[Webkit-unassigned] [Bug 23479] New: (r39682-r39736) JSFunFuzz: crash on "(function(){({ x2: x }), })()"

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=23479

           Summary: (r39682-r39736) JSFunFuzz: crash on "(function(){({ x2:
                    x }), })()"
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Keywords: HasReduction
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: oliver at apple.com


1/22/09 9:38 AM Oliver Hunt:
* SUMMARY
The expression (function(){({ x2: x }), })() crashes due to reparsing failure,
it should fail to parse on the first run

* STEPS TO REPRODUCE
1. Evaluate the expression (function(){({ x2: x }), })() in jsc or the browser

* RESULTS
Crashing badness

1/22/09 9:50 AM Oliver Hunt:
I've reduced the range where this started crashing, but the fact of the matter
is that it should not be getting through the first parser


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.