Changeset 61750 in webkit for trunk/JavaScriptCore/runtime/JSString.cpp

Timestamp:

Jun 24, 2010, 2:11:04 AM (15 years ago)

Author:

[email protected]

Message:

Single character string replacement may replace too many characters
​https://bugs.webkit.org/show_bug.cgi?id=41138
<rdar://problem/8097496>

Reviewed by Maciej Stachowiak.

Simple fix to stop the rope path of single character replacement
once the first replacement occurs.

• runtime/JSString.cpp:

(JSC::JSString::replaceCharacter):

File:

• trunk/JavaScriptCore/runtime/JSString.cpp (modified) (1 diff)

trunk/JavaScriptCore/runtime/JSString.cpp

@@ -151 +151 @@
             builder.append(replacement);
         builder.append(UString(string).substr(matchPosition + 1));
+        matchString = 0;
     }