[v8-dev] Re: Fast path for string.replace that replaces a single character by a string. (issue 9213002)

[erik . corry]

Unfortunately this exhibits unbounded recursion.  Here's a way to crash it:


var s = "";
for (var i = 0; i < 100000; i++) {
  s = s + "y";
}

s.replace("x", "foo");


http://codereview.chromium.org/9213002/

--
v8-dev mailing list
v8-dev@googlegroups.com
http://groups.google.com/group/v8-dev