[Webkit-unassigned] [Bug 6951] hang due to infinitely growing points array due to notification mix-up

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=6951


darin at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Uninitialized JS variable   |hang due to infinitely
                   |used in setAttribute hangs  |growing points array due to
                   |Webkit                      |notification mix-up




------- Comment #4 from darin at apple.com  2006-02-12 21:52 PDT -------
The reason for the hang is that SVGPolyParser::parsePoints ends up calling
parseMappedAttribute over and over again, because each time it calls svgPolyTo
it then appends a new item to the points which triggers the attribute mapping
machinery again over and over again, so it just keeps making the points array
longer and longer forever.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.