Bug 104846 - ASSERTION FAILED: (&term - term.atom.parenthesesWidth)->inputPosition == term.inputPosition
Summary: ASSERTION FAILED: (&term - term.atom.parenthesesWidth)->inputPosition == term...
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-12-12 14:45 PST by David Anderson
Modified: 2012-12-13 18:34 PST (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description David Anderson 2012-12-12 14:45:11 PST
Originally from https://bugzilla.mozilla.org/show_bug.cgi?id=808478:

The expression:
  "h".match(RegExp("()??t()*"))

Causes this YARR assertion failure. At first I thought it was our local modifications to YARR, but it happens with upstream JSC as well. It looks like term.inputPosition gets set to -1 somewhere in emitDisjunction, but I haven't found out why yet.
Comment 1 Alexey Proskuryakov 2012-12-13 18:34:30 PST
Confirmed with ToT.