[Webkit-unassigned] [Bug 187042] RegExp.exec returns wrong value with a long integer quantifier

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=187042

--- Comment #17 from Sukolsak Sakshuwong <sukolsak at gmail.com> ---
(In reply to Saam Barati from comment #15)
> Comment on attachment 344061 [details]
> Remove the extra overflow loop, use consumeDigit, and update ChangeLog
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=344061&action=review
> 
> r=me
> 
> > Source/JavaScriptCore/ChangeLog:11
> > +        because once there has been overflow, undefined behavior has occurred.
> 
> This isn’t true. Unsigned overflow is defined behavior. Signed overflow is
> not. Your point below holds regardless

Thanks. I didn't know this. I have removed that sentence from the ChangeLog.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180703/9deeaaa0/attachment-0001.html>