[Webkit-unassigned] [Bug 16868] Gmail crash

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=16868





------- Comment #16 from ggaren at apple.com  2008-01-15 14:27 PDT -------
I was just talking to Maciej about this: I don't think we can rely on the
m_savedExecState chain. Any code that begins a new script evaluation in a
global context will produce an "orphaned" ExecState that isn't linked to any
previous ExecStates.

This can happen during synchronous event dispatch, or any other client code
where the client decides to evaluate a script from inside a JavaScript
callback.

Maciej suggested allocating all active ExecStates from a central storage area.
That way, GC mark could just traverse all the active ExecStates in the central
storage area, and we wouldn't need to rely on m_savedExecState.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.