tree 58de1b3785afdaf2db3c683817e5b2be42fc01a6
parent 36ec1ddc6450c1f458374c6af9c55bebf838585e
author mark.lam@apple.com <mark.lam@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> 1571776073 +0000
committer mark.lam@apple.com <mark.lam@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> 1571776073 +0000

Fix incorrect assertion in operationRegExpExecNonGlobalOrSticky().
https://bugs.webkit.org/show_bug.cgi?id=203230
<rdar://problem/56460749>

Reviewed by Robin Morisset.

JSTests:

* stress/incorrect-exception-assertion-in-operationRegExpExecNonGlobalOrSticky.js: Added.

Source/JavaScriptCore:

operationRegExpExecNonGlobalOrSticky() was asserting no exception when
createRegExpMatchesArray() returns null.  createRegExpMatchesArray() only returns
null when RegExp::matchInline() returns -1.  RegExp::matchInline() can return -1
either when there's an error, or if the match fails.  When there's an error,
RegExp::matchInline() also throws an exception via a throwError() helper.

This patch fixes operationRegExpExecNonGlobalOrSticky() to check for an exception
being thrown, or createRegExpMatchesArray() returning a null array due to a failed
match.

* dfg/DFGOperations.cpp:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@251447 268f45cc-cd09-0410-ab3c-d52691b4dbfc