[Webkit-unassigned] [Bug 16127] Reproducible crash inside PCRE under guard malloc

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=16127





------- Comment #2 from mrowe at apple.com  2007-11-24 22:25 PDT -------
Created an attachment (id=17500)
 --> (http://bugs.webkit.org/attachment.cgi?id=17500&action=view)
Crash log

0   com.apple.JavaScriptCore            0x0031a0f2
calculateCompiledPatternLengthAndFlags(unsigned short const*, int,
JSRegExpIgnoreCaseOption, compile_data&, ErrorCode) + 1268
(pcre_compile.cpp:2550)
1   com.apple.JavaScriptCore            0x0031ab56 jsRegExpCompile(unsigned
short const*, int, JSRegExpIgnoreCaseOption, JSRegExpMultilineOption, unsigned
int*, char const**) + 82 (pcre_compile.cpp:3013)
2   com.apple.JavaScriptCore            0x002883df
KJS::RegExp::RegExp(KJS::UString const&, KJS::UString const&) + 417
(regexp.cpp:70)


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.