Running r27689 or r27710 debug build, not sure when this started or which test causes this. Thread 0 Crashed: 0 match(unsigned short const*, unsigned char const*, int, match_data*) + 31087 (pcre_exec.cpp:1878) 1 jsRegExpExecute(JSRegExp const*, unsigned short const*, int, int, int*, int) + 1705 (pcre_exec.cpp:2272) 2 KJS::RegExp::match(KJS::UString const&, int, WTF::OwnArrayPtr<int>*) + 275 (regexp.cpp:105) 3 KJS::RegExpObjectImp::performMatch(KJS::RegExp*, KJS::UString const&, int, int&, int&, int**) + 64 (regexp_object.cpp:305) 4 KJS::StringProtoFuncSearch::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 395 (string_object.cpp:611) 5 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 220 (object.cpp:95)
Geoff was showing this to me today. Should be easy to fix.
Created attachment 17209 [details] Reduction
This ASSERT fires only with > 100 parens. <= 100 parens won't do it.
Created attachment 17213 [details] patch
Comment on attachment 17213 [details] patch Looks good. r=me.
Committed revision 27733.