New issue
Advanced search Search tips

Issue 897657 link

Starred by 2 users
Status: Duplicate
Owner: ----
Closed: Oct 24
Cc:
rbasuvula@chromium.org
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Big regexp crashes Chrome 70

Reported by carl...@gmail.com, Oct 22 
UserAgent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0

Steps to reproduce the problem:
Execute the following JavaScript expression in the console:
new RegExp(Array(500).fill("(^|[d])word($|((?=[c]))|(([a])([b])))").join("|")).exec("");

There's real-world JavaScript code which produces regular expressions like this: https://github.com/Yoast/YoastSEO.js/blob/v1.41.0/src/stringProcessing/directPrecedenceException.js#L45 creates a regex 67840 characters long.
In fact, I found this issue because if you have the WordPress plugin Yoast SEO installed, as soon you write a sentence in Italian containing a passive voice in the article editor the tab crashes (it didn't in Chrome 69).

What is the expected behavior?
No crash.

What went wrong?
The tab crashes.

Crashed report ID: 

How much crashed? Just one tab

Is it a problem with a plugin? No 

Did this work before? Yes 69.0.3497.81

Chrome version: 70.0.3538.67  Channel: stable
OS Version: 7
Flash Version:

Comment 1 by rbasuvula@chromium.org, Oct 23

Cc: rbasuvula@chromium.org
Labels: Needs-Triage-M70 Needs-Feedback
Thaks for filing the issue! Tested with provided Javascript on M70 #70.0.3538.67 and getting null value.

@carlo94:Could you please help us with 16 digit crash id from chrome://crashes of the issue which would help us to triage the issue further.

Thank You!

Comment 2 by carl...@gmail.com, Oct 23 

Sorry, I pasted the wrong snippet. To make it crash reliably you have to increase the number to 900.

new RegExp(Array(900).fill("(^|[d])word($|((?=[c]))|(([a])([b])))").join("|")).exec("");

I'm trying to get the crash ID, but after i get the tab to crash I can't see the report listed.
However, if then I close and open Chrome again it asks me to restore the previous session, like if it crashed while closing. Then a report shows up, but I don't know if it is about the tab crash or the browser crash while closing.
However, that crash ID is 5c6469d872f593ef
Project Member

Comment 3 by sheriffbot@chromium.org, Oct 23

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding the requester to the cc list.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 4 by jmukthavaram@chromium.org, Oct 24

Mergedinto: 836423
Status: Duplicate (was: Unconfirmed)
As per the above provided crash id in C#2, issue seems to be similar to #836423 hence merging into it. Please feel free to undup if it is not similar.

Thanks..!
►

Sign in to add a comment