[Webkit-unassigned] [Bug 6951] hang due to infinitely growing points array due to notification mix-up

bugzilla-daemon at opendarwin.org bugzilla-daemon at opendarwin.org
Sun Feb 12 21:52:51 PST 2006


darin at apple.com changed:

           What    |Removed                     |Added
            Summary|Uninitialized JS variable   |hang due to infinitely
                   |used in setAttribute hangs  |growing points array due to
                   |Webkit                      |notification mix-up

------- Comment #4 from darin at apple.com  2006-02-12 21:52 PDT -------
The reason for the hang is that SVGPolyParser::parsePoints ends up calling
parseMappedAttribute over and over again, because each time it calls svgPolyTo
it then appends a new item to the points which triggers the attribute mapping
machinery again over and over again, so it just keeps making the points array
longer and longer forever.

Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list