Closed
Bug 584647
Opened 14 years ago
Closed 14 years ago
JM: allows assigning to NaN
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Unassigned)
References
Details
(Keywords: testcase)
Attachments
(1 file)
|
(deleted),
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
(function(){for(j=0;j<3;++j)NaN=42})(); print(NaN);
Interp: NaN
-m: 42
|
||
Comment 1•14 years ago
|
||
"NaN" with PICs and MICs disabled.
"42" with only PICs disabled.
"NaN" with only MICs disabled.
|
|
||
Comment 2•14 years ago
|
||
Easy fix. I have no idea how the fuzzer generated this test case. I'm impressed.
Attachment #463448 -
Flags: review?(dvander)
Comment on attachment 463448 [details] [diff] [review]
Don't generate SetGlobalName MIC if !writable.
You know the fuzzer is sentient, right?
Attachment #463448 -
Flags: review?(dvander) → review+
|
|
||
Comment 4•14 years ago
|
||
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
|
||
Comment 5•14 years ago
|
||
(In reply to comment #3)
> Comment on attachment 463448 [details] [diff] [review]
> Don't generate SetGlobalName MIC if !writable.
>
> You know the fuzzer is sentient, right?
Sapient, even.
/be
You need to log in
before you can comment on or make changes to this bug.
Description
•