[Webkit-unassigned] [Bug 15456] XML parser modifies the document when using foo.innerHtml = "some string"

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=15456





------- Comment #1 from lars at trolltech.com  2007-10-10 14:10 PDT -------
Created an attachment (id=16617)
 --> (http://bugs.webkit.org/attachment.cgi?id=16617&action=view)
Protects some of the calls into the document

This patch fixes the memory corruption seen with
LayoutTests/fast/innerHTML/innerHTML-script-tag-crash.xhtml. It does however
not clean up all issues, and is untested for builds that use the libxml based
parser.

The main issues remaining are things related to XSLT support (see
XMLTokenizer.cpp around line 1210).


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.