mirror of
https://github.com/github/codeql.git
synced 2026-07-31 15:33:00 +02:00
In ECMAScript std::regex, \0 matches NUL. The previous escapedCharacter arms all rejected it: the final arm's `not exists(getChar(start+1).toInt())` guard fails for "0", and the numbered-backref arm excludes 0. Add an explicit \0 case (end=start+2) guarded so the following character is not a digit, mirroring EcmaRegExp.escapedCharacter in PR #22200. Add corpus case "a\\0b" to test.cpp; \0 now parses as RegExpEscape. Bundle: github/codeql-action codeql-bundle-v2.26.1 (CodeQL CLI 2.26.1).