Title: [204416] trunk/LayoutTests
- Revision
- 204416
- Author
- [email protected]
- Date
- 2016-08-12 11:53:51 -0700 (Fri, 12 Aug 2016)
Log Message
ASSERTION FAILED: : line >= firstLine in BytecodeGenerator::emitExpressionInfo.
https://bugs.webkit.org/show_bug.cgi?id=160535
<rdar://problem/27328151>
Patch by Pranjal Jumde <[email protected]> on 2016-08-12
Reviewed by Saam Barati.
lineNumber from the savePoint was not being restored before calling next() causing discrepancy in the offset and line for the token
* js/multiline-function-crash-expected.txt: Added.
* js/multiline-function-crash.html: Added.
* js/script-tests/multiline-function-crash.js: Added.
Modified Paths
Added Paths
Diff
Modified: trunk/LayoutTests/ChangeLog (204415 => 204416)
--- trunk/LayoutTests/ChangeLog 2016-08-12 18:51:16 UTC (rev 204415)
+++ trunk/LayoutTests/ChangeLog 2016-08-12 18:53:51 UTC (rev 204416)
@@ -1,3 +1,17 @@
+2016-08-12 Pranjal Jumde <[email protected]>
+
+ ASSERTION FAILED: : line >= firstLine in BytecodeGenerator::emitExpressionInfo.
+ https://bugs.webkit.org/show_bug.cgi?id=160535
+ <rdar://problem/27328151>
+
+ Reviewed by Saam Barati.
+
+ lineNumber from the savePoint was not being restored before calling next() causing discrepancy in the offset and line for the token
+
+ * js/multiline-function-crash-expected.txt: Added.
+ * js/multiline-function-crash.html: Added.
+ * js/script-tests/multiline-function-crash.js: Added.
+
2016-08-12 Brent Fulgham <[email protected]>
Add test for fixed nullptr deref error
Added: trunk/LayoutTests/js/multiline-function-crash-expected.txt (0 => 204416)
--- trunk/LayoutTests/js/multiline-function-crash-expected.txt (rev 0)
+++ trunk/LayoutTests/js/multiline-function-crash-expected.txt 2016-08-12 18:53:51 UTC (rev 204416)
@@ -0,0 +1,9 @@
+Offset and lineNumber of the savePoint needs to restored before calling next(). Test passes if there is no crash in debug builds.
+
+On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".
+
+
+PASS successfullyParsed is true
+
+TEST COMPLETE
+
Added: trunk/LayoutTests/js/multiline-function-crash.html (0 => 204416)
--- trunk/LayoutTests/js/multiline-function-crash.html (rev 0)
+++ trunk/LayoutTests/js/multiline-function-crash.html 2016-08-12 18:53:51 UTC (rev 204416)
@@ -0,0 +1,10 @@
+<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
+<html>
+<head>
+<script src=""
+</head>
+<body>
+<script src=""
+<script src=""
+</body>
+</html>
Added: trunk/LayoutTests/js/script-tests/multiline-function-crash.js (0 => 204416)
--- trunk/LayoutTests/js/script-tests/multiline-function-crash.js (rev 0)
+++ trunk/LayoutTests/js/script-tests/multiline-function-crash.js 2016-08-12 18:53:51 UTC (rev 204416)
@@ -0,0 +1,5 @@
+description(
+"Offset and lineNumber of the savePoint needs to restored before calling next(). Test passes if there is no crash in debug builds.");
+
+((x = (function(){ return debug;})()
+, y) => [])();
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
