| JS1.5 RC5a | : | 2003-05-29 | |
| JS1.5 RC6 | : | 2004-01-27 |
Bug 85721 Rewrite of SpiderMonkey regular expression engine
Bug 196097 Added obj.__noSuchMethod__ handler support
Note: a __noSuchMethod__ handler will not come pre-defined in |obj|, nor in Object.prototype.
But JS will respond to a handler of this name. See this example from bug 196097 on how to use this feature.
Bug 208030 JS errors reported incorrect line numbers in source code
Line numbers were incorrect on JS errors involving the |const| keyword, and on JS strict warnings involving function and variable declarations. This bug is now fixed.
Bug 208586 Minimal no-extensions ECMA-2 Edition 3 JS engine configuration
Set JS_VERSION to JS_VERSION_ECMA_3 for the minimal configuration conforming to the ECMA-262 Edition 3 specification. Use it for minimal embeddings, where you're sure you don't need any of the extensions disabled in this version.
Bug 221526 Fixed security hole in JS Script.thaw
Script.thaw() deserializes a script from a string. An attacker could have run such a script and used buffer
overrun techniques (malloc size parameter wraparound), etc. etc.
| ID | Sev | Pri | Plt | Assignee | Status | Resolution | Summary |
|---|---|---|---|---|---|---|---|
| 67111 | JS_GetImplementationVersion() date string needs to be upd... | ||||||
| 72234 | Can't build JS shell on Windows with js.mak and VC++ | ||||||
| 85721 | Regexp performance degraded from 4.7 | ||||||
| 94570 | JS_ReportOutOfMemory() redundant | ||||||
| 123437 | regexp backreferences /(a)? etc./ must hold |undefined| i... | ||||||
| 188206 | Memory leaks when regexp engine tries to compile bad expr... | ||||||
| 192414 | Parser recursion does not check stack overflow [@ GetChar ] | ||||||
| 192465 | Object.toSource recursion does not check for stack overflow | ||||||
| 192626 | RegExp parser recursion does not check stack overflow | ||||||
| 196097 | Implementation of '__noSuchMethod__' handler for SpiderMo... | ||||||
| 200144 | Keep OS/2 from going down MSVC paths in JS | ||||||
| 205418 | Relicense Spidermonkey (js/src) | ||||||
| 206199 | redeclaration of const in script containing try block(s) ... | ||||||
| 207673 | sizeof/endianness bug in JSXDR code in js/src/jsfun.c | ||||||
| 208030 | JS errors report incorrect line numbers in the source code | ||||||
| 208048 | ARM constant number definitions are not correct for infin... | ||||||
| 208496 | Incorrect scope when |with (f)| is used inside the defini... | ||||||
| 208586 | Minimal no-extensions ECMA-2 Edition 3 JS engine configur... | ||||||
| 208879 | js and xpc shells need environment reflection and argumen... | ||||||
| 211590 | Math.random() uses bad algorithm | ||||||
| 212419 | Too much precision in download dialog | ||||||
| 213482 | setting a watched property within the function called by ... | ||||||
| 213841 | Crash on context destruction if 2 breakpoints set at same PC | ||||||
| 214761 | Loading page crashes when js.options.strict is true [@ MS... | ||||||
| 215798 | Running Venkman crashes Mozilla [@ js_CloseTokenStream] | ||||||
| 215878 | Assertion failure with JS Strict warnings enabled | ||||||
| 216320 | [ABW]js_FinishTakingSrcNotes is exceeding the notes array | ||||||
| 217768 | interruptHandler isn't properly loaded if trapHandler ret... | ||||||
| 221526 | JS Script.thaw is a security hole | ||||||
| 222029 | Make our f.caller property match IE's w.r.t. f.apply and ... | ||||||
| 222055 | Symbolic manipulation error in mozilla/js/src/fdlibm/e_sq... | ||||||
| 222759 | Replace "Copyright ©" by "Copyright (C)" in JS test suite... | ||||||
| 223273 | RegExp with too many )s produces invalid object and crash... | ||||||
| 223535 | Regular expression with empty last alternative crashs, e.... | ||||||
| 223810 | /js/src/jsscript.c js_alloc_entry may cause damaged heap ... | ||||||
| 224306 | can't mutate empty object delegating to sealed prototype ... | ||||||
| 224487 | FPU control word gets clobbered by PM - can't start unles... | ||||||
| 224676 | JS RegExp failing on certain disjunction + character clas... | ||||||
| 224951 | testcase regress-57631.js is erroneous | ||||||
| 224956 | crash if implied multiplication used in javascript statement | ||||||
| 225061 | Option to js shell to limit stack size | ||||||
| 225289 | Regexp pattern /a|[^a]/ not matching correctly | ||||||
| 225343 | Regexp pattern /[A]/i not matching 'a' | ||||||
| 225423 | Loading URL crashes Moz [@ JavaObject_getPropertyById ] | ||||||
| 225550 | RegExp toSource/toString return an invalid empty RE | ||||||
| 226078 | Crash on www.gddkia.gov.pl | ||||||
| 226507 | [patch] No recursion check in js_EmitTree | ||||||
| 227432 | Engine crash when calling Script.exec() from JS_CallFunct... | ||||||
| 228087 | bug with braces in JavaScript regular expressions | ||||||
| 229006 | JS parser has problems parsing i++ when line number great... | ||||||
| 230047 | Fix old glitches in SpiderMonkey's automatic semicolon in... | ||||||
| 230522 | warning C4047: 'return' : 'foo *' differs in levels of in... | ||||||
| 231518 | Decompiler must quote keywords |