[webkit-changes] [WebKit/WebKit] 5f779a: [JSC] ASSERTION FAILED: YarrParser.h:1763 : int JS...

[Michael Saboff]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 5f779abc52a092373ac28d70a90b2b2df725d707
      https://github.com/WebKit/WebKit/commit/5f779abc52a092373ac28d70a90b2b2df725d707
  Author: Michael Saboff <msaboff at apple.com>
  Date:   2023-05-23 (Tue, 23 May 2023)

  Changed paths:
    M JSTests/stress/regexp-vflag-property-of-strings.js
    M Source/JavaScriptCore/yarr/YarrParser.h

  Log Message:
  -----------
  [JSC] ASSERTION FAILED: YarrParser.h:1763 : int JSC::Yarr::Parser<JSC::Yarr::YarrPatternConstructor, unsigned char>::peek()
https://bugs.webkit.org/show_bug.cgi?id=257214
rdar://109261396

Reviewed by Yusuke Suzuki.

The use of peek() in YarrParser.h needs to be protected by a prior atEndOfPattern() check.
Added those missing checks to parseClassSet() with appropriate errors.

Added new test cases for these cases along with a few others.

* JSTests/stress/regexp-vflag-property-of-strings.js:
* Source/JavaScriptCore/yarr/YarrParser.h:
(JSC::Yarr::Parser::parseClassSet):

Canonical link: https://commits.webkit.org/264438@main