349650 - Number getting parens replaces last character of identifier in decompilation of array comprehension

Status: VERIFIED FIXED

(Core :: JavaScript Engine, defect, P2)

Description

[Jesse Ruderman]

> function() { [5[7] for (y in window)]; }

function () { [(5)[7] for (y in windo(5)]; }

There should be a "w" where the second "(5" is.

Comment 1

[Brendan Eich [:brendan]]

Attachment: fix

One-line fix to new-in-js1.7 array comprehension decompilation bug.  This is the necessary step from PushOff, inlined and minimized to operate on the existing top of stack (like pop; push with all the stack top manipulation canceled out).

/be

Comment 2

[Brendan Eich [:brendan]]

Fixed on trunk.

/be

Comment 3

[Mike Beltzner [:beltzner, not reading bugmail]]

Comment on attachment 235855 [details] [diff] [review]
fix

a=beltzner on behalf of the 181drivers

Comment 4

[Brendan Eich [:brendan]]

Fixed on the 1.8 branch.

/be

Comment 5

[Bob Clary [:bc] (inactive)]

Checking in regress-349650.js;
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-349650.js,v  <--  regress-349650.js
initial revision: 1.1

Comment 6

[Bob Clary [:bc] (inactive)]

verified fixed 1.8, 1.9 20060830 windows/mac*/linux