[Webkit-unassigned] [Bug 12216] Stack overflow crash in JavaScript garbage collector mark pass

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Jan 16 00:04:11 PST 2007


darin at apple.com changed:

           What    |Removed                     |Added
            Summary|Stack overflow crash in     |Stack overflow crash in
                   |Javascript                  |JavaScript garbage collector
                   |                            |mark pass
           Keywords|                            |NeedsRadar
                 CC|                            |mjs at apple.com,
                   |                            |darin at apple.com,
                   |                            |ggaren at apple.com

------- Comment #3 from darin at apple.com  2007-01-16 00:04 PDT -------
Clearly we can fix this by changing the marking system to not mark recursively.
Instead the mark functions can simply add the items to mark to a vector passed
into the mark function, and the caller can then mark those in turn. The tricky
part may be doing this efficiently!

Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list