[Webkit-unassigned] [Bug 157968] REGRESSION(r199075): String.prototype.replace fails after being used many times with different replace values

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=157968

Joseph Pecoraro <joepeck at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sbarati at apple.com
            Summary|REGRESSION(?):              |REGRESSION(r199075):
                   |String.prototype.replace    |String.prototype.replace
                   |fails used many times with  |fails after being used many
                   |different replace values    |times with different
                   |                            |replace values

--- Comment #2 from Joseph Pecoraro <joepeck at webkit.org> ---
Bisection results: <http://trac.webkit.org/log/trunk/?rev=199084&stop_rev=199073>

Most likely culprit is:

  DFG and FTL should constant-fold RegExpExec, RegExpTest, and StringReplace
  <​https://bugs.webkit.org/show_bug.cgi?id=155270>
  <http://trac.webkit.org/changeset/199075>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160521/034bfa1b/attachment-0001.html>