[Webkit-unassigned] [Bug 168593] New: ASSERTION FAILED: "m_state != ParseError" when adding Unicode flag to RegExp whose pattern isn't valid under Unicode mode

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=168593

            Bug ID: 168593
           Summary: ASSERTION FAILED: "m_state != ParseError" when adding
                    Unicode flag to RegExp whose pattern isn't valid under
                    Unicode mode
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Local Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: andre.bargull at gmail.com

Revision: 212634

Test case:
---
var re = RegExp(/\a/, "u");
re.test("");
---

Triggers this assertion:
---
ASSERTION FAILED: m_state != ParseError
../../Source/JavaScriptCore/runtime/RegExpInlines.h(198) : JSC::MatchResult JSC::RegExp::matchInline(JSC::VM&, const WTF::String&, unsigned int)
---


Stacktrace:
---
#0  0x00007ffff6dc6f98 in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:323
#1  0x00007ffff6c90d42 in JSC::RegExp::matchInline (this=0x7fffaef9f4a0, vm=..., s=..., startOffset=0) at ../../Source/JavaScriptCore/runtime/RegExpInlines.h:198
#2  0x00007ffff6c9033c in JSC::RegExp::match (this=0x7fffaef9f4a0, vm=..., s=..., startOffset=0) at ../../Source/JavaScriptCore/runtime/RegExp.cpp:354
#3  0x00007ffff6c9b692 in JSC::RegExpConstructor::performMatch (this=0x7fffaef980a0, vm=..., regExp=0x7fffaef9f4a0, string=0x7fffaefe00a0, input=..., startOffset=0)
    at ../../Source/JavaScriptCore/runtime/RegExpConstructor.h:121
#4  0x00007ffff6c9959c in JSC::RegExpObject::matchInline (this=0x7fffaefc3cd0, exec=0x7fffffffc7b0, globalObject=0x7fffaefdc0a0, string=0x7fffaefe00a0)
    at ../../Source/JavaScriptCore/runtime/RegExpObjectInlines.h:114
#5  0x00007ffff6c9a338 in JSC::RegExpObject::match (this=0x7fffaefc3cd0, exec=0x7fffffffc7b0, globalObject=0x7fffaefdc0a0, string=0x7fffaefe00a0)
    at ../../Source/JavaScriptCore/runtime/RegExpObject.cpp:170
#6  0x00007ffff658809b in JSC::RegExpObject::test (this=0x7fffaefc3cd0, exec=0x7fffffffc7b0, globalObject=0x7fffaefdc0a0, string=0x7fffaefe00a0) at ../../Source/JavaScriptCore/runtime/RegExpObject.h:74
#7  0x00007ffff6c9c527 in JSC::regExpProtoFuncTestFast (exec=0x7fffffffc7b0) at ../../Source/JavaScriptCore/runtime/RegExpPrototype.cpp:112
...
---

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170220/78ae06ba/attachment.html>