Changeset 75991 in webkit for trunk/Source/JavaScriptCore/ChangeLog

Timestamp:

Jan 17, 2011, 6:10:15 PM (15 years ago)

Author:

[email protected]

Message:

2011-01-17 Michael Saboff <​[email protected]>

Reviewed by Oliver Hunt.

[regexfuzz] Crash running regex with lookahead
​https://bugs.webkit.org/show_bug.cgi?id=52548

Eliminated agressive chaining of backtracks. This code was overwriting
already valid backtrack information.

• yarr/YarrJIT.cpp: (JSC::Yarr::YarrGenerator::ParenthesesTail::processBacktracks):

2011-01-17 Michael Saboff <​[email protected]>

Reviewed by Oliver Hunt.

[regexfuzz] Crash running regex with lookahead
​https://bugs.webkit.org/show_bug.cgi?id=52548

New tests from regex fuzzer.

• fast/regex/parentheses-expected.txt:
• fast/regex/script-tests/parentheses.js:

File:

• trunk/Source/JavaScriptCore/ChangeLog (modified) (1 diff)

trunk/Source/JavaScriptCore/ChangeLog

@@ +1 @@
+2011-01-17  Michael Saboff  <[email protected]>
+
+        Reviewed by Oliver Hunt.
+
+        [regexfuzz] Crash running regex with lookahead
+        https://bugs.webkit.org/show_bug.cgi?id=52548
+
+        Eliminated agressive chaining of backtracks.  This code was overwriting
+        already valid backtrack information.
+
+        * yarr/YarrJIT.cpp:
+        (JSC::Yarr::YarrGenerator::ParenthesesTail::processBacktracks):
+
 2011-01-17  Tony Gentilcore  <[email protected]>