Branch: refs/heads/webkitglib/2.50
Home: https://github.com/WebKit/WebKit
Commit: dd6fec1d6d5088a3abcfe4480ccfead4c2d82fa5
https://github.com/WebKit/WebKit/commit/dd6fec1d6d5088a3abcfe4480ccfead4c2d82fa5
Author: Michael Saboff <msab...@apple.com>
Date: 2025-08-28 (Thu, 28 Aug 2025)
Changed paths:
M JSTests/stress/regexp-lookbehind.js
M Source/JavaScriptCore/yarr/YarrPattern.cpp
Log Message:
-----------
Cherry-pick 298422@main (ea77bc796c06).
https://bugs.webkit.org/show_bug.cgi?id=292305
[JSC] [e72bdd394922cc4a] ASAN_ILL |
Yarr::YarrPatternConstructor::quantifyAtom; Yarr::Parser::parseTokens;
JSC::Yarr::parse
https://bugs.webkit.org/show_bug.cgi?id=292305
rdar://149760394
Reviewed by Daniel Liu.
We were inadvertently creating ForwardReference atoms when we should have
been creating
BackReference atoms. This is because we would create a ForwardReference
when the referenced
subpatternId was equal to the value of a parenthesis' subpatternId, but
that is a valid
BackReference. The code in question made a >= comparison, but the greater
than case was
already handled prior to the code that this change removes.
Added some new regression test cases.
* JSTests/stress/regexp-lookbehind.js:
* Source/JavaScriptCore/yarr/YarrPattern.cpp:
(JSC::Yarr::YarrPatternConstructor::atomBackReference):
(JSC::Yarr::YarrPatternConstructor::atomNamedBackReference):
Originally-landed-as: 289651.472@safari-7621-branch (3665da825356).
rdar://157794638
Canonical link: https://commits.webkit.org/298422@main
Canonical link: https://commits.webkit.org/298234.71@webkitglib/2.50
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
