351001 - toString on this function (with parameterized E4X literals) halts javascript

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Jesse Ruderman]

toString of a function with the code
  (<{z}/>); (<{z}/>);
causes JavaScript execution to halt, even in a try/catch block.

Testcase coming.

Comment 1

[Jesse Ruderman]

Attachment: testcase

Comment 2

[Jesse Ruderman]

Result: the last thing you see in the console is "About to toString f".

Comment 3

[Igor Bukanov]

jsshell version of the test bellow has "interesting" behavior. After printing "About to toString f" it juts quits with exit status 0.


// This does not trigger the bug.
//test("g = <z/>; h = <z/>;");

// Each of these triggers the bug.
test("(<x a={b}/>).(false); (<{z}/>);");
test("(<x a={b}/>).(false); (<x a={b}/>).(false);");
test("(<{z}/>); (<{z}/>);");
print("Done");

function test(code)
{

  f = new Function(code);

  try{
    print("About to toString f");
    fs = "" + f;
    print("Done toStringing f");
    print("f: " + fs);
  }
  catch(ex) {
    print("caught:");
    print(ex);
  }

  print("Below try/catch block");
}

Comment 4

[Brendan Eich [:brendan]]

Fixed by what bug? Dunno, but WFM in latest trunk js shell.

/be