[Webkit-unassigned] [Bug 104846] New: ASSERTION FAILED: (&term - term.atom.parenthesesWidth)->inputPosition == term.inputPosition
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Dec 12 14:42:49 PST 2012
https://bugs.webkit.org/show_bug.cgi?id=104846
Summary: ASSERTION FAILED: (&term -
term.atom.parenthesesWidth)->inputPosition ==
term.inputPosition
Product: WebKit
Version: 528+ (Nightly build)
Platform: Unspecified
OS/Version: Unspecified
Status: UNCONFIRMED
Severity: Normal
Priority: P2
Component: JavaScriptCore
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: danderson at mozilla.com
CC: barraclough at apple.com
Originally from https://bugzilla.mozilla.org/show_bug.cgi?id=808478:
The expression:
"h".match(RegExp("()??t()*"))
Causes this YARR assertion failure. At first I thought it was our local modifications to YARR, but it happens with upstream JSC as well. It looks like term.inputPosition gets set to -1 somewhere in emitDisjunction, but I haven't found out why yet.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list