[Webkit-unassigned] [Bug 217308] New: A question about constructor

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=217308

            Bug ID: 217308
           Summary: A question about constructor
           Product: WebKit
           Version: WebKit Local Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: nisl_grammarly1 at 163.com

#Version：
d940b47

#Testcase:
var f = function (){
    var x = 42; 
    new x(x = function (){});
}; 
f();

#Command:
./webkit/WebKitBuild/Release/bin/jsc testcase.js

#Output:

#Expected output:
TypeError: x is not a constructor

#Description:
When executing the above testcase, other engines threw a TypeError exception, such as v8, spiderMonkey, etc. But JavaScriptCore passed normally without throwing any exceptions.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20201005/5a04798b/attachment-0001.htm>