Closed Bug 587964 Opened 14 years ago Closed 14 years ago

TM: out-of-bounds string index returns empty string

Categories

(Core :: JavaScript Engine, defect)

x86
Linux
defect
Not set
normal

Tracking

()

RESOLVED FIXED
Tracking Status
blocking2.0 --- beta7+

People

(Reporter: jandem, Assigned: dvander)

References

Details

(Whiteboard: fixed-in-tracemonkey)

Attachments

(1 file)

There is one difference between JM/TM on the Sputnik tests, RegExp-test S15.10.2.10_A5.1_T1.js. I asked cdleary about it, but it's not related to YARR. The test case can be reduced to: var s = "12345"; for(var i=0; i<7; i++) { print(s[i].length); } ./js output (also ./js -m on JM-branch): 1 1 1 1 /home/jan/test.js:4: TypeError: s[i] is undefined ./js -j output: 1 1 1 1 0
The output I posted is wrong -- there should be an extra 1 and an extra 0. I think the problem is clear though.
set blocking-2.0 flag, as this may break some websites.
blocking2.0: --- → ?
Probably caused by patch for bug 584499.
Blocks: 584499
blocking2.0: ? → beta6+
Attached patch fix (deleted) — Splinter Review
Assignee: general → dvander
Status: NEW → ASSIGNED
Attachment #470225 - Flags: review?(lw)
Attachment #470225 - Flags: review?(lw) → review+
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: