Skip to content

Conversation

@OrangeCheng66
Copy link

@OrangeCheng66 OrangeCheng66 commented Dec 9, 2025

This patch fixes #5080

Test Case

let evil = new RegExp();
evil.exec = () => ({ 0: "1234567", length: 1, index: 0 });
"abc".replace(evil, "$'");

Signed-off-by: chengzhihao <2455457302@qq.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

==1327323==ERROR: AddressSanitizer: memcpy-param-overlap: memory ranges [0x55fb3005c209,0x55fc3005c205) and [0x55fc3005c0f8, 0x55fd3005c0f4) overlap

1 participant