[CVE-2018-0939] Edge - chakra arguments bug version 2.0 - Individual

Object destructuring should track assignment in case of default value
chakra-core · Mar 12, 2018 · 090277e · 090277e
1 parent 64e7619
commit 090277e
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/Parser/Parse.cpp b/lib/Parser/Parse.cpp
@@ -12904,6 +12904,10 @@ ParseNodePtr Parser::GetRightSideNodeFromPattern(ParseNodePtr pnode)
         {
             TrackAssignment<true>(pnode, nullptr);
         }
+        else if (op == knopAsg)
+        {
+            TrackAssignment<true>(pnode->sxBin.pnode1, nullptr);
+        }
     }
 
     return rightNode;