Changeset 172381 in webkit for trunk/Source/JavaScriptCore/parser/Parser.cpp

Timestamp:

Aug 10, 2014, 1:12:01 PM (11 years ago)

Author:

[email protected]

Message:

Destructuring assignment in a var declaration list incorrectly consumes subsequent variable initialisers
​https://bugs.webkit.org/show_bug.cgi?id=135773

Reviewed by Michael Saboff.

Source/JavaScriptCore:

We should be using parseAssignment expression in order to get the correct
precedence.

• parser/Parser.cpp:

(JSC::Parser<LexerType>::parseVarDeclarationList):

LayoutTests:

Add new tests.

• js/destructuring-assignment-expected.txt:
• js/script-tests/destructuring-assignment.js:

File:

• trunk/Source/JavaScriptCore/parser/Parser.cpp (modified) (1 diff)

trunk/Source/JavaScriptCore/parser/Parser.cpp

@@ -485 +485 @@
             if (hasInitializer) {
                 next(TreeBuilder::DontBuildStrings); // consume '='
-                TreeExpression rhs = parseExpression(context);
+                TreeExpression rhs = parseAssignmentExpression(context);
                 node = context.createDeconstructingAssignment(location, pattern, rhs);
                 lastInitializer = rhs;