Changeset 106512 in webkit for trunk/Source/JavaScriptCore/parser/Nodes.h

Timestamp:

Feb 1, 2012, 4:08:00 PM (13 years ago)

Author:

[email protected]

Message:

calling function on catch block scope containing an eval result in wrong this value being passed
​https://bugs.webkit.org/show_bug.cgi?id=77581

Reviewed by Oliver Hunt.

javascript:function F(){ return 'F' in this; }; try { throw F; } catch (e) { eval(""); alert(e()); }

Source/JavaScriptCore:

• bytecompiler/NodesCodegen.cpp:

(JSC::TryNode::emitBytecode):

• interpreter/Interpreter.cpp:

(JSC::Interpreter::execute):

• parser/ASTBuilder.h:

(JSC::ASTBuilder::createTryStatement):

• parser/NodeConstructors.h:

(JSC::TryNode::TryNode):

• parser/Nodes.h:

(TryNode):

• parser/Parser.cpp:

(JSC::::parseTryStatement):

• parser/SyntaxChecker.h:

(JSC::SyntaxChecker::createTryStatement):

• runtime/JSObject.h:

(JSObject):
(JSC::JSObject::isStaticScopeObject):
(JSC):

LayoutTests:

• fast/js/eval-var-decl-expected.txt:
• fast/js/script-tests/eval-var-decl.js:

(checkThis):
(testEvalInCatch):

File:

• trunk/Source/JavaScriptCore/parser/Nodes.h (modified) (2 diffs)

trunk/Source/JavaScriptCore/parser/Nodes.h

@@ -1349 +1349 @@
     class TryNode : public StatementNode {
     public:
-        TryNode(int, StatementNode* tryBlock, const Identifier& exceptionIdent, bool catchHasEval, StatementNode* catchBlock, StatementNode* finallyBlock);
+        TryNode(int, StatementNode* tryBlock, const Identifier& exceptionIdent, StatementNode* catchBlock, StatementNode* finallyBlock);
 
     private:
@@ -1358 +1358 @@
         StatementNode* m_catchBlock;
         StatementNode* m_finallyBlock;
-        bool m_catchHasEval;
     };