Bug 230038

Summary:

Incorrect matching of regular expressions

Product:

WebKit

Reporter:

Yeting Li <N2107163D>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

NEW

Severity:

Normal

CC:

fpizlo, msaboff, webkit-bug-importer

Priority:

Keywords:

InRadar

Version:

WebKit Nightly Build

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
demo code	none

Yeting Li

Reported 2021-09-08 01:13:12 PDT

Created attachment 437607 [details] demo code For some regexes with backreferences and optional groupings, for example, the regex /(a)?(b)\1/ should not match the string "b", but JavaScriptCore determines the regex /(a)?(b)\1/ matching the string "b". It should be pointed out that the semantics of the regex /(a)?(b)\1/ and the regex /(a?)(b)\1/ are different. Specifically, the regex /(a)?(b)\1/ does not match the string "b", and the regex /(a?)(b)\1/ matches the string "b".

Attachments
demo code (55 bytes, text/javascript) 2021-09-08 01:13 PDT, Yeting Li	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2021-09-15 01:14:24 PDT

<rdar://problem/83135746>

Note You need to log in before you can comment on or make changes to this bug.