[Webkit-unassigned] [Bug 205498] New: An issue of assignment expression

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Dec 20 05:39:22 PST 2019


https://bugs.webkit.org/show_bug.cgi?id=205498

            Bug ID: 205498
           Summary: An issue of assignment expression
           Product: WebKit
           Version: WebKit Local Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: yaohouyou at stumail.nwu.edu.cn

According to ES10, the exception is described in static semantics and the exception should be thrown during parssing. I suspect it's a bug of javascriptCore.

## version
b96bf75
https://github.com/WebKit/webkit/commit/b96bf7590bc090fa8161cff1189255ca3319c94b

## command
webkit/WebKitBuild/Release/bin/jsc testcase.js

## testcase
var NISLFuzzingFunc = function(){
    var e,n;
    (e = n) = "object";
};

## output


## expected output
SyntaxError: Invalid left-hand side in assignment

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191220/5ded26b8/attachment-0001.htm>


More information about the webkit-unassigned mailing list