Bug 42666

Summary: YARR: "Assertion failure: buf[idx + 1] >= buf[idx]"
Product: WebKit Reporter: Oliver Hunt <oliver>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED WORKSFORME    
Severity: Normal CC: barraclough, ggaren, msaboff
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: PC   
OS: OS X 10.5   
URL: https://bugzilla.mozilla.org/show_bug.cgi?id=576836

Description Oliver Hunt 2010-07-20 14:05:28 PDT 
From mozilla: https://bugzilla.mozilla.org/show_bug.cgi?id=576836

The input has to be in the form of a .js file rather than shell input.

"AAB".split(/A|B(((?=)){1,2})/);

Assertion failure: get(0, 1) <= int(input->length()), at ../jscntxt.h:1699

"AAB".split(/B(((?=)){1,2})/);

Assertion failure: buf[idx + 1] >= buf[idx], at ../jsregexp.cpp:225
Comment 1 Gavin Barraclough 2010-11-21 12:54:44 PST 
Cannot repro a bug here.