Bug 23075 - REGRESSION (r39164): Discarding quantifier on assertion gives incorrect result
Summary: REGRESSION (r39164): Discarding quantifier on assertion gives incorrect result
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC All
: P2 Normal
Assignee: Geoffrey Garen
Keywords: HasReduction, InRadar, Regression
Depends on:
Reported: 2009-01-02 06:00 PST by Lasse Reichstein Holst Nielsen
Modified: 2009-01-16 00:02 PST (History)
2 users (show)

See Also:

patch (6.24 KB, patch)
2009-01-15 23:10 PST, Geoffrey Garen
zwarich: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Lasse Reichstein Holst Nielsen 2009-01-02 06:00:51 PST
The follwing javascript expression 
evaluates to false since changeset 39164. It should give true, both according to the ECMAScript specification and, e.g., what Firefox does.
Comment 1 Mark Rowe (bdash) 2009-01-02 12:43:44 PST
Comment 2 Geoffrey Garen 2009-01-15 23:10:12 PST
Created attachment 26785 [details]
Comment 3 Cameron Zwarich (cpst) 2009-01-15 23:49:05 PST
Comment on attachment 26785 [details]

r=me, although you should also include the Bugzilla URL in the ChangeLogs.
Comment 4 Geoffrey Garen 2009-01-16 00:02:21 PST
Committed revision 39963.