Details
-
Bug
-
Resolution: Done
-
P2: Important
-
5.2.1
-
None
-
ubuntu 14.04
-
bc030defad916b073ede55d7a7ad8db9a41e0ad2 (qtdeclarative)
Description
When converting a QVariantMap to a script value using Q[Qml,JS]Engine, the javascript engine assumes that all the keys are strings but still tries to convert the values. As a result if you use a QVariantMap with a number as a key (wrapped in quotes), the engine will convert the value to a js Number and segfault in QV4::InternalClass::addMember on the string lookup. Attached is a small example exhibiting the crash