232736 - Components.classes["@dummy;1"]; reduced to Components.classes.@dummy;1; after toString() is used

Status: RESOLVED DUPLICATE of bug 231518

(Core :: JavaScript Engine, defect)

Description

[Dorando]

User-Agent:       
Build Identifier: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7a) Gecko/20040120 Firebird/0.8.0+

If an function with an Object["Object"] construct is converted to string the
construct ends as Object.Object . This would normally be no problem but if
toString() is used to modify a function at runtime and there is such a construct
which uses special characters then this will fail.

Reproducible: Always
Steps to Reproduce:
1. Open JavaScript Console
2. Enter:
alert(function (){Components.classes["@dummy;1"];});
Actual Results:  
Actual result:
function (){
Components.classes.@dummy;1;
}

Expected Results:  
Expected result:
function (){
Components.classes["@dummy;1"];
}

I was able to reproduce it with:
Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7a) Gecko/20040130
Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7a) Gecko/20040128 Firebird/0.8.0+ 
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7a) Gecko/20040124 Firebird/0.8.0+ 
but not with:
Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7a) Gecko/20040123
Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7a) Gecko/20040120 Firebird/0.8.0+ 
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7a) Gecko/20040123 Firebird/0.8.0+

This started between
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7a) Gecko/20040123 Firebird/0.8.0+
and
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7a) Gecko/20040124 Firebird/0.8.0+

Comment 1

[Boris Zbarsky [:bzbarsky]]

I believe Brendan fixed this a few days ago... Please retest with a recent
(today's) build.

Comment 2

[Dorando]

Yep, seem to work in
Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.7a) Gecko/20040131 Firebird/0.8.0+

... should have waited one day longer it seem ...

Comment 3

[timeless]

*** This bug has been marked as a duplicate of 231518 ***