127177 2014-01-17 09:53:23 -0800 Yarr interpreter reports non-match instead of throwing when bailing out 2014-01-17 11:42:12 -0800 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Unspecified Unspecified NEW https://bugzilla.mozilla.org/show_bug.cgi?id=953013 P2 Normal --- 1 till webkit-unassigned bzbarsky oldest_to_newest 969158 0 till 2014-01-17 09:53:23 -0800 The Yarr interpreter contains a limit on how many attempts are made to match disjunctions. When this limit is reached, a bailout with JSRegExpErrorHitLimit happens. This bubbles up and is returned as the result of JSC::Yarr::interpret, the caller of which treats it the same as JSRegExpNoMatch. In SpiderMonkey, we changed things to throw an exception in this case; see the patch in the linked bug. 969183 1 bzbarsky 2014-01-17 11:42:12 -0800 Note that this leads to incorrect behavior in Safari. For example: /^a(\w+)+b/.test("axbxxxxxxxxxxxxxxxxxxxx") returns false in Safari, whereas the correct value is true. Chrome gets this right.