fix corner case in conditionals

[alexlamsl]

fixes #3576

[kzc]

Wow, this is an old one - from v3.0.0. I'll never cease to be amazed by what the fuzzer continues to find.

What's the MFuzz/day throughput now?

Did GitHub ever fix their Actions failure timeout issue or did you find a workaround?

[alexlamsl]

Yup, pretty happy with ufuzz thus far.

We are currently looking at ~3MFuzz per day.

That hours-long time-out issue is still there, making those job errors caused by connection resets that much more painful. Hopefully once they fixed the cache action enough that would be less of a PITA...

[alexlamsl]

Speaking of ufuzz, this false positive is quite a beauty 😉

https://github.com/alexlamsl/UglifyJS2/runs/295871559#step:3:64

[kzc]

That's a good one.

$ echo 'for(var k in this){a=this[k]} console.log(a); var a=42;' | node
k

$ echo 'var a=42; for(var k in this){a=this[k]} console.log(a); var u;' | node
undefined

$ echo 'var u; var a=42; for(var k in this){a=this[k]} console.log(a);' | node
k

Who needs crossword puzzles when you can reduce fuzzer test cases?