[Webkit-unassigned] [Bug 137814] crash when attempting to perform array iteration on a non-array with numeric keys not initialized

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=137814

--- Comment #3 from Alexey Proskuryakov <ap at webkit.org> ---
Created attachment 240083
  --> https://bugs.webkit.org/attachment.cgi?id=240083&action=review
test case (will crash on load)

Same test as attachment, ready to run.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20141019/a2df691a/attachment-0002.html>