335043 - Function:toSource:sharp variable problem

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Biju]

Function:toSource:sharp variable problem

expressions with Arrays or Objects with sharp variables in Function causes problem in toSource.

function x() {
    a = [#1={}];
    a = [#1={}, #1#];
    a = [#1={a:1}, #1#];
    a = [#1={a:1, b:1}, #1#];
    a = [#1=[]];
    a = [#1=[], #1#];
    a = [#1=[1], #1#];
    a = [#1=[1, 1], #1#];
    a = {a:#1={}};
    a = {a:#1={}, b:#1#};
    a = {a:#1={a:1}, b:#1#};
    a = {a:#1={a:1, b:1}, b:#1#};
    a = {a:#1=[]};
    a = {a:#1=[], b:#1#};
    a = {a:#1=[1], b:#1#};
    a = {a:#1=[1, 1], b:#1#};
}

x


gives ==>

function x() {
    a = [#1={]];
    a = [#1={], #1#];
    a = [#1={, a:1], #1#];
    a = [#1={, a:1, b:1], #1#];
    a = [#1=[]];
    a = [#1=[], #1#];
    a = [#1=[, 1], #1#];
    a = [#1=[, 1, 1], #1#];
    a = {a:#1={]};
    a = {a:#1={], b:#1#};
    a = {a:#1={, a:1], b:#1#};
    a = {a:#1={, a:1, b:1], b:#1#};
    a = {a:#1=[]};
    a = {a:#1=[], b:#1#};
    a = {a:#1=[, 1], b:#1#};
    a = {a:#1=[, 1, 1], b:#1#};
}

Comment 1

[Biju]

Attachment: testcase function_toSource_sharp_var.html

testcase function_toSource_sharp_var.html

1. click function_toSource_sharp_var.html
2. click Input Case : 0 link
3. test button

4. repeat on others for other bugs

Comment 2

[Jesse Ruderman]

I don't see the mismatched things like "{]", but I am seeing {} where there should be [].  For example,

js> function() { a = #1=[#1#] }
function () {
    a = #1={, #1#};
}

This makes the fuzzer in bug 349611 sad (after I teach it about sharps).

Comment 3

[Biju]

(In reply to comment #2)
> I don't see the mismatched things like "{]", but I am seeing {} where there
> should be [].

so one issue got fixed...

I get following on 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2pre) Gecko/20070119 BonEcho/2.0.0.2pre


function x() {
    a = [#1={}];
    a = [#1={}, #1#];
    a = [#1={, a:1}, #1#];
    a = [#1={, a:1, b:1}, #1#];
    a = [#1={}];
    a = [#1={}, #1#];
    a = [#1={, 1}, #1#];
    a = [#1={, 1, 1}, #1#];
    a = {a:#1={}};
    a = {a:#1={}, b:#1#};
    a = {a:#1={, a:1}, b:#1#};
    a = {a:#1={, a:1, b:1}, b:#1#};
    a = {a:#1={}};
    a = {a:#1={}, b:#1#};
    a = {a:#1={, 1}, b:#1#};
    a = {a:#1={, 1, 1}, b:#1#};
}

Comment 4

[Biju]

Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.3a5pre) 
Gecko/20100520 Minefield/3.7a5pre 
gives ==>
function x() {
    a = [#1={}];
    a = [#1={}, #1#];
    a = [#1={a: 1}, #1#];
    a = [#1={a: 1, b: 1}, #1#];
    a = [#1=[]];
    a = [#1=[], #1#];
    a = [#1=[1], #1#];
    a = [#1=[1, 1], #1#];
    a = {a: #1={}};
    a = {a: #1={}, b: #1#};
    a = {a: #1={a: 1}, b: #1#};
    a = {a: #1={a: 1, b: 1}, b: #1#};
    a = {a: #1=[]};
    a = {a: #1=[], b: #1#};
    a = {a: #1=[1], b: #1#};
    a = {a: #1=[1, 1], b: #1#};
}

Comment 5

[Biju]

Same as above in
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.5pre) 
Gecko/20100526 Namoroka/3.6.5pre