diff options
| author | Geoffrey Garen <ggaren@apple.com> | 2014-09-25 13:58:36 +0200 |
|---|---|---|
| committer | Allan Sandfeld Jensen <allan.jensen@digia.com> | 2014-09-25 15:57:34 +0200 |
| commit | 19509c4a5c10a04a0cba4d834a9f965f7423a82e (patch) | |
| tree | d46f63367a746070c0cb4f8a3bbd07d6c498271d /Source/JavaScriptCore/runtime/JSArray.cpp | |
| parent | fffb502f202586d7029385595a84142937499bd6 (diff) | |
| download | qtwebkit-19509c4a5c10a04a0cba4d834a9f965f7423a82e.tar.gz | |
REGRESSION: `if (false === (true && undefined)) console.log("wrong!");` logs "wrong!", shouldn't!
https://bugs.webkit.org/show_bug.cgi?id=123179
Reviewed by Mark Hahnenberg.
Source/JavaScriptCore:
* parser/NodeConstructors.h:
(JSC::LogicalOpNode::LogicalOpNode):
* parser/ResultType.h:
(JSC::ResultType::forLogicalOp): Don't assume that && produces a boolean.
This is JavaScript (aka Sparta).
LayoutTests:
* js/dom/branch-fold-correctness.html: Added a test for this case.
Change-Id: I72f81f31d88dee306428dd5eab9d40fcec009042
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@157830 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Reviewed-by: Michael Bruning <michael.bruning@digia.com>
Diffstat (limited to 'Source/JavaScriptCore/runtime/JSArray.cpp')
0 files changed, 0 insertions, 0 deletions