[Webkit-unassigned] [Bug 43401] New: REGRESSION: calling unshift passing more than 1 argument causes array corruption

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=43401

           Summary: REGRESSION: calling unshift passing more than 1
                    argument causes array corruption
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P1
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: heather162 at msn.com


Created an attachment (id=63295)
 --> (https://bugs.webkit.org/attachment.cgi?id=63295)
array unshift test case

In the latest nightly calling unshift on an array and passing more than one argument causes the array to become corrupted after the 3rd call to unshift.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.