[Webkit-unassigned] [Bug 187042] New: RegExp.exec returns wrong value with a long integer quantifier

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=187042

            Bug ID: 187042
           Summary: RegExp.exec returns wrong value with a long integer
                    quantifier
           Product: WebKit
           Version: Safari 11
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: tmp2 at cin.ufpe.br

Hi everyone,

I found an inconsistence on Regexp pattern with a long integer quantifier.

version: Safari-606.1.9.4
OS: Ubuntu 16.04 x64

Step to reproduce:

r = new RegExp ("(?:a{0,34028236692}?){0,1}a"); // length 11
print(r.exec ("aa") == "aa"); // returns aa

r = new RegExp ("(?:a{0,340282366920}?){0,1}a"); // length 12
print(r.exec ("aa") == "aa"); // returns a

Actual results:
true
false

Expected results:
true
true

V8, Chakra and SpiderMonkey works as expected.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180626/c7dfe69b/attachment.html>