All
RegExp with too many )s produces invalid object and crashes near js_DestroyRegExp when it's destroyed | Debug Assertion failure: operandSP == 1, at mozilla/js/src/jsregexp.c:540 [@ JS_Assert ]
JavaScript Engine