Bug 52825 - [RegexFuzz] Hang with forward assertion
Summary: [RegexFuzz] Hang with forward assertion
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC OS X 10.5
: P2 Normal
Assignee: Michael Saboff
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2011-01-20 11:37 PST by Oliver Hunt
Modified: 2011-01-21 15:52 PST (History)
4 users (show)

See Also:


Attachments
Patch to make BacktrackTo label propagation conditional (4.33 KB, patch)
2011-01-21 15:37 PST, Michael Saboff
oliver: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Oliver Hunt 2011-01-20 11:37:05 PST
/*FRC*/ count=1287; testRegexp("(w|f)(?:5{3}|l+?;|((?!I){3,}))|pk", "my", ["","f5II{IIpk","wfj","wk","f5II{II","f5II{IIO","\u0000k","\u0000-","flllIIIIk","wfk"]);

Reduced to:
/(w)(?:5{3}|())|pk/.test("5")
Comment 1 Geoffrey Garen 2011-01-20 14:02:11 PST
<rdar://problem/8894332>
Comment 2 Michael Saboff 2011-01-21 15:37:55 PST
Created attachment 79804 [details]
Patch to make BacktrackTo label propagation conditional
Comment 3 Oliver Hunt 2011-01-21 15:40:51 PST
Comment on attachment 79804 [details]
Patch to make BacktrackTo label propagation conditional

View in context: https://bugs.webkit.org/attachment.cgi?id=79804&action=review

> Source/JavaScriptCore/yarr/YarrJIT.cpp:609
> +        void propagateBacktrackToLabel(BacktrackDestination& rhs)

This should be a const ref
Comment 4 Michael Saboff 2011-01-21 15:52:53 PST
Committed r76407: <http://trac.webkit.org/changeset/76407>