[Webkit-unassigned] [Bug 10022] REGRESSION: Crash in WebCore::XMLTokenizer::characters

bugzilla-daemon at opendarwin.org bugzilla-daemon at opendarwin.org
Wed Jul 19 23:49:10 PDT 2006


opendarwin.org at bdash.net.nz changed:

           What    |Removed                     |Added
   Attachment #9578|                            |review?
               Flag|                            |

------- Comment #4 from opendarwin.org at bdash.net.nz  2006-07-19 23:49 PDT -------
Created an attachment (id=9578)
 --> (http://bugzilla.opendarwin.org/attachment.cgi?id=9578&action=view)

Occasionally when parsing is paused and then resumed, data may have arrived
that when parsed causes callbacks to be queued.  If XMLTokenizer::finish() has
been called while the parser was paused, then we call end() to clean up the
parse.  This results in the current node being cleared, which causes a crash
when the callbacks are finally processed.

Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list