[Webkit-unassigned] [Bug 10022] REGRESSION: Crash in WebCore::XMLTokenizer::characters

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=10022


opendarwin.org at bdash.net.nz changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #9578|                            |review?
               Flag|                            |




------- Comment #4 from opendarwin.org at bdash.net.nz  2006-07-19 23:49 PDT -------
Created an attachment (id=9578)
 --> (http://bugzilla.opendarwin.org/attachment.cgi?id=9578&action=view)
Patch

Occasionally when parsing is paused and then resumed, data may have arrived
that when parsed causes callbacks to be queued.  If XMLTokenizer::finish() has
been called while the parser was paused, then we call end() to clean up the
parse.  This results in the current node being cleared, which causes a crash
when the callbacks are finally processed.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.