[Webkit-unassigned] [Bug 157968] REGRESSION(r199075): String.prototype.replace fails after being used many times with different replace values
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri May 20 21:42:20 PDT 2016
https://bugs.webkit.org/show_bug.cgi?id=157968
Joseph Pecoraro <joepeck at webkit.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |sbarati at apple.com
Summary|REGRESSION(?): |REGRESSION(r199075):
|String.prototype.replace |String.prototype.replace
|fails used many times with |fails after being used many
|different replace values |times with different
| |replace values
--- Comment #2 from Joseph Pecoraro <joepeck at webkit.org> ---
Bisection results: <http://trac.webkit.org/log/trunk/?rev=199084&stop_rev=199073>
Most likely culprit is:
DFG and FTL should constant-fold RegExpExec, RegExpTest, and StringReplace
<âhttps://bugs.webkit.org/show_bug.cgi?id=155270>
<http://trac.webkit.org/changeset/199075>
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160521/034bfa1b/attachment-0001.html>
More information about the webkit-unassigned
mailing list