LibJS: Do not revisit already visited values in update_function_name()

Fixes #3471, adds a test.

1 files changed, 12 insertions, 2 deletions

diff --git a/Libraries/LibJS/AST.cpp b/Libraries/LibJS/AST.cpp
index 3886950442..96a8d49d14 100644
--- a/Libraries/LibJS/AST.cpp
+++ b/Libraries/LibJS/AST.cpp
@@ -26,6 +26,7 @@
  */
 
 #include <AK/HashMap.h>
+#include <AK/HashTable.h>
 #include <AK/ScopeGuard.h>
 #include <AK/StringBuilder.h>
 #include <LibCrypto/BigInt/SignedBigInteger.h>
@@ -49,10 +50,13 @@
 
 namespace JS {
 
-static void update_function_name(Value& value, const FlyString& name)
+static void update_function_name(Value& value, const FlyString& name, HashTable<const JS::Cell*>& visited)
 {
     if (!value.is_object())
         return;
+    if (visited.contains(value.as_cell()))
+        return;
+    visited.set(value.as_cell());
     auto& object = value.as_object();
     if (object.is_function()) {
         auto& function = static_cast<Function&>(object);
@@ -61,10 +65,16 @@ static void update_function_name(Value& value, const FlyString& name)
     } else if (object.is_array()) {
         auto& array = static_cast<Array&>(object);
         for (auto& entry : array.indexed_properties().values_unordered())
-            update_function_name(entry.value, name);
+            update_function_name(entry.value, name, visited);
     }
 }
 
+static void update_function_name(Value& value, const FlyString& name)
+{
+    HashTable<const JS::Cell*> visited;
+    update_function_name(value, name, visited);
+}
+
 static String get_function_name(Interpreter& interpreter, Value value)
 {
     if (value.is_symbol())