Bug 51284 - RegExp Jit'ed expression crashes clicking link on yelp.com
Summary: RegExp Jit'ed expression crashes clicking link on yelp.com
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC OS X 10.5
: P2 Normal
Assignee: Michael Saboff
URL:
Keywords:
: 51645 51852 (view as bug list)
Depends on:
Blocks:
 
Reported: 2010-12-17 17:23 PST by Michael Saboff
Modified: 2011-01-04 17:23 PST (History)
2 users (show)

See Also:


Attachments
Patch to eliminate clearing of pending datalabel when transitioning to repeating alternatives (4.14 KB, patch)
2010-12-17 17:52 PST, Michael Saboff
oliver: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Saboff 2010-12-17 17:23:01 PST
The regular expression /(?:^|\b)btn-\S+/ executed from yelp crashes in JIT'ed RegExp code.
Comment 1 Michael Saboff 2010-12-17 17:26:00 PST
Steps to reproduce in Safari:
1. go to http://www.yelp.com/biz/m-and-s-watch-repair-mountain-view
2. Click "Write a Review" button

Safari will die jumping to 0.

The regular expression /(?:^|\b)btn-\S+/ instigates the crash.
Comment 2 Michael Saboff 2010-12-17 17:52:07 PST
Created attachment 76931 [details]
Patch to eliminate clearing of pending datalabel when transitioning to repeating alternatives
Comment 3 Michael Saboff 2010-12-17 18:01:41 PST
Committed r74309: <http://trac.webkit.org/changeset/74309>
Comment 4 Michael Saboff 2011-01-03 15:27:49 PST
*** Bug 51645 has been marked as a duplicate of this bug. ***
Comment 5 Michael Saboff 2011-01-04 17:23:35 PST
*** Bug 51852 has been marked as a duplicate of this bug. ***