[Webkit-unassigned] [Bug 12216] Stack overflow crash in JavaScript garbage collector mark pass

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Jan 16 00:04:11 PST 2007


http://bugs.webkit.org/show_bug.cgi?id=12216


darin at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Stack overflow crash in     |Stack overflow crash in
                   |Javascript                  |JavaScript garbage collector
                   |                            |mark pass
           Keywords|                            |NeedsRadar
                 CC|                            |mjs at apple.com,
                   |                            |darin at apple.com,
                   |                            |ggaren at apple.com




------- Comment #3 from darin at apple.com  2007-01-16 00:04 PDT -------
Clearly we can fix this by changing the marking system to not mark recursively.
Instead the mark functions can simply add the items to mark to a vector passed
into the mark function, and the caller can then mark those in turn. The tricky
part may be doing this efficiently!


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list