http://codereview.chromium.org/1556019/diff/1/2
File src/regexp.js (right):

http://codereview.chromium.org/1556019/diff/1/2#newcode181
src/regexp.js:181: s = ToString(string);
Here we can execute arbitrary user code so we can reenter, but this time
saveAnswer has been set to true without a valid answer in the cache :-(.

http://codereview.chromium.org/1556019/show

--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

To unsubscribe, reply using "remove me" as the subject.

Reply via email to