Changeset 24394 in webkit for trunk/JavaScriptCore/kjs/function.cpp

Timestamp:

Jul 17, 2007, 7:25:38 PM (18 years ago)

Author:

darin

Message:

JavaScriptCore:

Reviewed by Darin, Maciej, and Adam.

Fixes <​http://bugs.webkit.org/show_bug.cgi?id=9697>,

the failure of ecma/GlobalObject/15.1.2.2-2.js,
the failure of ecma/LexicalConventions/7.7.3-1.js,
and most of the failures of tests in ecma/TypeConversion/9.3.1-3.js.

Bug 9697: parseInt results may be inaccurate for numbers greater than 2⁵³

This patch also fixes similar issues in the lexer and UString::toDouble().

• kjs/function.cpp: (KJS::parseIntOverflow): (KJS::parseInt):
• kjs/function.h:
• kjs/lexer.cpp: (KJS::Lexer::lex):
• kjs/ustring.cpp: (KJS::UString::toDouble):
• tests/mozilla/expected.html:

LayoutTests:

Reviewed by Darin.

Added tests for:
​http://bugs.webkit.org/show_bug.cgi?id=9697

Bug 9697: parseInt results may be inaccurate for numbers greater than 2⁵³

• fast/js/numeric-conversion-expected.txt: Added.
• fast/js/numeric-conversion.html: Added.
• fast/js/resources/numeric-conversion.js: Added.

File:

• trunk/JavaScriptCore/kjs/function.cpp (modified) (5 diffs)

trunk/JavaScriptCore/kjs/function.cpp

@@ -5 +5 @@
  *  Copyright (C) 2001 Peter Kelly ([email protected])
  *  Copyright (C) 2003 Apple Computer, Inc.
+ *  Copyright (C) 2007 Cameron Zwarich ([email protected])
  *
  *  This library is free software; you can redistribute it and/or
@@ -26 +27 @@
 #include "function.h"
 
+#include "dtoa.h"
 #include "internal.h"
 #include "function_object.h"
@@ -670 +672 @@
 }
 
+double parseIntOverflow(const char* s, int length, int radix)
+{
+    double number = 0.0;
+    double radixMultiplier = 1.0;
+
+    for (const char* p = s + length - 1; p >= s; p--) {
+        if (radixMultiplier == Inf) {
+            if (*p != '0') {
+                number = Inf;
+                break;
+            }
+        } else {
+            int digit = parseDigit(*p, radix);
+            number += digit * radixMultiplier;
+        }
+
+        radixMultiplier *= radix;
+    }
+
+    return number;
+}
+
 static double parseInt(const UString& s, int radix)
 {
@@ -702 +726 @@
         return NaN;
 
+    int firstDigitPosition = p;
     bool sawDigit = false;
     double number = 0;
@@ -712 +737 @@
         number += digit;
         ++p;
+    }
+
+    if (number >= mantissaOverflowLowerBound) {
+        if (radix == 10)
+            number = kjs_strtod(s.substr(firstDigitPosition, p - firstDigitPosition).ascii(), 0);
+        else if (radix == 2 || radix == 4 || radix == 8 || radix == 16 || radix == 32)
+            number = parseIntOverflow(s.substr(firstDigitPosition, p - firstDigitPosition).ascii(), p - firstDigitPosition, radix);
     }