http://codereview.chromium.org/10380028/diff/1/test/mjsunit/regress/regress-126412.js
File test/mjsunit/regress/regress-126412.js (right):

http://codereview.chromium.org/10380028/diff/1/test/mjsunit/regress/regress-126412.js#newcode34
test/mjsunit/regress/regress-126412.js:34: assertEquals("RangeError:
Maximum call stack size exceeded", e.toString());
There's no reason for a stack overflow here.  The issue is that we fail
to recognize a quantifier (the outer *) where the body can have zero
length, because we have an overflow that we don't detect.  There are
special rules around quantifiers that have zero length matches and that
causes both the crash in the BoyerMoore info collector and this stack
overflow when it is run.  Correct fix is in
https://chromiumcodereview.appspot.com/10384053

http://codereview.chromium.org/10380028/

--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to