Currently we emit a comma expression with no sub-expression for bare ';', as well as for the initialization of for loops with no initializers. This crashes the Checker, as it tries to access the last sub-expression of comma expressions. Instead we should generate an empty statement block for that case. This problem was found (and originally fixed before the commit was reverted) in https://bugs.webkit.org/show_bug.cgi?id=199726. I am just isolating the fix here for easier review and debugging.
Created attachment 376189 [details] Patch
Comment on attachment 376189 [details] Patch Clearing flags on attachment: 376189 Committed r248650: <https://trac.webkit.org/changeset/248650>
All reviewed patches have been landed. Closing bug.
<rdar://problem/54282997>