[Webkit-unassigned] [Bug 9317] REGRESSION: crash in HTML tokenizer at Japanese Apple support page

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=9317


opendarwin.org at mitzpettel.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #9050|                            |review?
               Flag|                            |




------- Comment #8 from opendarwin.org at mitzpettel.com  2006-06-26 11:41 PDT -------
Created an attachment (id=9050)
 --> (http://bugzilla.opendarwin.org/attachment.cgi?id=9050&action=view)
Patch for the crashing half

This fixes the crash and behaves correctly with the test case from bug 9554. It
also passes all the layout tests. I haven't done much testing beyond that (in
particular, with external scripts, cached and uncached).


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.