561002 - Duplicated property names in destructuring object let-assignment results in NPE

Status: RESOLVED INACTIVE

(Rhino Graveyard :: Core, defect)

Description

[Cameron McCormack (:heycam)]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.9 Safari/533.4
Build Identifier: 

$ ./js
>>> var { x: a, x: a } = { x: 123 }
undefined
>>> let { x: a, x: a } = { x: 123 }
java.lang.NullPointerException

Stacktrace looks like this:


Exception in thread "main" java.lang.NullPointerException
        at org.mozilla.javascript.Parser.addError(Parser.java:212)
        at org.mozilla.javascript.Parser.defineSymbol(Parser.java:2010)
        at org.mozilla.javascript.Parser.destructuringObject(Parser.java:3607)
        at org.mozilla.javascript.Parser.destructuringAssignmentHelper(Parser.java:3506)
        at org.mozilla.javascript.Parser.createDestructuringAssignment(Parser.java:3476)
        at org.mozilla.javascript.IRFactory.transformVariableInitializers(IRFactory.java:1032)
        at org.mozilla.javascript.IRFactory.transformVariables(IRFactory.java:995)
        at org.mozilla.javascript.IRFactory.transform(IRFactory.java:200)
        at org.mozilla.javascript.IRFactory.transformBlock(IRFactory.java:415)
        at org.mozilla.javascript.IRFactory.transform(IRFactory.java:120)
        at org.mozilla.javascript.IRFactory.transformForInLoop(IRFactory.java:511)
        at org.mozilla.javascript.IRFactory.transform(IRFactory.java:133)
        at org.mozilla.javascript.IRFactory.transformBlock(IRFactory.java:415)
        at org.mozilla.javascript.IRFactory.transform(IRFactory.java:120)
        at org.mozilla.javascript.IRFactory.transformFunction(IRFactory.java:559)
        at org.mozilla.javascript.IRFactory.transform(IRFactory.java:138)
        at org.mozilla.javascript.IRFactory.transformObjectLiteral(IRFactory.java:746)
        at org.mozilla.javascript.IRFactory.transform(IRFactory.java:162)
        at org.mozilla.javascript.IRFactory.transformFunctionCall(IRFactory.java:600)
        at org.mozilla.javascript.IRFactory.transform(IRFactory.java:124)
        at org.mozilla.javascript.IRFactory.transformExprStmt(IRFactory.java:487)
        at org.mozilla.javascript.IRFactory.transform(IRFactory.java:185)
        at org.mozilla.javascript.IRFactory.transformScript(IRFactory.java:835)
        at org.mozilla.javascript.IRFactory.transform(IRFactory.java:168)
        at org.mozilla.javascript.IRFactory.transformTree(IRFactory.java:95)
        at org.mozilla.javascript.optimizer.ClassCompiler.compileToClassFiles(ClassCompiler.java:168)
        at org.mozilla.javascript.tools.jsc.Main.processSource(Main.java:276)
        at org.mozilla.javascript.tools.jsc.Main.main(Main.java:73)


Reproducible: Always

Comment 1

[Sylvestre Ledru [:Sylvestre]]

Closing. Bug management is now done here:
https://github.com/mozilla/rhino