[regexp] Revert to ZoneList usage in @@replace

[regexp] Revert to ZoneList usage in @@replace

Fixes a crash found by clusterfuzz caused by a call to
std::vector::reserve with a huge capacity, and reverts to ZoneList
handling as a tentative fix for performance regressions on the slow
@@replace path.

BUG=chromium:707187, chromium:706748, v8:5437
Review-Url: https://codereview.chromium.org/2787343002
Cr-Commit-Position: refs/heads/master@{#44311}
Committed: https://chromium.googlesource.com/v8/v8/+/686c37839c00e1510625b6cb11a7f18a459eb2a7

[jgruber, 2017-03-31 14:05:12]

The CQ bit was checked by jgruber@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2017-03-31 14:05:15]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[jgruber, 2017-03-31 14:07:47]

jgruber@chromium.org changed reviewers:
+ machenbach@chromium.org, yangguo@chromium.org

[Yang, 2017-03-31 14:10:01]

On 2017/03/31 14:07:48, jgruber wrote:
lgtm

[jgruber, 2017-03-31 14:24:47]

The CQ bit was unchecked by jgruber@chromium.org

[jgruber, 2017-03-31 14:24:51]

The CQ bit was checked by jgruber@chromium.org

[commit-bot: I haz the power, 2017-03-31 14:24:56]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-03-31 14:38:37]

CQ is committing da patch.

Bot data: {"patchset_id": 1, "attempt_start_ts": 1490970291747490, "parent_rev":
"ab5a0e2fed25e8215d160c25962141dd41fcafca", "commit_rev":
"686c37839c00e1510625b6cb11a7f18a459eb2a7"}

[commit-bot: I haz the power, 2017-03-31 14:38:41]

Description was changed from

==========
[regexp] Revert to ZoneList usage in @@replace

Fixes a crash found by clusterfuzz caused by a call to
std::vector::reserve with a huge capacity, and reverts to ZoneList
handling as a tentative fix for performance regressions on the slow
@@replace path.

BUG=chromium:707187,chromium:706748,v8:5437
==========

to

==========
[regexp] Revert to ZoneList usage in @@replace

Fixes a crash found by clusterfuzz caused by a call to
std::vector::reserve with a huge capacity, and reverts to ZoneList
handling as a tentative fix for performance regressions on the slow
@@replace path.

BUG=chromium:707187,chromium:706748,v8:5437

Review-Url: https://codereview.chromium.org/2787343002
Cr-Commit-Position: refs/heads/master@{#44311}
Committed:
https://chromium.googlesource.com/v8/v8/+/686c37839c00e1510625b6cb11a7f18a459...
==========

[commit-bot: I haz the power, 2017-03-31 14:38:43]

Committed patchset #1 (id:1) as
https://chromium.googlesource.com/v8/v8/+/686c37839c00e1510625b6cb11a7f18a459...