Changeset 192899 in webkit for trunk/Source/JavaScriptCore/bytecompiler/NodesCodegen.cpp

Timestamp:

Dec 1, 2015, 12:11:20 PM (10 years ago)

Author:

[email protected]

Message:

[JSC] add missing RequireObjectCoercible() step in destructuring
​https://bugs.webkit.org/show_bug.cgi?id=151596

Patch by Caitlin Potter <​[email protected]> on 2015-12-01
Reviewed by Darin Adler.

• bytecompiler/BytecodeGenerator.cpp:

(JSC::BytecodeGenerator::emitRequireObjectCoercible):

• bytecompiler/BytecodeGenerator.h:
• bytecompiler/NodesCodegen.cpp:

(JSC::ObjectPatternNode::bindValue):

• tests/stress/destructuring-assignment-require-object-coercible.js: Added.

(testTypeError):
(testOK):

File:

• trunk/Source/JavaScriptCore/bytecompiler/NodesCodegen.cpp (modified) (1 diff)

trunk/Source/JavaScriptCore/bytecompiler/NodesCodegen.cpp

@@ -3338 +3338 @@
 void ObjectPatternNode::bindValue(BytecodeGenerator& generator, RegisterID* rhs) const
 {
+    generator.emitRequireObjectCoercible(rhs, ASCIILiteral("Right side of assignment cannot be destructured"));
     for (size_t i = 0; i < m_targetPatterns.size(); i++) {
         auto& target = m_targetPatterns[i];