[Webkit-unassigned] [Bug 23479] (r39682-r39736) JSFunFuzz: crash on "(function(){({ x2: x }), })()"

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jan 22 10:26:58 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=23479


oliver at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |data:text/html,<script>{(1),
                   |                            |}</script>
             Status|NEW                         |ASSIGNED




------- Comment #2 from oliver at apple.com  2009-01-22 10:26 PDT -------
Okay, the problem is that we incorrectly accept a comma after ()'s inside
braces. why?


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list