Bug 42666 - YARR: "Assertion failure: buf[idx + 1] >= buf[idx]"
Summary: YARR: "Assertion failure: buf[idx + 1] >= buf[idx]"
Status: RESOLVED WORKSFORME
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC OS X 10.5
: P2 Normal
Assignee: Nobody
URL: https://bugzilla.mozilla.org/show_bug...
Keywords:
Depends on:
Blocks:
 
Reported: 2010-07-20 14:05 PDT by Oliver Hunt
Modified: 2010-11-21 12:54 PST (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Oliver Hunt 2010-07-20 14:05:28 PDT 
From mozilla: https://bugzilla.mozilla.org/show_bug.cgi?id=576836

The input has to be in the form of a .js file rather than shell input.

"AAB".split(/A|B(((?=)){1,2})/);

Assertion failure: get(0, 1) <= int(input->length()), at ../jscntxt.h:1699

"AAB".split(/B(((?=)){1,2})/);

Assertion failure: buf[idx + 1] >= buf[idx], at ../jsregexp.cpp:225
Comment 1 Gavin Barraclough 2010-11-21 12:54:44 PST 
Cannot repro a bug here.