JavaScriptCore:
authordarin@apple.com <darin@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 3 Dec 2007 22:56:42 +0000 (22:56 +0000)
committerdarin@apple.com <darin@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 3 Dec 2007 22:56:42 +0000 (22:56 +0000)
commit3c7654522b2bdeecf416d2d95687057456f32ee5
tree5d3ad1251b2709c4a35604eb36e83f0e89c6ec55
parent67d91a09e6f325838de8b499a593bcdb96348724
JavaScriptCore:

        Reviewed by Geoff.

        - fix http://bugs.webkit.org/show_bug.cgi?id=15618
          <rdar://problem/5619353> REGRESSION: Stack overflow/crash in KJS::equal (15618)

        Test: fast/js/recursion-limit-equal.html

        * kjs/operations.cpp: (KJS::equal): Check the exception from toPrimitive.

LayoutTests:

        Reviewed by Geoff.

        - test for http://bugs.webkit.org/show_bug.cgi?id=15618
          <rdar://problem/5619353> REGRESSION: Stack overflow/crash in KJS::equal (15618)

        * fast/js/recursion-limit-equal-expected.txt: Added.
        * fast/js/recursion-limit-equal.html: Added.
        * fast/js/resources/recursion-limit-equal.js: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@28370 268f45cc-cd09-0410-ab3c-d52691b4dbfc
JavaScriptCore/ChangeLog
JavaScriptCore/kjs/operations.cpp
LayoutTests/ChangeLog
LayoutTests/fast/js/recursion-limit-equal-expected.txt [new file with mode: 0644]
LayoutTests/fast/js/recursion-limit-equal.html [new file with mode: 0644]
LayoutTests/fast/js/resources/recursion-limit-equal.js [new file with mode: 0644]