330793 - assertion/crash involving non-greedy and lookahead (regexp)

Status: RESOLVED INVALID

(Core :: JavaScript Engine, defect)

Description

[Jesse Ruderman]

This testcase causes an assertion or crash for me, possibly because I have the patch from bug 330352 comment 5 in my tree.

When it asserts, the assertion message is:

Assertion failure: JS_FALSE, at /Users/admin/trunk/mozilla/js/src/jsregexp.c:3122

Comment 1

[Jesse Ruderman]

Attachment: testcase - asserts+aborts or crashes

Comment 2

[Bob Clary [:bc] (inactive)]

I can't reproduce this with an unpatched build. Jesse can you back out that patch and see if you can reproduce?

Comment 3

[Blake Kaplan (:mrbkap) (inactive)]

I'm sorry, I should have commented earlier. The patch in that bug is incomplete and leads to jsregexp getting confused (there's a reason I haven't checked that patch in ;-)). I'm going to work on it more on Monday.

Comment 4

[Brian Crowder]

I'm marking this bug invalid since it is caused by badness from a patch that never landed, on a bug for which a better patch is now available (I think).