188899 2018-08-23 12:53:52 -0700 Function evaluation with special characters as params 2018-08-27 22:27:45 -0700 1 1 1 Unclassified WebKit JavaScriptCore Safari 11 Unspecified Unspecified NEW P2 Normal --- 1 isol2 webkit-unassigned fpizlo ysuzuki oldest_to_newest 1453175 0 isol2 2018-08-23 12:53:52 -0700 Hi everyone, I found this inconsistency in JSC when it try to parsing the HTML comment block as param, but I don't know if this behavior is expected by others engines. This param was generated by a fuzzer. Version: 235121 OS: Ubuntu 16.04 x64 Steps to reproduce: let a = Function("<!--", "print(1+1)") a() let b = Function("<!--", "<!--", "print(1+1)") b() Actual result: SyntaxError: Unexpected token '}'. Expected a parameter pattern or a ')' in parameter list. Expected result: 2 2 V8, Chakra and SpiderMonkey works as expected. cinfuzz