[Webkit-unassigned] [Bug 36083] REGRESSION (r55772-r55834): Crash in JavaScriptCore RegExp code on PowerPC

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Mar 16 15:55:30 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=36083


Gavin Barraclough <barraclough at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #50848|                            |review?
               Flag|                            |




--- Comment #7 from Gavin Barraclough <barraclough at apple.com>  2010-03-16 15:55:30 PST ---
Created an attachment (id=50848)
 --> (https://bugs.webkit.org/attachment.cgi?id=50848)
The patch

The problem is a bug in our port of PCRE - that a read may take place from the
first character in an empty string.  For the time being, revert to using a
valid pointer in the data segment rather than an invalid non-null pointer into
the zero-page for the empty string's data pointer.  A better fix for this will
be to remove PCRE.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list