Bug 17590 – ASSERTION FAILED: subject in jsRegExpExecute()

• Status: RESOLVED
• Resolution: FIXED
• Component: JavaScriptCore

[Matt Lilek]

I hit the following ASSERT on mibbit.com.  It happens after I finish typing my username (but before I can tab away from that field).  

<http://trac.webkit.org/projects/webkit/browser/trunk/JavaScriptCore/pcre/pcre_exec.cpp#L1905>

ASSERTION FAILED: subject
(/Users/mlilek/Documents/WebKit/JavaScriptCore/pcre/pcre_exec.cpp:1905 int jsRegExpExecute(const JSRegExp*, const UChar*, int, int, int*, int))

Thread 0 Crashed:
0   com.apple.JavaScriptCore      	0x004c5b9c jsRegExpExecute(JSRegExp const*, unsigned short const*, int, int, int*, int) + 130 (pcre_exec.cpp:1905)
1   com.apple.WebCore             	0x01ef4706 WebCore::RegularExpression::match(WebCore::String const&, int, int*) const + 176 (RegularExpression.cpp:132)
2   com.apple.WebCore             	0x01ef49f0 WebCore::RegularExpression::search(WebCore::String const&, int) const + 70 (RegularExpression.cpp:155)
3   com.apple.WebCore             	0x01cfa985 WebCore::Frame::matchLabelsAgainstElement(NSArray*, WebCore::Element*) + 235 (FrameMac.mm:311)
4   com.apple.WebCore             	0x020dd591 -[WebCoreFrameBridge matchLabels:againstElement:] + 63 (WebCoreFrameBridge.mm:626)
5   com.apple.WebKit              	0x001bfc7c -[WebHTMLRepresentation matchLabels:againstElement:] + 58 (WebHTMLRepresentation.mm:320)
6   com.apple.Safari              	0x00090fc7 0x1000 + 589767
7   com.apple.Safari              	0x00091771 0x1000 + 591729
8   com.apple.Safari              	0x00091491 0x1000 + 590993
9   com.apple.Safari              	0x00091399 0x1000 + 590745
10  com.apple.Safari              	0x0008bb23 0x1000 + 568099
11  com.apple.Foundation          	0x91f29fce __NSFireDelayedPerform + 382
12  com.apple.CoreFoundation      	0x933a7b5e CFRunLoopRunSpecific + 4494
13  com.apple.CoreFoundation      	0x933a7d18 CFRunLoopRunInMode + 88
14  com.apple.HIToolbox           	0x947f86a0 RunCurrentEventLoopInMode + 283
15  com.apple.HIToolbox           	0x947f84b9 ReceiveNextEventCommon + 374
16  com.apple.HIToolbox           	0x947f832d BlockUntilNextEventMatchingListInMode + 106
17  com.apple.AppKit              	0x93a687d9 _DPSNextEvent + 657
18  com.apple.AppKit              	0x93a6808e -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
19  com.apple.Safari              	0x0000965e 0x1000 + 34398
20  com.apple.AppKit              	0x93a610c5 -[NSApplication run] + 795
21  com.apple.AppKit              	0x93a2e30a NSApplicationMain + 574
22  com.apple.Safari              	0x00002a76 0x1000 + 6774

Created attachment 19434 [details]
Return early if the element name is empty

[Darin Adler]

Comment on attachment 19434 [details]
Return early if the element name is empty

r=me

Fixed in <http://trac.webkit.org/projects/webkit/changeset/30647>.