The YARR Interpreter doesn't handle the case when a backreference points to the same parentheses where it is. Therefore the YARR Interpreter causes assertion in debug mode and a regression in a JSC test. Eg.: "a".match(/(a\1)/; result: , expected: a,a
Created attachment 69338 [details] proposed patch
Comment on attachment 69338 [details] proposed patch Nice fix, thank you!
Comment on attachment 69338 [details] proposed patch Clearing flags on attachment: 69338 Committed r69781: <http://trac.webkit.org/changeset/69781>
All reviewed patches have been landed. Closing bug.