[Webkit-unassigned] [Bug 18642] New: Iterator context may get placed into the return register, leading to much badness

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=18642

           Summary: Iterator context may get placed into the return
                    register, leading to much badness
           Product: WebKit
           Version: 526+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Keywords: SquirrelFish, SquirrelFishBlocker
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: oliver at apple.com


Haven't yet come up with a trivial example that leads to this occuring, but the
following triggers it:
var o = {toString:function(){
    throw {};
    return "wibble";
}};
o.bar = "bar";
o.__defineGetter__("foo", function(){ print("zomg"); return "wibble" });
try {
print(o);
} catch(e) {
    for (i in e)
       print("e[\""+i+"\"] = " + e[i]);
}


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.