jdk8-mips64-public/nashorn: test/script/basic/NASHORN-703a.js@d5a9705a27b1

8066237: Fuzzing bug: Parser error on optimistic recompilation
Reviewed-by: lagergren, attila

     1 /*

     2  * Copyright (c) 2010, 2013, Oracle and/or its affiliates. All rights reserved.

     3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

     4  *

     5  * This code is free software; you can redistribute it and/or modify it

     6  * under the terms of the GNU General Public License version 2 only, as

     7  * published by the Free Software Foundation.

     8  *

     9  * This code is distributed in the hope that it will be useful, but WITHOUT

    10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

    11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

    12  * version 2 for more details (a copy is included in the LICENSE file that

    13  * accompanied this code).

    14  *

    15  * You should have received a copy of the GNU General Public License version

    16  * 2 along with this work; if not, write to the Free Software Foundation,

    17  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

    18  *

    19  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

    20  * or visit www.oracle.com if you need additional information or have any

    21  * questions.

    22  */

    24 /**

    25  * NASHORN-703

    26  *

    27  * Self modifying assignments and ++/-- operators had two issues

    28  * 1) the base was loaded twice

    29  * 2) if the base was anything but an IdentNode, AccessNode or IndexNode and in the scope, it would

    30  *    only be evaluated once, leading to bytecode stack underflow

    31  *

    32  * This file is split into two tests as the presence of eval affects the whole script

    33  *

    34  * @test

    35  * @run

    36  */

    38 function template() {

    39     this.count = 17;

    40     eval();

    41 }

    43 //self assignment to accessnode in scope

    44 function test1() {

    45     a.count++;

    46     eval();

    47 }

    49 function test2() {

    50     a2[0].count++;

    51     eval();

    52 }

    54 function test3() {

    55     a3[0]++;

    56     eval();

    57 }

    59 function test4() {

    60     a4 *= 17;

    61     eval();

    62 }

    64 function test5() {

    65     a5.count *= 17;

    66     eval();

    67 }

    69 function test6() {

    70     a6[0].count *= 17;

    71     eval();

    72 }

    74 function test7() {

    75     a7[0] *= 17;

    76     eval();

    77 }

    79 function tpl() {

    80     return new template();

    81 }

    83 function count() {

    84     tpl().count++;

    85     eval();

    86 }

    88 var a = new template();

    89 test1();

    90 print(a.count);

    92 var a2 = [new template()];

    93 test2();

    94 print(a2[0].count);

    96 var a3 = [1];

    97 test3();

    98 print(a3);

   100 var a4 = 4711;

   101 test4();

   102 print(a4);

   104 var a5 = new template();

   105 test5();

   106 print(a5.count);

   108 var a6 = [new template()];

   109 test6();

   110 print(a6[0].count);

   112 var a7 = [1];

   113 test7();

   114 print(a7[0]);

Mercurial > jdk8-mips64-public > nashorn / file revision