusuke Suzuki 		mark.lam: review+
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Yusuke Suzuki
Comment 1 2018-06-26 23:56:17 PDT
Created attachment 343694 [details] Patch
Yusuke Suzuki
Comment 2 2018-06-27 02:58:00 PDT
Created attachment 343706 [details] Patch
Mark Lam
Comment 3 2018-06-27 03:04:20 PDT
Comment on attachment 343706 [details] Patch r=me
Yusuke Suzuki
Comment 4 2018-06-27 03:05:56 PDT
Committed r233252: <https://trac.webkit.org/changeset/233252>
Radar WebKit Bug Importer
Comment 5 2018-06-27 03:06:22 PDT
<rdar://problem/41515297>
isol2
Comment 6 2018-08-08 09:01:35 PDT
cinfuzz
Note You need to log in before you can comment on or make changes to this bug.