Changeset 141168 in webkit for trunk/Source/JavaScriptCore/runtime/LiteralParser.cpp

Timestamp:

Jan 29, 2013, 2:52:58 PM (12 years ago)

Author:

[email protected]

Message:

REGRESSION (r140594): RELEASE_ASSERT_NOT_REACHED in JSC::Interpreter::execute
​https://bugs.webkit.org/show_bug.cgi?id=108097

Reviewed by Geoffrey Garen.

Source/JavaScriptCore:

LiteralParser was accepting a bogus 'var a.b = c' statement

• runtime/LiteralParser.cpp:

(JSC::::tryJSONPParse):

LayoutTests:

Add parser test for invalid var a.b syntax

• fast/js/parser-syntax-check-expected.txt:
• fast/js/script-tests/parser-syntax-check.js:

File:

• trunk/Source/JavaScriptCore/runtime/LiteralParser.cpp (modified) (1 diff)

trunk/Source/JavaScriptCore/runtime/LiteralParser.cpp

@@ -74 +74 @@
             return false;
         TokenType tokenType = m_lexer.next();
+        if (entry.m_type == JSONPPathEntryTypeDeclare && tokenType != TokAssign)
+            return false;
         while (tokenType != TokAssign) {
             switch (tokenType) {