[Webkit-unassigned] [Bug 187042] RegExp.exec returns wrong value with a long integer quantifier

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Jul 1 23:18:30 PDT 2018


Saam Barati <sbarati at apple.com> changed:

           What    |Removed                     |Added
 Attachment #344061|review?                     |review+
              Flags|                            |

--- Comment #15 from Saam Barati <sbarati at apple.com> ---
Comment on attachment 344061
  --> https://bugs.webkit.org/attachment.cgi?id=344061
Remove the extra overflow loop, use consumeDigit, and update ChangeLog

View in context: https://bugs.webkit.org/attachment.cgi?id=344061&action=review


> Source/JavaScriptCore/ChangeLog:11
> +        because once there has been overflow, undefined behavior has occurred.

This isn’t true. Unsigned overflow is defined behavior. Signed overflow is not. Your point below holds regardless

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180702/9c9d43e3/attachment-0001.html>

More information about the webkit-unassigned mailing list