[Webkit-unassigned] [Bug 12310] Crash on refresh when using SVG as background image

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Feb 6 03:17:28 PST 2007


http://bugs.webkit.org/show_bug.cgi?id=12310





------- Comment #11 from mjs at apple.com  2007-02-06 03:17 PDT -------
The root cause here is the use of static variables in ContainerNode to detect
recursion, and to hold the linked list of nodes to be destroyed. But that is
wrong in the case where destroying a child node may lead to destroying a whole
separate document. The algorithm should be rewritten to work iteratively
instead of recursively - it can do that by delinking child nodes that are to be
destroyed in the original loop, before going around calling delete.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list