Bug 666852 - crash when yield occurs in comprehension RHS (r=cdleary)

This commit is contained in:
Dave Herman 2011-06-24 14:08:29 -04:00
parent 5b6c00bb2a
commit 4fa36afd9e
3 changed files with 54 additions and 0 deletions

View File

@ -7123,6 +7123,9 @@ Parser::comprehensionTail(JSParseNode *kid, uintN blockid, bool isGenexp,
pnp = &pn2->pn_kid2;
}
if (!maybeNoteGenerator())
return NULL;
pn2 = UnaryNode::create(tc);
if (!pn2)
return NULL;

View File

@ -10,3 +10,4 @@ skip script regress-380237-04.js # obsolete test, need to remove minor failures
script regress-384991.js
script regress-634472.js
script regress-665286.js
script regress-666852.js

View File

@ -0,0 +1,50 @@
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* ***** BEGIN LICENSE BLOCK *****
* Version: MPL 1.1/GPL 2.0/LGPL 2.1
*
* The contents of this file are subject to the Mozilla Public License Version
* 1.1 (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
* http://www.mozilla.org/MPL/
*
* Software distributed under the License is distributed on an "AS IS" basis,
* WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
* for the specific language governing rights and limitations under the
* License.
*
* The Original Code is JavaScript Engine testing utilities.
*
* The Initial Developer of the Original Code is
* Mozilla Foundation.
* Portions created by the Initial Developer are Copyright (C) 2007
* the Initial Developer. All Rights Reserved.
*
* Contributor(s): Dave Herman
*
* Alternatively, the contents of this file may be used under the terms of
* either the GNU General Public License Version 2 or later (the "GPL"), or
* the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
* in which case the provisions of the GPL or the LGPL are applicable instead
* of those above. If you wish to allow use of your version of this file only
* under the terms of either the GPL or the LGPL, and not to allow others to
* use your version of this file under the terms of the MPL, indicate your
* decision by deleting the provisions above and replace them with the notice
* and other provisions required by the GPL or the LGPL. If you do not delete
* the provisions above, a recipient may use your version of this file under
* the terms of any one of the MPL, the GPL or the LGPL.
*
* ***** END LICENSE BLOCK ***** */
//-----------------------------------------------------------------------------
var BUGNUMBER = 665286;
var summary = 'yield in comprehension RHS';
var actual = '';
var expect = '';
function reported() {
[1 for (x in yield)]
}
reportCompare(reported.isGenerator(), true, "reported case: is generator");
reportCompare(typeof reported(), "object", "reported case: calling doesn't crash");