Crash is gone. Functionally seems work with indices. Going test with regexp zones and without to see this is ideal solution.

Crash is gone. Functionally seems work with indices. Going test with regexp zones and without to see this is ideal solution.
This commit is contained in:
win7-7 2026-01-18 08:49:59 +02:00 committed by wuggy
commit 98ce3e1947
4 changed files with 117 additions and 65 deletions

View file

@ -1736,10 +1736,10 @@ JitCompartment::generateRegExpMatcherStub(JSContext* cx)
Register shared = temp2;
masm.loadPtr(Address(regexp, NativeObject::getFixedSlotOffset(RegExpObject::PRIVATE_SLOT)),
shared);
masm.branchPtr(Assembler::NotEqual,
Address(shared, RegExpShared::offsetOfGroupsTemplate()),
ImmWord(0),
&oolEntry);
masm.branch32(Assembler::NotEqual,
Address(shared, RegExpShared::offsetOfNumNamedCaptures()),
Imm32(0),
&oolEntry);
// Similarly, if the |hasIndices| flag is set, fall back to the OOL stub.
masm.branchTest32(Assembler::NonZero,