Changeset 5645 in webkit for trunk/JavaScriptCore/kjs/array_object.cpp

Timestamp:

Dec 2, 2003, 2:11:47 AM (21 years ago)

Author:

mjs

Message:

Merged patches from Harri Porten and David Faure to fix:

<rdar://problem/3497643>: reproducible crash printing self-referential array

• kjs/array_object.cpp: (ArrayProtoFuncImp::call): Break out of the loop if an exception was thrown.
• kjs/nodes.cpp: (FunctionCallNode::evaluate): Move function call depth check from here...
• kjs/object.cpp: (KJS::Object::call): ...to here.
• kjs/object.h: Un-inline Object::call now that it does more.

File:

• trunk/JavaScriptCore/kjs/array_object.cpp (modified) (1 diff)

trunk/JavaScriptCore/kjs/array_object.cpp

@@ -470 +470 @@
       if (element.type() != UndefinedType && element.type() != NullType)
         str += element.toString(exec);
+      if ( exec->hadException() )
+        break;
     }
     result = String(str);