← WebKit Silent-Fix Report — 2026-W22
7663d811d0 [JSC] Make RegExp tolerant against excessive stress
severity medium
class OOB
confidence 0.55
JSC YARR RegExp
Primitive: stack pointer corruption under deeply nested/alternation regexps
Triage note: Tests probe SP corruption artifacts under huge alternation/capture patterns and the capture limit exception changes, indicating a real robustness/memory-safety fix.
Triage note: Tests probe SP corruption artifacts under huge alternation/capture patterns and the capture limit exception changes, indicating a real robustness/memory-safety fix.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…